This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft File: _EcO7LHxvgUlJRQvYKC1naXxgVY.mft (raw, json) Hash identifier: kzXWO+ylkxiKF7G0JNbPVn7HxYMEcBOWw3MSm1vfYTg= Subject key identifier: B1:09:EB:1D:9E:01:B6:53:FA:6B:8C:DF:FF:74:0F:9F:AA:1B:29:32 Authority key identifier: FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56 Certificate issuer: /CN=fc470eecb1f1be052525142f60a0b59da5f18156 Certificate serial: 019AF12E98D9D7560151DD9145C523D15C59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft Manifest number: 0D8B Signing time: Sat 06 Dec 2025 01:02:34 +0000 Manifest this update: Sat 06 Dec 2025 01:02:34 +0000 Manifest next update: Sun 07 Dec 2025 01:02:34 +0000 Files and hashes: 1: _EcO7LHxvgUlJRQvYKC1naXxgVY.crl (hash: 1qKev7x0DmvAa+/UKCjCju16MNaMOGXPGjsFihfzvOQ=) 2: aCl-dDRoPO0jTR0Ib_QeJDjdmS4.roa (hash: HeEdwIKN+ZitbMNTMVlHyhG8Cl/ej6Fq6W5v+LAsobU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:98:d9:d7:56:01:51:dd:91:45:c5:23:d1:5c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc470eecb1f1be052525142f60a0b59da5f18156 Validity Not Before: Dec 6 01:02:34 2025 GMT Not After : Dec 7 01:02:34 2025 GMT Subject: CN=b109eb1d9e01b653fa6b8cdfff740f9faa1b2932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c7:6f:b4:24:1a:73:f8:f6:96:96:90:09:37: ee:96:fc:52:ac:36:1a:18:4d:ed:bc:5b:65:45:c2: 5f:a7:e4:6b:21:e2:9f:5b:af:5a:11:67:60:b4:06: 36:6f:89:6e:1a:ea:42:9c:a6:3a:02:d2:17:1f:e1: 00:ba:b4:8c:73:ff:ab:a0:5a:60:eb:d3:8b:cc:57: 79:d7:b2:f8:4b:3d:75:2d:b9:c4:c4:36:08:63:26: 31:a4:bf:c9:fc:6b:c3:1f:04:e5:6d:35:78:3f:a5: 11:48:24:e2:13:88:3a:07:27:6d:94:82:ec:e3:38: ca:72:38:59:bf:2b:8f:90:e5:a8:22:1c:72:1c:7a: 78:37:ec:3a:ed:bc:f8:6f:cb:76:69:75:ac:b0:2f: 57:bc:e2:42:d6:5c:68:6b:05:51:ac:4b:88:0c:48: 64:34:76:8a:e8:b7:a8:b1:27:a4:2d:b3:08:b8:d6: f2:19:95:12:d0:9b:13:6f:d4:d1:cc:68:ed:27:06: 80:a8:76:84:b4:be:e4:e9:83:50:af:48:87:46:89: c2:67:8d:6a:1a:1a:dd:a7:1c:f8:ca:ff:4e:71:ec: 96:3e:e4:7e:e4:81:02:6d:76:b9:d9:95:22:15:58: 2a:9a:05:c3:82:ef:68:6f:a9:7b:c8:83:19:c8:76: d9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:09:EB:1D:9E:01:B6:53:FA:6B:8C:DF:FF:74:0F:9F:AA:1B:29:32 X509v3 Authority Key Identifier: keyid:FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:64:de:03:7e:76:d8:6e:53:e1:5d:3b:39:ba:f3:f6:80:86: 8d:3f:3a:82:8f:9b:91:6e:f3:c3:47:dc:06:79:6e:c4:df:c3: 94:81:a9:56:f9:b0:80:cf:7a:77:fb:02:ee:12:98:86:7e:b2: 9e:1d:a2:6e:32:9c:f7:f9:1c:f6:4e:c9:f1:fc:a6:6a:c0:9d: d9:2f:45:3c:c7:19:80:5b:41:74:6b:77:36:38:3e:68:69:0b: 51:67:9f:ba:ac:ef:34:ce:d3:40:f7:11:fd:ed:34:4b:88:23: d7:37:b2:a7:86:84:1e:b5:ad:4b:5c:7e:c2:d3:29:58:92:32: aa:f8:ff:7c:3a:2c:b4:35:59:e8:f5:03:4e:b0:58:1c:1f:91: fe:47:81:96:7e:eb:2f:04:5b:a3:56:03:a4:19:7e:74:3f:01: 1d:f0:9d:e3:f0:be:5f:71:3e:99:52:17:e2:ca:f9:12:d0:10: 70:ee:fc:19:7a:fa:f1:d6:91:71:90:b7:95:d7:01:53:95:e8: 4d:f1:93:54:16:1f:06:93:e3:1a:f1:ed:46:49:97:2f:ec:33: 5c:79:9e:8d:a4:31:8c:6d:08:17:dc:e1:c8:d4:ca:6c:b9:10: 29:29:6c:5e:cc:53:ed:be:31:70:38:9b:91:97:2b:76:a3:3a: 78:13:d6:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLpjZ11YBUd2RRcUj0VxZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDcwZWVjYjFmMWJlMDUyNTI1MTQyZjYwYTBiNTlkYTVm MTgxNTYwHhcNMjUxMjA2MDEwMjM0WhcNMjUxMjA3MDEwMjM0WjAzMTEwLwYDVQQD EyhiMTA5ZWIxZDllMDFiNjUzZmE2YjhjZGZmZjc0MGY5ZmFhMWIyOTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsdvtCQac/j2lpaQCTfulvxSrDYa GE3tvFtlRcJfp+RrIeKfW69aEWdgtAY2b4luGupCnKY6AtIXH+EAurSMc/+roFpg 69OLzFd517L4Sz11LbnExDYIYyYxpL/J/GvDHwTlbTV4P6URSCTiE4g6BydtlILs 4zjKcjhZvyuPkOWoIhxyHHp4N+w67bz4b8t2aXWssC9XvOJC1lxoawVRrEuIDEhk NHaK6LeosSekLbMIuNbyGZUS0JsTb9TRzGjtJwaAqHaEtL7k6YNQr0iHRonCZ41q Ghrdpxz4yv9OceyWPuR+5IECbXa52ZUiFVgqmgXDgu9ob6l7yIMZyHbZawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEJ6x2eAbZT+muM3/90D5+qGykyMB8GA1UdIwQY MBaAFPxHDuyx8b4FJSUUL2CgtZ2l8YFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VjTzdMSHh2Z1VsSlJRdllLQzFuYVh4Z1ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82ZjgyZDQtMmVjMy00NGE1LThkYjUt Y2E3ZDA0ZTI5MTZjLzEvX0VjTzdMSHh2Z1VsSlJRdllLQzFuYVh4Z1ZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS82ZjgyZDQtMmVjMy00NGE1LThkYjUtY2E3ZDA0ZTI5MTZj LzEvX0VjTzdMSHh2Z1VsSlJRdllLQzFuYVh4Z1ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWTeA352 2G5T4V07Obrz9oCGjT86go+bkW7zw0fcBnluxN/DlIGpVvmwgM96d/sC7hKYhn6y nh2ibjKc9/kc9k7J8fymasCd2S9FPMcZgFtBdGt3Njg+aGkLUWefuqzvNM7TQPcR /e00S4gj1zeyp4aEHrWtS1x+wtMpWJIyqvj/fDostDVZ6PUDTrBYHB+R/keBln7r LwRbo1YDpBl+dD8BHfCd4/C+X3E+mVIX4sr5EtAQcO78GXr68daRcZC3ldcBU5Xo TfGTVBYfBpPjGvHtRkmXL+wzXHmejaQxjG0IF9zhyNTKbLkQKSlsXsxT7b4xcDib kZcrdqM6eBPW6A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:57:42 2025 by rpki-client