This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft File: e-ykASv3tQVuLgoWHrRhiHbJESo.mft (raw, json) Hash identifier: 7zoDPC4IllkrkzBbZI9Brr3iD7HjvscVbJDIaA/1X0U= Subject key identifier: 67:54:91:ED:5E:3D:BF:70:58:29:2D:2E:23:9E:6B:9B:C5:3E:4E:C6 Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A Certificate issuer: /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a Certificate serial: 019B1D29FAEF9429B6A77ABF1C91311B31DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft Manifest number: 177A Signing time: Sun 14 Dec 2025 14:00:48 +0000 Manifest this update: Sun 14 Dec 2025 14:00:48 +0000 Manifest next update: Mon 15 Dec 2025 14:00:48 +0000 Files and hashes: 1: 13RmIh6yv-Ml6T8W-vpiSXUZ2gU.roa (hash: K4wrz2vLF42iU9Ok9LM/fxhgKzVbeVXkBRTlsWBsG54=) 2: 6GJDe6zJlkyBn7aK1IyaCupQ6-0.roa (hash: iC2qAiefhJNnquIXwdUvF/e3IYlNWXBAKniYmSUPZFU=) 3: RvNIPozHEQXs5iokhMWdzTpjJKw.roa (hash: yvOJlvlH/aPFeSnZ5uiNcTe4i5EocSDG2Jgr8QbqyYI=) 4: e-ykASv3tQVuLgoWHrRhiHbJESo.crl (hash: gnD7baz4Nl6o7EUYB54451/TLt5RuH2nzGCYWQmxpwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:29:fa:ef:94:29:b6:a7:7a:bf:1c:91:31:1b:31:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a Validity Not Before: Dec 14 14:00:48 2025 GMT Not After : Dec 15 14:00:48 2025 GMT Subject: CN=675491ed5e3dbf7058292d2e239e6b9bc53e4ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:42:58:9d:5a:f1:95:e4:34:a4:ae:c9:56:32: b0:cf:02:00:95:ef:df:72:ab:45:e8:78:1a:9a:56: fc:1f:29:92:18:85:27:a7:e0:d5:73:7f:59:a0:b3: ad:50:cf:ec:d3:32:bc:cd:a5:d8:cf:06:ec:83:db: 07:cc:0b:26:cd:2b:33:e2:dd:e5:e2:34:05:a4:7b: e3:5e:3b:ae:e4:42:a2:eb:b3:11:ac:ee:c0:d5:e4: bb:1c:54:ec:6f:9a:90:d3:b9:15:8b:ff:24:a9:6a: 05:b4:1d:83:a9:b9:70:79:e7:13:82:ee:c4:af:3f: 6e:65:00:f5:e1:87:23:2f:49:9f:fe:b2:94:cd:03: ae:75:8d:39:02:c3:e0:0c:29:7f:86:a5:9f:fe:14: d5:81:2e:9d:9b:ea:97:04:d2:dd:b2:9f:db:97:90: 31:37:ac:2d:58:34:71:c7:fe:b6:a9:45:d7:1a:c2: 34:1d:fb:5f:fb:90:26:dd:4a:19:85:70:44:ef:70: 99:5f:54:13:ff:15:77:6f:61:95:82:d5:63:2c:05: 18:ef:2e:a9:9e:c3:ab:22:61:af:78:6b:54:dd:da: 94:39:dd:fe:8c:a5:2f:25:36:cf:d6:31:cd:24:43: 37:be:71:39:69:a4:d7:26:4b:21:7c:84:2d:2f:d3: a8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:54:91:ED:5E:3D:BF:70:58:29:2D:2E:23:9E:6B:9B:C5:3E:4E:C6 X509v3 Authority Key Identifier: keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:6f:75:a3:c2:60:12:c6:5d:14:af:64:ba:b4:c0:88:bf:7f: 17:5f:33:a2:ea:60:91:9d:61:f3:21:17:9c:7a:52:2d:ed:ff: c6:44:8a:35:d1:fe:d9:5c:02:30:29:46:ad:6f:37:c8:10:33: 01:1d:50:a9:7c:f6:89:a2:65:09:0b:66:f3:93:1a:bc:55:ef: 93:fc:9f:8e:72:74:00:f7:ff:ad:70:55:4c:0b:76:ed:20:93: c2:31:36:be:5f:20:09:73:7d:ce:40:92:45:b6:a7:89:88:b6: 69:ac:c1:ed:10:fb:43:29:8b:1e:20:ff:f1:c3:85:f3:99:51: aa:fd:9a:45:ba:49:c5:58:27:e7:02:91:c3:22:2b:22:ce:21: 05:82:70:52:3d:95:3b:85:53:71:1f:63:78:1b:4c:95:50:87: 87:08:f0:71:2c:ff:c2:de:b1:56:f5:44:66:77:29:7d:7e:95: 26:bd:c9:40:4d:35:7a:7c:8d:41:d9:ca:41:15:48:4b:90:69: e8:ad:24:e9:8d:aa:03:53:5f:c0:91:d4:b2:1e:53:91:4c:dc: 17:26:01:ab:86:e1:8b:93:79:f6:53:97:52:f1:67:c8:7a:95: 4d:f0:6e:d2:0c:46:0a:2d:8f:46:7e:36:ed:54:03:f8:bd:e7: 98:f7:e6:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdKfrvlCm2p3q/HJExGzHcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZWNhNDAxMmJmN2I1MDU2ZTJlMGExNjFlYjQ2MTg4NzZj OTExMmEwHhcNMjUxMjE0MTQwMDQ4WhcNMjUxMjE1MTQwMDQ4WjAzMTEwLwYDVQQD Eyg2NzU0OTFlZDVlM2RiZjcwNTgyOTJkMmUyMzllNmI5YmM1M2U0ZWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEJYnVrxleQ0pK7JVjKwzwIAle/f cqtF6Hgamlb8HymSGIUnp+DVc39ZoLOtUM/s0zK8zaXYzwbsg9sHzAsmzSsz4t3l 4jQFpHvjXjuu5EKi67MRrO7A1eS7HFTsb5qQ07kVi/8kqWoFtB2DqblweecTgu7E rz9uZQD14YcjL0mf/rKUzQOudY05AsPgDCl/hqWf/hTVgS6dm+qXBNLdsp/bl5Ax N6wtWDRxx/62qUXXGsI0Hftf+5Am3UoZhXBE73CZX1QT/xV3b2GVgtVjLAUY7y6p nsOrImGveGtU3dqUOd3+jKUvJTbP1jHNJEM3vnE5aaTXJkshfIQtL9Oo4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdUke1ePb9wWCktLiOea5vFPk7GMB8GA1UdIwQY MBaAFHvspAEr97UFbi4KFh60YYh2yREqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZS15a0FTdjN0UVZ1TGdvV0hyUmhpSGJKRVNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85NDg4ZDUtYThkMy00NGI1LTkyZGYt NThjYWY0NzAxYmUzLzEvZS15a0FTdjN0UVZ1TGdvV0hyUmhpSGJKRVNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS85NDg4ZDUtYThkMy00NGI1LTkyZGYtNThjYWY0NzAxYmUz LzEvZS15a0FTdjN0UVZ1TGdvV0hyUmhpSGJKRVNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5W91o8Jg EsZdFK9kurTAiL9/F18zoupgkZ1h8yEXnHpSLe3/xkSKNdH+2VwCMClGrW83yBAz AR1QqXz2iaJlCQtm85MavFXvk/yfjnJ0APf/rXBVTAt27SCTwjE2vl8gCXN9zkCS RbaniYi2aazB7RD7QymLHiD/8cOF85lRqv2aRbpJxVgn5wKRwyIrIs4hBYJwUj2V O4VTcR9jeBtMlVCHhwjwcSz/wt6xVvVEZncpfX6VJr3JQE01enyNQdnKQRVIS5Bp 6K0k6Y2qA1NfwJHUsh5TkUzcFyYBq4bhi5N59lOXUvFnyHqVTfBu0gxGCi2PRn42 7VQD+L3nmPfmwQ== -----END CERTIFICATE-----Generated at Sun Dec 14 19:37:48 2025 by rpki-client