This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft File: ECKCU36wATC3llH0CAAO3KVkUOo.mft (raw, json) Hash identifier: Fip1Y8RW+6GxSfI9QWteWapB+vd2sT9NQDb5oU1ZrHM= Subject key identifier: 79:B5:BB:C2:48:FF:4B:CD:CD:2E:12:8E:0D:60:FA:62:5A:89:66:AF Authority key identifier: 10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA Certificate issuer: /CN=102282537eb00130b79651f408000edca56450ea Certificate serial: 019B52CEB26E949BEFD18F3357039275FF92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft Manifest number: 107D Signing time: Thu 25 Dec 2025 00:00:36 +0000 Manifest this update: Thu 25 Dec 2025 00:00:36 +0000 Manifest next update: Fri 26 Dec 2025 00:00:36 +0000 Files and hashes: 1: ECKCU36wATC3llH0CAAO3KVkUOo.crl (hash: 0fADZfb4NiT8tmPvkCRD5WZx4o3gipL3vaH4JfhQOZM=) 2: mNpTYlNKotcL-0Zd_8NTbLjemtY.roa (hash: fghzEiX2an8ofk9BT1CH7W5YLfyP+hGmPzrsnOAoc1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:b2:6e:94:9b:ef:d1:8f:33:57:03:92:75:ff:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=102282537eb00130b79651f408000edca56450ea Validity Not Before: Dec 25 00:00:36 2025 GMT Not After : Dec 26 00:00:36 2025 GMT Subject: CN=79b5bbc248ff4bcdcd2e128e0d60fa625a8966af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dd:22:a9:e7:52:67:71:e6:55:91:34:8a:49: 83:a1:ce:15:d6:16:a6:bf:5a:42:7b:58:19:28:35: 19:d5:74:06:ea:a0:81:af:cb:8c:29:66:38:a1:6d: a0:1c:cb:26:9c:c6:a3:77:31:3e:20:8c:b2:b3:b8: 9f:d3:9e:fb:2a:7e:d2:51:fe:c7:ab:6a:4f:59:81: 5f:0d:77:23:1e:82:d9:ad:94:09:fa:be:d1:8e:ec: 98:22:4a:72:98:4f:a2:89:5b:76:a5:5f:bf:d6:65: b4:77:f1:98:8d:d2:0b:2e:f6:ec:02:9a:7a:62:6c: 2d:be:be:b9:90:95:bb:8f:91:85:6a:f8:06:3f:6b: af:f5:03:55:c4:b0:d7:a6:02:57:7b:62:31:0c:7c: 6c:c8:6d:73:aa:0a:8a:0a:d8:e0:eb:c3:52:ab:83: 17:b2:cb:f5:ad:59:83:51:0f:29:0b:ea:3d:cc:10: f7:fb:ed:21:3b:8c:97:98:12:a4:3a:8b:2a:f4:59: 4f:83:43:8e:c2:22:6d:72:27:8e:cc:1c:cc:e6:a9: 1d:1e:50:1a:1b:7b:9d:ab:8e:29:87:e9:36:99:04: 56:67:13:05:bf:b3:95:c6:2e:3f:f0:5c:63:00:89: 28:b4:d4:04:92:2f:0b:0c:b8:c1:ab:27:c1:2b:a8: 49:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B5:BB:C2:48:FF:4B:CD:CD:2E:12:8E:0D:60:FA:62:5A:89:66:AF X509v3 Authority Key Identifier: keyid:10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:bf:57:c1:11:14:80:79:81:87:ea:f8:0b:4e:7f:65:b5:82: 23:da:60:a5:73:f8:cc:88:f8:f9:ea:9b:6e:62:13:8b:50:4a: d7:74:ee:12:ec:8f:ac:4f:c5:cf:cc:2d:d0:21:a8:bd:56:5e: f4:6b:85:ab:13:3d:d5:b3:6e:e6:72:a5:c5:b3:12:2e:53:2b: 39:90:61:8f:71:5a:f5:43:cf:33:79:9e:28:ff:a7:b0:36:5e: 09:02:65:33:3c:00:aa:e4:95:6b:41:e4:a9:db:9b:d8:53:df: fc:68:93:6a:b6:57:4a:4f:f4:39:48:a1:ed:af:69:bf:ec:24: 13:ed:ea:1e:9e:77:73:a7:1f:fa:3e:07:ed:e4:ab:ad:04:72: 32:b6:93:c7:65:da:1c:d3:a9:04:51:1c:50:2f:6b:38:ec:6b: e1:5f:a0:4f:eb:33:50:2f:3c:02:36:42:13:72:af:62:ba:1e: e4:05:d6:87:43:97:b5:3a:ff:c9:82:e5:e7:41:a9:52:86:1a: b2:93:ab:09:de:6f:a1:03:f7:5d:37:e3:dd:30:5a:79:75:97: b4:1f:66:61:d1:32:9e:de:1e:bb:9d:af:92:9b:8d:62:33:35: 25:d0:47:2e:cf:da:3e:a4:b0:38:7b:58:0a:3d:1e:e4:b6:9c: 89:8f:f8:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzrJulJvv0Y8zVwOSdf+SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMjI4MjUzN2ViMDAxMzBiNzk2NTFmNDA4MDAwZWRjYTU2 NDUwZWEwHhcNMjUxMjI1MDAwMDM2WhcNMjUxMjI2MDAwMDM2WjAzMTEwLwYDVQQD Eyg3OWI1YmJjMjQ4ZmY0YmNkY2QyZTEyOGUwZDYwZmE2MjVhODk2NmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd0iqedSZ3HmVZE0ikmDoc4V1ham v1pCe1gZKDUZ1XQG6qCBr8uMKWY4oW2gHMsmnMajdzE+IIyys7if0577Kn7SUf7H q2pPWYFfDXcjHoLZrZQJ+r7RjuyYIkpymE+iiVt2pV+/1mW0d/GYjdILLvbsApp6 Ymwtvr65kJW7j5GFavgGP2uv9QNVxLDXpgJXe2IxDHxsyG1zqgqKCtjg68NSq4MX ssv1rVmDUQ8pC+o9zBD3++0hO4yXmBKkOosq9FlPg0OOwiJtcieOzBzM5qkdHlAa G3udq44ph+k2mQRWZxMFv7OVxi4/8FxjAIkotNQEki8LDLjBqyfBK6hJJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHm1u8JI/0vNzS4Sjg1g+mJaiWavMB8GA1UdIwQY MBaAFBAiglN+sAEwt5ZR9AgADtylZFDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUNLQ1UzNndBVEMzbGxIMENBQU8zS1ZrVU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi80ZWYyYzMtMDZkOC00ZjExLTg0Yjct MzM4MTk2OTM1MDUwLzEvRUNLQ1UzNndBVEMzbGxIMENBQU8zS1ZrVU9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi80ZWYyYzMtMDZkOC00ZjExLTg0YjctMzM4MTk2OTM1MDUw LzEvRUNLQ1UzNndBVEMzbGxIMENBQU8zS1ZrVU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV79XwREU gHmBh+r4C05/ZbWCI9pgpXP4zIj4+eqbbmITi1BK13TuEuyPrE/Fz8wt0CGovVZe 9GuFqxM91bNu5nKlxbMSLlMrOZBhj3Fa9UPPM3meKP+nsDZeCQJlMzwAquSVa0Hk qdub2FPf/GiTarZXSk/0OUih7a9pv+wkE+3qHp53c6cf+j4H7eSrrQRyMraTx2Xa HNOpBFEcUC9rOOxr4V+gT+szUC88AjZCE3KvYroe5AXWh0OXtTr/yYLl50GpUoYa spOrCd5voQP3XTfj3TBaeXWXtB9mYdEynt4eu52vkpuNYjM1JdBHLs/aPqSwOHtY Cj0e5LaciY/4jQ== -----END CERTIFICATE-----Generated at Thu Dec 25 03:27:18 2025 by rpki-client