This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft File: ekeMWqImonjosZBvNxxgz8fYfo4.mft (raw, json) Hash identifier: CAfKOfmLD/OoNpeH9osrGEDZbrgPQotQhXC15U/lxzc= Subject key identifier: 4C:0E:C9:03:D5:19:B9:97:C9:D4:48:45:DF:4B:1E:48:E0:1A:4F:3E Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E Certificate issuer: /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e Certificate serial: 019B3B6BAA78B35DAB34C90757D5CB8B0CEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft Manifest number: 1397 Signing time: Sat 20 Dec 2025 11:01:10 +0000 Manifest this update: Sat 20 Dec 2025 11:01:10 +0000 Manifest next update: Sun 21 Dec 2025 11:01:10 +0000 Files and hashes: 1: 6T07akuBxgvG0izMFImIY3LJxqs.roa (hash: XGRbraQFnaK7TkdQ/duWwEkwP4S4BhjaDtKSynptX9M=) 2: ekeMWqImonjosZBvNxxgz8fYfo4.crl (hash: 2dmYV0ELeIe0T1Bon/xoSNmjuQx/t2cpxFmBJPs7vSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:aa:78:b3:5d:ab:34:c9:07:57:d5:cb:8b:0c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e Validity Not Before: Dec 20 11:01:10 2025 GMT Not After : Dec 21 11:01:10 2025 GMT Subject: CN=4c0ec903d519b997c9d44845df4b1e48e01a4f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6f:e9:3b:e6:46:00:e3:ee:30:f0:3f:e5:01: 30:88:83:61:79:72:68:09:40:f5:5f:cb:18:58:15: eb:42:9b:2f:d2:b1:a9:da:4b:98:82:15:16:5f:63: 3e:d2:03:14:d1:a1:91:77:5b:91:c1:b9:4e:ff:68: d3:5d:1f:8f:61:b8:95:e3:70:7a:30:25:e6:20:9e: 93:07:29:d9:da:ff:34:51:61:cd:78:d2:55:94:e9: d7:ac:24:9c:7a:f5:60:44:35:5f:10:e1:80:b8:16: b1:85:e4:cd:b4:f0:19:4f:3f:dc:db:8f:45:6e:3e: 9f:0e:af:b6:9a:68:46:c1:42:40:51:91:3f:7c:8f: ca:3e:0d:de:b5:ad:43:a2:53:11:17:31:1f:31:9e: c1:a9:86:54:24:43:16:ab:9a:29:53:b4:92:71:cb: a9:9f:3b:55:8f:7f:e9:aa:c3:55:b5:48:1c:1a:4e: c1:bf:70:4d:ad:e8:15:9d:e7:50:5b:b1:b9:3f:64: af:c2:e3:40:3d:d2:f7:f8:80:cd:b8:b6:95:39:97: db:21:4a:8c:57:a6:e1:85:fe:0d:e9:46:6d:52:f3: 75:36:45:2a:37:b6:d8:8d:62:18:c0:a0:5b:d5:a7: 6e:f0:1a:26:04:f3:af:7a:a0:28:07:85:5a:e4:42: d8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0E:C9:03:D5:19:B9:97:C9:D4:48:45:DF:4B:1E:48:E0:1A:4F:3E X509v3 Authority Key Identifier: keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:2e:5e:eb:66:d0:f8:45:44:53:7a:0a:7b:34:f2:34:17:ad: 37:e7:86:b0:c7:46:39:c6:f7:0f:d0:b1:69:23:95:89:cb:5b: b5:01:55:db:b4:4c:29:d1:2f:69:f4:a1:db:fb:21:44:4a:35: f6:9f:03:5f:94:30:47:9a:f1:f7:90:bf:3e:51:28:25:99:f7: eb:7e:d7:fd:97:99:b4:bf:61:c8:47:a1:d4:9b:5f:81:93:00: 61:25:09:0d:17:e5:d0:bb:35:30:69:7e:02:2e:c3:12:53:d2: 95:2b:93:84:db:aa:c1:84:b2:30:d2:5c:22:ba:c3:4a:d0:c0: ee:17:75:f3:43:64:e4:4a:66:80:d1:1f:63:04:f5:e7:f7:62: 34:67:ac:c2:6a:fa:35:08:d7:6e:30:7a:99:ec:47:1e:7b:16: 0c:d9:83:af:64:08:2e:9d:94:44:44:16:7c:4c:79:0d:2d:fb: 21:ae:4b:50:0a:14:f8:1c:70:cc:9d:b5:62:5a:db:81:57:4a: ab:08:8b:c2:9e:d6:0d:24:2c:f5:00:fd:3d:ad:2f:f9:81:4e: 68:fa:eb:7f:e1:f0:db:8c:3f:43:75:ac:8f:df:c8:be:a1:6b: bd:48:7f:3f:ac:52:4e:e0:79:4f:e9:07:d8:16:70:57:6a:2f: 2d:9e:ce:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a6p4s12rNMkHV9XLiwzsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNDc4YzVhYTIyNmEyNzhlOGIxOTA2ZjM3MWM2MGNmYzdk ODdlOGUwHhcNMjUxMjIwMTEwMTEwWhcNMjUxMjIxMTEwMTEwWjAzMTEwLwYDVQQD Eyg0YzBlYzkwM2Q1MTliOTk3YzlkNDQ4NDVkZjRiMWU0OGUwMWE0ZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W/pO+ZGAOPuMPA/5QEwiINheXJo CUD1X8sYWBXrQpsv0rGp2kuYghUWX2M+0gMU0aGRd1uRwblO/2jTXR+PYbiV43B6 MCXmIJ6TBynZ2v80UWHNeNJVlOnXrCScevVgRDVfEOGAuBaxheTNtPAZTz/c249F bj6fDq+2mmhGwUJAUZE/fI/KPg3eta1DolMRFzEfMZ7BqYZUJEMWq5opU7SSccup nztVj3/pqsNVtUgcGk7Bv3BNregVnedQW7G5P2SvwuNAPdL3+IDNuLaVOZfbIUqM V6bhhf4N6UZtUvN1NkUqN7bYjWIYwKBb1adu8BomBPOveqAoB4Va5ELYlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwOyQPVGbmXydRIRd9LHkjgGk8+MB8GA1UdIwQY MBaAFHpHjFqiJqJ46LGQbzccYM/H2H6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81MWE1MjAtZTA4ZC00M2IzLWE2YjAt ZDc2ZWM5Y2MwZDI4LzEvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC81MWE1MjAtZTA4ZC00M2IzLWE2YjAtZDc2ZWM5Y2MwZDI4 LzEvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcS5e62bQ +EVEU3oKezTyNBetN+eGsMdGOcb3D9CxaSOVictbtQFV27RMKdEvafSh2/shREo1 9p8DX5QwR5rx95C/PlEoJZn3637X/ZeZtL9hyEeh1JtfgZMAYSUJDRfl0Ls1MGl+ Ai7DElPSlSuThNuqwYSyMNJcIrrDStDA7hd180Nk5EpmgNEfYwT15/diNGeswmr6 NQjXbjB6mexHHnsWDNmDr2QILp2UREQWfEx5DS37Ia5LUAoU+BxwzJ21YlrbgVdK qwiLwp7WDSQs9QD9Pa0v+YFOaPrrf+Hw24w/Q3Wsj9/IvqFrvUh/P6xSTuB5T+kH 2BZwV2ovLZ7O8g== -----END CERTIFICATE-----Generated at Sat Dec 20 17:47:03 2025 by rpki-client