This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft File: ECj33ciVlk4jyFY_4akArZcb8EQ.mft (raw, json) Hash identifier: DYDWgWmx6HIPidq3FnEE7v/o0kmOXAuLJFuLSto2tsE= Subject key identifier: 55:9F:0D:E1:A9:58:34:D6:21:62:88:1B:35:E5:87:93:A6:4D:E7:40 Authority key identifier: 10:28:F7:DD:C8:95:96:4E:23:C8:56:3F:E1:A9:00:AD:97:1B:F0:44 Certificate issuer: /CN=1028f7ddc895964e23c8563fe1a900ad971bf044 Certificate serial: 019AF6F8D37EF430102B68EDF14CC9BF411A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECj33ciVlk4jyFY_4akArZcb8EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft Manifest number: 0218 Signing time: Sun 07 Dec 2025 04:01:33 +0000 Manifest this update: Sun 07 Dec 2025 04:01:33 +0000 Manifest next update: Mon 08 Dec 2025 04:01:33 +0000 Files and hashes: 1: ECj33ciVlk4jyFY_4akArZcb8EQ.crl (hash: Z9Yl4DGDsmWGuh+w3LMk9QTLkhU36zjkDFhTp/Oo+MI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ECj33ciVlk4jyFY_4akArZcb8EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:d3:7e:f4:30:10:2b:68:ed:f1:4c:c9:bf:41:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1028f7ddc895964e23c8563fe1a900ad971bf044 Validity Not Before: Dec 7 04:01:33 2025 GMT Not After : Dec 8 04:01:33 2025 GMT Subject: CN=559f0de1a95834d62162881b35e58793a64de740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a2:ad:2c:6d:7d:b4:83:2f:ad:83:9f:ed:a7: 6e:65:8b:a3:aa:a5:e6:27:80:74:47:f0:a6:3a:0b: f8:84:07:bb:b5:4c:66:0c:80:ea:b3:bb:46:c8:48: 65:e5:16:16:14:49:4f:32:e2:e8:43:91:98:0b:44: 00:e7:ba:63:e3:2a:14:8e:dc:0e:62:13:0d:4b:a7: 53:8c:f3:de:dd:8e:96:9b:c7:ee:ca:36:ab:a3:d7: ac:1c:ed:c1:0d:95:64:3e:55:e4:1a:e1:3b:21:4c: 84:ce:64:bb:c3:5b:93:f8:eb:8c:22:ba:35:7b:15: 39:f5:f6:03:8f:97:a8:14:1a:cf:9d:e5:af:0d:84: 69:5d:e0:f6:21:0d:7a:45:58:bc:d7:bf:fe:eb:8d: d1:8a:b5:9c:9b:27:a7:ee:34:f7:e7:87:90:17:4e: 24:e7:45:d9:3a:f1:7b:bd:de:51:1c:89:17:9e:fd: 08:9b:a5:c9:ed:46:ca:e7:8b:db:e0:7c:83:72:1e: c0:e7:21:dd:f2:e9:f2:91:ba:bf:49:8f:86:ac:81: 50:b2:b6:7a:b1:fb:72:2b:50:44:ad:b4:f4:f1:0f: b2:8e:47:76:d8:a6:24:cc:c4:cf:0b:8e:8c:4b:ee: 2b:f9:ed:d4:40:65:d3:e4:65:d8:61:f8:7a:25:96: 06:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9F:0D:E1:A9:58:34:D6:21:62:88:1B:35:E5:87:93:A6:4D:E7:40 X509v3 Authority Key Identifier: keyid:10:28:F7:DD:C8:95:96:4E:23:C8:56:3F:E1:A9:00:AD:97:1B:F0:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECj33ciVlk4jyFY_4akArZcb8EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:fe:53:69:48:ba:fe:c2:70:c1:36:c4:12:38:09:e9:51:61: fe:11:64:f5:fc:b9:dc:76:32:58:19:c4:e3:44:79:cb:11:8c: f9:6b:b9:34:98:2c:f3:c3:96:2e:79:74:60:35:de:a4:01:ac: 4f:59:f2:37:31:d6:1d:d7:09:20:94:f8:86:fc:7d:ae:a1:12: 74:92:5a:12:8f:d8:e1:96:e1:a4:3d:8a:6c:8d:38:27:00:9d: cf:36:ee:6e:04:67:92:48:fd:74:07:14:06:87:1b:fa:45:f3: e5:53:f4:87:65:d3:8a:b5:d0:1e:54:c4:81:e8:7f:ca:ab:80: 38:bf:84:3f:68:01:56:36:55:19:a8:46:38:53:2a:f5:ca:61: 8d:96:aa:4b:72:da:98:36:ba:6d:dd:4a:b3:23:c7:03:29:bb: 34:97:49:3a:af:fd:1a:d9:0e:f7:18:c5:be:25:7e:f6:01:ca: e8:af:34:c8:71:89:76:99:99:ae:1a:c3:7b:ca:fe:42:10:c2: 7c:6c:8d:e5:bc:0e:c9:36:1e:45:35:7e:23:5f:4b:78:9f:f0: df:9d:d6:ee:31:cb:13:0d:cf:87:3c:63:87:28:8d:cf:15:45: bc:f3:09:cd:65:2e:8b:e1:31:22:1a:e4:e1:b5:29:21:94:74: a1:90:2f:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+NN+9DAQK2jt8UzJv0EaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMjhmN2RkYzg5NTk2NGUyM2M4NTYzZmUxYTkwMGFkOTcx YmYwNDQwHhcNMjUxMjA3MDQwMTMzWhcNMjUxMjA4MDQwMTMzWjAzMTEwLwYDVQQD Eyg1NTlmMGRlMWE5NTgzNGQ2MjE2Mjg4MWIzNWU1ODc5M2E2NGRlNzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KKtLG19tIMvrYOf7aduZYujqqXm J4B0R/CmOgv4hAe7tUxmDIDqs7tGyEhl5RYWFElPMuLoQ5GYC0QA57pj4yoUjtwO YhMNS6dTjPPe3Y6Wm8fuyjaro9esHO3BDZVkPlXkGuE7IUyEzmS7w1uT+OuMIro1 exU59fYDj5eoFBrPneWvDYRpXeD2IQ16RVi817/+643RirWcmyen7jT354eQF04k 50XZOvF7vd5RHIkXnv0Im6XJ7UbK54vb4HyDch7A5yHd8unykbq/SY+GrIFQsrZ6 sftyK1BErbT08Q+yjkd22KYkzMTPC46MS+4r+e3UQGXT5GXYYfh6JZYG7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWfDeGpWDTWIWKIGzXlh5OmTedAMB8GA1UdIwQY MBaAFBAo993IlZZOI8hWP+GpAK2XG/BEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUNqMzNjaVZsazRqeUZZXzRha0FyWmNiOEVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83NzMzNmEtYjU4My00YjEyLTlhZjAt ZmM1NDAzNjVlZmY3LzEvRUNqMzNjaVZsazRqeUZZXzRha0FyWmNiOEVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83NzMzNmEtYjU4My00YjEyLTlhZjAtZmM1NDAzNjVlZmY3 LzEvRUNqMzNjaVZsazRqeUZZXzRha0FyWmNiOEVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYv5TaUi6 /sJwwTbEEjgJ6VFh/hFk9fy53HYyWBnE40R5yxGM+Wu5NJgs88OWLnl0YDXepAGs T1nyNzHWHdcJIJT4hvx9rqESdJJaEo/Y4ZbhpD2KbI04JwCdzzbubgRnkkj9dAcU Bocb+kXz5VP0h2XTirXQHlTEgeh/yquAOL+EP2gBVjZVGahGOFMq9cphjZaqS3La mDa6bd1KsyPHAym7NJdJOq/9GtkO9xjFviV+9gHK6K80yHGJdpmZrhrDe8r+QhDC fGyN5bwOyTYeRTV+I19LeJ/w353W7jHLEw3PhzxjhyiNzxVFvPMJzWUui+ExIhrk 4bUpIZR0oZAvBA== -----END CERTIFICATE-----Generated at Sun Dec 7 06:39:08 2025 by rpki-client