This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft File: ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json) Hash identifier: 5jVs5glFOhG0D6R25zNWYUqog2441N1mUHUO2h2vpsk= Subject key identifier: 04:62:DA:DB:10:6C:F1:42:B3:D8:85:F3:B7:03:B0:5D:2F:9F:56:E3 Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91 Certificate issuer: /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691 Certificate serial: 019AF19B19203EED267A3DB8EFFDA1376501 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:04 +0000 Manifest this update: Sat 06 Dec 2025 03:01:04 +0000 Manifest next update: Sun 07 Dec 2025 03:01:04 +0000 Files and hashes: 1: WLmUyFV8H24Y5kzvnWadWBycLgo.roa (hash: E+HDKH3BqBvsQRxbFmxgjKgFmfAPfEm3M2aQXUVUkSg=) 2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: dlBrN6hqcoIAOio93x3USmZdzHL3ZYEf0ruO+qk0Spw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:19:20:3e:ed:26:7a:3d:b8:ef:fd:a1:37:65:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691 Validity Not Before: Dec 6 03:01:04 2025 GMT Not After : Dec 7 03:01:04 2025 GMT Subject: CN=0462dadb106cf142b3d885f3b703b05d2f9f56e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cc:fc:78:b5:1d:6f:ac:29:e5:58:6a:5d:cc: bb:c0:4b:50:c5:8e:d0:11:97:40:5a:b8:e8:48:26: 66:d9:84:83:b3:93:c9:45:2a:0c:4f:0a:a8:76:60: d7:b5:a3:2a:d3:fa:30:61:eb:93:ab:8a:1d:9f:99: 70:41:d4:99:d2:54:54:48:a0:76:81:5a:e5:82:b3: c0:d8:bb:fd:51:89:a9:a1:c8:f4:06:06:e0:73:71: 4f:cf:cd:f7:a3:98:f8:b4:22:4a:5c:fc:5b:a8:3c: 41:1e:b6:7a:31:46:1c:29:13:f0:79:61:a0:f6:96: a7:2c:2c:51:9b:07:08:b0:49:bb:4c:9e:73:62:83: 34:05:e5:1e:ff:12:0f:b0:8e:1b:b2:ee:ab:e4:8c: e3:36:22:7c:3a:19:d8:f7:96:95:cd:8e:fd:ec:4e: cc:a1:34:be:d3:a0:89:ae:ae:ca:39:a1:07:62:46: 54:ce:f0:07:5c:9d:2e:6d:b0:cd:91:71:bb:64:8f: fd:72:5f:65:b9:72:56:0d:47:01:ac:6c:89:79:45: ec:c0:d9:88:45:da:94:43:43:bd:09:1e:2f:c9:07: 08:9b:69:16:e9:78:f1:b6:29:5a:d2:d2:58:1d:6a: 9d:3c:51:2e:0d:1f:f8:de:40:06:ed:05:8a:f7:87: bf:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:62:DA:DB:10:6C:F1:42:B3:D8:85:F3:B7:03:B0:5D:2F:9F:56:E3 X509v3 Authority Key Identifier: keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:22:a3:60:86:83:e7:75:0b:3a:5d:e8:e4:b6:e7:db:2a:0c: 45:6d:61:d7:17:c3:55:cf:a5:41:dc:22:e5:a0:a1:46:a5:03: 1b:3c:64:49:1a:2d:8f:bb:8e:11:8a:d0:5f:68:32:bc:a1:8d: fb:39:22:ba:14:62:47:19:c2:ef:ee:28:0d:79:22:b9:b9:fd: e3:ac:a7:c7:ab:89:a2:37:e2:2c:ed:30:d6:5d:58:6f:af:85: 02:83:3a:a9:8e:2b:c8:68:24:bf:a8:e6:18:d2:85:e8:2d:bf: e4:df:df:a4:2f:11:19:d1:ad:50:d2:dd:4f:c9:bc:96:e6:a0: 16:b2:eb:88:bb:dd:53:a9:c5:84:75:cb:f4:4e:ae:ed:91:e6: 30:16:89:70:18:9b:e8:b6:da:5b:70:0a:f6:0c:50:31:fe:8c: 0c:f7:96:15:3d:14:43:60:72:83:49:01:04:84:82:bc:f1:8b: bf:89:9d:ff:88:96:a7:19:1e:6f:97:c7:9f:26:da:84:1a:30: b8:4a:28:ee:59:55:49:53:e6:dd:2f:32:bb:91:f2:f3:b0:66: 55:40:2e:4b:61:0e:7e:fe:d9:b8:b0:51:9a:3e:62:f3:c9:83: 25:57:c5:23:3f:e3:a0:2f:1e:fd:62:99:e3:65:d8:6b:41:4e: cb:3e:ee:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxkgPu0mej247/2hN2UBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Yzk4Y2JiMzdmZWEyZTljOWE2ZWI2ZjkyODg3YzA1YTRj NTA2OTEwHhcNMjUxMjA2MDMwMTA0WhcNMjUxMjA3MDMwMTA0WjAzMTEwLwYDVQQD EygwNDYyZGFkYjEwNmNmMTQyYjNkODg1ZjNiNzAzYjA1ZDJmOWY1NmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsz8eLUdb6wp5VhqXcy7wEtQxY7Q EZdAWrjoSCZm2YSDs5PJRSoMTwqodmDXtaMq0/owYeuTq4odn5lwQdSZ0lRUSKB2 gVrlgrPA2Lv9UYmpocj0Bgbgc3FPz833o5j4tCJKXPxbqDxBHrZ6MUYcKRPweWGg 9panLCxRmwcIsEm7TJ5zYoM0BeUe/xIPsI4bsu6r5IzjNiJ8OhnY95aVzY797E7M oTS+06CJrq7KOaEHYkZUzvAHXJ0ubbDNkXG7ZI/9cl9luXJWDUcBrGyJeUXswNmI RdqUQ0O9CR4vyQcIm2kW6Xjxtila0tJYHWqdPFEuDR/43kAG7QWK94e/hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARi2tsQbPFCs9iF87cDsF0vn1bjMB8GA1UdIwQY MBaAFHnJjLs3/qLpyabrb5KIfAWkxQaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81OGZlZTktMzgzMC00ZGE0LWIxNDQt OTE1MTc1ZTM2ZThlLzEvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81OGZlZTktMzgzMC00ZGE0LWIxNDQtOTE1MTc1ZTM2ZThl LzEvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmiKjYIaD 53ULOl3o5Lbn2yoMRW1h1xfDVc+lQdwi5aChRqUDGzxkSRotj7uOEYrQX2gyvKGN +zkiuhRiRxnC7+4oDXkiubn946ynx6uJojfiLO0w1l1Yb6+FAoM6qY4ryGgkv6jm GNKF6C2/5N/fpC8RGdGtUNLdT8m8luagFrLriLvdU6nFhHXL9E6u7ZHmMBaJcBib 6LbaW3AK9gxQMf6MDPeWFT0UQ2Byg0kBBISCvPGLv4md/4iWpxkeb5fHnybahBow uEoo7llVSVPm3S8yu5Hy87BmVUAuS2EOfv7ZuLBRmj5i88mDJVfFIz/joC8e/WKZ 42XYa0FOyz7u+w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:16 2025 by rpki-client