This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft File: eKwxY10JG-YVV0MxH-HbfHrzR3s.mft (raw, json) Hash identifier: 31VM6JZMjeNSyn1anb4/f6BHVVI36SlyYjsfILKCxcE= Subject key identifier: 8E:B8:4A:9E:C9:85:C1:C1:F2:1E:6E:1C:B7:36:AE:34:6E:F9:7C:97 Authority key identifier: 78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B Certificate issuer: /CN=78ac31635d091be6155743311fe1db7c7af3477b Certificate serial: 019B40C8D2B7D7C34D4A54B33F0B9A1844EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft Manifest number: 0BE3 Signing time: Sun 21 Dec 2025 12:01:01 +0000 Manifest this update: Sun 21 Dec 2025 12:01:01 +0000 Manifest next update: Mon 22 Dec 2025 12:01:01 +0000 Files and hashes: 1: 2nu94bRpDMa-mlfbsC1YR4mecUE.roa (hash: Q8+h45/Keq7mex3FbK0PPZB2TjbV76+31mEqnwydPl4=) 2: GFp4I3LPH9Bw9YNNwWHq6X0Ax-w.roa (hash: h4/2+JBtszFNERDw2wk+3LUP56k2mKHWWkwlM0aD/BM=) 3: eKwxY10JG-YVV0MxH-HbfHrzR3s.crl (hash: IM/Tu+YX8hr3KrFHC3NvNeMSBtns8DxJexqFLTe4ZN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:d2:b7:d7:c3:4d:4a:54:b3:3f:0b:9a:18:44:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78ac31635d091be6155743311fe1db7c7af3477b Validity Not Before: Dec 21 12:01:01 2025 GMT Not After : Dec 22 12:01:01 2025 GMT Subject: CN=8eb84a9ec985c1c1f21e6e1cb736ae346ef97c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d9:da:0e:29:11:3d:0f:41:b9:23:e8:16:1d: 8f:30:3f:92:c9:f8:c3:07:2c:19:dd:c8:04:cb:08: b2:c1:a9:76:0a:4e:9e:0f:06:6f:80:16:60:ce:d6: 62:c2:04:a4:f9:7b:45:88:c1:86:4b:a4:31:cf:9a: ad:e0:dd:49:a1:c5:92:16:6b:24:a8:ea:a4:a8:b5: 57:ab:35:13:6a:f3:f9:3a:2a:1d:48:60:64:12:eb: 1c:44:c6:ee:44:fa:93:8b:6c:5b:8e:e9:c8:7c:14: 15:57:94:f6:ec:f4:0a:5c:d6:78:05:36:ae:0a:58: b5:10:b7:1d:00:b3:05:91:ea:f2:13:a4:7f:c6:07: 36:1d:54:85:ef:25:40:37:b3:e2:af:7e:f6:9f:f0: 3d:9a:7f:c2:75:e0:21:91:42:2b:93:ff:1f:c7:3a: 41:55:39:e1:13:98:ff:30:2e:03:84:0f:d0:4a:88: 61:ec:4c:2a:64:de:9e:0d:4f:ec:9c:59:af:88:b9: 5b:fd:e4:c1:5f:38:cb:1c:5b:7a:52:7b:2e:48:cf: 68:44:54:e7:9a:a3:6e:e9:22:57:1d:94:ac:5b:63: 9a:ae:99:e6:b3:f2:1b:fd:7e:38:c3:02:3d:35:a3: 18:55:d8:f9:24:7c:5b:32:e7:44:0d:5b:cd:38:b1: d9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B8:4A:9E:C9:85:C1:C1:F2:1E:6E:1C:B7:36:AE:34:6E:F9:7C:97 X509v3 Authority Key Identifier: keyid:78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:2d:9f:a7:b6:ff:6d:0f:5b:39:8d:f4:d7:ed:16:36:91:ec: 75:ab:27:e9:e0:28:11:9b:17:59:df:3a:7d:8f:ae:63:1d:73: 04:92:85:ac:66:42:d6:ed:dd:f7:10:a4:2f:06:23:ef:0d:7d: 58:f0:80:32:a9:a9:08:2c:cd:73:d6:33:6a:0c:24:4d:ca:fd: c2:3a:bb:ff:3c:1d:b7:d3:b3:da:ed:21:b9:2b:d4:e3:ee:06: c9:cf:c3:20:74:f5:db:ff:53:6f:c0:77:d3:5d:a6:db:a1:01: 93:bc:c6:6d:16:28:24:91:a6:1f:c8:86:e9:8e:f6:8e:91:cb: 4a:f8:62:af:f0:04:04:e9:3a:b4:0f:04:f5:d6:0c:e8:2b:00: a4:c8:3f:f3:6d:eb:29:46:0c:e2:c9:8b:06:67:1b:6d:ee:6d: e1:bf:f7:3d:67:91:31:9b:47:e7:0c:82:18:1a:6f:89:42:f0: 86:43:8b:7f:02:39:a2:23:60:98:1d:24:a4:f0:6c:8c:33:67: 5e:18:f2:da:5d:cb:db:4d:eb:c7:01:59:0a:4f:20:ec:06:b2: 60:69:bc:5e:55:34:d8:20:c3:a0:60:04:19:09:44:ba:c4:a4: ec:d6:a5:46:ac:e3:4c:f7:fd:c1:23:55:4a:71:a1:49:67:74: 00:aa:2c:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyNK318NNSlSzPwuaGETrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4YWMzMTYzNWQwOTFiZTYxNTU3NDMzMTFmZTFkYjdjN2Fm MzQ3N2IwHhcNMjUxMjIxMTIwMTAxWhcNMjUxMjIyMTIwMTAxWjAzMTEwLwYDVQQD Eyg4ZWI4NGE5ZWM5ODVjMWMxZjIxZTZlMWNiNzM2YWUzNDZlZjk3Yzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dnaDikRPQ9BuSPoFh2PMD+SyfjD BywZ3cgEywiywal2Ck6eDwZvgBZgztZiwgSk+XtFiMGGS6Qxz5qt4N1JocWSFmsk qOqkqLVXqzUTavP5OiodSGBkEuscRMbuRPqTi2xbjunIfBQVV5T27PQKXNZ4BTau Cli1ELcdALMFkeryE6R/xgc2HVSF7yVAN7Pir372n/A9mn/CdeAhkUIrk/8fxzpB VTnhE5j/MC4DhA/QSohh7EwqZN6eDU/snFmviLlb/eTBXzjLHFt6UnsuSM9oRFTn mqNu6SJXHZSsW2Oarpnms/Ib/X44wwI9NaMYVdj5JHxbMudEDVvNOLHZpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI64Sp7JhcHB8h5uHLc2rjRu+XyXMB8GA1UdIwQY MBaAFHisMWNdCRvmFVdDMR/h23x680d7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUt3eFkxMEpHLVlWVjBNeEgtSGJmSHJ6UjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9mZTIyYzUtZDhlMy00MWYxLTkwOTQt ZjZlOGJiZGJkMzNiLzEvZUt3eFkxMEpHLVlWVjBNeEgtSGJmSHJ6UjNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9mZTIyYzUtZDhlMy00MWYxLTkwOTQtZjZlOGJiZGJkMzNi LzEvZUt3eFkxMEpHLVlWVjBNeEgtSGJmSHJ6UjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABC2fp7b/ bQ9bOY301+0WNpHsdasn6eAoEZsXWd86fY+uYx1zBJKFrGZC1u3d9xCkLwYj7w19 WPCAMqmpCCzNc9YzagwkTcr9wjq7/zwdt9Oz2u0huSvU4+4Gyc/DIHT12/9Tb8B3 012m26EBk7zGbRYoJJGmH8iG6Y72jpHLSvhir/AEBOk6tA8E9dYM6CsApMg/823r KUYM4smLBmcbbe5t4b/3PWeRMZtH5wyCGBpviULwhkOLfwI5oiNgmB0kpPBsjDNn Xhjy2l3L203rxwFZCk8g7AayYGm8XlU02CDDoGAEGQlEusSk7NalRqzjTPf9wSNV SnGhSWd0AKos2w== -----END CERTIFICATE-----Generated at Sun Dec 21 17:13:52 2025 by rpki-client