This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft File: EKWYXLoyqHfTIVu8IoywfQQAkXs.mft (raw, json) Hash identifier: AtsA2yDjqKF5XDefLJeJwhX7pkgyQkknfbQa2ElvOio= Subject key identifier: E4:61:8A:28:E8:5F:DD:00:DB:59:A5:FD:9A:78:28:B6:6E:7B:76:2A Authority key identifier: 10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B Certificate issuer: /CN=10a5985cba32a877d3215bbc228cb07d0400917b Certificate serial: 019B42800707A2B2890A0E12D486D9DB04C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft Manifest number: 128A Signing time: Sun 21 Dec 2025 20:00:45 +0000 Manifest this update: Sun 21 Dec 2025 20:00:45 +0000 Manifest next update: Mon 22 Dec 2025 20:00:45 +0000 Files and hashes: 1: EKWYXLoyqHfTIVu8IoywfQQAkXs.crl (hash: v5Yu2yJt5VU51j/S2ygpqe83rGeQrOoj+M7VDUnDF3w=) 2: OeOSm1lTsF2ojoWr7AK5puld71w.roa (hash: sBfPXwoK80Ap89UcF88+lv2T3MvsaF6wu5UIRm/3Bkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:07:07:a2:b2:89:0a:0e:12:d4:86:d9:db:04:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10a5985cba32a877d3215bbc228cb07d0400917b Validity Not Before: Dec 21 20:00:45 2025 GMT Not After : Dec 22 20:00:45 2025 GMT Subject: CN=e4618a28e85fdd00db59a5fd9a7828b66e7b762a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e9:98:9a:23:df:79:a6:08:e4:21:5d:87:0d: a2:51:a3:49:51:15:d0:c2:6e:ac:22:9c:a4:67:89: 6d:0e:f4:e4:91:8a:23:90:a5:fc:9c:ef:90:41:d0: 30:4b:5c:50:22:f9:0b:07:41:67:65:8c:4f:b0:a0: 90:c8:d7:80:6d:e4:d6:5b:09:f8:70:de:5e:6b:0c: 8f:3a:06:f9:a4:a3:9d:cd:ba:ec:bd:c6:96:ca:b2: 6f:d4:03:75:d8:4c:bd:27:42:9a:88:23:82:62:ae: c3:ee:47:4a:10:4f:8b:96:0a:9b:8a:15:37:08:12: 2a:8e:06:15:24:f6:d6:4c:93:0a:d2:e3:bf:53:59: 96:21:88:0d:04:81:d3:97:c1:75:38:86:43:c4:6b: 44:49:94:c2:a2:7a:b2:9e:e8:e1:45:05:a0:7c:37: 60:d9:d6:81:89:e9:4e:3d:ed:e7:66:0f:19:7b:95: fc:9d:ca:8d:27:2d:2b:f1:58:b9:67:e6:f9:43:d5: f7:a4:1b:e3:75:ec:e8:41:da:64:f2:61:8f:1b:0a: f6:d6:03:25:b6:2d:b9:5b:93:90:86:77:3e:77:df: 9c:14:60:e9:13:04:58:a3:bc:76:b1:33:da:94:f9: ac:a8:88:c0:b1:95:07:2d:0c:57:87:93:f4:f1:ce: a8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:61:8A:28:E8:5F:DD:00:DB:59:A5:FD:9A:78:28:B6:6E:7B:76:2A X509v3 Authority Key Identifier: keyid:10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d7:bc:cf:c6:fc:08:69:c5:4a:f7:60:b9:e3:29:5f:b1:64: 60:73:f4:8b:8b:e9:41:47:96:24:c3:4c:30:1c:3c:e5:47:20: 0c:cc:cc:04:5c:37:82:b0:e9:87:82:e4:c7:b3:26:11:bf:eb: 84:7c:0b:66:0d:b5:19:be:24:a3:ff:35:0d:47:57:35:14:3d: dd:38:1a:51:b0:c3:08:38:a4:2e:24:fc:c6:ea:14:22:49:e7: 5d:c7:2b:90:f0:5c:75:ce:76:46:8f:4d:2e:b0:96:8e:32:f4: 03:b4:c0:4b:77:7e:37:a7:3e:63:2c:76:06:00:a9:fd:54:88: ab:37:fb:1b:5d:1b:6e:fc:06:d9:e8:31:f6:f8:3b:95:36:51: 57:59:33:23:3f:6f:c7:7f:18:84:24:01:17:cd:ee:83:fd:d9: 32:f3:d5:1e:ce:11:9d:3e:4b:2a:f1:9c:e1:8f:27:9f:45:03: c1:88:20:e6:ac:d0:ba:30:23:47:ce:1d:ad:76:54:ce:bb:40: ed:bc:8d:65:d4:99:bd:15:af:e0:3a:33:68:1d:74:3d:11:ee: a0:33:68:7a:9e:fa:ef:e0:0d:53:3a:3f:a3:f3:81:dd:18:cc: 16:33:31:fd:18:36:f5:92:8e:a6:74:1b:d2:85:6e:2b:22:e9: 7e:37:78:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgAcHorKJCg4S1IbZ2wTIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYTU5ODVjYmEzMmE4NzdkMzIxNWJiYzIyOGNiMDdkMDQw MDkxN2IwHhcNMjUxMjIxMjAwMDQ1WhcNMjUxMjIyMjAwMDQ1WjAzMTEwLwYDVQQD EyhlNDYxOGEyOGU4NWZkZDAwZGI1OWE1ZmQ5YTc4MjhiNjZlN2I3NjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1emYmiPfeaYI5CFdhw2iUaNJURXQ wm6sIpykZ4ltDvTkkYojkKX8nO+QQdAwS1xQIvkLB0FnZYxPsKCQyNeAbeTWWwn4 cN5eawyPOgb5pKOdzbrsvcaWyrJv1AN12Ey9J0KaiCOCYq7D7kdKEE+LlgqbihU3 CBIqjgYVJPbWTJMK0uO/U1mWIYgNBIHTl8F1OIZDxGtESZTConqynujhRQWgfDdg 2daBielOPe3nZg8Ze5X8ncqNJy0r8Vi5Z+b5Q9X3pBvjdezoQdpk8mGPGwr21gMl ti25W5OQhnc+d9+cFGDpEwRYo7x2sTPalPmsqIjAsZUHLQxXh5P08c6oPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORhiijoX90A21ml/Zp4KLZue3YqMB8GA1UdIwQY MBaAFBClmFy6Mqh30yFbvCKMsH0EAJF7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUtXWVhMb3lxSGZUSVZ1OElveXdmUVFBa1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wNDFkMGYtYmU4ZC00MTQ4LWJjYmEt ZDcwZjI4NTE1ZmJkLzEvRUtXWVhMb3lxSGZUSVZ1OElveXdmUVFBa1hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8wNDFkMGYtYmU4ZC00MTQ4LWJjYmEtZDcwZjI4NTE1ZmJk LzEvRUtXWVhMb3lxSGZUSVZ1OElveXdmUVFBa1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9e8z8b8 CGnFSvdgueMpX7FkYHP0i4vpQUeWJMNMMBw85UcgDMzMBFw3grDph4Lkx7MmEb/r hHwLZg21Gb4ko/81DUdXNRQ93TgaUbDDCDikLiT8xuoUIknnXccrkPBcdc52Ro9N LrCWjjL0A7TAS3d+N6c+Yyx2BgCp/VSIqzf7G10bbvwG2egx9vg7lTZRV1kzIz9v x38YhCQBF83ug/3ZMvPVHs4RnT5LKvGc4Y8nn0UDwYgg5qzQujAjR84drXZUzrtA 7byNZdSZvRWv4DozaB10PRHuoDNoep767+ANUzo/o/OB3RjMFjMx/Rg29ZKOpnQb 0oVuKyLpfjd4iQ== -----END CERTIFICATE-----Generated at Mon Dec 22 04:20:49 2025 by rpki-client