This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft File: ECWK4MJsZaamlm8_fmmGM7kUNCY.mft (raw, json) Hash identifier: dG2p9nK482GJR5uHqhMrxiCdDpfZlKelx+TazVzgfQQ= Subject key identifier: 6C:80:1E:C3:3E:E0:2F:85:6F:35:21:93:DE:DC:40:9A:6C:5F:39:63 Authority key identifier: 10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26 Certificate issuer: /CN=10258ae0c26c65a6a6966f3f7e698633b9143426 Certificate serial: 019AF91D3DF0301ECAF6A532CF9A18BEA1C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft Manifest number: 03E8 Signing time: Sun 07 Dec 2025 14:00:34 +0000 Manifest this update: Sun 07 Dec 2025 14:00:34 +0000 Manifest next update: Mon 08 Dec 2025 14:00:34 +0000 Files and hashes: 1: ECWK4MJsZaamlm8_fmmGM7kUNCY.crl (hash: wO5KIUdZ1ROw9MGLzvz8v/1pU2wbG46yP7J0Qau8Nik=) 2: etVX6TJKFEJRufjvzOGQ6JSSL7w.roa (hash: 63VfWS1eguDOAS4kGZod2yjLHalgrK50WGTQVYmqUfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:1d:3d:f0:30:1e:ca:f6:a5:32:cf:9a:18:be:a1:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10258ae0c26c65a6a6966f3f7e698633b9143426 Validity Not Before: Dec 7 14:00:34 2025 GMT Not After : Dec 8 14:00:34 2025 GMT Subject: CN=6c801ec33ee02f856f352193dedc409a6c5f3963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a4:f7:cf:2b:4f:45:c7:47:78:bf:51:bc:05: 60:1c:b1:8c:d4:0b:12:07:2d:55:63:1a:44:01:0e: 5a:26:00:40:3d:fd:37:64:30:f0:70:7e:20:26:13: c8:7c:0e:1c:2c:2d:0b:db:17:b6:15:ae:6f:07:be: b8:0e:72:fa:25:1d:0c:a4:50:a0:90:dc:05:84:fe: fd:7a:b3:2f:ad:d9:d2:46:45:b0:e9:f7:91:81:da: fe:8f:0e:07:ee:d9:36:41:49:73:0e:70:d2:10:56: 10:c5:52:01:cb:56:1a:4c:19:6d:c2:29:4a:7e:d1: 1f:9b:ab:74:20:37:c7:69:4c:14:38:1e:6b:eb:18: 2b:a6:5e:ac:56:f9:9c:e0:ec:6e:dc:34:6c:f1:0e: c7:9b:f6:17:ae:20:71:4c:9f:4a:26:8e:24:bf:56: 81:85:bc:39:9f:9d:2c:2a:95:8a:6d:0f:9b:9e:46: 74:79:19:40:3e:33:d6:38:fd:9e:11:05:c3:c7:20: 86:0e:59:fa:9c:ec:54:8b:c6:d9:ac:18:42:6f:c3: 5b:21:03:65:e2:66:ae:d8:fa:2c:05:bc:07:4b:d1: 1c:bf:1e:2d:a6:12:cf:cc:c4:98:57:16:5b:1d:ce: e2:13:1b:bf:8e:44:52:1e:23:ee:6d:cc:c1:91:75: 01:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:80:1E:C3:3E:E0:2F:85:6F:35:21:93:DE:DC:40:9A:6C:5F:39:63 X509v3 Authority Key Identifier: keyid:10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b6:83:97:68:ff:65:b4:e9:d1:dd:09:5f:31:27:93:1b:3c: a7:f7:56:c1:f6:c9:be:e9:10:bf:b9:cb:06:d3:37:44:ed:35: 13:69:e0:d2:fd:c6:c3:00:de:b1:fa:05:42:0f:45:cf:38:3b: fc:d0:6f:1d:13:13:07:78:18:72:ce:95:41:8f:08:52:57:84: e3:48:79:e6:79:ff:81:24:03:3b:7c:4f:b5:f6:89:0e:e4:94: 01:6b:15:59:5a:4a:33:63:68:60:d5:48:9a:57:6d:2c:4e:a7: 04:2d:2f:4e:6f:33:d0:82:a1:de:c9:9b:88:15:08:28:53:df: 7d:8e:84:3f:7f:93:96:1d:40:3f:0f:64:0a:57:a5:9d:da:68: 57:76:49:b4:9b:86:30:c1:91:2b:fb:f0:b3:3c:43:f9:7b:c4: 00:ba:0e:48:93:62:0a:ff:ce:50:bc:eb:be:ca:b3:97:03:08: ed:cc:cd:e2:01:ef:21:2a:7f:5a:27:92:d7:ed:e7:14:bb:bd: 98:0f:b7:9d:ff:ff:42:18:14:45:86:c9:19:2b:87:cf:b8:47: 0e:02:16:f0:15:67:7d:ad:1a:fc:6a:6a:fa:51:b9:ca:1f:e9: 47:0c:45:10:08:8e:75:f0:60:8d:23:2c:1c:9e:a1:d3:67:ce: 0a:21:0d:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5HT3wMB7K9qUyz5oYvqHFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMjU4YWUwYzI2YzY1YTZhNjk2NmYzZjdlNjk4NjMzYjkx NDM0MjYwHhcNMjUxMjA3MTQwMDM0WhcNMjUxMjA4MTQwMDM0WjAzMTEwLwYDVQQD Eyg2YzgwMWVjMzNlZTAyZjg1NmYzNTIxOTNkZWRjNDA5YTZjNWYzOTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaT3zytPRcdHeL9RvAVgHLGM1AsS By1VYxpEAQ5aJgBAPf03ZDDwcH4gJhPIfA4cLC0L2xe2Fa5vB764DnL6JR0MpFCg kNwFhP79erMvrdnSRkWw6feRgdr+jw4H7tk2QUlzDnDSEFYQxVIBy1YaTBltwilK ftEfm6t0IDfHaUwUOB5r6xgrpl6sVvmc4Oxu3DRs8Q7Hm/YXriBxTJ9KJo4kv1aB hbw5n50sKpWKbQ+bnkZ0eRlAPjPWOP2eEQXDxyCGDln6nOxUi8bZrBhCb8NbIQNl 4mau2PosBbwHS9Ecvx4tphLPzMSYVxZbHc7iExu/jkRSHiPubczBkXUBmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGyAHsM+4C+FbzUhk97cQJpsXzljMB8GA1UdIwQY MBaAFBAliuDCbGWmppZvP35phjO5FDQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUNXSzRNSnNaYWFtbG04X2ZtbUdNN2tVTkNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xMzQxYTctMWNlNi00M2I5LWJmNzYt ZWY3ZThkNDQzNGYzLzEvRUNXSzRNSnNaYWFtbG04X2ZtbUdNN2tVTkNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8xMzQxYTctMWNlNi00M2I5LWJmNzYtZWY3ZThkNDQzNGYz LzEvRUNXSzRNSnNaYWFtbG04X2ZtbUdNN2tVTkNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObaDl2j/ ZbTp0d0JXzEnkxs8p/dWwfbJvukQv7nLBtM3RO01E2ng0v3GwwDesfoFQg9Fzzg7 /NBvHRMTB3gYcs6VQY8IUleE40h55nn/gSQDO3xPtfaJDuSUAWsVWVpKM2NoYNVI mldtLE6nBC0vTm8z0IKh3smbiBUIKFPffY6EP3+Tlh1APw9kClelndpoV3ZJtJuG MMGRK/vwszxD+XvEALoOSJNiCv/OULzrvsqzlwMI7czN4gHvISp/WieS1+3nFLu9 mA+3nf//QhgURYbJGSuHz7hHDgIW8BVnfa0a/Gpq+lG5yh/pRwxFEAiOdfBgjSMs HJ6h02fOCiEN6g== -----END CERTIFICATE-----Generated at Sun Dec 7 17:05:52 2025 by rpki-client