This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft File: ecuROUt5B4HTqHc6hV5amjryCBA.mft (raw, json) Hash identifier: 6/XwbesX2gWDq7qO0Y3Fpt2iXzQBKSwauy0DP10SjHM= Subject key identifier: 5A:DF:49:2B:A3:5C:55:47:DB:91:9C:AE:F1:BC:25:7D:22:8A:5A:C0 Authority key identifier: 79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10 Certificate issuer: /CN=79cb91394b790781d3a8773a855e5a9a3af20810 Certificate serial: 019AF2ADCBF0998CEDB79575529177AA5936 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft Manifest number: 02AA Signing time: Sat 06 Dec 2025 08:01:07 +0000 Manifest this update: Sat 06 Dec 2025 08:01:07 +0000 Manifest next update: Sun 07 Dec 2025 08:01:07 +0000 Files and hashes: 1: ecuROUt5B4HTqHc6hV5amjryCBA.crl (hash: 5h5Ko1wghrKd4e0BhkZ+mdfLbLdDI6ot/dKmaBC2ePs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.crl rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:cb:f0:99:8c:ed:b7:95:75:52:91:77:aa:59:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79cb91394b790781d3a8773a855e5a9a3af20810 Validity Not Before: Dec 6 08:01:07 2025 GMT Not After : Dec 7 08:01:07 2025 GMT Subject: CN=5adf492ba35c5547db919caef1bc257d228a5ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9f:0a:b7:30:26:1c:12:32:f3:bc:8c:eb:e4: 22:eb:d6:d8:63:9a:b7:75:ef:9f:25:5b:3b:6e:99: 93:51:25:96:a5:61:83:98:79:3f:29:ab:99:0d:b2: 18:ae:62:12:07:74:b3:29:1d:dc:0a:23:1c:bf:22: 0d:12:62:3b:e8:53:1c:86:d5:1a:06:1a:40:bc:af: 17:64:1b:b0:14:a8:07:ba:c9:b6:61:2f:92:37:bc: 8d:f4:ed:43:c2:65:75:2e:e5:72:6c:57:62:f1:0b: 73:44:6e:37:86:74:1d:d7:16:da:8f:a8:ef:15:b3: 28:fe:6a:8b:b6:75:8f:f5:9a:e2:d8:cc:87:78:fb: 33:c1:30:11:7c:c7:4c:0b:be:f8:0f:4c:e7:94:1c: 1f:75:f6:f2:d4:6d:5d:f4:0c:6e:02:6e:a9:75:40: 6a:eb:99:f8:69:3b:c2:51:90:af:14:19:37:f7:7e: 63:a8:6a:1f:53:cd:3f:6d:7d:08:04:19:ab:71:08: 40:57:0a:0b:16:dc:cf:91:ae:7a:d1:ec:57:9d:ec: 06:ce:85:9b:c5:c7:bd:98:aa:22:72:b8:84:43:d4: 55:1b:86:e1:84:26:3e:c4:51:82:4a:92:50:d6:e9: 13:26:d8:44:d4:06:fc:45:de:50:8e:4f:c7:9d:60: 12:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DF:49:2B:A3:5C:55:47:DB:91:9C:AE:F1:BC:25:7D:22:8A:5A:C0 X509v3 Authority Key Identifier: keyid:79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:57:06:f0:d0:d8:3b:1d:4c:d8:75:32:1a:54:29:c5:e3:5b: e1:5f:9a:be:b4:cf:86:ed:b5:65:26:9f:52:98:0a:4e:47:9f: 2e:01:0c:54:c1:8f:8f:d2:c6:53:d7:16:dc:54:4c:52:25:88: 8f:60:49:fa:66:86:c9:75:04:05:e4:4b:2f:e9:1a:28:fe:ec: c3:a7:3d:d3:4c:00:50:89:3b:52:d7:ff:31:d1:b6:fe:03:d6: f4:cd:a6:50:9f:0b:ca:f0:75:9d:ea:2f:a2:f4:f0:e7:8c:93: dd:31:8c:5e:ed:dd:c2:d5:13:fc:e6:b5:f7:e6:67:e1:4a:a2: 95:8b:5f:9a:59:75:64:29:59:fd:ad:61:2c:ce:92:fd:6d:fc: a6:c4:25:27:0e:f7:b8:94:b5:20:b6:d8:c0:7a:a9:03:c8:63: a0:bb:68:04:1b:a5:ab:ad:51:bd:8e:bb:d3:3c:22:62:f2:ed: 74:24:a1:3f:e5:08:bc:ce:c1:0c:2d:26:61:21:c2:85:45:b7: cf:70:62:b0:d1:4e:10:9c:93:41:67:da:d0:bd:d2:2a:2c:3a: 05:0d:68:bd:b2:9f:f1:f4:03:bc:95:6b:10:b3:f5:ef:b9:e7: 98:a8:12:e8:ef:06:14:97:fd:ae:90:59:e6:9f:01:20:3c:a0: db:56:52:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcvwmYztt5V1UpF3qlk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Y2I5MTM5NGI3OTA3ODFkM2E4NzczYTg1NWU1YTlhM2Fm MjA4MTAwHhcNMjUxMjA2MDgwMTA3WhcNMjUxMjA3MDgwMTA3WjAzMTEwLwYDVQQD Eyg1YWRmNDkyYmEzNWM1NTQ3ZGI5MTljYWVmMWJjMjU3ZDIyOGE1YWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA258KtzAmHBIy87yM6+Qi69bYY5q3 de+fJVs7bpmTUSWWpWGDmHk/KauZDbIYrmISB3SzKR3cCiMcvyINEmI76FMchtUa BhpAvK8XZBuwFKgHusm2YS+SN7yN9O1DwmV1LuVybFdi8QtzRG43hnQd1xbaj6jv FbMo/mqLtnWP9Zri2MyHePszwTARfMdMC774D0znlBwfdfby1G1d9AxuAm6pdUBq 65n4aTvCUZCvFBk3935jqGofU80/bX0IBBmrcQhAVwoLFtzPka560exXnewGzoWb xce9mKoicriEQ9RVG4bhhCY+xFGCSpJQ1ukTJthE1Ab8Rd5Qjk/HnWASEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrfSSujXFVH25GcrvG8JX0iilrAMB8GA1UdIwQY MBaAFHnLkTlLeQeB06h3OoVeWpo68ggQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWN1Uk9VdDVCNEhUcUhjNmhWNWFtanJ5Q0JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9lNDYzN2YtMmRlMS00ODE1LWJiNmIt ZjExNzEyMTQ5OTY2LzEvZWN1Uk9VdDVCNEhUcUhjNmhWNWFtanJ5Q0JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9lNDYzN2YtMmRlMS00ODE1LWJiNmItZjExNzEyMTQ5OTY2 LzEvZWN1Uk9VdDVCNEhUcUhjNmhWNWFtanJ5Q0JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQFcG8NDY Ox1M2HUyGlQpxeNb4V+avrTPhu21ZSafUpgKTkefLgEMVMGPj9LGU9cW3FRMUiWI j2BJ+maGyXUEBeRLL+kaKP7sw6c900wAUIk7Utf/MdG2/gPW9M2mUJ8LyvB1neov ovTw54yT3TGMXu3dwtUT/Oa19+Zn4UqilYtfmll1ZClZ/a1hLM6S/W38psQlJw73 uJS1ILbYwHqpA8hjoLtoBBulq61RvY670zwiYvLtdCShP+UIvM7BDC0mYSHChUW3 z3BisNFOEJyTQWfa0L3SKiw6BQ1ovbKf8fQDvJVrELP177nnmKgS6O8GFJf9rpBZ 5p8BIDyg21ZSmw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:59:14 2025 by rpki-client