This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft File: ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json) Hash identifier: SwUaa2iCZKlcZpgJYKE3hOdi9y3Z3QAzLTRVgT1i9jc= Subject key identifier: 04:9F:04:FB:A1:B6:D0:51:31:28:C0:3F:E6:F7:A0:47:2A:CF:38:65 Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91 Certificate issuer: /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691 Certificate serial: 019B42B706396885F60B3A0080577DF6EF11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 21:00:49 +0000 Manifest this update: Sun 21 Dec 2025 21:00:49 +0000 Manifest next update: Mon 22 Dec 2025 21:00:49 +0000 Files and hashes: 1: WLmUyFV8H24Y5kzvnWadWBycLgo.roa (hash: E+HDKH3BqBvsQRxbFmxgjKgFmfAPfEm3M2aQXUVUkSg=) 2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: FDfjnM26EmzJnjZReUNt2yKLSacWrEMWEVi3DCLT5iI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:06:39:68:85:f6:0b:3a:00:80:57:7d:f6:ef:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691 Validity Not Before: Dec 21 21:00:49 2025 GMT Not After : Dec 22 21:00:49 2025 GMT Subject: CN=049f04fba1b6d0513128c03fe6f7a0472acf3865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:fc:85:15:ea:f1:10:3d:5a:60:6c:b4:b4:3e: d3:a3:ed:e6:2c:b9:14:4a:a2:92:1e:77:26:7b:92: a7:a0:46:75:11:c3:dc:0f:43:c6:db:0d:b6:06:e1: a2:65:2d:47:b9:01:c9:20:95:24:e1:77:41:e8:77: bc:09:e3:21:38:07:f8:44:e1:b2:f8:28:67:a4:c7: f6:af:82:80:e9:79:df:fc:77:0c:a1:1b:cf:04:6b: 33:a8:4f:b6:7e:30:71:ac:e5:06:2d:31:63:aa:eb: dd:09:79:d4:44:20:3c:6d:59:1e:b7:fe:b9:e5:30: e6:c6:ca:29:3d:02:72:70:4d:63:85:e0:e3:ee:48: 4c:6c:94:42:05:3d:e2:81:d0:30:de:e4:9a:48:f1: c0:91:59:a8:de:d9:64:1e:a3:3e:ed:87:7d:9f:24: 0a:47:e8:8b:bf:92:a1:50:ee:43:71:7a:1c:00:7c: 41:18:b1:35:e0:58:53:0e:45:66:71:0b:58:7f:35: b4:5d:13:cc:49:64:eb:5f:b7:f8:d6:ee:a0:5c:2c: 8a:7a:a6:14:20:62:61:92:56:9a:a9:d7:cc:49:69: 4d:da:7b:64:3f:a8:69:3d:ce:dd:8b:fd:0c:d5:25: f4:7f:71:82:e3:9a:89:68:5f:fe:74:85:b2:95:68: 9a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9F:04:FB:A1:B6:D0:51:31:28:C0:3F:E6:F7:A0:47:2A:CF:38:65 X509v3 Authority Key Identifier: keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:2d:4e:cf:0c:5a:3f:79:d5:e6:e7:5a:6b:09:47:28:e3:2b: ee:b6:6e:af:44:73:54:bf:cc:6c:ce:6d:08:0b:76:68:ce:53: df:90:31:a8:9e:b4:50:34:08:7b:12:d4:b0:28:1f:e9:72:ef: 10:4b:ab:90:6a:39:57:3e:03:94:be:c3:8d:d9:10:9a:56:ef: fa:ac:96:5b:a6:02:98:79:40:1d:ec:eb:6f:9a:69:0f:e6:50: ca:8b:96:73:84:0d:d9:0f:bf:c2:b6:fa:93:cf:29:30:3e:c6: 6a:a5:c8:7a:94:79:67:cd:1c:a5:58:b4:96:d4:a8:e7:82:8c: 42:bd:d8:94:44:24:29:c8:b4:2e:70:d6:15:ce:8e:5f:8a:9d: bc:b4:95:3c:c5:8f:51:25:e5:23:d8:b5:09:f8:32:fc:06:22: 25:d9:97:9f:d5:f6:86:34:9a:1b:dc:08:64:c4:52:59:bb:f6: b7:84:e0:31:79:a1:fb:bf:23:2f:b0:6e:df:b1:bc:05:4c:94: 35:03:b8:4e:b8:17:5c:96:8d:eb:2e:e9:9f:24:30:84:13:52: f6:a9:84:fe:bf:59:aa:d9:13:98:22:14:d3:d3:35:44:f1:0b: e3:9b:e6:56:7f:68:07:64:b5:dc:63:bf:89:9c:c8:1d:9d:3d: 45:66:c6:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtwY5aIX2CzoAgFd99u8RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Yzk4Y2JiMzdmZWEyZTljOWE2ZWI2ZjkyODg3YzA1YTRj NTA2OTEwHhcNMjUxMjIxMjEwMDQ5WhcNMjUxMjIyMjEwMDQ5WjAzMTEwLwYDVQQD EygwNDlmMDRmYmExYjZkMDUxMzEyOGMwM2ZlNmY3YTA0NzJhY2YzODY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+/yFFerxED1aYGy0tD7To+3mLLkU SqKSHncme5KnoEZ1EcPcD0PG2w22BuGiZS1HuQHJIJUk4XdB6He8CeMhOAf4ROGy +ChnpMf2r4KA6Xnf/HcMoRvPBGszqE+2fjBxrOUGLTFjquvdCXnURCA8bVket/65 5TDmxsopPQJycE1jheDj7khMbJRCBT3igdAw3uSaSPHAkVmo3tlkHqM+7Yd9nyQK R+iLv5KhUO5DcXocAHxBGLE14FhTDkVmcQtYfzW0XRPMSWTrX7f41u6gXCyKeqYU IGJhklaaqdfMSWlN2ntkP6hpPc7di/0M1SX0f3GC45qJaF/+dIWylWiaYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASfBPuhttBRMSjAP+b3oEcqzzhlMB8GA1UdIwQY MBaAFHnJjLs3/qLpyabrb5KIfAWkxQaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81OGZlZTktMzgzMC00ZGE0LWIxNDQt OTE1MTc1ZTM2ZThlLzEvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81OGZlZTktMzgzMC00ZGE0LWIxNDQtOTE1MTc1ZTM2ZThl LzEvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhS1Ozwxa P3nV5udaawlHKOMr7rZur0RzVL/MbM5tCAt2aM5T35AxqJ60UDQIexLUsCgf6XLv EEurkGo5Vz4DlL7DjdkQmlbv+qyWW6YCmHlAHezrb5ppD+ZQyouWc4QN2Q+/wrb6 k88pMD7GaqXIepR5Z80cpVi0ltSo54KMQr3YlEQkKci0LnDWFc6OX4qdvLSVPMWP USXlI9i1Cfgy/AYiJdmXn9X2hjSaG9wIZMRSWbv2t4TgMXmh+78jL7Bu37G8BUyU NQO4TrgXXJaN6y7pnyQwhBNS9qmE/r9ZqtkTmCIU09M1RPEL45vmVn9oB2S13GO/ iZzIHZ09RWbGLg== -----END CERTIFICATE-----Generated at Sun Dec 21 23:44:47 2025 by rpki-client