This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft File: ekQ0Re8M2qdnJh9OCxILvj_OByc.mft (raw, json) Hash identifier: jdrnoL7IPXITo0NHDcONRQhaE1qjDJ4Vefm99Zxk9Wg= Subject key identifier: D8:4C:91:50:A7:EE:96:F8:EC:57:39:47:FC:ED:49:5A:8D:3D:B1:B1 Authority key identifier: 7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27 Certificate issuer: /CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727 Certificate serial: 019B6CC54795F6D30F4ADB1A2D554707FACE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft Manifest number: 179E Signing time: Tue 30 Dec 2025 01:00:26 +0000 Manifest this update: Tue 30 Dec 2025 01:00:26 +0000 Manifest next update: Wed 31 Dec 2025 01:00:26 +0000 Files and hashes: 1: ekQ0Re8M2qdnJh9OCxILvj_OByc.crl (hash: PLUm1MlQqHUY2MjgAulqpaDfwoU2Fh8150JHt1vJRoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:47:95:f6:d3:0f:4a:db:1a:2d:55:47:07:fa:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a443445ef0cdaa767261f4e0b120bbe3fce0727 Validity Not Before: Dec 30 01:00:26 2025 GMT Not After : Dec 31 01:00:26 2025 GMT Subject: CN=d84c9150a7ee96f8ec573947fced495a8d3db1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:26:d6:e1:a8:32:fe:7a:6b:8d:5a:cf:9a:37: a7:f8:07:ac:fc:da:94:7e:d0:bc:b4:ea:c0:ac:c5: db:07:72:2c:d8:3c:11:c8:25:10:dc:8b:bb:67:1b: 70:49:3b:b3:ee:14:94:0c:7d:19:b8:52:fa:d9:04: 51:18:66:df:7e:37:ba:86:b9:ee:dc:f4:d5:00:fc: e5:e7:c8:bf:fa:c1:d5:28:86:d3:84:53:ef:eb:6d: a6:cb:07:58:7b:94:c6:0a:96:a0:a7:71:2a:58:2a: be:7e:28:90:cd:48:98:8f:cb:8c:bd:64:b9:f5:88: 57:1c:ee:00:51:2b:ce:a8:80:18:f2:29:a8:c4:94: fd:0a:85:50:86:59:9e:2c:f0:85:35:5e:bc:bf:39: 9f:85:9b:90:7c:6e:14:91:19:1a:4e:87:a5:b8:df: e5:6e:d4:f4:ba:fc:df:05:91:3d:8a:11:97:37:b3: c1:5a:75:6e:1a:88:44:d3:a5:f5:e5:7c:d8:bc:e6: df:f0:e9:ce:88:c8:20:2d:78:ac:f0:64:c7:14:aa: 3d:6e:fe:67:32:70:44:18:83:2b:05:48:fb:fb:8c: 4f:f2:d6:ab:b8:6c:e8:9c:c2:d4:6c:82:04:4b:62: 64:df:80:01:d7:cc:23:11:d8:0f:1a:d7:97:9a:cc: 40:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4C:91:50:A7:EE:96:F8:EC:57:39:47:FC:ED:49:5A:8D:3D:B1:B1 X509v3 Authority Key Identifier: keyid:7A:44:34:45:EF:0C:DA:A7:67:26:1F:4E:0B:12:0B:BE:3F:CE:07:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekQ0Re8M2qdnJh9OCxILvj_OByc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/27c5ef-1eac-415f-9ac0-5b35d88175d5/1/ekQ0Re8M2qdnJh9OCxILvj_OByc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c7:74:58:45:6d:8c:5e:98:1d:30:7e:ea:b5:28:a9:b5:4c: 70:5a:cd:62:31:ed:23:9d:2e:65:0c:95:79:ac:74:17:20:80: b0:15:55:8d:c5:eb:ae:21:37:44:cf:eb:c2:80:8d:4c:e3:77: 07:81:f7:a0:c6:c0:a3:58:2b:e8:e2:3f:bd:46:3f:33:51:d0: 23:4c:af:b9:ab:d0:65:8b:e6:e1:da:39:eb:ea:15:28:ea:83: 53:8e:ef:e7:a0:f0:5f:f2:bc:f4:23:55:9a:09:f5:fb:3d:c3: d8:75:f1:b0:13:ec:b8:cd:f4:56:73:1a:a0:1a:2d:74:d6:b3: fa:a9:9c:66:cd:2f:cf:64:9a:fc:5b:4c:d4:58:2c:ef:e4:f2: e4:29:70:3e:db:d8:a8:be:b1:f6:bf:2e:5e:0c:b0:d4:e2:10: b5:32:87:d3:7b:7a:e3:52:8c:5b:82:62:16:1a:a5:76:83:d3: 9a:67:fb:1e:8a:02:10:ad:ae:34:1b:32:56:c9:f0:c9:f2:4a: 6e:67:fe:a7:6c:a3:b5:ed:69:39:df:47:8f:94:bc:d0:11:9f: 88:b2:51:7e:5a:bd:ea:e3:be:ae:49:14:4c:25:00:65:80:88: be:0c:84:10:b8:25:c9:9b:09:1e:82:ed:14:60:fc:2d:56:d2: 3a:51:2f:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxUeV9tMPStsaLVVHB/rOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNDQzNDQ1ZWYwY2RhYTc2NzI2MWY0ZTBiMTIwYmJlM2Zj ZTA3MjcwHhcNMjUxMjMwMDEwMDI2WhcNMjUxMjMxMDEwMDI2WjAzMTEwLwYDVQQD EyhkODRjOTE1MGE3ZWU5NmY4ZWM1NzM5NDdmY2VkNDk1YThkM2RiMWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CbW4agy/nprjVrPmjen+Aes/NqU ftC8tOrArMXbB3Is2DwRyCUQ3Iu7ZxtwSTuz7hSUDH0ZuFL62QRRGGbffje6hrnu 3PTVAPzl58i/+sHVKIbThFPv622mywdYe5TGCpagp3EqWCq+fiiQzUiYj8uMvWS5 9YhXHO4AUSvOqIAY8imoxJT9CoVQhlmeLPCFNV68vzmfhZuQfG4UkRkaToeluN/l btT0uvzfBZE9ihGXN7PBWnVuGohE06X15XzYvObf8OnOiMggLXis8GTHFKo9bv5n MnBEGIMrBUj7+4xP8taruGzonMLUbIIES2Jk34AB18wjEdgPGteXmsxAlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhMkVCn7pb47Fc5R/ztSVqNPbGxMB8GA1UdIwQY MBaAFHpENEXvDNqnZyYfTgsSC74/zgcnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yN2M1ZWYtMWVhYy00MTVmLTlhYzAt NWIzNWQ4ODE3NWQ1LzEvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yN2M1ZWYtMWVhYy00MTVmLTlhYzAtNWIzNWQ4ODE3NWQ1 LzEvZWtRMFJlOE0ycWRuSmg5T0N4SUx2al9PQnljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsd0WEVt jF6YHTB+6rUoqbVMcFrNYjHtI50uZQyVeax0FyCAsBVVjcXrriE3RM/rwoCNTON3 B4H3oMbAo1gr6OI/vUY/M1HQI0yvuavQZYvm4do56+oVKOqDU47v56DwX/K89CNV mgn1+z3D2HXxsBPsuM30VnMaoBotdNaz+qmcZs0vz2Sa/FtM1Fgs7+Ty5ClwPtvY qL6x9r8uXgyw1OIQtTKH03t641KMW4JiFhqldoPTmmf7HooCEK2uNBsyVsnwyfJK bmf+p2yjte1pOd9Hj5S80BGfiLJRflq96uO+rkkUTCUAZYCIvgyEELglyZsJHoLt FGD8LVbSOlEvwA== -----END CERTIFICATE-----Generated at Tue Dec 30 10:32:18 2025 by rpki-client