This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft File: ecuROUt5B4HTqHc6hV5amjryCBA.mft (raw, json) Hash identifier: QbSFgcbjVGyIwmO0hl5zU1B6vhjQmpqPbMGGThZ4aG0= Subject key identifier: E7:EA:A4:B4:2F:41:4F:3A:EE:F6:71:E4:13:52:92:CE:67:70:D5:4D Authority key identifier: 79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10 Certificate issuer: /CN=79cb91394b790781d3a8773a855e5a9a3af20810 Certificate serial: 019B43C9B27D6C453FE780440E985F29D6FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft Manifest number: 02D4 Signing time: Mon 22 Dec 2025 02:00:50 +0000 Manifest this update: Mon 22 Dec 2025 02:00:50 +0000 Manifest next update: Tue 23 Dec 2025 02:00:50 +0000 Files and hashes: 1: ecuROUt5B4HTqHc6hV5amjryCBA.crl (hash: rQYYZQv9LTP8T5prigE7/tXwgu6wt65uj2e756JEYHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.crl rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 02:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:b2:7d:6c:45:3f:e7:80:44:0e:98:5f:29:d6:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79cb91394b790781d3a8773a855e5a9a3af20810 Validity Not Before: Dec 22 02:00:50 2025 GMT Not After : Dec 23 02:00:50 2025 GMT Subject: CN=e7eaa4b42f414f3aeef671e4135292ce6770d54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8f:fb:a8:d2:56:a1:63:17:01:bb:59:57:76: 1a:06:0b:ad:d0:c0:5f:1c:7b:d1:2c:b2:01:56:a0: cf:b7:29:f4:f8:4c:a4:8b:da:29:fa:ce:a3:0f:2a: c7:4d:ae:b8:4d:30:a7:f3:59:fe:bd:16:d9:f2:d0: 1f:99:dc:82:2b:74:b9:71:3d:8c:c9:87:e6:49:11: de:4f:63:b1:e9:b0:95:3a:3b:9e:37:c0:12:92:c4: ba:e5:36:0c:42:3d:14:57:f2:73:e7:6b:bb:7c:4f: 75:ea:fc:f9:07:e9:1d:10:04:52:bf:cf:4f:38:93: ce:aa:d0:27:64:7e:1d:3d:86:40:49:55:e3:12:84: f2:56:01:cd:9d:2e:33:94:3f:54:6b:1a:5b:03:8e: 1d:e0:d8:56:9e:b9:e8:a6:f5:2c:bd:6f:97:87:a1: 4c:68:98:51:f2:89:91:9a:e6:76:ee:51:d1:af:79: 95:41:c1:e4:46:c9:9a:03:fc:a8:6b:b1:06:55:50: cd:00:5b:07:a6:02:d0:11:71:df:8f:5a:82:f9:d9: 2b:04:2e:27:92:ea:7d:32:66:98:a0:7c:0a:d0:8b: f8:ef:6d:c2:21:f0:4b:20:98:31:3a:cf:19:d9:45: 89:6e:95:cf:a0:d1:82:77:90:9a:44:3f:fd:ae:54: a3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EA:A4:B4:2F:41:4F:3A:EE:F6:71:E4:13:52:92:CE:67:70:D5:4D X509v3 Authority Key Identifier: keyid:79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:ae:09:7a:3e:6f:ee:f4:43:e2:cc:83:82:7d:f3:41:f0:b4: bd:bb:30:f9:e0:3e:ec:61:29:22:a5:15:fc:38:94:f9:be:29: 3d:02:a2:76:5b:d1:86:9e:1e:66:e1:97:9b:af:d1:ac:e5:c1: 4a:f0:8d:85:3b:7a:a8:83:9e:df:59:a2:8d:e7:45:2d:db:cd: 88:ee:02:48:f8:3d:cc:17:dc:7f:e9:52:a0:94:bf:cd:62:bc: 11:c3:98:d0:e8:33:7d:72:84:d3:26:2c:d5:75:a1:96:9f:3f: 46:ed:cf:cd:10:37:ab:59:41:43:e6:fc:f2:84:7f:c6:bc:04: ef:1f:6b:04:93:57:54:3b:d8:16:ea:60:77:0d:bd:cc:ba:f1: 3a:31:84:66:18:12:03:54:32:c5:5f:46:96:f3:11:e6:88:e8: 2a:46:8d:d3:76:96:36:d7:dc:45:91:59:e5:90:4d:b7:b0:fc: 23:9d:aa:0e:64:07:ec:53:7e:b7:d9:62:76:08:8d:f0:05:bc: 65:73:07:72:2a:81:e1:6c:a9:4f:00:f4:5b:89:f7:54:d5:96: 3a:a4:16:e5:de:a5:9e:98:21:d8:89:72:e4:47:09:ae:b3:c2: 44:bf:b5:0c:09:aa:c6:8a:a2:c0:e2:2c:c4:28:d4:6c:82:6e: 34:ab:e2:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDybJ9bEU/54BEDphfKdb7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Y2I5MTM5NGI3OTA3ODFkM2E4NzczYTg1NWU1YTlhM2Fm MjA4MTAwHhcNMjUxMjIyMDIwMDUwWhcNMjUxMjIzMDIwMDUwWjAzMTEwLwYDVQQD EyhlN2VhYTRiNDJmNDE0ZjNhZWVmNjcxZTQxMzUyOTJjZTY3NzBkNTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4/7qNJWoWMXAbtZV3YaBgut0MBf HHvRLLIBVqDPtyn0+Eyki9op+s6jDyrHTa64TTCn81n+vRbZ8tAfmdyCK3S5cT2M yYfmSRHeT2Ox6bCVOjueN8ASksS65TYMQj0UV/Jz52u7fE916vz5B+kdEARSv89P OJPOqtAnZH4dPYZASVXjEoTyVgHNnS4zlD9UaxpbA44d4NhWnrnopvUsvW+Xh6FM aJhR8omRmuZ27lHRr3mVQcHkRsmaA/yoa7EGVVDNAFsHpgLQEXHfj1qC+dkrBC4n kup9MmaYoHwK0Iv4723CIfBLIJgxOs8Z2UWJbpXPoNGCd5CaRD/9rlSjkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfqpLQvQU867vZx5BNSks5ncNVNMB8GA1UdIwQY MBaAFHnLkTlLeQeB06h3OoVeWpo68ggQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWN1Uk9VdDVCNEhUcUhjNmhWNWFtanJ5Q0JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9lNDYzN2YtMmRlMS00ODE1LWJiNmIt ZjExNzEyMTQ5OTY2LzEvZWN1Uk9VdDVCNEhUcUhjNmhWNWFtanJ5Q0JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9lNDYzN2YtMmRlMS00ODE1LWJiNmItZjExNzEyMTQ5OTY2 LzEvZWN1Uk9VdDVCNEhUcUhjNmhWNWFtanJ5Q0JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgK4Jej5v 7vRD4syDgn3zQfC0vbsw+eA+7GEpIqUV/DiU+b4pPQKidlvRhp4eZuGXm6/RrOXB SvCNhTt6qIOe31mijedFLdvNiO4CSPg9zBfcf+lSoJS/zWK8EcOY0OgzfXKE0yYs 1XWhlp8/Ru3PzRA3q1lBQ+b88oR/xrwE7x9rBJNXVDvYFupgdw29zLrxOjGEZhgS A1QyxV9GlvMR5ojoKkaN03aWNtfcRZFZ5ZBNt7D8I52qDmQH7FN+t9lidgiN8AW8 ZXMHciqB4WypTwD0W4n3VNWWOqQW5d6lnpgh2Ily5EcJrrPCRL+1DAmqxoqiwOIs xCjUbIJuNKviVA== -----END CERTIFICATE-----Generated at Mon Dec 22 10:33:49 2025 by rpki-client