This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft File: EkJGb4-GRcnznwSHTdrfDXE29n8.mft (raw, json) Hash identifier: qxQTfQsLKWwAzsgk6OnoUKqG3/Uxh6349T8QBgtW8fk= Subject key identifier: 4B:AF:5F:99:C6:6A:48:BD:E9:1D:7C:FD:0B:7A:65:F8:66:CB:E7:56 Authority key identifier: 12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F Certificate issuer: /CN=1242466f8f8645c9f39f04874ddadf0d7136f67f Certificate serial: 019B3C7E02DF4966F4D011F824172438DF11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft Manifest number: 0EA1 Signing time: Sat 20 Dec 2025 16:00:49 +0000 Manifest this update: Sat 20 Dec 2025 16:00:49 +0000 Manifest next update: Sun 21 Dec 2025 16:00:49 +0000 Files and hashes: 1: 1FgrVACY6GX6cCkfjVp_PNMUkZ8.roa (hash: d2I0wmnqM3spvipArjFjFYyaGXGv03P9b0jZc/8LN6Y=) 2: EkJGb4-GRcnznwSHTdrfDXE29n8.crl (hash: fP+9Iy1dvxJ+MKCMQOQPdMGxWpnRKRG4/oqjGQhIuEc=) 3: o3E4tuCzrJrGsji5NuASGDB-HXs.roa (hash: bSAUmFEcCz0OQZhQLj9JhVCVTIH61k4i+3xl0JyI4Fw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:02:df:49:66:f4:d0:11:f8:24:17:24:38:df:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1242466f8f8645c9f39f04874ddadf0d7136f67f Validity Not Before: Dec 20 16:00:49 2025 GMT Not After : Dec 21 16:00:49 2025 GMT Subject: CN=4baf5f99c66a48bde91d7cfd0b7a65f866cbe756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:49:1d:3d:c2:19:eb:19:b9:f6:67:a1:71:84: e0:89:d0:1f:2d:2f:87:28:39:d7:c0:66:42:4b:1e: c0:bd:96:56:e8:86:02:cb:56:5a:00:39:67:36:a5: 58:93:e0:ed:08:0b:94:6c:7a:0c:40:59:72:0b:2e: 4e:6b:ba:73:64:ba:73:7d:57:ab:ad:a7:5d:30:39: 38:c4:ed:f1:dd:58:db:e7:5d:1e:d5:16:77:4a:16: d0:81:7d:dc:f6:00:0c:a1:bc:01:52:15:5c:76:b9: d9:7d:10:47:f2:c8:0c:d0:04:b2:5b:4b:81:a1:b2: 4e:d1:a9:d5:8d:1a:74:24:b7:dd:aa:ae:82:49:ef: 05:49:a7:90:a7:4c:fa:49:1c:78:07:89:2e:c8:69: 51:7d:81:60:b6:fb:bb:de:5f:2e:64:0a:f1:b0:1e: 8d:d9:79:8b:19:fe:51:76:0a:a3:c6:10:b6:2d:a3: 56:a8:6d:40:f4:5d:5b:48:76:06:18:98:da:29:40: b9:72:a8:6b:af:5f:19:ef:ca:a6:f4:18:fb:61:2c: eb:0c:0b:f9:36:40:8a:b3:ba:ce:56:68:61:6e:89: bb:b0:e1:a5:37:ff:e5:ca:08:34:7c:29:70:89:2b: 58:f9:9d:85:77:48:bd:ae:99:90:c5:4a:50:04:65: 89:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AF:5F:99:C6:6A:48:BD:E9:1D:7C:FD:0B:7A:65:F8:66:CB:E7:56 X509v3 Authority Key Identifier: keyid:12:42:46:6F:8F:86:45:C9:F3:9F:04:87:4D:DA:DF:0D:71:36:F6:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkJGb4-GRcnznwSHTdrfDXE29n8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/93149c-0829-4fcd-bd35-0f55ea33afe3/1/EkJGb4-GRcnznwSHTdrfDXE29n8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:4b:ec:49:9f:23:cb:0f:99:71:ee:26:b9:04:1e:8f:7b:aa: 1e:a2:86:04:f2:6d:6e:15:c3:63:09:02:42:a2:79:0b:fe:76: 44:fd:dd:a8:36:eb:78:24:88:94:4e:d4:c1:21:05:af:65:49: 37:8b:fc:82:7c:37:c0:6c:e1:17:38:7d:67:fb:7d:e4:a6:60: 47:32:92:df:0d:8e:b3:c8:1f:51:e7:b1:a5:13:96:70:4e:e0: 24:87:d9:89:9d:1f:39:3f:f5:c2:b2:4b:0a:a9:7a:e1:46:cd: 91:14:d5:56:13:ce:45:a2:22:44:d8:d7:bf:24:b8:91:8a:d4: 7f:23:ea:79:20:96:3f:a4:0e:6b:f6:e7:66:2e:d4:9f:21:76: 4f:48:6b:d7:fe:1b:b0:b5:0f:c2:a8:20:c2:6e:e4:74:c2:36: e7:e0:5e:a4:62:3e:96:45:b1:19:fb:a2:83:c6:77:ee:55:68: f4:02:eb:25:4d:a7:55:e8:7f:77:5b:fa:1e:30:e4:59:bf:40: 76:32:0d:a5:35:ba:36:b8:ec:1c:83:a4:4b:a8:98:16:82:78: 6e:a4:c4:97:6d:77:22:98:c9:a2:f8:ce:15:fe:37:00:b2:20: 96:b1:ec:f5:b0:6f:ef:5a:34:05:be:b6:d2:29:10:5d:a8:bc: 59:ef:25:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fgLfSWb00BH4JBckON8RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNDI0NjZmOGY4NjQ1YzlmMzlmMDQ4NzRkZGFkZjBkNzEz NmY2N2YwHhcNMjUxMjIwMTYwMDQ5WhcNMjUxMjIxMTYwMDQ5WjAzMTEwLwYDVQQD Eyg0YmFmNWY5OWM2NmE0OGJkZTkxZDdjZmQwYjdhNjVmODY2Y2JlNzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0kdPcIZ6xm59mehcYTgidAfLS+H KDnXwGZCSx7AvZZW6IYCy1ZaADlnNqVYk+DtCAuUbHoMQFlyCy5Oa7pzZLpzfVer raddMDk4xO3x3Vjb510e1RZ3ShbQgX3c9gAMobwBUhVcdrnZfRBH8sgM0ASyW0uB obJO0anVjRp0JLfdqq6CSe8FSaeQp0z6SRx4B4kuyGlRfYFgtvu73l8uZArxsB6N 2XmLGf5RdgqjxhC2LaNWqG1A9F1bSHYGGJjaKUC5cqhrr18Z78qm9Bj7YSzrDAv5 NkCKs7rOVmhhbom7sOGlN//lygg0fClwiStY+Z2Fd0i9rpmQxUpQBGWJCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuvX5nGaki96R18/Qt6Zfhmy+dWMB8GA1UdIwQY MBaAFBJCRm+PhkXJ858Eh03a3w1xNvZ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWtKR2I0LUdSY256bndTSFRkcmZEWEUyOW44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85MzE0OWMtMDgyOS00ZmNkLWJkMzUt MGY1NWVhMzNhZmUzLzEvRWtKR2I0LUdSY256bndTSFRkcmZEWEUyOW44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC85MzE0OWMtMDgyOS00ZmNkLWJkMzUtMGY1NWVhMzNhZmUz LzEvRWtKR2I0LUdSY256bndTSFRkcmZEWEUyOW44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYEvsSZ8j yw+Zce4muQQej3uqHqKGBPJtbhXDYwkCQqJ5C/52RP3dqDbreCSIlE7UwSEFr2VJ N4v8gnw3wGzhFzh9Z/t95KZgRzKS3w2Os8gfUeexpROWcE7gJIfZiZ0fOT/1wrJL Cql64UbNkRTVVhPORaIiRNjXvyS4kYrUfyPqeSCWP6QOa/bnZi7UnyF2T0hr1/4b sLUPwqggwm7kdMI25+BepGI+lkWxGfuig8Z37lVo9ALrJU2nVeh/d1v6HjDkWb9A djINpTW6NrjsHIOkS6iYFoJ4bqTEl213IpjJovjOFf43ALIglrHs9bBv71o0Bb62 0ikQXai8We8lLw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:54:07 2025 by rpki-client