This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft File: EK-ADOlb-7H0c7C1-fe5MXWTDok.mft (raw, json) Hash identifier: +GHnbbj/jaFU3pmx9aFsR6Pyy9kGsELHLXE+LOwQslI= Subject key identifier: 1B:DB:66:30:85:41:D7:F4:20:3D:0D:65:36:FC:94:47:2F:77:FC:80 Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89 Certificate issuer: /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89 Certificate serial: 019B3DC7BBC33509837CE445BD75B221BBE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft Manifest number: 10EF Signing time: Sat 20 Dec 2025 22:00:58 +0000 Manifest this update: Sat 20 Dec 2025 22:00:58 +0000 Manifest next update: Sun 21 Dec 2025 22:00:58 +0000 Files and hashes: 1: Cb0xcj-Jxi-kVmb40P9pFiyQAU0.roa (hash: W+Jc00IUJdyvPz1MZqpBm2Jn6DassHktVVAV8ICXpsc=) 2: EK-ADOlb-7H0c7C1-fe5MXWTDok.crl (hash: sKF0PWzW8xH+kczrS3lqK5SVbUU5bKW2CCUEhVslJRg=) 3: PvUc9zsD3htQ8H9mxpx8UzLv3To.roa (hash: zvFKPdwhED+0YLJA5rKh3ueMkFsfC6noT6Esie9dRX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:bb:c3:35:09:83:7c:e4:45:bd:75:b2:21:bb:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89 Validity Not Before: Dec 20 22:00:58 2025 GMT Not After : Dec 21 22:00:58 2025 GMT Subject: CN=1bdb66308541d7f4203d0d6536fc94472f77fc80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9c:7a:6c:75:bc:7c:8a:b0:18:74:d1:b9:80: a7:7b:fc:55:33:21:a1:a9:45:c8:43:5f:8f:83:94: 42:d5:75:09:17:45:e0:f4:f9:e6:b5:52:4e:19:cd: c0:3b:0d:e7:ab:c8:4a:7f:12:d0:14:5e:0c:36:40: bf:26:f3:5c:cf:29:bb:a9:0b:ca:3d:50:89:7f:29: a9:e7:e9:f8:2f:e2:02:11:26:07:3a:39:b2:0d:2a: c3:46:e2:b2:50:0c:07:5a:77:89:dc:bb:43:78:56: dd:3c:af:56:32:06:71:f5:71:e1:97:32:9d:f7:65: 3e:48:02:ca:12:02:de:a4:94:e5:f5:c2:dd:c7:7e: 68:cc:56:87:ea:15:29:7e:24:26:6a:29:7d:80:e9: 63:90:b6:25:b6:b3:93:19:07:9f:76:b5:d1:fe:be: 7d:99:70:1e:c0:5f:a3:94:ee:e2:58:04:9c:63:de: 65:df:61:95:3f:4b:d3:ae:d3:55:6e:fd:b0:0c:35: ad:da:79:60:fa:84:67:5a:df:e5:fc:15:f5:4e:cb: f0:87:22:f3:b0:65:be:d0:be:f6:c2:fc:4e:49:26: 17:7a:db:f7:a7:1b:87:38:76:17:4b:7f:a2:9a:ff: 4e:81:85:86:e3:70:8b:cc:05:4f:96:a9:6c:e6:46: 13:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DB:66:30:85:41:D7:F4:20:3D:0D:65:36:FC:94:47:2F:77:FC:80 X509v3 Authority Key Identifier: keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:05:0a:fa:56:95:87:3a:bf:66:74:fd:3c:e8:f2:4c:1f:04: 60:e2:4b:2e:71:1a:97:64:44:90:a5:af:3d:a9:d7:20:f3:62: f1:41:66:6b:99:05:38:90:0c:1e:77:1a:72:9e:c3:84:b3:2e: 0f:da:9d:74:03:48:36:68:e8:e8:5c:91:02:83:f5:e2:4f:88: 4e:42:89:0d:03:0e:26:6b:37:f9:83:b7:b8:a1:8e:55:1c:04: bf:47:02:b7:38:e4:7a:4e:77:53:b5:d4:6c:aa:86:e3:ac:03: c5:db:33:b5:de:5f:a7:c2:89:51:91:26:b1:d5:8b:61:d6:28: 19:a7:fb:da:6e:a5:78:60:ae:46:78:88:e4:fa:4f:77:42:00: ea:e3:82:8a:68:f1:ac:8f:57:38:09:22:bf:33:cc:05:c9:92: 1f:75:a2:c0:09:12:ae:c7:74:28:ca:e3:3f:e2:d6:48:cc:16: a5:ee:ee:e0:36:db:4b:cc:98:c9:86:e8:1e:c2:89:c2:10:62: 44:b2:a0:6e:d4:d1:25:6b:c3:0a:f5:2b:d1:27:98:18:17:64: 34:2e:a5:80:5f:7d:d8:5d:bf:f1:70:e4:08:f5:43:46:9a:14: ba:bc:76:09:94:e7:00:1e:03:5e:df:ce:d1:b0:88:f7:34:ca: 51:c8:3c:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x7vDNQmDfORFvXWyIbvoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYWY4MDBjZTk1YmZiYjFmNDczYjBiNWY5ZjdiOTMxNzU5 MzBlODkwHhcNMjUxMjIwMjIwMDU4WhcNMjUxMjIxMjIwMDU4WjAzMTEwLwYDVQQD EygxYmRiNjYzMDg1NDFkN2Y0MjAzZDBkNjUzNmZjOTQ0NzJmNzdmYzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJx6bHW8fIqwGHTRuYCne/xVMyGh qUXIQ1+Pg5RC1XUJF0Xg9PnmtVJOGc3AOw3nq8hKfxLQFF4MNkC/JvNczym7qQvK PVCJfymp5+n4L+ICESYHOjmyDSrDRuKyUAwHWneJ3LtDeFbdPK9WMgZx9XHhlzKd 92U+SALKEgLepJTl9cLdx35ozFaH6hUpfiQmail9gOljkLYltrOTGQefdrXR/r59 mXAewF+jlO7iWAScY95l32GVP0vTrtNVbv2wDDWt2nlg+oRnWt/l/BX1TsvwhyLz sGW+0L72wvxOSSYXetv3pxuHOHYXS3+imv9OgYWG43CLzAVPlqls5kYTQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvbZjCFQdf0ID0NZTb8lEcvd/yAMB8GA1UdIwQY MBaAFBCvgAzpW/ux9HOwtfn3uTF1kw6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85YTc4ZTYtM2JmNy00MmI2LThjYmYt MTE5OTQyZjNkN2E3LzEvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85YTc4ZTYtM2JmNy00MmI2LThjYmYtMTE5OTQyZjNkN2E3 LzEvRUstQURPbGItN0gwYzdDMS1mZTVNWFdURG9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAUK+laV hzq/ZnT9POjyTB8EYOJLLnEal2REkKWvPanXIPNi8UFma5kFOJAMHncacp7DhLMu D9qddANINmjo6FyRAoP14k+ITkKJDQMOJms3+YO3uKGOVRwEv0cCtzjkek53U7XU bKqG46wDxdsztd5fp8KJUZEmsdWLYdYoGaf72m6leGCuRniI5PpPd0IA6uOCimjx rI9XOAkivzPMBcmSH3WiwAkSrsd0KMrjP+LWSMwWpe7u4DbbS8yYyYboHsKJwhBi RLKgbtTRJWvDCvUr0SeYGBdkNC6lgF992F2/8XDkCPVDRpoUurx2CZTnAB4DXt/O 0bCI9zTKUcg8zQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:05:09 2025 by rpki-client