This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft File: ECKCU36wATC3llH0CAAO3KVkUOo.mft (raw, json) Hash identifier: EWDQz3XI3Nv5E0EFFLfCRSxOqapQl4mr2CEmVbkZw8w= Subject key identifier: D2:80:7D:3E:42:AC:A9:76:1F:DD:8B:AC:CA:36:5C:26:80:09:C8:2B Authority key identifier: 10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA Certificate issuer: /CN=102282537eb00130b79651f408000edca56450ea Certificate serial: 019B33E8A00B470E91981BC2A3A063E59AD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft Manifest number: 106D Signing time: Fri 19 Dec 2025 00:00:41 +0000 Manifest this update: Fri 19 Dec 2025 00:00:41 +0000 Manifest next update: Sat 20 Dec 2025 00:00:41 +0000 Files and hashes: 1: ECKCU36wATC3llH0CAAO3KVkUOo.crl (hash: AK+EU06EwNg77GpjnpA1FypvvGCnnib+82mBCtvb2Tc=) 2: mNpTYlNKotcL-0Zd_8NTbLjemtY.roa (hash: fghzEiX2an8ofk9BT1CH7W5YLfyP+hGmPzrsnOAoc1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:a0:0b:47:0e:91:98:1b:c2:a3:a0:63:e5:9a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=102282537eb00130b79651f408000edca56450ea Validity Not Before: Dec 19 00:00:41 2025 GMT Not After : Dec 20 00:00:41 2025 GMT Subject: CN=d2807d3e42aca9761fdd8bacca365c268009c82b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:42:b3:e8:ca:8b:10:11:35:e6:f8:9d:67:cb: 05:b1:be:3a:e4:3d:ae:e1:d2:f7:a0:2a:71:bf:25: 9f:e9:2c:fb:d3:0b:9c:58:a9:83:3f:02:a8:05:84: 0c:01:32:2a:74:56:97:1e:f1:1d:57:5e:99:a1:a5: 2c:65:c0:28:8a:cf:dc:00:d2:b1:e8:76:89:b6:49: 74:bd:e4:ab:2f:df:08:e9:32:3d:67:c7:60:f3:aa: 14:74:26:fa:2e:e7:e0:6c:0c:2a:df:6b:b7:37:e6: b2:ed:34:69:52:a8:9c:34:f8:33:49:33:af:fe:23: 04:0c:b0:9a:c2:83:e5:ac:fc:30:2c:36:e3:89:fd: 83:b1:7f:56:dd:3d:33:6a:1a:3f:7c:23:46:6a:1e: e1:b3:6c:f0:3d:6d:e4:7b:76:61:29:8a:e6:23:2f: e1:74:af:66:c2:cf:57:a0:4a:60:22:92:b8:d8:f4: 8e:a6:bc:fe:95:83:5a:6b:0f:f2:fc:59:6f:38:a5: f5:53:69:9c:8d:a8:97:a1:9a:2a:79:27:e7:79:1b: b1:15:4e:eb:e4:5a:5d:42:9c:88:b7:c1:87:69:62: a9:7a:e8:73:bf:82:19:a9:39:91:f7:2b:95:3e:a5: 5e:43:0f:a2:21:60:2a:b9:89:fe:72:c0:c2:8d:27: fb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:80:7D:3E:42:AC:A9:76:1F:DD:8B:AC:CA:36:5C:26:80:09:C8:2B X509v3 Authority Key Identifier: keyid:10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:1d:25:f2:2c:a6:1e:5d:78:db:11:42:a8:50:16:c8:8b:23: 10:a1:31:78:68:38:c6:a7:8f:bb:14:9c:07:00:95:43:53:da: 41:7c:3f:ec:6d:04:69:36:b5:c1:95:68:ac:63:c0:bc:1c:9b: c5:f6:b4:a3:8e:d2:71:48:32:94:30:f1:93:20:a1:50:28:9b: 77:1d:4d:41:cf:bf:3e:4c:a6:06:3a:9a:0c:f3:8c:c8:d8:ff: a7:4a:4a:3d:92:89:04:70:de:2f:38:45:6b:df:33:01:27:7c: 5a:8c:6b:ab:c7:41:46:57:9e:52:be:eb:40:df:25:41:ed:16: 00:8e:55:ac:02:7b:be:67:53:e5:b6:a0:86:33:58:29:a1:08: 7b:b5:15:02:5b:cd:ea:b6:68:36:cd:3d:fb:aa:63:27:61:27: b8:c3:b1:c5:71:dc:19:67:ef:c9:58:97:52:57:4d:3e:b3:0e: 9b:fa:66:8f:98:bd:8e:7b:ce:52:60:f0:40:81:2a:73:a2:f7: 8f:7e:4f:ce:e9:34:0b:33:de:f7:23:dc:89:44:ea:f2:49:f8: 28:96:e6:d9:13:82:09:88:24:92:03:9e:18:fc:19:6b:98:67: f9:d9:ef:c2:0e:fb:b9:f2:76:20:74:65:0b:ab:05:a7:a0:50: 5b:f8:75:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6KALRw6RmBvCo6Bj5ZrXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMjI4MjUzN2ViMDAxMzBiNzk2NTFmNDA4MDAwZWRjYTU2 NDUwZWEwHhcNMjUxMjE5MDAwMDQxWhcNMjUxMjIwMDAwMDQxWjAzMTEwLwYDVQQD EyhkMjgwN2QzZTQyYWNhOTc2MWZkZDhiYWNjYTM2NWMyNjgwMDljODJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0Kz6MqLEBE15vidZ8sFsb465D2u 4dL3oCpxvyWf6Sz70wucWKmDPwKoBYQMATIqdFaXHvEdV16ZoaUsZcAois/cANKx 6HaJtkl0veSrL98I6TI9Z8dg86oUdCb6LufgbAwq32u3N+ay7TRpUqicNPgzSTOv /iMEDLCawoPlrPwwLDbjif2DsX9W3T0zaho/fCNGah7hs2zwPW3ke3ZhKYrmIy/h dK9mws9XoEpgIpK42PSOprz+lYNaaw/y/FlvOKX1U2mcjaiXoZoqeSfneRuxFU7r 5FpdQpyIt8GHaWKpeuhzv4IZqTmR9yuVPqVeQw+iIWAquYn+csDCjSf7zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKAfT5CrKl2H92LrMo2XCaACcgrMB8GA1UdIwQY MBaAFBAiglN+sAEwt5ZR9AgADtylZFDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUNLQ1UzNndBVEMzbGxIMENBQU8zS1ZrVU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi80ZWYyYzMtMDZkOC00ZjExLTg0Yjct MzM4MTk2OTM1MDUwLzEvRUNLQ1UzNndBVEMzbGxIMENBQU8zS1ZrVU9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi80ZWYyYzMtMDZkOC00ZjExLTg0YjctMzM4MTk2OTM1MDUw LzEvRUNLQ1UzNndBVEMzbGxIMENBQU8zS1ZrVU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJB0l8iym Hl142xFCqFAWyIsjEKExeGg4xqePuxScBwCVQ1PaQXw/7G0EaTa1wZVorGPAvByb xfa0o47ScUgylDDxkyChUCibdx1NQc+/PkymBjqaDPOMyNj/p0pKPZKJBHDeLzhF a98zASd8Woxrq8dBRleeUr7rQN8lQe0WAI5VrAJ7vmdT5baghjNYKaEIe7UVAlvN 6rZoNs09+6pjJ2EnuMOxxXHcGWfvyViXUldNPrMOm/pmj5i9jnvOUmDwQIEqc6L3 j35Pzuk0CzPe9yPciUTq8kn4KJbm2ROCCYgkkgOeGPwZa5hn+dnvwg77ufJ2IHRl C6sFp6BQW/h1Cg== -----END CERTIFICATE-----Generated at Fri Dec 19 06:24:05 2025 by rpki-client