This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft File: eCMlMhowLwusExvuEcmuppblELo.mft (raw, json) Hash identifier: NJGhgbui04DXxZ6DTUbt2kAfK5hFKyqjmveZs+wv3to= Subject key identifier: 1F:53:FD:A2:65:C2:AB:1B:E0:1C:69:84:E7:4F:63:E7:8E:E5:89:57 Authority key identifier: 78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA Certificate issuer: /CN=782325321a302f0bac131bee11c9aea696e510ba Certificate serial: 019AF0BF4A1E0F4CCEC1F01C9CD3DAA31B24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft Manifest number: 0D75 Signing time: Fri 05 Dec 2025 23:00:59 +0000 Manifest this update: Fri 05 Dec 2025 23:00:59 +0000 Manifest next update: Sat 06 Dec 2025 23:00:59 +0000 Files and hashes: 1: HkPgyjtfc2I2XR8BvT3Oa9Siabg.roa (hash: AzeYfXAKdYBKYZ/1I42CQO+bIphQdlonjepjXKZIBPs=) 2: eCMlMhowLwusExvuEcmuppblELo.crl (hash: UKlp5iR6C+D+0Pn4pz7gyFD/ZZLcFMdDsY5nDwJQVJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:4a:1e:0f:4c:ce:c1:f0:1c:9c:d3:da:a3:1b:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=782325321a302f0bac131bee11c9aea696e510ba Validity Not Before: Dec 5 23:00:59 2025 GMT Not After : Dec 6 23:00:59 2025 GMT Subject: CN=1f53fda265c2ab1be01c6984e74f63e78ee58957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:92:7a:12:53:3d:10:f2:12:1f:be:06:e9:ee: 44:32:af:79:b9:99:91:84:df:02:ab:b0:d1:ef:6b: f8:85:43:59:24:71:73:68:27:b7:4e:47:b0:ea:82: 02:d7:3f:ba:ea:98:ac:ad:4d:fc:18:2e:5d:ec:f8: 3e:e8:39:2a:3e:5b:56:89:c0:f6:a9:3a:9a:0a:a5: 8b:2a:70:37:33:61:20:9e:a5:c0:a8:4e:e9:d5:d4: 36:ec:a6:21:63:05:90:10:29:16:5f:a0:3d:88:3f: ec:b6:d9:1e:50:86:06:c0:6a:b6:ee:ae:03:93:92: 7a:2b:af:a6:31:64:0f:d8:f6:9d:eb:60:d6:e2:c8: b0:79:92:a2:6b:6b:30:9d:ac:37:c1:b6:3c:55:c7: 50:3d:aa:c0:96:34:e1:c1:d4:9a:04:7f:98:f1:8d: ba:a7:3f:66:6b:e3:0f:97:9a:7a:a2:1d:e4:ee:ff: fb:16:a4:b8:30:7e:6f:fb:93:a2:47:70:3b:99:78: 79:02:8b:35:ba:de:e6:1e:8d:b1:a7:e1:97:df:fb: ed:1f:09:fa:1d:54:37:bf:e3:e4:60:37:4e:83:85: c9:d8:72:ff:05:eb:5b:48:c7:87:06:32:dc:f1:5f: e0:1a:5d:6b:4c:9b:04:6b:06:64:59:79:ef:b3:89: 03:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:53:FD:A2:65:C2:AB:1B:E0:1C:69:84:E7:4F:63:E7:8E:E5:89:57 X509v3 Authority Key Identifier: keyid:78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:8b:da:6c:b2:5c:b3:96:52:bc:fd:81:45:52:5d:c5:29:c0: 97:c0:9d:2d:7a:ef:84:72:5d:97:50:de:61:cb:2b:f6:03:51: b1:84:9b:22:45:7c:a9:fe:ae:48:84:de:55:75:2f:3f:2c:96: 96:1a:4a:e7:22:a0:45:c0:01:37:d4:9a:e5:3d:4a:ec:6c:bc: 9b:a9:a3:29:45:04:05:d4:e6:09:66:50:05:e4:7e:8d:a9:a8: 41:fb:9a:76:a0:25:33:e0:43:36:95:75:4c:1c:c4:b7:78:83: f9:05:7e:f4:01:ed:4b:05:da:44:88:f4:45:5a:ab:88:75:91: ba:08:ea:21:83:e3:b3:61:59:6e:ef:62:b4:05:42:2c:05:b2: 72:0e:e2:9b:e1:fe:af:72:be:53:5c:9a:fa:67:a1:c3:75:ff: f8:4f:48:6e:5f:ae:e3:6f:fe:ce:30:de:70:9e:c2:d2:74:b1: 96:81:9d:7c:ba:86:11:96:83:09:c1:92:c6:5f:61:1d:a7:4b: 65:ba:d5:5e:e7:86:dd:b6:98:31:38:ab:64:70:8f:48:1c:90: d6:a5:b6:3d:56:8d:0b:7e:be:c0:db:e2:29:5b:4d:ad:42:7f: 8d:05:49:ff:52:19:c1:e9:1a:f3:18:54:d7:a2:06:fe:06:d0: 96:76:1e:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv0oeD0zOwfAcnNPaoxskMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MjMyNTMyMWEzMDJmMGJhYzEzMWJlZTExYzlhZWE2OTZl NTEwYmEwHhcNMjUxMjA1MjMwMDU5WhcNMjUxMjA2MjMwMDU5WjAzMTEwLwYDVQQD EygxZjUzZmRhMjY1YzJhYjFiZTAxYzY5ODRlNzRmNjNlNzhlZTU4OTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZJ6ElM9EPISH74G6e5EMq95uZmR hN8Cq7DR72v4hUNZJHFzaCe3Tkew6oIC1z+66pisrU38GC5d7Pg+6DkqPltWicD2 qTqaCqWLKnA3M2EgnqXAqE7p1dQ27KYhYwWQECkWX6A9iD/sttkeUIYGwGq27q4D k5J6K6+mMWQP2Pad62DW4siweZKia2swnaw3wbY8VcdQParAljThwdSaBH+Y8Y26 pz9ma+MPl5p6oh3k7v/7FqS4MH5v+5OiR3A7mXh5Aos1ut7mHo2xp+GX3/vtHwn6 HVQ3v+PkYDdOg4XJ2HL/BetbSMeHBjLc8V/gGl1rTJsEawZkWXnvs4kDSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9T/aJlwqsb4BxphOdPY+eO5YlXMB8GA1UdIwQY MBaAFHgjJTIaMC8LrBMb7hHJrqaW5RC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUNNbE1ob3dMd3VzRXh2dUVjbXVwcGJsRUxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jNzU2NDItMTcyYi00MmMxLWExZDEt ZDI1NDY2YTFmYTlmLzEvZUNNbE1ob3dMd3VzRXh2dUVjbXVwcGJsRUxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9jNzU2NDItMTcyYi00MmMxLWExZDEtZDI1NDY2YTFmYTlm LzEvZUNNbE1ob3dMd3VzRXh2dUVjbXVwcGJsRUxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYvabLJc s5ZSvP2BRVJdxSnAl8CdLXrvhHJdl1DeYcsr9gNRsYSbIkV8qf6uSITeVXUvPyyW lhpK5yKgRcABN9Sa5T1K7Gy8m6mjKUUEBdTmCWZQBeR+jamoQfuadqAlM+BDNpV1 TBzEt3iD+QV+9AHtSwXaRIj0RVqriHWRugjqIYPjs2FZbu9itAVCLAWycg7im+H+ r3K+U1ya+mehw3X/+E9Ibl+u42/+zjDecJ7C0nSxloGdfLqGEZaDCcGSxl9hHadL ZbrVXueG3baYMTirZHCPSByQ1qW2PVaNC36+wNviKVtNrUJ/jQVJ/1IZweka8xhU 16IG/gbQlnYe6A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:21 2025 by rpki-client