This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft File: ECKCU36wATC3llH0CAAO3KVkUOo.mft (raw, json) Hash identifier: WkodHGXD18oJvM9ECWHFg9+oHLTzNmWhNyLruYjFiXo= Subject key identifier: 0C:60:A2:77:BD:35:78:EF:0C:14:2D:6E:ED:81:88:B0:E0:F7:8A:3F Authority key identifier: 10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA Certificate issuer: /CN=102282537eb00130b79651f408000edca56450ea Certificate serial: 019B3F7EF146906A22954F2EE9BC86DBADD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft Manifest number: 1073 Signing time: Sun 21 Dec 2025 06:00:42 +0000 Manifest this update: Sun 21 Dec 2025 06:00:42 +0000 Manifest next update: Mon 22 Dec 2025 06:00:42 +0000 Files and hashes: 1: ECKCU36wATC3llH0CAAO3KVkUOo.crl (hash: vSeNW37zjM4EN2a1cjoDTEYpfa0a8gk63tUxgdjW1hk=) 2: mNpTYlNKotcL-0Zd_8NTbLjemtY.roa (hash: fghzEiX2an8ofk9BT1CH7W5YLfyP+hGmPzrsnOAoc1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:f1:46:90:6a:22:95:4f:2e:e9:bc:86:db:ad:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=102282537eb00130b79651f408000edca56450ea Validity Not Before: Dec 21 06:00:42 2025 GMT Not After : Dec 22 06:00:42 2025 GMT Subject: CN=0c60a277bd3578ef0c142d6eed8188b0e0f78a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bd:99:17:78:65:1c:d4:29:4b:be:5e:4b:52: 29:d7:e3:38:92:7c:ef:50:48:04:a0:38:fc:10:59: a7:ce:49:72:64:1b:e8:2c:fb:23:94:07:1d:15:50: 75:cb:d1:3c:79:40:c9:2e:11:c0:da:fe:e8:84:4b: 62:5a:64:0e:bc:38:66:e1:5e:bd:0f:ec:71:1e:90: e0:cb:ed:57:0e:8d:0f:21:18:f5:c9:6e:7e:87:e5: b8:cd:e2:46:0e:01:f9:57:c6:50:d5:5e:79:b8:2a: bc:81:06:4d:4b:9d:55:49:37:9d:55:76:17:f7:bf: 27:2b:d0:6f:9a:0a:65:09:d0:2a:d0:ed:04:cb:39: 34:a5:c0:6b:e2:7b:49:03:d3:df:1f:69:b9:33:d0: 82:ac:2e:e7:a1:42:ba:28:ff:18:fe:b3:f1:63:1e: 04:82:f2:e7:5b:e3:12:f8:f8:57:b4:3f:97:3c:0c: 87:db:4c:42:64:2a:2e:06:92:6b:a9:db:c6:f3:4b: 1f:88:bb:5f:bb:a8:1e:ee:27:58:f8:f5:91:6a:17: d1:4a:62:f9:1f:dc:4c:81:94:59:04:31:56:75:bd: 03:21:eb:4c:f4:ff:1f:a1:0a:59:de:f7:e2:c5:93: 79:f9:9f:14:36:ce:ba:1a:9e:e0:e3:35:32:1f:22: 35:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:60:A2:77:BD:35:78:EF:0C:14:2D:6E:ED:81:88:B0:E0:F7:8A:3F X509v3 Authority Key Identifier: keyid:10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e6:a6:af:58:07:4a:c4:91:ca:a9:ba:8d:d1:bd:f1:84:70: 84:fa:7e:08:5f:75:c3:54:cb:89:12:ab:fc:ad:9a:f9:df:d1: db:92:d4:87:c6:49:37:ac:b8:2e:e5:0e:d0:97:6a:01:da:69: 6d:50:33:bf:0b:22:b9:2b:45:96:0e:59:e3:76:11:d7:89:f6: c6:18:91:3c:ca:2b:23:ef:c8:56:ec:4b:c5:6d:a4:d1:e8:c4: c5:84:12:a6:8f:4a:56:7d:c2:0f:ec:69:c2:5d:be:74:98:96: 86:af:bc:15:df:a6:1c:2f:3e:dd:44:ba:1e:f6:20:75:8a:0a: 7b:e7:a3:fc:8b:43:bd:f7:5f:15:ae:f0:3e:6f:6a:79:6a:5b: c0:ba:e3:a5:f7:4f:c6:cc:62:8e:5f:b8:e7:04:d0:5e:da:d2: 9c:7b:27:c2:5a:07:50:64:a8:44:45:52:52:c4:82:39:cd:c6: 6f:16:06:2a:e0:3f:dd:48:f6:d5:30:03:56:89:ee:7a:7b:a7: 40:b8:36:26:ef:bd:44:7a:40:58:bc:a3:82:9f:99:ea:98:23: 0f:6e:b7:83:03:aa:b1:89:e8:ad:28:87:f8:d4:e4:fb:31:55: f7:fb:4d:cc:62:32:8f:15:a6:86:23:18:44:49:57:2d:c6:88: ed:37:d8:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fvFGkGoilU8u6byG263QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMjI4MjUzN2ViMDAxMzBiNzk2NTFmNDA4MDAwZWRjYTU2 NDUwZWEwHhcNMjUxMjIxMDYwMDQyWhcNMjUxMjIyMDYwMDQyWjAzMTEwLwYDVQQD EygwYzYwYTI3N2JkMzU3OGVmMGMxNDJkNmVlZDgxODhiMGUwZjc4YTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4L2ZF3hlHNQpS75eS1Ip1+M4knzv UEgEoDj8EFmnzklyZBvoLPsjlAcdFVB1y9E8eUDJLhHA2v7ohEtiWmQOvDhm4V69 D+xxHpDgy+1XDo0PIRj1yW5+h+W4zeJGDgH5V8ZQ1V55uCq8gQZNS51VSTedVXYX 978nK9BvmgplCdAq0O0Eyzk0pcBr4ntJA9PfH2m5M9CCrC7noUK6KP8Y/rPxYx4E gvLnW+MS+PhXtD+XPAyH20xCZCouBpJrqdvG80sfiLtfu6ge7idY+PWRahfRSmL5 H9xMgZRZBDFWdb0DIetM9P8foQpZ3vfixZN5+Z8UNs66Gp7g4zUyHyI1QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxgone9NXjvDBQtbu2BiLDg94o/MB8GA1UdIwQY MBaAFBAiglN+sAEwt5ZR9AgADtylZFDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUNLQ1UzNndBVEMzbGxIMENBQU8zS1ZrVU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi80ZWYyYzMtMDZkOC00ZjExLTg0Yjct MzM4MTk2OTM1MDUwLzEvRUNLQ1UzNndBVEMzbGxIMENBQU8zS1ZrVU9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi80ZWYyYzMtMDZkOC00ZjExLTg0YjctMzM4MTk2OTM1MDUw LzEvRUNLQ1UzNndBVEMzbGxIMENBQU8zS1ZrVU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+amr1gH SsSRyqm6jdG98YRwhPp+CF91w1TLiRKr/K2a+d/R25LUh8ZJN6y4LuUO0JdqAdpp bVAzvwsiuStFlg5Z43YR14n2xhiRPMorI+/IVuxLxW2k0ejExYQSpo9KVn3CD+xp wl2+dJiWhq+8Fd+mHC8+3US6HvYgdYoKe+ej/ItDvfdfFa7wPm9qeWpbwLrjpfdP xsxijl+45wTQXtrSnHsnwloHUGSoREVSUsSCOc3GbxYGKuA/3Uj21TADVonuenun QLg2Ju+9RHpAWLyjgp+Z6pgjD263gwOqsYnorSiH+NTk+zFV9/tNzGIyjxWmhiMY RElXLcaI7TfYEg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:52:41 2025 by rpki-client