This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft File: Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft (raw, json) Hash identifier: AQtK95o9ugHFAMGcn4IyiLeHJC0QiB/5y8UJZTWortw= Subject key identifier: 02:85:81:0E:7C:C1:28:A1:07:CD:49:6B:1D:20:25:F3:36:73:42:0F Authority key identifier: 11:C7:EA:F1:BF:50:F1:41:D5:65:1D:89:09:AC:76:C9:D4:80:A6:96 Certificate issuer: /CN=11c7eaf1bf50f141d5651d8909ac76c9d480a696 Certificate serial: 019AF1D1D11E21551A4AB307E7C3E793B14E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ecfq8b9Q8UHVZR2JCax2ydSAppY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft Manifest number: B1 Signing time: Sat 06 Dec 2025 04:00:50 +0000 Manifest this update: Sat 06 Dec 2025 04:00:50 +0000 Manifest next update: Sun 07 Dec 2025 04:00:50 +0000 Files and hashes: 1: Ecfq8b9Q8UHVZR2JCax2ydSAppY.crl (hash: wGg0+iSrFV31Qb6aOzTXmXlE8JlDuEvbO2xjjVVXdoc=) 2: Zf-qZ2UMzAyGiL8cjRBDf8GsL_c.roa (hash: hcx1HTNC9tU6Msn2W64wHhUXk0lGhQiRmQqK9xZ6N7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ecfq8b9Q8UHVZR2JCax2ydSAppY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d1:1e:21:55:1a:4a:b3:07:e7:c3:e7:93:b1:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11c7eaf1bf50f141d5651d8909ac76c9d480a696 Validity Not Before: Dec 6 04:00:50 2025 GMT Not After : Dec 7 04:00:50 2025 GMT Subject: CN=0285810e7cc128a107cd496b1d2025f33673420f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0d:1a:e1:5b:e4:2c:01:bd:54:56:9c:22:69: 43:97:5f:28:bd:02:0c:43:db:94:78:85:3e:db:b8: 65:d3:b4:e1:3d:9e:dc:df:c5:00:25:ff:41:81:60: fd:11:60:84:29:9f:1b:dd:a6:88:f9:54:70:06:a5: 25:7c:e1:79:2a:3b:73:8d:38:92:08:be:83:fb:9c: 23:0c:8e:17:15:fb:aa:7d:b1:59:10:a1:b4:dd:20: f7:dd:3d:e5:cb:50:c2:fe:76:2f:03:c9:ef:ca:c2: 8a:b6:3a:1e:76:5c:ea:94:6b:5c:53:b8:cc:ca:3b: 17:70:7a:fd:ab:ca:78:db:d0:cc:2e:99:d3:58:33: 8a:df:d1:15:82:d6:ac:0d:3a:6e:29:94:8c:8b:cd: fe:07:f6:19:cb:6a:57:04:83:9e:73:96:71:e2:b5: bd:04:32:6e:27:be:9d:9f:38:52:1b:be:41:1c:df: e6:f1:86:3d:60:ca:e7:30:7e:1c:26:97:98:03:33: a8:ea:a4:ec:2c:7d:e8:0b:5f:ec:74:d3:a7:57:0b: 7d:55:ac:80:68:cb:cc:b0:b3:c0:5d:45:87:73:72: 8d:6a:60:c0:25:f8:4e:6e:11:4e:8c:d2:d8:e0:41: 4b:9d:f5:7f:47:4a:52:2d:4e:8e:db:17:3a:df:79: 72:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:85:81:0E:7C:C1:28:A1:07:CD:49:6B:1D:20:25:F3:36:73:42:0F X509v3 Authority Key Identifier: keyid:11:C7:EA:F1:BF:50:F1:41:D5:65:1D:89:09:AC:76:C9:D4:80:A6:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ecfq8b9Q8UHVZR2JCax2ydSAppY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8ef6b9-d851-43a4-8977-df3545b44c0b/1/Ecfq8b9Q8UHVZR2JCax2ydSAppY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:46:f3:ac:56:1d:3a:77:09:3c:0c:69:1f:13:c2:9c:a1:c6: d0:a7:69:d7:22:4f:fd:ea:ad:d2:20:e4:19:54:0f:16:a1:27: d1:2e:95:f0:24:b5:79:84:17:54:ca:94:65:ae:d0:dd:e8:ff: 09:23:2f:6c:e8:af:76:a9:e1:68:a8:eb:88:78:ad:79:1e:d2: 1d:3a:df:10:3c:37:cb:19:ea:eb:53:5e:51:fb:02:8e:03:db: 1c:25:1d:f5:0c:34:07:f9:14:34:7f:9d:1d:37:91:62:9e:32: 42:85:c5:47:2b:28:7e:ae:3d:39:85:6d:df:93:2d:53:2c:4a: b0:63:6c:86:59:8e:d6:de:51:02:29:2d:ca:86:ac:6c:b9:50: 74:04:99:e8:3f:1d:d8:f0:bc:cb:70:a2:d9:e4:8f:62:e4:cd: 23:81:f9:ef:f0:dc:96:6d:b0:37:f7:21:4d:db:7d:a4:bc:5c: c1:2d:34:1d:23:b5:bd:58:07:80:8f:3b:8a:e8:6e:90:fc:b4: 1e:97:a0:4a:4f:4d:a5:33:60:96:fc:b5:42:4d:ea:90:ac:69: d3:8b:a4:33:ec:52:b2:f4:82:74:21:50:60:52:3c:c9:e0:01: 1e:3f:72:c4:5f:8c:6f:cb:35:d4:dd:42:cd:cf:71:fd:20:d3: b0:ca:40:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dEeIVUaSrMH58Pnk7FOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYzdlYWYxYmY1MGYxNDFkNTY1MWQ4OTA5YWM3NmM5ZDQ4 MGE2OTYwHhcNMjUxMjA2MDQwMDUwWhcNMjUxMjA3MDQwMDUwWjAzMTEwLwYDVQQD EygwMjg1ODEwZTdjYzEyOGExMDdjZDQ5NmIxZDIwMjVmMzM2NzM0MjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg0a4VvkLAG9VFacImlDl18ovQIM Q9uUeIU+27hl07ThPZ7c38UAJf9BgWD9EWCEKZ8b3aaI+VRwBqUlfOF5KjtzjTiS CL6D+5wjDI4XFfuqfbFZEKG03SD33T3ly1DC/nYvA8nvysKKtjoedlzqlGtcU7jM yjsXcHr9q8p429DMLpnTWDOK39EVgtasDTpuKZSMi83+B/YZy2pXBIOec5Zx4rW9 BDJuJ76dnzhSG75BHN/m8YY9YMrnMH4cJpeYAzOo6qTsLH3oC1/sdNOnVwt9VayA aMvMsLPAXUWHc3KNamDAJfhObhFOjNLY4EFLnfV/R0pSLU6O2xc633lyXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKFgQ58wSihB81Jax0gJfM2c0IPMB8GA1UdIwQY MBaAFBHH6vG/UPFB1WUdiQmsdsnUgKaWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWNmcThiOVE4VUhWWlIySkNheDJ5ZFNBcHBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84ZWY2YjktZDg1MS00M2E0LTg5Nzct ZGYzNTQ1YjQ0YzBiLzEvRWNmcThiOVE4VUhWWlIySkNheDJ5ZFNBcHBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84ZWY2YjktZDg1MS00M2E0LTg5NzctZGYzNTQ1YjQ0YzBi LzEvRWNmcThiOVE4VUhWWlIySkNheDJ5ZFNBcHBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkbzrFYd OncJPAxpHxPCnKHG0Kdp1yJP/eqt0iDkGVQPFqEn0S6V8CS1eYQXVMqUZa7Q3ej/ CSMvbOivdqnhaKjriHiteR7SHTrfEDw3yxnq61NeUfsCjgPbHCUd9Qw0B/kUNH+d HTeRYp4yQoXFRysofq49OYVt35MtUyxKsGNshlmO1t5RAiktyoasbLlQdASZ6D8d 2PC8y3Ci2eSPYuTNI4H57/Dclm2wN/chTdt9pLxcwS00HSO1vVgHgI87iuhukPy0 HpegSk9NpTNglvy1Qk3qkKxp04ukM+xSsvSCdCFQYFI8yeABHj9yxF+Mb8s11N1C zc9x/SDTsMpASQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:03 2025 by rpki-client