This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft File: EkTc4rRccfRbr4tTxonr36y6_sM.mft (raw, json) Hash identifier: 5QBmKnLpFT5mcBIKZ7xiP6hAd0ft61UBp8QxR1YRjCY= Subject key identifier: 70:DB:5E:83:8F:8C:7D:8D:64:DF:38:D5:94:51:62:53:AE:17:4D:47 Authority key identifier: 12:44:DC:E2:B4:5C:71:F4:5B:AF:8B:53:C6:89:EB:DF:AC:BA:FE:C3 Certificate issuer: /CN=1244dce2b45c71f45baf8b53c689ebdfacbafec3 Certificate serial: 019B3B6B66E9BB6E05F52010F2799AB8459C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft Manifest number: 0743 Signing time: Sat 20 Dec 2025 11:00:52 +0000 Manifest this update: Sat 20 Dec 2025 11:00:52 +0000 Manifest next update: Sun 21 Dec 2025 11:00:52 +0000 Files and hashes: 1: EkTc4rRccfRbr4tTxonr36y6_sM.crl (hash: fFsJF6nMLHR+EcNvgewYYUWQhZPo49R8sJwABerjSp0=) 2: V6g9FQfy9dgRR_aBUNoIfIEeTJU.roa (hash: 6AdRoLcNqCj4S98SDLUI166TyStTtXm58bK7uoecjZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:66:e9:bb:6e:05:f5:20:10:f2:79:9a:b8:45:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1244dce2b45c71f45baf8b53c689ebdfacbafec3 Validity Not Before: Dec 20 11:00:52 2025 GMT Not After : Dec 21 11:00:52 2025 GMT Subject: CN=70db5e838f8c7d8d64df38d594516253ae174d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cf:85:c3:1b:47:c6:fd:9a:f4:e5:56:ca:7e: 00:6a:51:ff:76:63:ac:6d:02:3d:30:fd:d2:54:9c: 79:e1:6d:f4:5e:ae:b2:5e:df:58:c7:26:12:80:56: e0:87:13:14:87:12:fe:af:59:a7:8e:7d:14:00:71: 5a:86:1a:b7:4c:c5:88:84:41:ba:9e:2a:29:1e:f4: d4:6d:3b:60:63:ec:f9:19:83:27:b2:00:0b:9f:91: 53:ed:54:6b:d6:81:17:a6:47:46:f8:8f:66:83:6c: 7e:57:5f:d7:7a:4d:04:74:24:be:2a:a3:f3:53:f0: 24:a0:a4:cb:d5:31:8a:a8:70:f4:29:a6:0a:12:fc: 40:86:d7:3d:bb:31:00:d4:81:cc:5b:5e:38:74:0d: 17:3a:ad:18:d2:a5:1e:4b:ae:a2:fa:dd:d2:a6:2e: e4:fc:8e:6d:08:3d:74:44:63:78:da:fc:08:11:56: ce:a5:58:b8:de:b0:53:5e:3f:34:64:01:f4:d7:15: 41:eb:82:b8:a8:ad:d0:95:f4:53:d6:8a:e0:da:ae: b8:c9:d9:93:84:35:a4:fd:d1:23:ac:5b:63:da:e9: 4e:e9:ec:79:bd:2a:60:8b:65:3d:31:c9:3a:df:c9: 85:c3:7b:15:c8:d3:b7:f6:6b:8c:ee:25:ef:4c:b3: 0b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DB:5E:83:8F:8C:7D:8D:64:DF:38:D5:94:51:62:53:AE:17:4D:47 X509v3 Authority Key Identifier: keyid:12:44:DC:E2:B4:5C:71:F4:5B:AF:8B:53:C6:89:EB:DF:AC:BA:FE:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkTc4rRccfRbr4tTxonr36y6_sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/32656b-237b-4acf-b824-9236c68ef427/1/EkTc4rRccfRbr4tTxonr36y6_sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:f5:7f:bc:f7:7d:cc:f1:ff:92:5e:fa:91:35:3b:60:4e:d7: 1d:06:b7:d6:26:65:80:57:01:f4:6e:a6:7e:9c:b5:d9:7e:8a: b8:70:5d:b9:8c:68:8a:b9:a0:50:e5:e3:c7:c2:ae:7a:48:a2: 20:43:a4:38:e0:ff:25:c4:ee:04:10:91:d8:d3:f7:34:e5:6e: 1c:ca:d1:a5:c8:19:8d:dc:7a:18:20:30:6f:13:b4:de:9a:d5: 60:d8:3e:3c:8a:f5:4c:d8:d2:79:93:19:f0:41:6b:f9:a6:bc: 00:8a:1a:93:9f:1d:86:c2:51:f6:8b:9e:83:7a:00:b8:ad:9a: b9:32:87:0c:37:09:21:d3:c9:7f:ed:17:8b:f5:84:0d:79:3f: 7e:14:77:f6:b6:8b:a3:aa:db:08:d3:c6:ee:f0:9d:88:b5:4a: ca:5a:d9:8d:28:60:2a:28:64:bc:f1:cb:31:5f:7e:bd:40:d2: 4f:2f:54:b6:fe:b0:bf:cf:45:04:bf:d9:b6:f9:45:74:8d:12: 61:d4:6c:44:3c:f5:9d:6d:9b:39:b6:51:b5:30:32:d5:ea:87: 9b:91:3e:6a:5d:9a:55:20:53:5e:75:f4:d3:f4:44:de:6a:e5: be:b3:5d:df:40:e0:d2:61:e5:e2:84:ec:b7:b8:00:06:8f:c0: c6:93:1f:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a2bpu24F9SAQ8nmauEWcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNDRkY2UyYjQ1YzcxZjQ1YmFmOGI1M2M2ODllYmRmYWNi YWZlYzMwHhcNMjUxMjIwMTEwMDUyWhcNMjUxMjIxMTEwMDUyWjAzMTEwLwYDVQQD Eyg3MGRiNWU4MzhmOGM3ZDhkNjRkZjM4ZDU5NDUxNjI1M2FlMTc0ZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis+FwxtHxv2a9OVWyn4AalH/dmOs bQI9MP3SVJx54W30Xq6yXt9YxyYSgFbghxMUhxL+r1mnjn0UAHFahhq3TMWIhEG6 niopHvTUbTtgY+z5GYMnsgALn5FT7VRr1oEXpkdG+I9mg2x+V1/Xek0EdCS+KqPz U/AkoKTL1TGKqHD0KaYKEvxAhtc9uzEA1IHMW144dA0XOq0Y0qUeS66i+t3Spi7k /I5tCD10RGN42vwIEVbOpVi43rBTXj80ZAH01xVB64K4qK3QlfRT1org2q64ydmT hDWk/dEjrFtj2ulO6ex5vSpgi2U9Mck638mFw3sVyNO39muM7iXvTLML+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDbXoOPjH2NZN841ZRRYlOuF01HMB8GA1UdIwQY MBaAFBJE3OK0XHH0W6+LU8aJ69+suv7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWtUYzRyUmNjZlJicjR0VHhvbnIzNnk2X3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8zMjY1NmItMjM3Yi00YWNmLWI4MjQt OTIzNmM2OGVmNDI3LzEvRWtUYzRyUmNjZlJicjR0VHhvbnIzNnk2X3NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8zMjY1NmItMjM3Yi00YWNmLWI4MjQtOTIzNmM2OGVmNDI3 LzEvRWtUYzRyUmNjZlJicjR0VHhvbnIzNnk2X3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/V/vPd9 zPH/kl76kTU7YE7XHQa31iZlgFcB9G6mfpy12X6KuHBduYxoirmgUOXjx8Kuekii IEOkOOD/JcTuBBCR2NP3NOVuHMrRpcgZjdx6GCAwbxO03prVYNg+PIr1TNjSeZMZ 8EFr+aa8AIoak58dhsJR9oueg3oAuK2auTKHDDcJIdPJf+0Xi/WEDXk/fhR39raL o6rbCNPG7vCdiLVKylrZjShgKihkvPHLMV9+vUDSTy9Utv6wv89FBL/ZtvlFdI0S YdRsRDz1nW2bObZRtTAy1eqHm5E+al2aVSBTXnX00/RE3mrlvrNd30Dg0mHl4oTs t7gABo/AxpMfNA== -----END CERTIFICATE-----Generated at Sat Dec 20 15:09:03 2025 by rpki-client