This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft File: ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft (raw, json) Hash identifier: D9J4X+AYxmPp145wgz6MX6zEJITQQ45hA5wHo7+dDE0= Subject key identifier: B9:11:44:DF:48:A5:8D:D1:CC:94:92:21:C2:56:A6:D5:E7:03:69:D4 Authority key identifier: 10:2A:C3:E8:6A:FB:14:14:F5:5B:DA:E0:3F:B6:F5:3D:F0:86:78:E4 Certificate issuer: /CN=102ac3e86afb1414f55bdae03fb6f53df08678e4 Certificate serial: 019AF2ADD24E9E75F0D80B7C2AE02824C4B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft Manifest number: 157E Signing time: Sat 06 Dec 2025 08:01:09 +0000 Manifest this update: Sat 06 Dec 2025 08:01:09 +0000 Manifest next update: Sun 07 Dec 2025 08:01:09 +0000 Files and hashes: 1: ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl (hash: bpfAiUjYbnHtpE/a4uWjaZdlbggWGdBSHXwlAbYelm8=) 2: Mlu5_dJNN_0613h2Y5SWGYo2plc.roa (hash: CAvVd5I+5Zi7+C5cOmRMcgsTbGExGWGR0EvjDIL6HmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:d2:4e:9e:75:f0:d8:0b:7c:2a:e0:28:24:c4:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=102ac3e86afb1414f55bdae03fb6f53df08678e4 Validity Not Before: Dec 6 08:01:09 2025 GMT Not After : Dec 7 08:01:09 2025 GMT Subject: CN=b91144df48a58dd1cc949221c256a6d5e70369d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1b:37:97:b2:1d:82:48:1a:f5:1e:ae:41:18: 16:36:20:3b:4d:e2:12:63:8e:1b:d7:4e:64:7c:82: d8:f9:56:22:2f:93:22:f0:ae:63:b1:fb:e5:5d:41: 8c:22:f4:fa:d4:86:95:c9:c3:26:f9:3b:19:3f:35: 97:29:e1:8b:cf:fa:63:c1:b9:25:b2:fd:aa:bd:3d: bc:75:11:31:ba:77:07:89:f2:e5:b5:f8:37:03:da: 03:4e:1a:d7:0f:32:da:da:d3:c2:36:09:4b:07:59: 84:a6:38:7d:12:69:c5:cb:4b:c5:47:e1:8d:e2:ad: 5d:40:70:ea:1d:7d:08:45:6c:1b:8e:03:f8:9f:59: 88:72:f2:e7:73:40:80:85:fa:1f:b3:18:73:63:11: 29:46:ce:90:82:79:5e:dc:85:69:25:9d:e8:0f:f2: 59:5f:2d:52:9c:20:44:b0:d0:23:28:7c:fa:4d:67: fb:6a:5b:80:f4:71:e8:b1:58:74:06:4c:d1:8c:d7: b8:9d:2e:58:a6:67:c6:b3:81:ff:c4:4f:b7:4f:1f: 85:e7:82:ee:3d:5e:33:cc:f3:6d:88:6d:30:5c:f3: 32:b2:2c:23:ea:06:79:49:33:cd:96:d9:11:97:e2: 45:ba:54:d0:db:23:53:8a:37:8b:f0:1d:33:73:d3: e0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:11:44:DF:48:A5:8D:D1:CC:94:92:21:C2:56:A6:D5:E7:03:69:D4 X509v3 Authority Key Identifier: keyid:10:2A:C3:E8:6A:FB:14:14:F5:5B:DA:E0:3F:B6:F5:3D:F0:86:78:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c77d93-6108-445e-a7e7-745a81e502ff/1/ECrD6Gr7FBT1W9rgP7b1PfCGeOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:5d:34:89:b7:e5:c8:79:dc:6d:30:c3:31:c7:31:09:9d:b3: 02:82:44:87:f1:7f:b0:41:43:aa:34:58:bc:63:9f:b9:7a:ff: 5a:2c:8d:bd:93:2a:61:d5:88:e2:07:7a:5e:bd:76:20:17:8b: 9c:6b:08:6b:79:42:2c:1e:e4:98:ec:c4:f0:b7:36:9b:8f:8f: 8f:74:59:4c:36:c6:55:f7:bc:4c:85:21:c7:56:73:8b:53:e8: 04:59:9d:4f:55:19:1c:a7:84:0f:5c:82:04:77:07:32:b7:4a: b5:f9:cd:e1:a7:0a:1e:18:b9:1f:3f:89:c9:da:39:a7:c7:1e: 3f:c8:e9:e5:ed:01:70:b2:28:c4:e4:6e:82:3d:db:10:dc:c8: 75:f3:61:5d:b1:e6:98:42:bf:fe:32:0a:f8:36:7b:ca:8c:00: 54:ac:bd:56:94:5f:ec:9a:79:9e:74:ee:3b:62:00:bf:04:92: 17:dd:d5:32:c2:9a:b9:18:06:66:02:2b:7d:43:89:fe:df:ee: 95:c8:f7:8a:61:68:80:c3:4b:9e:03:79:80:ab:03:7c:e0:ce: c7:c1:09:db:61:72:35:0d:c7:f5:d7:dc:ac:fb:49:6d:b4:8f: ce:6e:7f:f7:74:de:f6:ab:c9:5a:62:59:7a:ab:c7:dd:ce:f2: ba:6a:30:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdJOnnXw2At8KuAoJMS2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMmFjM2U4NmFmYjE0MTRmNTViZGFlMDNmYjZmNTNkZjA4 Njc4ZTQwHhcNMjUxMjA2MDgwMTA5WhcNMjUxMjA3MDgwMTA5WjAzMTEwLwYDVQQD EyhiOTExNDRkZjQ4YTU4ZGQxY2M5NDkyMjFjMjU2YTZkNWU3MDM2OWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Rs3l7Idgkga9R6uQRgWNiA7TeIS Y44b105kfILY+VYiL5Mi8K5jsfvlXUGMIvT61IaVycMm+TsZPzWXKeGLz/pjwbkl sv2qvT28dRExuncHifLltfg3A9oDThrXDzLa2tPCNglLB1mEpjh9EmnFy0vFR+GN 4q1dQHDqHX0IRWwbjgP4n1mIcvLnc0CAhfofsxhzYxEpRs6Qgnle3IVpJZ3oD/JZ Xy1SnCBEsNAjKHz6TWf7aluA9HHosVh0BkzRjNe4nS5YpmfGs4H/xE+3Tx+F54Lu PV4zzPNtiG0wXPMysiwj6gZ5STPNltkRl+JFulTQ2yNTijeL8B0zc9Pg9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkRRN9IpY3RzJSSIcJWptXnA2nUMB8GA1UdIwQY MBaAFBAqw+hq+xQU9Vva4D+29T3whnjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUNyRDZHcjdGQlQxVzlyZ1A3YjFQZkNHZU9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jNzdkOTMtNjEwOC00NDVlLWE3ZTct NzQ1YTgxZTUwMmZmLzEvRUNyRDZHcjdGQlQxVzlyZ1A3YjFQZkNHZU9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jNzdkOTMtNjEwOC00NDVlLWE3ZTctNzQ1YTgxZTUwMmZm LzEvRUNyRDZHcjdGQlQxVzlyZ1A3YjFQZkNHZU9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMF00ibfl yHncbTDDMccxCZ2zAoJEh/F/sEFDqjRYvGOfuXr/WiyNvZMqYdWI4gd6Xr12IBeL nGsIa3lCLB7kmOzE8Lc2m4+Pj3RZTDbGVfe8TIUhx1Zzi1PoBFmdT1UZHKeED1yC BHcHMrdKtfnN4acKHhi5Hz+Jydo5p8ceP8jp5e0BcLIoxORugj3bENzIdfNhXbHm mEK//jIK+DZ7yowAVKy9VpRf7Jp5nnTuO2IAvwSSF93VMsKauRgGZgIrfUOJ/t/u lcj3imFogMNLngN5gKsDfODOx8EJ22FyNQ3H9dfcrPtJbbSPzm5/93Te9qvJWmJZ eqvH3c7yumowQA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:17 2025 by rpki-client