This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft File: ecIGSHmLtlNrI6TrxYgEVBX5boA.mft (raw, json) Hash identifier: ns5t5/IiFh5A1CldYdQkR22Jrn5EeQM3Uw4AwcA9R5Q= Subject key identifier: B0:9E:6A:6F:3F:6C:EF:77:63:14:9D:8A:7C:8D:33:97:3E:6D:2A:0C Authority key identifier: 79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80 Certificate issuer: /CN=79c20648798bb6536b23a4ebc588045415f96e80 Certificate serial: 019AF19B48461764D0C0D2CF08E3812C612A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft Manifest number: 071A Signing time: Sat 06 Dec 2025 03:01:16 +0000 Manifest this update: Sat 06 Dec 2025 03:01:16 +0000 Manifest next update: Sun 07 Dec 2025 03:01:16 +0000 Files and hashes: 1: ecIGSHmLtlNrI6TrxYgEVBX5boA.crl (hash: ud1LegnKN+5cGpaR1lPNIm3EOVvD2bHMkopgMFwCIXc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.crl rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:48:46:17:64:d0:c0:d2:cf:08:e3:81:2c:61:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79c20648798bb6536b23a4ebc588045415f96e80 Validity Not Before: Dec 6 03:01:16 2025 GMT Not After : Dec 7 03:01:16 2025 GMT Subject: CN=b09e6a6f3f6cef7763149d8a7c8d33973e6d2a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:06:01:7c:d0:28:55:99:14:b9:02:60:dc: b1:9c:60:01:3a:3c:fe:ff:68:4e:0a:e1:2f:9c:a5: 98:7f:93:c1:96:43:ba:e3:e3:0b:53:7b:a1:a8:94: 48:9a:b1:1a:9e:86:c7:18:14:5c:f5:9e:2d:28:5c: 56:e5:2d:fa:d6:7e:87:ed:1e:b4:c8:8b:0e:25:a9: 37:4b:14:b5:b0:74:48:38:61:bd:53:16:e1:f5:d3: 95:6d:89:8e:5c:ba:0f:5d:8d:98:2f:11:40:e7:45: 40:e1:81:84:fe:29:95:d5:ad:18:6d:ee:c5:03:d2: 98:7e:48:a5:05:08:59:d5:0c:ca:e1:66:02:94:2c: 40:30:69:2e:36:95:b2:0a:1c:9e:63:7f:ab:84:99: 07:69:29:45:02:e2:2e:1c:d6:6f:08:0c:2b:9e:0c: e2:3d:cc:05:a0:dc:ac:da:75:37:59:f7:5f:0c:d0: 42:49:25:f3:d4:99:a9:d3:0f:00:17:c6:2f:e6:f5: 7f:82:40:6f:60:44:48:08:e4:c1:23:1d:4d:9e:43: 5c:14:62:46:ab:21:b4:51:f6:93:79:a5:6a:2a:a4: 16:57:17:80:d4:1f:80:25:7e:91:b4:4e:cf:4e:a7: 90:f4:e6:b1:dd:d3:2f:24:39:08:43:6e:59:12:59: e0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9E:6A:6F:3F:6C:EF:77:63:14:9D:8A:7C:8D:33:97:3E:6D:2A:0C X509v3 Authority Key Identifier: keyid:79:C2:06:48:79:8B:B6:53:6B:23:A4:EB:C5:88:04:54:15:F9:6E:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecIGSHmLtlNrI6TrxYgEVBX5boA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/405c31-724e-47c1-94e0-1fa16ef8c1ad/1/ecIGSHmLtlNrI6TrxYgEVBX5boA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:c0:79:48:70:ff:c8:07:68:09:5d:57:57:09:72:6b:63:1c: fb:62:ba:49:9b:71:c7:f7:4d:26:bd:1a:4c:0a:fe:3f:ca:a9: 28:1f:36:98:cc:7f:b0:17:40:e4:88:10:bd:89:e0:87:8f:8d: c4:7b:73:03:35:70:61:49:0d:70:04:e5:46:a0:97:f5:a8:5e: 5a:a1:b4:d5:02:da:6a:a0:d0:a3:d8:fb:a0:60:bc:e8:2d:14: 61:d2:b8:3b:a4:2a:6c:d7:00:5b:6c:e3:1b:bd:dd:6b:35:f8: de:a1:ec:7c:dc:72:68:29:7d:e4:c3:d4:d9:3c:3b:60:ba:95: 97:c8:30:a1:bc:7e:1f:a6:7c:fd:be:80:ed:c2:1b:d5:81:7e: c3:b9:90:96:50:21:88:d1:21:34:e1:e6:c4:48:69:0d:94:c5: 16:1a:78:c7:1b:dd:11:b1:8c:de:92:93:d8:2a:ae:4d:f3:3b: 1c:9e:0f:0d:53:95:c8:95:15:5b:e9:8c:0e:b4:9a:65:75:af: d8:43:ef:3b:37:ed:f6:74:64:35:c2:ad:f2:48:86:71:44:7c: 78:b4:01:18:f0:c4:90:0a:ab:b5:41:dc:6a:9a:7c:0c:82:b9: c2:50:7d:02:2e:e3:8f:d2:93:6a:e1:da:07:f6:dc:e1:7c:fa: 82:e8:eb:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0hGF2TQwNLPCOOBLGEqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YzIwNjQ4Nzk4YmI2NTM2YjIzYTRlYmM1ODgwNDU0MTVm OTZlODAwHhcNMjUxMjA2MDMwMTE2WhcNMjUxMjA3MDMwMTE2WjAzMTEwLwYDVQQD EyhiMDllNmE2ZjNmNmNlZjc3NjMxNDlkOGE3YzhkMzM5NzNlNmQyYTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2IGAXzQKFWZFLkCYNyxnGABOjz+ /2hOCuEvnKWYf5PBlkO64+MLU3uhqJRImrEanobHGBRc9Z4tKFxW5S361n6H7R60 yIsOJak3SxS1sHRIOGG9Uxbh9dOVbYmOXLoPXY2YLxFA50VA4YGE/imV1a0Ybe7F A9KYfkilBQhZ1QzK4WYClCxAMGkuNpWyChyeY3+rhJkHaSlFAuIuHNZvCAwrngzi PcwFoNys2nU3WfdfDNBCSSXz1Jmp0w8AF8Yv5vV/gkBvYERICOTBIx1NnkNcFGJG qyG0UfaTeaVqKqQWVxeA1B+AJX6RtE7PTqeQ9Oax3dMvJDkIQ25ZElng1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCeam8/bO93YxSdinyNM5c+bSoMMB8GA1UdIwQY MBaAFHnCBkh5i7ZTayOk68WIBFQV+W6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWNJR1NIbUx0bE5ySTZUcnhZZ0VWQlg1Ym9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS80MDVjMzEtNzI0ZS00N2MxLTk0ZTAt MWZhMTZlZjhjMWFkLzEvZWNJR1NIbUx0bE5ySTZUcnhZZ0VWQlg1Ym9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS80MDVjMzEtNzI0ZS00N2MxLTk0ZTAtMWZhMTZlZjhjMWFk LzEvZWNJR1NIbUx0bE5ySTZUcnhZZ0VWQlg1Ym9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMB5SHD/ yAdoCV1XVwlya2Mc+2K6SZtxx/dNJr0aTAr+P8qpKB82mMx/sBdA5IgQvYngh4+N xHtzAzVwYUkNcATlRqCX9aheWqG01QLaaqDQo9j7oGC86C0UYdK4O6QqbNcAW2zj G73dazX43qHsfNxyaCl95MPU2Tw7YLqVl8gwobx+H6Z8/b6A7cIb1YF+w7mQllAh iNEhNOHmxEhpDZTFFhp4xxvdEbGM3pKT2CquTfM7HJ4PDVOVyJUVW+mMDrSaZXWv 2EPvOzft9nRkNcKt8kiGcUR8eLQBGPDEkAqrtUHcapp8DIK5wlB9Ai7jj9KTauHa B/bc4Xz6gujrcA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:14:15 2025 by rpki-client