This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft File: ec1L08m_4g3M_isZ3iMJXKJHSDU.mft (raw, json) Hash identifier: fUK3Xn+VsNUsAzwLMLcGkkL3CySufbOq9FNdv+hNN/I= Subject key identifier: E4:04:40:CF:A8:D9:2D:00:A3:37:6C:67:0B:8D:C7:B4:19:26:82:03 Authority key identifier: 79:CD:4B:D3:C9:BF:E2:0D:CC:FE:2B:19:DE:23:09:5C:A2:47:48:35 Certificate issuer: /CN=79cd4bd3c9bfe20dccfe2b19de23095ca2474835 Certificate serial: 019AF19AD8D2E51564B211EBF313E09D3BA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft Manifest number: 0E43 Signing time: Sat 06 Dec 2025 03:00:48 +0000 Manifest this update: Sat 06 Dec 2025 03:00:48 +0000 Manifest next update: Sun 07 Dec 2025 03:00:48 +0000 Files and hashes: 1: RI4n8PF4rBIO32JAZiAFIMrum4w.roa (hash: 5SmITQJiZpZC1yYBE1LcmqDZ6YGT1Ir0nVy19fwLnlQ=) 2: ec1L08m_4g3M_isZ3iMJXKJHSDU.crl (hash: NK1x5UGQunYsiNJRU24sqc3X2bh6CD5TfhdwV0RVDrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d8:d2:e5:15:64:b2:11:eb:f3:13:e0:9d:3b:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79cd4bd3c9bfe20dccfe2b19de23095ca2474835 Validity Not Before: Dec 6 03:00:48 2025 GMT Not After : Dec 7 03:00:48 2025 GMT Subject: CN=e40440cfa8d92d00a3376c670b8dc7b419268203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fe:ad:a4:f7:e6:b8:af:98:5e:38:e0:ed:cc: 52:1e:09:bb:82:ba:98:d4:57:7e:48:23:8b:1e:ac: be:ed:96:c7:e5:9d:26:40:ce:42:bb:6b:e3:30:e6: 2f:94:2a:13:1c:97:72:26:e4:41:e7:f1:67:09:ba: 48:56:94:4a:c9:5e:56:3a:fe:fa:7c:8c:05:07:af: 3d:63:21:dd:b9:b2:2d:98:83:b7:27:c6:e2:01:26: 88:3a:9a:3c:28:a0:53:90:a3:7e:87:f5:da:de:4d: 50:9e:a1:29:da:3a:84:e3:0e:9d:16:57:6f:bf:7b: 24:84:89:c3:85:78:0c:ef:9c:52:c4:d5:32:1b:c2: c2:62:f6:45:f8:e2:ba:96:24:89:a8:33:4b:df:1b: cb:99:bf:b8:24:f8:08:d3:8d:b2:7d:9d:dc:fb:28: 62:b9:40:e8:12:4d:41:ed:52:14:95:88:5d:17:07: ba:94:18:4a:1a:5b:aa:5d:ed:fb:85:a7:3e:36:94: a1:1c:76:9c:23:ed:38:eb:de:ba:ce:e9:ef:7a:52: 55:47:89:a6:8e:26:fd:d9:59:12:c7:17:0c:56:e1: c5:30:e9:1d:05:89:24:51:8c:4b:c6:f9:3f:d8:c3: 31:7c:b1:3a:b3:31:38:b8:49:06:f9:3d:86:26:cb: ba:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:04:40:CF:A8:D9:2D:00:A3:37:6C:67:0B:8D:C7:B4:19:26:82:03 X509v3 Authority Key Identifier: keyid:79:CD:4B:D3:C9:BF:E2:0D:CC:FE:2B:19:DE:23:09:5C:A2:47:48:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:83:97:13:06:28:59:00:64:05:fa:cc:1a:b8:fe:aa:63:86: bc:1a:b4:57:56:66:c0:5b:7c:a0:84:33:15:0e:90:a1:0b:5e: 75:55:a3:17:15:b9:b4:aa:8f:d6:d8:ca:f6:eb:e9:38:8f:db: 35:c1:38:3d:03:16:93:f9:de:b8:dc:62:62:a9:bb:16:10:fa: 30:66:6b:ce:2b:82:7b:c7:42:bc:61:cd:cb:d2:f2:ae:78:64: 1e:72:7d:22:3d:dc:82:1b:e8:71:70:79:56:79:71:a5:1a:59: 76:7f:b8:71:7f:bd:7e:e2:c7:91:ca:e8:6c:94:1c:9d:70:fc: 24:55:34:03:64:09:cc:63:ce:03:79:f5:a8:44:94:0a:96:e0: 40:ba:10:92:14:64:71:00:34:f4:b2:df:13:4a:85:95:51:ef: c0:52:8a:cb:f7:ff:08:6c:16:92:47:18:6c:c2:a1:ec:c1:7c: e5:cb:77:c9:9a:1c:f5:f1:c0:29:8c:2f:c7:c5:32:98:0e:b8: 0b:3e:f3:73:3e:7e:19:fc:98:d8:33:56:84:d3:e6:82:7d:9f: 49:c3:16:8a:75:c4:3a:8d:91:68:91:a3:80:51:d8:89:e8:ce: 9f:57:01:05:19:dd:69:34:59:81:4f:cd:d2:4d:df:8a:2b:e5: 34:18:71:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtjS5RVkshHr8xPgnTuhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Y2Q0YmQzYzliZmUyMGRjY2ZlMmIxOWRlMjMwOTVjYTI0 NzQ4MzUwHhcNMjUxMjA2MDMwMDQ4WhcNMjUxMjA3MDMwMDQ4WjAzMTEwLwYDVQQD EyhlNDA0NDBjZmE4ZDkyZDAwYTMzNzZjNjcwYjhkYzdiNDE5MjY4MjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/6tpPfmuK+YXjjg7cxSHgm7grqY 1Fd+SCOLHqy+7ZbH5Z0mQM5Cu2vjMOYvlCoTHJdyJuRB5/FnCbpIVpRKyV5WOv76 fIwFB689YyHdubItmIO3J8biASaIOpo8KKBTkKN+h/Xa3k1QnqEp2jqE4w6dFldv v3skhInDhXgM75xSxNUyG8LCYvZF+OK6liSJqDNL3xvLmb+4JPgI042yfZ3c+yhi uUDoEk1B7VIUlYhdFwe6lBhKGluqXe37hac+NpShHHacI+046966zunvelJVR4mm jib92VkSxxcMVuHFMOkdBYkkUYxLxvk/2MMxfLE6szE4uEkG+T2GJsu6ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQEQM+o2S0AozdsZwuNx7QZJoIDMB8GA1UdIwQY MBaAFHnNS9PJv+INzP4rGd4jCVyiR0g1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWMxTDA4bV80ZzNNX2lzWjNpTUpYS0pIU0RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mZmE5NDktODZjNC00OTg0LTg1NTct MmMyYzVmYmRhMzQxLzEvZWMxTDA4bV80ZzNNX2lzWjNpTUpYS0pIU0RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9mZmE5NDktODZjNC00OTg0LTg1NTctMmMyYzVmYmRhMzQx LzEvZWMxTDA4bV80ZzNNX2lzWjNpTUpYS0pIU0RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoOXEwYo WQBkBfrMGrj+qmOGvBq0V1ZmwFt8oIQzFQ6QoQtedVWjFxW5tKqP1tjK9uvpOI/b NcE4PQMWk/neuNxiYqm7FhD6MGZrziuCe8dCvGHNy9LyrnhkHnJ9Ij3cghvocXB5 VnlxpRpZdn+4cX+9fuLHkcrobJQcnXD8JFU0A2QJzGPOA3n1qESUCpbgQLoQkhRk cQA09LLfE0qFlVHvwFKKy/f/CGwWkkcYbMKh7MF85ct3yZoc9fHAKYwvx8UymA64 Cz7zcz5+GfyY2DNWhNPmgn2fScMWinXEOo2RaJGjgFHYiejOn1cBBRndaTRZgU/N 0k3fiivlNBhxQw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:00:38 2025 by rpki-client