This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft File: ECWK4MJsZaamlm8_fmmGM7kUNCY.mft (raw, json) Hash identifier: kBY9pY22CdXDboTTA2zBXjVpeghc9PuBOqA/1S+GTqY= Subject key identifier: B3:E6:59:20:77:76:62:2E:65:AB:96:26:D3:CC:4B:5D:B1:16:C9:84 Authority key identifier: 10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26 Certificate issuer: /CN=10258ae0c26c65a6a6966f3f7e698633b9143426 Certificate serial: 019B53E153F0975F872E90E8252E54507033 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft Manifest number: 0417 Signing time: Thu 25 Dec 2025 05:00:34 +0000 Manifest this update: Thu 25 Dec 2025 05:00:34 +0000 Manifest next update: Fri 26 Dec 2025 05:00:34 +0000 Files and hashes: 1: ECWK4MJsZaamlm8_fmmGM7kUNCY.crl (hash: NfFpS23Ah4HAl3GOr16BoUG/z9xvWYob13KYeFIifpA=) 2: etVX6TJKFEJRufjvzOGQ6JSSL7w.roa (hash: 63VfWS1eguDOAS4kGZod2yjLHalgrK50WGTQVYmqUfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:53:f0:97:5f:87:2e:90:e8:25:2e:54:50:70:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10258ae0c26c65a6a6966f3f7e698633b9143426 Validity Not Before: Dec 25 05:00:34 2025 GMT Not After : Dec 26 05:00:34 2025 GMT Subject: CN=b3e659207776622e65ab9626d3cc4b5db116c984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:48:a6:ed:dd:82:94:71:15:61:0e:81:f0:c4: c5:a8:8e:b9:d7:e1:9d:2c:bc:9d:28:90:04:81:9c: 2f:fc:86:c2:34:fa:86:08:63:e5:9f:73:04:d4:93: a9:2d:6e:24:ac:d6:7a:d5:5a:24:d5:f0:a5:c2:7c: 62:bf:59:c1:bf:7a:b1:1e:a0:43:88:c1:bf:53:40: d3:91:1b:f0:a0:9d:f5:8c:67:e2:e0:e7:2f:be:44: 6a:29:1f:a8:1d:96:20:84:0b:99:05:bd:56:c2:5e: 1f:3c:e9:d4:cb:ca:15:4b:cd:2f:26:78:5d:e3:02: ff:41:5f:71:ef:c6:07:4a:78:2d:7a:a8:b2:3f:f4: 38:50:cf:9d:89:49:cc:d2:9d:bd:bc:c2:31:d0:40: fb:72:f7:55:76:97:2d:54:28:6b:a4:82:65:57:ea: 66:d0:9b:c5:23:52:82:cb:9a:a8:a7:72:a8:35:1a: d3:bb:20:80:eb:f2:6c:09:ca:9d:57:33:c3:8f:7c: 24:70:81:8a:f7:9f:42:6b:5c:24:09:8b:36:bd:f2: 78:78:92:0b:de:0d:b1:b0:8a:42:83:e3:61:9c:72: 31:10:f8:62:53:d8:ef:9a:ce:b2:0a:2d:87:a1:fd: 18:0f:b7:c2:88:07:c5:b1:b3:44:24:2e:af:fd:31: 73:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E6:59:20:77:76:62:2E:65:AB:96:26:D3:CC:4B:5D:B1:16:C9:84 X509v3 Authority Key Identifier: keyid:10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:c6:56:73:99:ac:be:46:9c:12:b6:ea:c6:f6:dc:aa:c1:d5: be:a5:a0:e5:5d:7a:ce:72:e4:c6:23:83:21:8e:c3:9c:0e:05: cf:f6:50:74:8d:92:97:2f:e7:60:e2:28:7f:ef:75:1d:d4:a4: dd:db:41:c9:2a:03:a7:02:53:63:49:70:85:1a:8a:62:12:ee: 42:c2:71:2b:09:72:b4:47:fa:1c:c5:95:cd:ea:db:ad:18:89: 60:b0:66:08:37:61:8b:9c:fa:7b:4e:6c:d3:00:02:8f:3e:5f: bd:1a:c7:6e:4c:9a:ae:28:82:70:28:03:cb:4f:9f:7a:e7:9a: 95:3e:e1:79:30:18:fb:ff:47:4b:52:2a:a7:90:1e:53:ec:14: f5:db:49:2c:2e:f1:fc:ae:c3:46:13:69:e3:cb:5d:b9:94:b2: 8c:6c:77:82:17:85:c8:65:90:82:c8:7b:ee:ac:9a:1d:3f:95: 48:5f:c9:42:6f:71:56:12:0c:e9:54:bf:27:1d:f0:84:12:15: 3f:da:77:06:b8:c2:b9:a0:56:ae:a1:45:e5:81:26:43:5f:e8: a4:8c:08:31:c3:5c:59:22:78:be:0c:54:d2:1c:c3:9a:c0:2a: 64:b7:a0:ca:48:29:e1:a8:f7:66:a9:65:90:83:f9:ff:10:12: da:80:6c:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4VPwl1+HLpDoJS5UUHAzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMjU4YWUwYzI2YzY1YTZhNjk2NmYzZjdlNjk4NjMzYjkx NDM0MjYwHhcNMjUxMjI1MDUwMDM0WhcNMjUxMjI2MDUwMDM0WjAzMTEwLwYDVQQD EyhiM2U2NTkyMDc3NzY2MjJlNjVhYjk2MjZkM2NjNGI1ZGIxMTZjOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0im7d2ClHEVYQ6B8MTFqI651+Gd LLydKJAEgZwv/IbCNPqGCGPln3ME1JOpLW4krNZ61Vok1fClwnxiv1nBv3qxHqBD iMG/U0DTkRvwoJ31jGfi4OcvvkRqKR+oHZYghAuZBb1Wwl4fPOnUy8oVS80vJnhd 4wL/QV9x78YHSngteqiyP/Q4UM+diUnM0p29vMIx0ED7cvdVdpctVChrpIJlV+pm 0JvFI1KCy5qop3KoNRrTuyCA6/JsCcqdVzPDj3wkcIGK959Ca1wkCYs2vfJ4eJIL 3g2xsIpCg+NhnHIxEPhiU9jvms6yCi2Hof0YD7fCiAfFsbNEJC6v/TFzlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPmWSB3dmIuZauWJtPMS12xFsmEMB8GA1UdIwQY MBaAFBAliuDCbGWmppZvP35phjO5FDQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUNXSzRNSnNaYWFtbG04X2ZtbUdNN2tVTkNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xMzQxYTctMWNlNi00M2I5LWJmNzYt ZWY3ZThkNDQzNGYzLzEvRUNXSzRNSnNaYWFtbG04X2ZtbUdNN2tVTkNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8xMzQxYTctMWNlNi00M2I5LWJmNzYtZWY3ZThkNDQzNGYz LzEvRUNXSzRNSnNaYWFtbG04X2ZtbUdNN2tVTkNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsZWc5ms vkacErbqxvbcqsHVvqWg5V16znLkxiODIY7DnA4Fz/ZQdI2Sly/nYOIof+91HdSk 3dtBySoDpwJTY0lwhRqKYhLuQsJxKwlytEf6HMWVzerbrRiJYLBmCDdhi5z6e05s 0wACjz5fvRrHbkyariiCcCgDy0+feuealT7heTAY+/9HS1Iqp5AeU+wU9dtJLC7x /K7DRhNp48tduZSyjGx3gheFyGWQgsh77qyaHT+VSF/JQm9xVhIM6VS/Jx3whBIV P9p3BrjCuaBWrqFF5YEmQ1/opIwIMcNcWSJ4vgxU0hzDmsAqZLegykgp4aj3Zqll kIP5/xAS2oBsEQ== -----END CERTIFICATE-----Generated at Thu Dec 25 09:04:23 2025 by rpki-client