This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft File: EkbyOgSHY6o60K7eWkiauPzSY4Q.mft (raw, json) Hash identifier: fXb6HZzv9rsVHrsH7hIOM3gVx2MTXNiLQLTCBTc+CCQ= Subject key identifier: 92:8D:24:74:05:DD:BA:B7:F9:EA:EA:A5:B0:78:87:98:1B:70:77:7A Authority key identifier: 12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84 Certificate issuer: /CN=1246f23a048763aa3ad0aede5a489ab8fcd26384 Certificate serial: 019B3D59DA52D6183F8962A660108905097A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 20:00:57 +0000 Manifest this update: Sat 20 Dec 2025 20:00:57 +0000 Manifest next update: Sun 21 Dec 2025 20:00:57 +0000 Files and hashes: 1: 1-3roNM_Y4Luyo5UOkDOSNkCW0TA.roa (hash: ZowUiRFYv0ZOu5pI167992U5kyXST8eznpl9k++Lgik=) 2: EkbyOgSHY6o60K7eWkiauPzSY4Q.crl (hash: C7HM4DnGG5O1ajTei885YxRYa3fA+I9LOwtBdG8j0eM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:da:52:d6:18:3f:89:62:a6:60:10:89:05:09:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1246f23a048763aa3ad0aede5a489ab8fcd26384 Validity Not Before: Dec 20 20:00:57 2025 GMT Not After : Dec 21 20:00:57 2025 GMT Subject: CN=928d247405ddbab7f9eaeaa5b07887981b70777a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6b:f1:3a:19:64:ad:a3:ba:4a:78:f6:1f:fc: 2f:2a:aa:43:17:ff:ad:49:a1:e4:99:62:aa:ca:13: 3a:22:e0:da:89:61:dd:a6:f6:f7:70:26:20:17:40: a5:f1:4d:67:64:8e:55:8b:2c:a1:3d:af:e2:87:9c: 1d:fb:fc:36:81:a2:6e:ec:d1:da:20:1a:2d:e9:66: 30:e9:eb:c5:ac:e2:8c:f8:8e:b5:2e:18:85:6d:40: 50:ed:16:b2:de:90:c1:08:e8:8d:be:da:f1:d4:34: 08:15:24:8d:e8:11:4d:aa:ae:cf:a5:a9:f6:82:94: 18:65:f9:d6:9f:06:91:fc:be:d4:3d:6a:6c:91:b6: 0f:f0:5a:e9:3a:77:8a:0e:a0:0b:10:11:14:40:cf: e1:94:72:87:f8:4b:19:62:b2:4e:e5:80:17:9c:70: 9f:d1:69:d8:43:f8:32:b4:22:a1:e4:8a:d5:d8:47: c3:9d:a1:99:76:3c:13:bb:e3:5d:58:5e:76:4c:c3: be:94:a3:a0:c7:b0:38:37:79:5f:8e:3e:2b:df:cb: f2:ae:6e:ce:24:7d:7e:e0:46:90:57:c8:d4:1e:60: 00:ba:0b:f7:71:06:00:9c:41:99:9e:10:34:d6:b1: a3:9f:76:f7:7b:0d:92:a7:02:a1:fc:f1:88:99:d5: 61:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8D:24:74:05:DD:BA:B7:F9:EA:EA:A5:B0:78:87:98:1B:70:77:7A X509v3 Authority Key Identifier: keyid:12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:8e:bc:3b:4b:b5:5e:11:d5:0b:43:69:09:85:b7:87:8f:66: 50:36:cd:e4:49:73:69:15:ff:b3:ec:8d:28:04:d5:fb:6f:7b: 2d:a1:36:9c:08:c9:49:59:95:0c:17:76:b4:01:2d:2b:1b:cb: bb:0b:b8:c6:60:f9:7e:4e:02:10:56:e9:74:38:5a:39:c5:2d: f8:bb:43:ce:a6:95:76:33:f2:eb:54:34:a2:f6:c9:6d:17:9b: f0:0e:5c:59:3a:0c:df:a2:05:3b:7f:28:77:f7:79:e1:f8:1d: 1e:6d:de:e1:28:e7:bb:a4:fd:c8:6b:a3:4c:c0:6b:bb:4d:f9: bb:ba:65:8c:41:dc:86:c2:a0:f4:ca:8b:60:9a:7e:ec:2f:64: 7c:cd:c0:2f:26:13:d7:06:6b:7d:f0:1a:f7:96:67:c4:16:1f: ac:eb:75:2a:fd:3f:8e:64:b4:b0:2c:c0:d7:06:8c:ac:62:7f: 23:b8:4a:a1:2e:63:fd:38:a2:34:39:b6:b1:8b:0e:cd:91:5b: 41:af:b5:11:f1:66:4f:c6:b7:eb:de:85:b9:39:d9:53:59:fa: 6d:b2:71:7d:0b:ee:23:05:ba:15:d0:8d:e9:44:4c:d9:72:d4: 70:8a:65:9e:06:72:c6:bc:be:f6:c0:8d:72:27:d1:de:a4:49: 90:69:f8:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WdpS1hg/iWKmYBCJBQl6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNDZmMjNhMDQ4NzYzYWEzYWQwYWVkZTVhNDg5YWI4ZmNk MjYzODQwHhcNMjUxMjIwMjAwMDU3WhcNMjUxMjIxMjAwMDU3WjAzMTEwLwYDVQQD Eyg5MjhkMjQ3NDA1ZGRiYWI3ZjllYWVhYTViMDc4ODc5ODFiNzA3NzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmvxOhlkraO6Snj2H/wvKqpDF/+t SaHkmWKqyhM6IuDaiWHdpvb3cCYgF0Cl8U1nZI5ViyyhPa/ih5wd+/w2gaJu7NHa IBot6WYw6evFrOKM+I61LhiFbUBQ7Ray3pDBCOiNvtrx1DQIFSSN6BFNqq7Ppan2 gpQYZfnWnwaR/L7UPWpskbYP8FrpOneKDqALEBEUQM/hlHKH+EsZYrJO5YAXnHCf 0WnYQ/gytCKh5IrV2EfDnaGZdjwTu+NdWF52TMO+lKOgx7A4N3lfjj4r38vyrm7O JH1+4EaQV8jUHmAAugv3cQYAnEGZnhA01rGjn3b3ew2SpwKh/PGImdVhvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKNJHQF3bq3+erqpbB4h5gbcHd6MB8GA1UdIwQY MBaAFBJG8joEh2OqOtCu3lpImrj80mOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWtieU9nU0hZNm82MEs3ZVdraWF1UHpTWTRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84NzdlNmMtMzI1YS00N2VhLWFhNTYt MTA5NmJmZDZiZjZkLzEvRWtieU9nU0hZNm82MEs3ZVdraWF1UHpTWTRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS84NzdlNmMtMzI1YS00N2VhLWFhNTYtMTA5NmJmZDZiZjZk LzEvRWtieU9nU0hZNm82MEs3ZVdraWF1UHpTWTRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANY68O0u1 XhHVC0NpCYW3h49mUDbN5ElzaRX/s+yNKATV+297LaE2nAjJSVmVDBd2tAEtKxvL uwu4xmD5fk4CEFbpdDhaOcUt+LtDzqaVdjPy61Q0ovbJbReb8A5cWToM36IFO38o d/d54fgdHm3e4Sjnu6T9yGujTMBru035u7pljEHchsKg9MqLYJp+7C9kfM3ALyYT 1wZrffAa95ZnxBYfrOt1Kv0/jmS0sCzA1waMrGJ/I7hKoS5j/TiiNDm2sYsOzZFb Qa+1EfFmT8a3696FuTnZU1n6bbJxfQvuIwW6FdCN6URM2XLUcIplngZyxry+9sCN cifR3qRJkGn4zg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:09:54 2025 by rpki-client