This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json) Hash identifier: 7qL5+6xU60H9EpfyGvWFerbnJ521xIZnSI2cmMyZ3Eg= Subject key identifier: 30:54:AE:51:7C:40:FC:F7:5C:09:7F:BD:F2:F2:BD:CA:24:79:AB:E6 Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3 Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3 Certificate serial: 019B3CB4F2B76577D498697D20E4FBE4648A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft Manifest number: 13AE Signing time: Sat 20 Dec 2025 17:00:50 +0000 Manifest this update: Sat 20 Dec 2025 17:00:50 +0000 Manifest next update: Sun 21 Dec 2025 17:00:50 +0000 Files and hashes: 1: AwjoyZI8RTyi89MX4-dvyjy68_c.roa (hash: O+HLCbEiaTJH3eiSGGyiEXEPhXChr9l42nDt8xPiEPA=) 2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: Kd6N6Lchdl9Hh2admYAAr4jLd82bsjJRLXhbIuriJTo=) 3: axNN3PR5BYZSBckAYRhvHQEN0tw.roa (hash: W+trSCmDZNAemLcLRmNFpK8OHj78354SaAShhhdbFn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:f2:b7:65:77:d4:98:69:7d:20:e4:fb:e4:64:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3 Validity Not Before: Dec 20 17:00:50 2025 GMT Not After : Dec 21 17:00:50 2025 GMT Subject: CN=3054ae517c40fcf75c097fbdf2f2bdca2479abe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:72:2d:72:5d:f4:31:7a:92:b8:c6:fc:b9:37: 65:88:cf:29:a9:6c:fb:5c:b7:4b:83:ce:78:46:d1: 07:0c:24:47:62:66:1d:31:ed:8a:f7:be:f5:db:c9: 3a:b3:e9:11:38:ec:58:18:93:d5:67:84:15:6e:25: 68:24:5e:4a:37:a5:61:5e:ab:f6:a7:3b:5f:e9:12: ff:22:98:89:28:b1:52:a3:f4:13:60:0a:0c:bf:19: 18:5e:de:6a:ad:b1:9d:45:21:6e:da:d5:25:75:64: 7a:a6:e3:26:8c:b4:1d:63:8e:28:42:bf:e9:20:c1: f7:a0:e0:04:4b:69:67:68:6b:98:f4:13:b5:23:a5: 82:21:54:ec:ef:1c:2e:ef:73:8f:95:c1:58:7d:e1: ce:4d:3c:6c:6d:7e:bd:fb:43:df:44:5a:75:38:22: ac:c9:17:c4:cc:70:26:62:bc:2e:c0:67:bb:c5:2f: 73:c5:1b:f8:44:05:56:1b:a7:d0:6d:cc:16:cb:5a: 43:7f:d3:77:9c:3a:c5:42:26:96:c9:4b:ac:52:9a: 03:9f:1a:cc:1a:66:22:60:f5:66:e3:ec:3a:3b:e8: db:89:e4:d6:f5:19:3e:24:ed:7c:35:53:64:99:6b: 4f:14:60:a6:60:22:a5:13:73:60:cc:8b:dd:f1:ba: 60:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:54:AE:51:7C:40:FC:F7:5C:09:7F:BD:F2:F2:BD:CA:24:79:AB:E6 X509v3 Authority Key Identifier: keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a2:c5:26:e8:9d:05:9a:2b:00:4f:3d:f2:ed:f0:ba:5d:cf: 02:a3:b7:c1:87:25:a9:78:b6:79:60:bb:63:d5:29:85:ff:05: 52:6b:14:88:1f:c0:53:1f:46:36:1a:aa:11:b4:88:a5:31:90: 49:b9:28:60:30:c4:05:1b:bd:db:4a:a1:7b:44:cf:6c:82:c3: a0:22:6b:24:11:43:86:d4:06:44:ea:41:ed:0a:14:84:3e:37: 4d:b2:41:af:b3:1e:b2:9d:76:26:43:07:a9:e1:58:33:af:34: cd:44:46:79:a0:38:51:e6:9b:55:93:d3:ed:ee:b5:c3:10:30: 40:86:9c:66:2c:0f:bf:ff:6a:cf:09:12:6d:78:b0:5f:7d:a1: 7a:77:2b:67:64:9d:b2:b1:7c:90:cc:73:c0:de:50:bd:67:c0: 73:08:fa:83:6f:a8:c3:5e:57:a7:26:fd:c9:8e:8d:1f:72:21: 11:41:13:d2:df:6e:77:e5:08:d9:96:f2:97:86:c3:e6:09:c1: d1:e2:3c:3a:97:96:a5:01:af:1c:b7:d7:d3:9a:2d:18:40:c2: b8:9a:af:26:3d:bf:cc:ba:a5:10:69:a5:91:5a:7f:94:48:cf: 78:dc:d5:53:37:eb:54:12:df:ce:37:b8:2e:d8:71:d1:df:a3: 01:31:00:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tPK3ZXfUmGl9IOT75GSKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNGYxNjQ3OWU0YjcyYWNhNTg5YmFhMDEwMzlmYzhlOTIz YjRjYzMwHhcNMjUxMjIwMTcwMDUwWhcNMjUxMjIxMTcwMDUwWjAzMTEwLwYDVQQD EygzMDU0YWU1MTdjNDBmY2Y3NWMwOTdmYmRmMmYyYmRjYTI0NzlhYmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXItcl30MXqSuMb8uTdliM8pqWz7 XLdLg854RtEHDCRHYmYdMe2K977128k6s+kROOxYGJPVZ4QVbiVoJF5KN6VhXqv2 pztf6RL/IpiJKLFSo/QTYAoMvxkYXt5qrbGdRSFu2tUldWR6puMmjLQdY44oQr/p IMH3oOAES2lnaGuY9BO1I6WCIVTs7xwu73OPlcFYfeHOTTxsbX69+0PfRFp1OCKs yRfEzHAmYrwuwGe7xS9zxRv4RAVWG6fQbcwWy1pDf9N3nDrFQiaWyUusUpoDnxrM GmYiYPVm4+w6O+jbieTW9Rk+JO18NVNkmWtPFGCmYCKlE3NgzIvd8bpgWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBUrlF8QPz3XAl/vfLyvcokeavmMB8GA1UdIwQY MBaAFBJPFkeeS3KspYm6oBA5/I6SO0zDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82MGM3YzEtOGYwZi00YjgwLTg2MzAt M2U0ZjM1YjY2NDYxLzEvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82MGM3YzEtOGYwZi00YjgwLTg2MzAtM2U0ZjM1YjY2NDYx LzEvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqLFJuid BZorAE898u3wul3PAqO3wYclqXi2eWC7Y9Uphf8FUmsUiB/AUx9GNhqqEbSIpTGQ SbkoYDDEBRu920qhe0TPbILDoCJrJBFDhtQGROpB7QoUhD43TbJBr7Mesp12JkMH qeFYM680zURGeaA4UeabVZPT7e61wxAwQIacZiwPv/9qzwkSbXiwX32hencrZ2Sd srF8kMxzwN5QvWfAcwj6g2+ow15Xpyb9yY6NH3IhEUET0t9ud+UI2Zbyl4bD5gnB 0eI8OpeWpQGvHLfX05otGEDCuJqvJj2/zLqlEGmlkVp/lEjPeNzVUzfrVBLfzje4 Lthx0d+jATEA1w== -----END CERTIFICATE-----Generated at Sun Dec 21 00:12:13 2025 by rpki-client