This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft File: ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft (raw, json) Hash identifier: BSBOvo/J043FSthQXd7n/789FHsUheaVCaC5It1p0Ac= Subject key identifier: 01:87:14:8F:DD:BA:D1:58:AA:FD:55:EC:85:51:47:94:95:F7:1B:73 Authority key identifier: 10:2B:C9:8D:33:27:09:52:53:41:30:AF:B4:DE:69:6D:8C:34:02:15 Certificate issuer: /CN=102bc98d33270952534130afb4de696d8c340215 Certificate serial: 019AF1D20ECA52F7395434A0F1AE44BF8764 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECvJjTMnCVJTQTCvtN5pbYw0AhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft Manifest number: 0753 Signing time: Sat 06 Dec 2025 04:01:06 +0000 Manifest this update: Sat 06 Dec 2025 04:01:06 +0000 Manifest next update: Sun 07 Dec 2025 04:01:06 +0000 Files and hashes: 1: 1SfNvqGgo1qML8I5aKV28i3iaWs.roa (hash: pMgk3yqfYUxUqHeyCSRb0WlafuNDjwlQN8z3HdRW4rk=) 2: ECvJjTMnCVJTQTCvtN5pbYw0AhU.crl (hash: d4xWlc+GgydTOTvqHa/ML0L0nSWsHXIyySZrvPiw2zs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.crl rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft rsync://rpki.ripe.net/repository/DEFAULT/ECvJjTMnCVJTQTCvtN5pbYw0AhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:0e:ca:52:f7:39:54:34:a0:f1:ae:44:bf:87:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=102bc98d33270952534130afb4de696d8c340215 Validity Not Before: Dec 6 04:01:06 2025 GMT Not After : Dec 7 04:01:06 2025 GMT Subject: CN=0187148fddbad158aafd55ec8551479495f71b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f3:bb:0c:15:67:84:d2:67:97:b6:d9:38:75: 90:2f:cd:01:6d:ae:40:d0:d1:fc:be:78:df:b5:6d: 48:d1:40:65:48:b0:fc:68:88:70:9f:1c:1e:7f:70: 98:0e:a3:03:34:38:a3:cc:ff:a2:79:38:9c:df:82: 7b:a2:d6:b9:30:f2:16:34:97:db:64:a0:e5:a5:56: 50:27:95:d4:2f:f1:82:e3:3e:27:d5:80:4b:3f:f5: 17:a1:68:0f:0f:4b:ce:fd:d4:2b:43:32:e1:ce:79: 1f:b4:82:7d:c0:3e:8f:f3:3b:8f:3e:fa:b5:a2:9f: cd:48:e5:cc:0e:92:9c:f6:e1:0f:63:09:28:5c:b6: 9c:3a:ea:57:58:ce:fd:77:03:f5:87:15:e4:24:b9: c8:f8:85:bd:6b:72:8f:3a:4f:c5:84:ef:47:f9:1d: f5:5a:38:36:09:37:2a:af:00:cd:46:31:90:f2:20: 36:02:e4:bb:9f:25:8b:d5:4a:7e:58:85:ad:c4:f1: cf:48:0e:fb:3c:6f:cf:97:0c:8f:45:dd:62:54:cd: 8f:4e:69:d0:ae:b1:ac:16:69:00:59:c5:13:02:18: 37:4a:28:1e:68:26:fc:85:5d:25:21:6d:1f:e4:73: e0:6c:b1:be:11:1b:1d:97:50:1d:ea:1a:fd:a8:46: 27:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:87:14:8F:DD:BA:D1:58:AA:FD:55:EC:85:51:47:94:95:F7:1B:73 X509v3 Authority Key Identifier: keyid:10:2B:C9:8D:33:27:09:52:53:41:30:AF:B4:DE:69:6D:8C:34:02:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECvJjTMnCVJTQTCvtN5pbYw0AhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/93c9d8-5183-407b-82d0-8ee5fa4331be/1/ECvJjTMnCVJTQTCvtN5pbYw0AhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:3d:da:07:21:a7:6d:6c:b2:9f:96:ff:bf:79:0c:fd:80:bc: 2e:d0:be:a0:28:25:4c:92:d0:3d:49:ec:5b:de:93:a8:10:bb: c3:25:1a:10:8a:75:e1:8c:e1:a5:a8:d4:6b:bd:fa:30:9e:ce: 85:c0:36:c6:0d:13:63:7b:f1:72:80:67:a9:b0:22:4a:71:63: 5e:cf:52:65:a0:a2:4b:6f:6c:99:4d:b2:e8:df:96:b5:dc:7b: 24:e6:a4:48:90:30:5a:71:15:ba:95:69:98:a4:8d:5d:ac:f2: c9:5e:1d:9a:34:87:8f:88:82:d8:8d:dc:14:08:8c:43:69:08: 89:92:bf:06:19:2b:81:67:1b:7a:f4:62:97:11:39:62:b8:06: 9b:99:4e:cb:2a:ef:64:21:a4:87:08:79:63:1a:7b:7b:a6:d6: d6:6b:d5:98:05:d8:08:c3:44:5d:5e:8b:49:63:3e:1e:48:69: 5e:cd:1c:f0:f6:bf:3e:ab:14:7f:43:be:68:7a:e8:16:fa:81: 79:54:c0:63:57:95:e2:d8:c6:1c:01:49:61:c5:ee:f7:3e:a1: f4:cf:0e:95:b7:66:2c:29:33:32:2c:b9:70:94:3d:ef:15:45: 39:b3:ee:c6:da:0f:16:d5:34:a5:f9:06:0f:b9:0c:fd:50:8f: 28:53:d8:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0g7KUvc5VDSg8a5Ev4dkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMmJjOThkMzMyNzA5NTI1MzQxMzBhZmI0ZGU2OTZkOGMz NDAyMTUwHhcNMjUxMjA2MDQwMTA2WhcNMjUxMjA3MDQwMTA2WjAzMTEwLwYDVQQD EygwMTg3MTQ4ZmRkYmFkMTU4YWFmZDU1ZWM4NTUxNDc5NDk1ZjcxYjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPO7DBVnhNJnl7bZOHWQL80Bba5A 0NH8vnjftW1I0UBlSLD8aIhwnxwef3CYDqMDNDijzP+ieTic34J7ota5MPIWNJfb ZKDlpVZQJ5XUL/GC4z4n1YBLP/UXoWgPD0vO/dQrQzLhznkftIJ9wD6P8zuPPvq1 op/NSOXMDpKc9uEPYwkoXLacOupXWM79dwP1hxXkJLnI+IW9a3KPOk/FhO9H+R31 Wjg2CTcqrwDNRjGQ8iA2AuS7nyWL1Up+WIWtxPHPSA77PG/PlwyPRd1iVM2PTmnQ rrGsFmkAWcUTAhg3SigeaCb8hV0lIW0f5HPgbLG+ERsdl1Ad6hr9qEYnpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGHFI/dutFYqv1V7IVRR5SV9xtzMB8GA1UdIwQY MBaAFBAryY0zJwlSU0Ewr7TeaW2MNAIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUN2SmpUTW5DVkpUUVRDdnRONXBiWXcwQWhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS85M2M5ZDgtNTE4My00MDdiLTgyZDAt OGVlNWZhNDMzMWJlLzEvRUN2SmpUTW5DVkpUUVRDdnRONXBiWXcwQWhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS85M2M5ZDgtNTE4My00MDdiLTgyZDAtOGVlNWZhNDMzMWJl LzEvRUN2SmpUTW5DVkpUUVRDdnRONXBiWXcwQWhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjD3aByGn bWyyn5b/v3kM/YC8LtC+oCglTJLQPUnsW96TqBC7wyUaEIp14YzhpajUa736MJ7O hcA2xg0TY3vxcoBnqbAiSnFjXs9SZaCiS29smU2y6N+Wtdx7JOakSJAwWnEVupVp mKSNXazyyV4dmjSHj4iC2I3cFAiMQ2kIiZK/BhkrgWcbevRilxE5YrgGm5lOyyrv ZCGkhwh5Yxp7e6bW1mvVmAXYCMNEXV6LSWM+HkhpXs0c8Pa/PqsUf0O+aHroFvqB eVTAY1eV4tjGHAFJYcXu9z6h9M8OlbdmLCkzMiy5cJQ97xVFObPuxtoPFtU0pfkG D7kM/VCPKFPYdA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:42 2025 by rpki-client