This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft File: EKWYXLoyqHfTIVu8IoywfQQAkXs.mft (raw, json) Hash identifier: ud7+9UVGDLGrRkHg0TzMND8hKIf9uUy+ryHWxtVButc= Subject key identifier: F8:18:26:7E:9D:52:1C:BF:BE:6A:23:15:5F:0C:EB:CA:93:D7:10:DE Authority key identifier: 10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B Certificate issuer: /CN=10a5985cba32a877d3215bbc228cb07d0400917b Certificate serial: 019B70D92A8B10EA2435A0398258C1BFA0B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft Manifest number: 12A2 Signing time: Tue 30 Dec 2025 20:00:38 +0000 Manifest this update: Tue 30 Dec 2025 20:00:38 +0000 Manifest next update: Wed 31 Dec 2025 20:00:38 +0000 Files and hashes: 1: EKWYXLoyqHfTIVu8IoywfQQAkXs.crl (hash: cF6XU50aYaEsFdz5aR729wJ0oA0hvW10aVuKXWOSsds=) 2: OeOSm1lTsF2ojoWr7AK5puld71w.roa (hash: sBfPXwoK80Ap89UcF88+lv2T3MvsaF6wu5UIRm/3Bkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:d9:2a:8b:10:ea:24:35:a0:39:82:58:c1:bf:a0:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10a5985cba32a877d3215bbc228cb07d0400917b Validity Not Before: Dec 30 20:00:38 2025 GMT Not After : Dec 31 20:00:38 2025 GMT Subject: CN=f818267e9d521cbfbe6a23155f0cebca93d710de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:87:50:0f:06:d6:56:81:7d:c2:e2:41:f2:5c: bb:08:87:dd:2f:0d:da:80:58:08:a1:aa:99:93:b8: 2e:67:6b:dc:54:dc:bb:a5:66:55:53:4c:9a:0d:94: 5f:45:36:07:18:6b:b2:e6:2b:85:64:2e:4c:a5:c8: fe:26:ba:af:be:d8:d1:dd:aa:28:e7:02:bd:18:89: c7:ca:b4:50:e1:65:1e:d2:ca:b2:3c:b8:86:eb:91: 4d:1c:d8:44:21:09:e8:e4:14:54:7e:a5:68:e8:51: ee:5a:0c:77:c4:ae:46:70:42:eb:a0:2f:01:70:bb: 0a:b4:9a:c9:5d:ed:31:09:88:07:15:af:c8:3e:36: f2:c7:5a:8d:ad:45:57:99:78:0b:ec:33:3c:01:e1: 02:60:79:2d:bd:97:56:9d:08:9c:74:d3:8e:41:55: 88:48:cf:74:9c:67:3f:a1:7b:30:ae:19:1b:6d:3e: e8:3c:ad:1c:b1:d9:f4:34:92:2c:42:b7:ff:6f:2c: 30:a7:4a:5a:82:82:f1:60:fe:00:e7:ce:90:ec:de: fc:18:c8:38:d6:16:da:5a:74:15:ad:68:84:d1:fe: 54:9b:7f:33:93:48:df:bb:ee:6a:e0:e0:d4:d5:69: a9:96:b9:ef:62:26:40:ac:6c:a6:31:22:b8:7f:bc: 59:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:18:26:7E:9D:52:1C:BF:BE:6A:23:15:5F:0C:EB:CA:93:D7:10:DE X509v3 Authority Key Identifier: keyid:10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:90:ea:5a:fc:e4:4c:01:39:63:3b:3b:bd:0c:9d:3c:6a:ae: e4:f2:01:c5:9e:6a:00:27:e2:c6:88:45:04:bf:fb:81:cd:a1: af:c4:d4:7f:ab:a2:80:ce:24:25:62:f0:f0:ff:67:7b:a3:c9: 63:0e:6f:12:c9:dd:32:cb:53:64:e8:70:76:7a:8c:81:8e:67: a7:c2:b4:f5:ab:0c:d9:7b:bd:dc:ba:72:18:84:4d:a1:d4:63: 57:5f:54:8c:f8:f3:12:97:cb:69:8a:c4:e7:66:22:5b:4f:f9: 29:35:c7:4f:1b:08:89:3c:4a:ce:41:76:70:8d:91:ff:28:4d: 79:27:ee:d0:4c:07:99:37:f3:91:98:33:a4:49:38:48:f2:c0: 4a:45:05:09:b1:61:d8:e7:25:71:51:df:bb:d4:cb:c2:ed:28: b2:4a:91:c7:c5:31:76:9a:df:aa:f0:a6:9f:98:ef:b8:cc:5e: fd:a6:70:51:7f:56:21:d2:da:58:96:79:25:d3:b7:37:11:d5: 4c:7e:16:41:06:9d:9b:18:95:4a:b3:29:56:ce:6a:f8:8a:93: 55:23:2b:57:a8:c5:c1:d0:9c:94:33:6f:de:b8:8a:5c:80:57: f4:1e:d7:6e:12:df:97:6e:b4:03:b2:4d:a4:46:b0:3f:b9:5d: c7:87:53:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtw2SqLEOokNaA5gljBv6CzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYTU5ODVjYmEzMmE4NzdkMzIxNWJiYzIyOGNiMDdkMDQw MDkxN2IwHhcNMjUxMjMwMjAwMDM4WhcNMjUxMjMxMjAwMDM4WjAzMTEwLwYDVQQD EyhmODE4MjY3ZTlkNTIxY2JmYmU2YTIzMTU1ZjBjZWJjYTkzZDcxMGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYdQDwbWVoF9wuJB8ly7CIfdLw3a gFgIoaqZk7guZ2vcVNy7pWZVU0yaDZRfRTYHGGuy5iuFZC5Mpcj+JrqvvtjR3aoo 5wK9GInHyrRQ4WUe0sqyPLiG65FNHNhEIQno5BRUfqVo6FHuWgx3xK5GcELroC8B cLsKtJrJXe0xCYgHFa/IPjbyx1qNrUVXmXgL7DM8AeECYHktvZdWnQicdNOOQVWI SM90nGc/oXswrhkbbT7oPK0csdn0NJIsQrf/bywwp0pagoLxYP4A586Q7N78GMg4 1hbaWnQVrWiE0f5Um38zk0jfu+5q4ODU1WmplrnvYiZArGymMSK4f7xZDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgYJn6dUhy/vmojFV8M68qT1xDeMB8GA1UdIwQY MBaAFBClmFy6Mqh30yFbvCKMsH0EAJF7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUtXWVhMb3lxSGZUSVZ1OElveXdmUVFBa1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wNDFkMGYtYmU4ZC00MTQ4LWJjYmEt ZDcwZjI4NTE1ZmJkLzEvRUtXWVhMb3lxSGZUSVZ1OElveXdmUVFBa1hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8wNDFkMGYtYmU4ZC00MTQ4LWJjYmEtZDcwZjI4NTE1ZmJk LzEvRUtXWVhMb3lxSGZUSVZ1OElveXdmUVFBa1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJDqWvzk TAE5Yzs7vQydPGqu5PIBxZ5qACfixohFBL/7gc2hr8TUf6uigM4kJWLw8P9ne6PJ Yw5vEsndMstTZOhwdnqMgY5np8K09asM2Xu93LpyGIRNodRjV19UjPjzEpfLaYrE 52YiW0/5KTXHTxsIiTxKzkF2cI2R/yhNeSfu0EwHmTfzkZgzpEk4SPLASkUFCbFh 2OclcVHfu9TLwu0oskqRx8UxdprfqvCmn5jvuMxe/aZwUX9WIdLaWJZ5JdO3NxHV TH4WQQadmxiVSrMpVs5q+IqTVSMrV6jFwdCclDNv3riKXIBX9B7XbhLfl260A7JN pEawP7ldx4dTyg== -----END CERTIFICATE-----Generated at Wed Dec 31 00:11:54 2025 by rpki-client