This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft File: lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft (raw, json) Hash identifier: DK8yb/cAHhrM2zy8jt1fIUJyEdQQQ/GuFT0bhCrLhzw= Subject key identifier: 93:A2:19:19:90:89:61:DD:FD:AB:88:ED:43:85:25:F3:2E:85:A6:23 Authority key identifier: 94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9 Certificate issuer: /CN=94472e859957355da5ddd13496d70d70773491f9 Certificate serial: 019B3CEBDDAC831FAC5FF8C938C64C38BDE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft Manifest number: 10AB Signing time: Sat 20 Dec 2025 18:00:49 +0000 Manifest this update: Sat 20 Dec 2025 18:00:49 +0000 Manifest next update: Sun 21 Dec 2025 18:00:49 +0000 Files and hashes: 1: lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl (hash: giYYAPL64gI4Bx0UM1jsuGMjPF/Dn2H5BL6YE2IIAnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:dd:ac:83:1f:ac:5f:f8:c9:38:c6:4c:38:bd:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94472e859957355da5ddd13496d70d70773491f9 Validity Not Before: Dec 20 18:00:49 2025 GMT Not After : Dec 21 18:00:49 2025 GMT Subject: CN=93a21919908961ddfdab88ed438525f32e85a623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8f:c9:ec:e4:d0:c4:b9:62:3c:da:e5:e0:e2: 93:13:17:66:dc:87:16:bf:ba:ff:ff:dc:0f:ae:c5: 13:7b:9a:27:66:b7:e7:9f:e7:a5:f0:5f:b3:10:62: 80:af:a6:43:f1:a1:d9:3a:3c:6c:9d:99:f2:24:37: f0:18:ad:72:5a:b4:ec:7f:40:85:6a:c2:3b:52:58: 4e:a3:fa:f3:af:11:d1:62:0a:94:e5:72:80:c2:c6: e1:25:70:82:bd:d2:12:ae:f7:c6:3a:99:16:70:4b: 65:33:43:2d:fb:52:7f:11:0e:bc:fc:fa:fe:79:9a: 14:4a:05:47:6e:9c:f4:b9:0c:7f:48:7f:ba:96:d2: 99:f8:43:26:d9:69:64:37:78:b3:81:aa:7b:65:14: ff:ef:e5:c1:34:f9:85:14:f6:0f:b3:0c:d9:3a:86: 68:bf:9a:4b:f6:d6:e2:22:c0:f9:90:63:fd:75:c0: 8b:22:4a:1a:b7:72:41:ba:da:4d:60:a0:2c:5b:5a: b4:ed:0d:c1:82:7f:07:d9:10:f5:3c:55:5f:51:14: 06:56:57:4d:46:cb:7b:05:ca:99:83:2b:da:07:27: cb:90:25:06:5a:41:c6:3e:a3:e9:a6:f1:6b:97:17: 9a:cd:4e:67:28:00:dc:59:82:f0:0d:ff:0d:fe:5b: f1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A2:19:19:90:89:61:DD:FD:AB:88:ED:43:85:25:F3:2E:85:A6:23 X509v3 Authority Key Identifier: keyid:94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:50:c7:80:ee:40:23:27:5a:f1:71:2e:6f:7f:f6:ab:00:31: ad:f7:c0:53:95:2c:cc:a0:00:a2:5a:a5:dd:6d:47:ba:84:02: 8d:6e:b0:5d:cb:8d:e4:72:0e:ad:68:5a:7d:c3:db:c2:d1:b9: 86:bf:85:07:f3:df:35:5c:23:d0:14:ab:d4:35:81:bb:13:17: 01:3e:8c:b5:d6:1f:ea:c4:fe:6d:21:01:62:82:3a:56:d4:5b: 30:23:bb:4a:11:87:5a:b9:9f:1c:c9:38:1d:5b:e8:ff:d3:c6: ac:70:39:6c:9b:ca:ca:0a:ec:fc:07:63:06:f3:07:97:39:20: c7:f9:1e:de:c1:8c:e3:20:a0:0b:e8:79:99:6e:31:24:88:b7: 96:9e:4e:3e:2b:80:39:ee:f3:0a:f3:f8:67:a8:d4:98:90:53: ea:82:e5:4b:d5:94:6d:ab:d8:07:be:17:5f:5b:6f:e7:3c:10: 11:1c:48:f9:e0:c9:72:4e:18:60:e5:03:18:14:50:b2:e1:97: 87:88:6f:1c:6e:66:d0:ed:62:be:0a:c0:6b:e2:4a:a5:31:e2: 42:53:72:63:5a:4d:4f:1d:42:3b:3e:1b:0f:47:47:45:4d:f3: 8e:c6:cf:40:7f:e3:da:9e:43:17:5f:be:c7:49:46:3a:92:e7: d3:91:c4:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8692sgx+sX/jJOMZMOL3mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NDcyZTg1OTk1NzM1NWRhNWRkZDEzNDk2ZDcwZDcwNzcz NDkxZjkwHhcNMjUxMjIwMTgwMDQ5WhcNMjUxMjIxMTgwMDQ5WjAzMTEwLwYDVQQD Eyg5M2EyMTkxOTkwODk2MWRkZmRhYjg4ZWQ0Mzg1MjVmMzJlODVhNjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI/J7OTQxLliPNrl4OKTExdm3IcW v7r//9wPrsUTe5onZrfnn+el8F+zEGKAr6ZD8aHZOjxsnZnyJDfwGK1yWrTsf0CF asI7UlhOo/rzrxHRYgqU5XKAwsbhJXCCvdISrvfGOpkWcEtlM0Mt+1J/EQ68/Pr+ eZoUSgVHbpz0uQx/SH+6ltKZ+EMm2WlkN3izgap7ZRT/7+XBNPmFFPYPswzZOoZo v5pL9tbiIsD5kGP9dcCLIkoat3JButpNYKAsW1q07Q3Bgn8H2RD1PFVfURQGVldN Rst7BcqZgyvaByfLkCUGWkHGPqPppvFrlxeazU5nKADcWYLwDf8N/lvxOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOiGRmQiWHd/auI7UOFJfMuhaYjMB8GA1UdIwQY MBaAFJRHLoWZVzVdpd3RNJbXDXB3NJH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEVjdWhabFhOVjJsM2RFMGx0Y05jSGMwa2ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNmMxOGEtNTVlZi00MTE4LTk3MGMt NjBkMWVkODBjN2NmLzEvbEVjdWhabFhOVjJsM2RFMGx0Y05jSGMwa2ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kNmMxOGEtNTVlZi00MTE4LTk3MGMtNjBkMWVkODBjN2Nm LzEvbEVjdWhabFhOVjJsM2RFMGx0Y05jSGMwa2ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlDHgO5A Iyda8XEub3/2qwAxrffAU5UszKAAolql3W1HuoQCjW6wXcuN5HIOrWhafcPbwtG5 hr+FB/PfNVwj0BSr1DWBuxMXAT6MtdYf6sT+bSEBYoI6VtRbMCO7ShGHWrmfHMk4 HVvo/9PGrHA5bJvKygrs/AdjBvMHlzkgx/ke3sGM4yCgC+h5mW4xJIi3lp5OPiuA Oe7zCvP4Z6jUmJBT6oLlS9WUbavYB74XX1tv5zwQERxI+eDJck4YYOUDGBRQsuGX h4hvHG5m0O1ivgrAa+JKpTHiQlNyY1pNTx1COz4bD0dHRU3zjsbPQH/j2p5DF1++ x0lGOpLn05HExw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:26:17 2025 by rpki-client