This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft File: Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft (raw, json) Hash identifier: oKK4PDEx4K26t75N0Kfv1QZ8rSIODLB5/rl+iMd/Pkg= Subject key identifier: 06:7B:59:36:92:9F:7F:DC:47:F7:C6:4F:30:03:B0:61:23:A6:49:81 Authority key identifier: 11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34 Certificate issuer: /CN=11c971ff0d25f2034c05ab2958a86f732bc67734 Certificate serial: 019AF209249380EB92A8A4B5B36E7B68DD87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:01:16 +0000 Manifest this update: Sat 06 Dec 2025 05:01:16 +0000 Manifest next update: Sun 07 Dec 2025 05:01:16 +0000 Files and hashes: 1: Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl (hash: 440FWtW7sQRtb/rvonITD1RiuzgKxAShErydQzJKaZ0=) 2: LMMZjEog_tQosdiOx9qDUPZ7h2c.roa (hash: ejhewZ8y56OliUtcQtMRcOocpkTmo7inlBUwDmC0qfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:24:93:80:eb:92:a8:a4:b5:b3:6e:7b:68:dd:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11c971ff0d25f2034c05ab2958a86f732bc67734 Validity Not Before: Dec 6 05:01:16 2025 GMT Not After : Dec 7 05:01:16 2025 GMT Subject: CN=067b5936929f7fdc47f7c64f3003b06123a64981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a6:df:1a:cc:78:f7:bd:88:76:6d:ba:be:fb: 0d:e5:6f:bb:09:9a:57:46:c6:4d:cd:02:56:46:85: dd:85:ad:64:a0:36:4e:0c:dc:1a:b1:0d:be:75:32: 57:02:68:92:b4:81:a3:57:3e:a9:71:7d:a9:d9:75: e8:16:31:22:03:fb:f4:2f:c7:44:e2:cd:aa:88:e7: 8d:2b:c5:d0:51:ed:a0:54:82:50:03:46:af:27:89: e4:62:12:d8:90:f8:48:2e:ff:f5:0b:f0:60:b5:19: 87:7f:3a:c9:42:38:1a:f9:7c:03:90:ca:51:6d:e9: 61:1f:df:f5:9f:2f:08:ba:58:a7:8e:8b:87:4a:ad: 9d:ce:ef:8c:4b:fa:32:d1:a1:13:70:e5:84:60:a3: 3c:c5:8c:6e:3b:5d:fb:5e:33:63:99:af:d3:8d:18: 99:8f:47:35:4a:4b:a7:3d:f4:54:77:c8:cb:18:d6: dc:7a:a1:95:0d:7f:92:30:e5:6f:1a:c0:59:cc:65: 2b:e8:08:fb:fd:9a:36:2a:66:fd:83:cb:02:0b:93: 49:9b:70:25:7a:67:f2:95:52:b2:07:68:01:bc:63: 77:c4:72:a4:dc:0d:2b:ba:7d:36:3e:cd:b3:90:f1: 0d:7d:b4:8d:f0:f3:4b:80:5c:c5:19:c3:34:f0:34: e6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7B:59:36:92:9F:7F:DC:47:F7:C6:4F:30:03:B0:61:23:A6:49:81 X509v3 Authority Key Identifier: keyid:11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:c8:4e:50:b7:7d:57:84:d7:c9:2e:ab:49:a1:15:bb:2e:5d: 34:8b:7f:31:99:86:49:1f:c4:bd:4c:cc:b2:c6:f9:4a:11:b7: 21:62:49:18:f8:59:72:cc:aa:f9:8d:42:2c:76:57:ed:35:9b: a9:f4:ac:39:d8:47:be:38:cd:25:36:ee:22:8e:37:6f:2a:f9: 09:26:d1:eb:db:bc:be:71:1e:40:e2:dd:01:3f:93:d4:4a:11: 34:52:88:d2:0a:be:77:72:66:5d:17:67:d0:b8:32:e2:7d:55: 96:b5:a4:31:21:33:d2:f0:f8:eb:4b:4c:25:12:3b:b2:55:7f: cb:b4:ff:d7:2c:c1:a2:18:d4:89:7d:eb:db:f3:8d:4a:42:31: a3:09:19:a2:77:1d:95:f5:03:93:06:10:ce:61:74:42:78:87: 1f:99:1f:ce:d5:4a:fb:45:5c:c5:97:6d:73:85:61:bb:f5:21: 21:21:9a:e3:0f:20:f7:64:15:35:ad:b6:e1:93:19:c7:25:80: 70:d7:6a:06:93:ec:a6:b6:43:a3:75:07:53:da:61:2d:63:da: 1e:77:e0:63:e5:d6:ab:d8:72:cd:7b:82:43:40:f5:d2:18:82: 69:4f:ae:66:12:a7:ea:3e:29:b6:9b:32:5e:d3:0a:0b:c0:39: c3:75:be:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSSTgOuSqKS1s257aN2HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYzk3MWZmMGQyNWYyMDM0YzA1YWIyOTU4YTg2ZjczMmJj Njc3MzQwHhcNMjUxMjA2MDUwMTE2WhcNMjUxMjA3MDUwMTE2WjAzMTEwLwYDVQQD EygwNjdiNTkzNjkyOWY3ZmRjNDdmN2M2NGYzMDAzYjA2MTIzYTY0OTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qbfGsx4972Idm26vvsN5W+7CZpX RsZNzQJWRoXdha1koDZODNwasQ2+dTJXAmiStIGjVz6pcX2p2XXoFjEiA/v0L8dE 4s2qiOeNK8XQUe2gVIJQA0avJ4nkYhLYkPhILv/1C/BgtRmHfzrJQjga+XwDkMpR belhH9/1ny8IulinjouHSq2dzu+MS/oy0aETcOWEYKM8xYxuO137XjNjma/TjRiZ j0c1SkunPfRUd8jLGNbceqGVDX+SMOVvGsBZzGUr6Aj7/Zo2Kmb9g8sCC5NJm3Al emfylVKyB2gBvGN3xHKk3A0run02Ps2zkPENfbSN8PNLgFzFGcM08DTmBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZ7WTaSn3/cR/fGTzADsGEjpkmBMB8GA1UdIwQY MBaAFBHJcf8NJfIDTAWrKViob3Mrxnc0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWNseF93MGw4Z05NQmFzcFdLaHZjeXZHZHpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hMTlkMDItMDAyYS00Y2I3LWFmYmIt ZWYyZDdhMjNmNjA5LzEvRWNseF93MGw4Z05NQmFzcFdLaHZjeXZHZHpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hMTlkMDItMDAyYS00Y2I3LWFmYmItZWYyZDdhMjNmNjA5 LzEvRWNseF93MGw4Z05NQmFzcFdLaHZjeXZHZHpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsshOULd9 V4TXyS6rSaEVuy5dNIt/MZmGSR/EvUzMssb5ShG3IWJJGPhZcsyq+Y1CLHZX7TWb qfSsOdhHvjjNJTbuIo43byr5CSbR69u8vnEeQOLdAT+T1EoRNFKI0gq+d3JmXRdn 0Lgy4n1VlrWkMSEz0vD460tMJRI7slV/y7T/1yzBohjUiX3r2/ONSkIxowkZoncd lfUDkwYQzmF0QniHH5kfztVK+0VcxZdtc4Vhu/UhISGa4w8g92QVNa224ZMZxyWA cNdqBpPsprZDo3UHU9phLWPaHnfgY+XWq9hyzXuCQ0D10hiCaU+uZhKn6j4ptpsy XtMKC8A5w3W+8w== -----END CERTIFICATE-----Generated at Sat Dec 6 13:22:29 2025 by rpki-client