This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft File: _ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft (raw, json) Hash identifier: 91OVTt8iZNrhR/VGK6WpSrMudeQZq1PSVqkjpr7evDo= Subject key identifier: 39:99:14:E9:6C:6F:42:7F:E2:49:BD:2E:01:C2:E2:2A:32:D2:95:22 Authority key identifier: FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6 Certificate issuer: /CN=fde72d43f4c82b1146737b116197231830bf65d6 Certificate serial: 019AF12D7E81D3577159ED130B19E535CA60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:01:21 +0000 Manifest this update: Sat 06 Dec 2025 01:01:21 +0000 Manifest next update: Sun 07 Dec 2025 01:01:21 +0000 Files and hashes: 1: NEbsKu77gYfpibY3_TC8dQH80XA.roa (hash: aeVQJbng3C7RHWncwne+AehQ3FDANQdssqp/Bjc9vag=) 2: _ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl (hash: ZAQbSkeft6rjYGhy9CY/h7OMhoSt0ldYLOZgfPkCvNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:7e:81:d3:57:71:59:ed:13:0b:19:e5:35:ca:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde72d43f4c82b1146737b116197231830bf65d6 Validity Not Before: Dec 6 01:01:21 2025 GMT Not After : Dec 7 01:01:21 2025 GMT Subject: CN=399914e96c6f427fe249bd2e01c2e22a32d29522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b3:09:09:82:10:f3:db:46:9e:f2:d1:cc:d9: f1:eb:fe:76:b4:42:b3:d4:3f:4e:43:90:3a:02:3f: 7b:9e:13:ae:35:11:a1:7a:91:43:03:1a:f6:40:3f: ad:33:c0:17:11:c6:69:82:7f:2d:a9:1d:71:f6:25: 40:ff:b3:8c:a8:55:52:5d:eb:b6:78:fa:f0:85:7b: 17:27:0f:16:fa:21:60:fb:49:66:7c:17:62:4f:9e: 7d:94:43:36:6d:5c:e5:8e:4d:7d:27:57:2c:d7:59: 6f:46:58:9a:ce:7b:03:be:ca:04:b0:32:fd:8e:50: 92:84:e4:56:a4:bf:8b:f2:19:8f:69:74:72:f2:5f: 81:93:82:c0:7c:c4:96:bf:37:98:6e:91:58:cc:36: 7c:99:48:4c:fa:75:a8:d4:f0:b2:3b:35:c6:32:b8: 9d:ca:f7:b5:3b:5b:dc:1e:9b:88:3b:8b:5b:7a:57: 00:55:37:db:b2:16:78:6d:6d:6e:a6:8e:7a:c4:8f: 32:0d:db:b3:a1:ff:d9:da:fb:be:f8:bc:a0:89:5a: e0:e0:38:79:a8:36:50:13:cb:03:75:fd:e8:ee:38: 9b:a8:25:56:c6:eb:9f:10:77:3d:2e:93:b4:de:f4: 0b:b7:0b:67:5a:1a:3d:eb:18:d5:b2:3e:da:54:f5: 1a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:99:14:E9:6C:6F:42:7F:E2:49:BD:2E:01:C2:E2:2A:32:D2:95:22 X509v3 Authority Key Identifier: keyid:FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:df:25:ae:90:f2:e6:2d:ed:f4:86:d9:15:a3:bf:ae:2f:e9: 12:6b:25:6d:15:a8:06:b4:30:14:80:44:c4:9b:02:72:c0:22: ed:b6:2b:b8:47:c9:13:7f:36:30:c7:06:f3:36:14:ea:df:80: 8b:63:f1:b6:76:31:9f:d0:0c:cf:72:e3:19:ec:0b:e6:c1:f0: 88:37:5d:e8:1f:6d:64:e6:25:b1:75:c8:2a:d8:51:87:ca:a3: 48:4f:3b:35:df:16:01:f8:60:ce:86:01:ec:1a:ed:5a:37:d4: 17:c4:7a:dd:49:3b:08:d8:c8:7d:18:eb:f0:39:8c:d5:ca:0d: 1c:c9:0a:c8:a6:60:a4:9a:62:87:17:77:f8:08:3c:75:aa:d1: 03:45:90:3f:ae:1c:94:9b:73:47:5c:74:33:5b:6a:d6:6d:e4: 2a:5f:cb:cb:52:79:4e:73:fc:75:43:94:1f:1b:7b:18:ea:9f: 5d:4d:43:10:24:9a:3a:27:d8:5f:20:d0:35:37:c8:0b:9d:d2: 77:bf:15:cb:c4:97:d4:82:5d:12:18:4a:93:16:59:69:28:68: 08:8e:c0:b9:4d:37:1d:1e:19:de:f9:e3:6f:ec:ea:b8:72:de: da:8f:fc:18:b2:c6:62:56:b8:dc:f1:9a:0f:60:fb:3c:00:d8: bd:6f:a1:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLX6B01dxWe0TCxnlNcpgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZTcyZDQzZjRjODJiMTE0NjczN2IxMTYxOTcyMzE4MzBi ZjY1ZDYwHhcNMjUxMjA2MDEwMTIxWhcNMjUxMjA3MDEwMTIxWjAzMTEwLwYDVQQD EygzOTk5MTRlOTZjNmY0MjdmZTI0OWJkMmUwMWMyZTIyYTMyZDI5NTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LMJCYIQ89tGnvLRzNnx6/52tEKz 1D9OQ5A6Aj97nhOuNRGhepFDAxr2QD+tM8AXEcZpgn8tqR1x9iVA/7OMqFVSXeu2 ePrwhXsXJw8W+iFg+0lmfBdiT559lEM2bVzljk19J1cs11lvRliaznsDvsoEsDL9 jlCShORWpL+L8hmPaXRy8l+Bk4LAfMSWvzeYbpFYzDZ8mUhM+nWo1PCyOzXGMrid yve1O1vcHpuIO4tbelcAVTfbshZ4bW1upo56xI8yDduzof/Z2vu++LygiVrg4Dh5 qDZQE8sDdf3o7jibqCVWxuufEHc9LpO03vQLtwtnWho96xjVsj7aVPUabQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmZFOlsb0J/4km9LgHC4ioy0pUiMB8GA1UdIwQY MBaAFP3nLUP0yCsRRnN7EWGXIxgwv2XWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2VjdFFfVElLeEZHYzNzUllaY2pHRENfWmRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kZWJjMjktNWIyYi00YmFiLWI0Zjct ZTFjOTE5OGNkZDg4LzEvX2VjdFFfVElLeEZHYzNzUllaY2pHRENfWmRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9kZWJjMjktNWIyYi00YmFiLWI0ZjctZTFjOTE5OGNkZDg4 LzEvX2VjdFFfVElLeEZHYzNzUllaY2pHRENfWmRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWN8lrpDy 5i3t9IbZFaO/ri/pEmslbRWoBrQwFIBExJsCcsAi7bYruEfJE382MMcG8zYU6t+A i2PxtnYxn9AMz3LjGewL5sHwiDdd6B9tZOYlsXXIKthRh8qjSE87Nd8WAfhgzoYB 7BrtWjfUF8R63Uk7CNjIfRjr8DmM1coNHMkKyKZgpJpihxd3+Ag8darRA0WQP64c lJtzR1x0M1tq1m3kKl/Ly1J5TnP8dUOUHxt7GOqfXU1DECSaOifYXyDQNTfIC53S d78Vy8SX1IJdEhhKkxZZaShoCI7AuU03HR4Z3vnjb+zquHLe2o/8GLLGYla43PGa D2D7PADYvW+hTA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:24 2025 by rpki-client