This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft File: ECWK4MJsZaamlm8_fmmGM7kUNCY.mft (raw, json) Hash identifier: av4FDND5ARG/tx5WdigT/8lficagBe9pE0kwEfQSd64= Subject key identifier: 33:8D:28:B0:0B:BB:CE:F9:C7:C7:CA:57:4E:5C:E3:BF:41:B1:C6:E0 Authority key identifier: 10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26 Certificate issuer: /CN=10258ae0c26c65a6a6966f3f7e698633b9143426 Certificate serial: 019B51F2EC5B05E96FA6B1A917DAB405B592 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft Manifest number: 0416 Signing time: Wed 24 Dec 2025 20:00:33 +0000 Manifest this update: Wed 24 Dec 2025 20:00:33 +0000 Manifest next update: Thu 25 Dec 2025 20:00:33 +0000 Files and hashes: 1: ECWK4MJsZaamlm8_fmmGM7kUNCY.crl (hash: 42CCV+DNttZ66SydRotSRObJZU+7hYTzNfOaMgOLX7c=) 2: etVX6TJKFEJRufjvzOGQ6JSSL7w.roa (hash: 63VfWS1eguDOAS4kGZod2yjLHalgrK50WGTQVYmqUfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f2:ec:5b:05:e9:6f:a6:b1:a9:17:da:b4:05:b5:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10258ae0c26c65a6a6966f3f7e698633b9143426 Validity Not Before: Dec 24 20:00:33 2025 GMT Not After : Dec 25 20:00:33 2025 GMT Subject: CN=338d28b00bbbcef9c7c7ca574e5ce3bf41b1c6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:66:b4:1e:1b:f7:8f:0a:49:71:a5:ac:a3:3b: f7:2c:88:2e:44:62:bb:60:0b:ff:4f:50:e4:80:3b: f3:ac:f3:2f:00:ee:16:6c:29:1c:7d:b4:a4:c1:47: c9:c2:2b:44:f8:47:5a:be:54:b8:9b:79:eb:1b:24: fa:d8:0b:eb:a2:41:38:b5:71:1e:53:49:5d:38:5c: 10:73:69:07:a3:24:18:34:ce:2f:b6:b1:a4:d0:fc: e3:e0:10:7a:3f:f7:0f:98:cf:9a:fa:6e:81:0d:cb: 8d:66:aa:90:34:93:85:ca:a2:f5:7c:7e:38:09:d1: 39:04:f1:fe:26:e6:7e:2c:83:0b:69:70:65:2a:9f: 39:5b:60:74:79:d7:50:52:57:04:bc:1d:c6:90:0b: bb:7e:d3:10:e5:91:a4:8e:08:38:75:2b:b8:1a:c0: 92:75:52:35:84:7f:12:93:54:e9:7b:74:6b:c4:79: 28:2d:ea:26:84:67:be:46:a0:9c:ca:2c:7f:d7:d4: bf:cc:24:da:f1:88:c1:01:be:43:c1:ea:13:a7:16: b8:30:5e:80:b2:b4:82:af:72:d1:80:76:d3:85:22: 96:a1:92:49:d9:ca:99:26:30:4c:87:28:e3:54:fb: 0e:d9:34:52:37:57:a0:8e:fa:7b:6e:b4:c2:b9:fe: a3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8D:28:B0:0B:BB:CE:F9:C7:C7:CA:57:4E:5C:E3:BF:41:B1:C6:E0 X509v3 Authority Key Identifier: keyid:10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:96:c5:0a:4f:23:dd:6a:6a:c9:74:c1:98:ee:a7:1b:0b:3a: a7:0f:61:27:a8:40:64:52:de:b4:0f:82:24:97:2d:4d:ad:5c: a6:4e:53:1d:9f:42:b3:bd:42:40:b0:2b:dc:7c:4e:34:97:53: f4:8e:de:6a:5d:bf:de:da:1e:f9:3f:d3:5e:bf:3d:97:f8:1d: b2:29:0f:70:34:92:b9:6e:46:42:0a:5f:76:9f:08:df:68:fe: 97:a4:34:45:b3:c0:e0:91:10:25:90:b1:8c:b6:83:2a:c2:57: 95:23:8d:7e:ea:92:c2:d7:a3:b7:a9:55:66:98:87:ba:b8:30: 54:d3:2c:ba:35:e8:7a:4c:9a:ec:fc:f8:0f:c4:78:1f:7c:12: 97:59:ba:2c:74:d2:29:9d:13:17:fc:10:03:d9:36:8a:db:2a: 2e:c8:ba:a6:91:3b:3c:21:d4:47:91:b1:4b:d9:ac:f4:65:b5: 47:ad:ee:a6:fa:42:28:06:12:ce:a4:30:a4:cb:e2:41:b2:6d: 4f:75:84:2e:8b:71:c2:3b:23:e6:38:c7:64:ad:29:d7:57:d5: 21:86:d2:d5:12:73:64:ee:24:41:8c:e1:ad:18:fb:5e:95:96: 55:3a:53:ae:0a:f6:65:45:c2:6d:ab:f6:6c:9d:f9:23:16:5f: a7:24:ad:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR8uxbBelvprGpF9q0BbWSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMjU4YWUwYzI2YzY1YTZhNjk2NmYzZjdlNjk4NjMzYjkx NDM0MjYwHhcNMjUxMjI0MjAwMDMzWhcNMjUxMjI1MjAwMDMzWjAzMTEwLwYDVQQD EygzMzhkMjhiMDBiYmJjZWY5YzdjN2NhNTc0ZTVjZTNiZjQxYjFjNmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42a0Hhv3jwpJcaWsozv3LIguRGK7 YAv/T1DkgDvzrPMvAO4WbCkcfbSkwUfJwitE+EdavlS4m3nrGyT62AvrokE4tXEe U0ldOFwQc2kHoyQYNM4vtrGk0Pzj4BB6P/cPmM+a+m6BDcuNZqqQNJOFyqL1fH44 CdE5BPH+JuZ+LIMLaXBlKp85W2B0eddQUlcEvB3GkAu7ftMQ5ZGkjgg4dSu4GsCS dVI1hH8Sk1Tpe3RrxHkoLeomhGe+RqCcyix/19S/zCTa8YjBAb5DweoTpxa4MF6A srSCr3LRgHbThSKWoZJJ2cqZJjBMhyjjVPsO2TRSN1egjvp7brTCuf6j0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDONKLALu875x8fKV05c479BscbgMB8GA1UdIwQY MBaAFBAliuDCbGWmppZvP35phjO5FDQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUNXSzRNSnNaYWFtbG04X2ZtbUdNN2tVTkNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xMzQxYTctMWNlNi00M2I5LWJmNzYt ZWY3ZThkNDQzNGYzLzEvRUNXSzRNSnNaYWFtbG04X2ZtbUdNN2tVTkNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8xMzQxYTctMWNlNi00M2I5LWJmNzYtZWY3ZThkNDQzNGYz LzEvRUNXSzRNSnNaYWFtbG04X2ZtbUdNN2tVTkNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJbFCk8j 3WpqyXTBmO6nGws6pw9hJ6hAZFLetA+CJJctTa1cpk5THZ9Cs71CQLAr3HxONJdT 9I7eal2/3toe+T/TXr89l/gdsikPcDSSuW5GQgpfdp8I32j+l6Q0RbPA4JEQJZCx jLaDKsJXlSONfuqSwtejt6lVZpiHurgwVNMsujXoekya7Pz4D8R4H3wSl1m6LHTS KZ0TF/wQA9k2itsqLsi6ppE7PCHUR5GxS9ms9GW1R63upvpCKAYSzqQwpMviQbJt T3WELotxwjsj5jjHZK0p11fVIYbS1RJzZO4kQYzhrRj7XpWWVTpTrgr2ZUXCbav2 bJ35IxZfpySt8A== -----END CERTIFICATE-----Generated at Thu Dec 25 03:18:12 2025 by rpki-client