This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft File: EkbyOgSHY6o60K7eWkiauPzSY4Q.mft (raw, json) Hash identifier: 6+nf9LVW9SM4D4tGXfcCwZuqgxqQ/R84fqnKAx7J5Lk= Subject key identifier: 5D:C5:92:DF:08:95:ED:46:45:37:CB:5F:5B:F1:8A:6A:AA:DF:88:74 Authority key identifier: 12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84 Certificate issuer: /CN=1246f23a048763aa3ad0aede5a489ab8fcd26384 Certificate serial: 019B3F485D7FB30E44C816EFFE185679B219 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 05:01:05 +0000 Manifest this update: Sun 21 Dec 2025 05:01:05 +0000 Manifest next update: Mon 22 Dec 2025 05:01:05 +0000 Files and hashes: 1: 1-3roNM_Y4Luyo5UOkDOSNkCW0TA.roa (hash: ZowUiRFYv0ZOu5pI167992U5kyXST8eznpl9k++Lgik=) 2: EkbyOgSHY6o60K7eWkiauPzSY4Q.crl (hash: d1lndXspeM1iAQxhzNT4WTxSPGbzLE8yKDCPjR8V2l8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:5d:7f:b3:0e:44:c8:16:ef:fe:18:56:79:b2:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1246f23a048763aa3ad0aede5a489ab8fcd26384 Validity Not Before: Dec 21 05:01:05 2025 GMT Not After : Dec 22 05:01:05 2025 GMT Subject: CN=5dc592df0895ed464537cb5f5bf18a6aaadf8874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:09:4b:f1:18:1f:5a:83:91:95:f6:1c:b4:1a: 52:f0:99:ce:2f:87:8f:a0:25:c5:c0:8a:49:f7:9c: fa:1a:12:45:bc:63:41:c4:dd:dc:49:28:14:3a:31: 5d:60:59:02:65:eb:c1:fa:33:c6:23:61:1b:7e:2f: a7:c3:90:bd:39:b1:aa:51:66:32:ce:1f:40:82:7b: 6e:50:29:aa:75:b7:3f:bc:4b:c5:f1:b8:4e:6f:a0: 3a:24:5f:de:0b:01:2c:d5:ce:02:cd:d1:b2:af:79: f2:91:a6:18:74:a6:15:6d:6c:0a:14:76:36:0c:a4: da:e0:27:32:41:dd:d9:e4:e1:f2:42:3a:e4:83:5d: b0:df:4e:37:13:18:06:bb:c7:65:00:c2:56:0d:9d: 65:14:b1:cd:61:72:a6:1c:62:0d:9f:e1:e4:49:b8: 11:ed:f4:98:f3:f8:7a:44:59:d5:81:fc:4c:c2:e5: 11:2a:e4:94:81:0a:4b:0f:0d:f4:77:ed:c4:1b:a1: 1f:a1:b9:c2:f8:43:55:ad:50:22:5c:22:53:3c:40: 6b:d1:1f:1d:f8:c8:1c:d3:72:d7:d2:3c:f6:14:60: 5d:cf:53:d6:15:ab:24:33:db:28:a2:17:53:01:49: 22:1d:c9:62:12:33:51:ef:aa:14:bc:d9:99:64:14: 37:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C5:92:DF:08:95:ED:46:45:37:CB:5F:5B:F1:8A:6A:AA:DF:88:74 X509v3 Authority Key Identifier: keyid:12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e0:59:06:70:95:bf:3f:b2:77:11:2e:32:09:6d:27:65:8d: 3b:9d:48:6c:92:4b:4f:cf:76:ec:e2:e4:ad:5e:34:72:d2:de: 16:16:cd:ac:a7:5a:5b:43:76:4c:b6:a3:b1:b9:2d:3b:2f:e0: e5:de:10:ac:bd:a2:0d:38:8f:bd:57:26:f5:1c:b1:76:f4:20: cc:67:c3:6d:4c:18:35:38:1b:2c:5f:ef:63:c0:f1:09:9b:84: 8b:a8:6c:3b:3d:6b:2c:10:95:02:10:5e:07:f8:ae:be:e6:17: cd:8a:56:71:2c:7c:1d:f1:f4:f2:41:f5:8b:54:66:bd:29:12: fb:a8:09:44:f0:09:c4:24:a3:15:bd:dd:af:0c:60:7d:01:57: 38:03:7c:85:63:a6:1d:7f:73:c1:42:59:ce:6a:6c:05:21:de: 45:13:eb:ce:7f:18:bb:d7:aa:dd:ef:2a:89:a6:cd:a5:c5:63: 63:7d:49:76:30:2f:d1:db:a0:47:50:d7:3b:a9:8c:f6:0a:49: 91:2e:cd:8d:93:9d:68:da:e5:a7:ae:b8:74:9b:7b:23:04:13: 89:2d:75:87:6d:c7:b4:ea:20:82:29:a5:87:1a:30:2a:1b:57: 18:b2:57:16:da:2a:cb:a1:42:02:f1:98:e9:43:dc:75:54:a9: 58:72:0e:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SF1/sw5EyBbv/hhWebIZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNDZmMjNhMDQ4NzYzYWEzYWQwYWVkZTVhNDg5YWI4ZmNk MjYzODQwHhcNMjUxMjIxMDUwMTA1WhcNMjUxMjIyMDUwMTA1WjAzMTEwLwYDVQQD Eyg1ZGM1OTJkZjA4OTVlZDQ2NDUzN2NiNWY1YmYxOGE2YWFhZGY4ODc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwlL8RgfWoORlfYctBpS8JnOL4eP oCXFwIpJ95z6GhJFvGNBxN3cSSgUOjFdYFkCZevB+jPGI2Ebfi+nw5C9ObGqUWYy zh9AgntuUCmqdbc/vEvF8bhOb6A6JF/eCwEs1c4CzdGyr3nykaYYdKYVbWwKFHY2 DKTa4CcyQd3Z5OHyQjrkg12w3043ExgGu8dlAMJWDZ1lFLHNYXKmHGINn+HkSbgR 7fSY8/h6RFnVgfxMwuURKuSUgQpLDw30d+3EG6EfobnC+ENVrVAiXCJTPEBr0R8d +Mgc03LX0jz2FGBdz1PWFaskM9soohdTAUkiHcliEjNR76oUvNmZZBQ3pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3Fkt8Ile1GRTfLX1vximqq34h0MB8GA1UdIwQY MBaAFBJG8joEh2OqOtCu3lpImrj80mOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWtieU9nU0hZNm82MEs3ZVdraWF1UHpTWTRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84NzdlNmMtMzI1YS00N2VhLWFhNTYt MTA5NmJmZDZiZjZkLzEvRWtieU9nU0hZNm82MEs3ZVdraWF1UHpTWTRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS84NzdlNmMtMzI1YS00N2VhLWFhNTYtMTA5NmJmZDZiZjZk LzEvRWtieU9nU0hZNm82MEs3ZVdraWF1UHpTWTRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAheBZBnCV vz+ydxEuMgltJ2WNO51IbJJLT8927OLkrV40ctLeFhbNrKdaW0N2TLajsbktOy/g 5d4QrL2iDTiPvVcm9RyxdvQgzGfDbUwYNTgbLF/vY8DxCZuEi6hsOz1rLBCVAhBe B/iuvuYXzYpWcSx8HfH08kH1i1RmvSkS+6gJRPAJxCSjFb3drwxgfQFXOAN8hWOm HX9zwUJZzmpsBSHeRRPrzn8Yu9eq3e8qiabNpcVjY31JdjAv0dugR1DXO6mM9gpJ kS7NjZOdaNrlp664dJt7IwQTiS11h23HtOoggimlhxowKhtXGLJXFtoqy6FCAvGY 6UPcdVSpWHIOJQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:18:42 2025 by rpki-client