This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft File: Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft (raw, json) Hash identifier: MkGYGYaXO62UgaUwDzN8TkOu8Q1oIapfRwG0J3G2FPg= Subject key identifier: F0:24:77:80:B1:F6:30:C7:C2:3C:7F:DB:5C:D0:6F:95:62:C2:7B:70 Authority key identifier: 11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34 Certificate issuer: /CN=11c971ff0d25f2034c05ab2958a86f732bc67734 Certificate serial: 019B4CCCDB80E3C39BCB2117FE8195079999 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 20:00:52 +0000 Manifest this update: Tue 23 Dec 2025 20:00:52 +0000 Manifest next update: Wed 24 Dec 2025 20:00:52 +0000 Files and hashes: 1: Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl (hash: SzwvlRps9xps4/Y/ZlGFUCyeyivXNz8jXOiRUJOvj34=) 2: LMMZjEog_tQosdiOx9qDUPZ7h2c.roa (hash: ejhewZ8y56OliUtcQtMRcOocpkTmo7inlBUwDmC0qfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:cc:db:80:e3:c3:9b:cb:21:17:fe:81:95:07:99:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11c971ff0d25f2034c05ab2958a86f732bc67734 Validity Not Before: Dec 23 20:00:52 2025 GMT Not After : Dec 24 20:00:52 2025 GMT Subject: CN=f0247780b1f630c7c23c7fdb5cd06f9562c27b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:54:0a:51:53:46:07:36:ce:aa:a6:1a:b9:31: de:3d:c1:8e:35:de:6f:4b:6b:da:e6:82:45:0e:fc: fe:9f:0c:82:9a:7f:9f:f9:bb:8e:9f:03:5a:a6:6d: f6:bf:aa:25:2b:fb:6e:f7:0e:94:59:60:b7:a8:28: ee:b3:7f:10:08:2c:28:00:a4:78:21:d4:b0:d0:3f: df:16:05:c0:6c:0b:29:f3:78:b8:48:6f:30:e2:95: d5:47:fd:26:17:aa:4f:48:97:0b:2a:13:29:83:6d: 9d:35:fe:67:4b:85:7d:ce:e0:69:b6:aa:98:f3:98: 53:fb:be:17:c0:3d:8b:09:e7:01:f6:ff:2e:64:db: c5:9b:b8:9a:c1:8e:fc:fc:29:71:2b:25:a3:cf:57: 05:3a:6d:89:5b:f3:a9:73:e2:02:8a:26:83:7f:0c: 18:46:5b:20:3e:0a:f1:a5:67:6c:31:e0:9d:89:b6: dc:3a:82:d1:9b:63:ea:e3:a9:5a:31:17:d9:5d:d2: 62:ff:dc:ac:c1:72:8c:ca:fd:17:0d:a6:8c:65:83: eb:86:f7:df:7e:0d:c4:8f:bb:e3:a1:6d:d0:01:61: 13:f2:99:eb:d1:23:63:e1:93:10:3e:29:c5:24:8e: 1d:d1:1a:5d:0b:6c:ba:f0:a8:67:59:72:e1:93:72: 01:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:24:77:80:B1:F6:30:C7:C2:3C:7F:DB:5C:D0:6F:95:62:C2:7B:70 X509v3 Authority Key Identifier: keyid:11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:7d:39:e5:88:73:96:df:bc:28:37:c7:4e:8b:20:ab:b9:69: 06:bc:1d:6f:fc:1d:82:a2:24:2b:3d:e6:8d:bd:b7:59:9b:2c: b8:b3:07:7c:cf:01:a0:b4:16:ef:ac:4b:8d:8d:03:cf:fc:fb: 05:c6:39:f6:32:10:43:d6:d3:e8:23:da:e8:d0:c7:94:22:e2: 61:55:eb:2c:5c:d1:a7:ae:51:26:77:b3:21:e6:e1:40:4d:1a: 08:c3:b2:67:0f:97:2d:fd:26:3a:19:1f:be:8b:8d:84:47:21: bc:4b:01:cc:86:77:bc:d2:00:2e:d0:74:27:f9:69:8d:85:66: 92:5f:d1:7c:cd:79:ea:a2:65:35:d8:ee:78:b9:e3:21:f0:b5: ee:5b:c0:5b:e9:7c:e0:03:f8:fb:c9:54:41:a8:6a:01:f8:fd: ae:81:83:70:44:14:c3:05:6e:61:e3:cb:85:6b:7c:16:c9:dd: 66:71:bf:de:32:7e:15:16:58:56:87:fa:b3:cc:b6:69:a7:ff: 04:15:ad:9a:52:55:d1:e7:25:7e:9d:32:3c:26:f5:fa:1b:ae: f9:b7:fe:6b:35:fa:b6:dd:51:f9:b7:b0:79:bc:c9:15:ed:06: fe:36:1e:f5:f0:2d:56:ed:ad:be:bb:1e:b7:84:a5:c7:4b:0b: d0:60:b9:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMzNuA48ObyyEX/oGVB5mZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYzk3MWZmMGQyNWYyMDM0YzA1YWIyOTU4YTg2ZjczMmJj Njc3MzQwHhcNMjUxMjIzMjAwMDUyWhcNMjUxMjI0MjAwMDUyWjAzMTEwLwYDVQQD EyhmMDI0Nzc4MGIxZjYzMGM3YzIzYzdmZGI1Y2QwNmY5NTYyYzI3YjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVQKUVNGBzbOqqYauTHePcGONd5v S2va5oJFDvz+nwyCmn+f+buOnwNapm32v6olK/tu9w6UWWC3qCjus38QCCwoAKR4 IdSw0D/fFgXAbAsp83i4SG8w4pXVR/0mF6pPSJcLKhMpg22dNf5nS4V9zuBptqqY 85hT+74XwD2LCecB9v8uZNvFm7iawY78/ClxKyWjz1cFOm2JW/Opc+ICiiaDfwwY RlsgPgrxpWdsMeCdibbcOoLRm2Pq46laMRfZXdJi/9yswXKMyv0XDaaMZYPrhvff fg3Ej7vjoW3QAWET8pnr0SNj4ZMQPinFJI4d0RpdC2y68KhnWXLhk3IBbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAkd4Cx9jDHwjx/21zQb5ViwntwMB8GA1UdIwQY MBaAFBHJcf8NJfIDTAWrKViob3Mrxnc0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWNseF93MGw4Z05NQmFzcFdLaHZjeXZHZHpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hMTlkMDItMDAyYS00Y2I3LWFmYmIt ZWYyZDdhMjNmNjA5LzEvRWNseF93MGw4Z05NQmFzcFdLaHZjeXZHZHpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hMTlkMDItMDAyYS00Y2I3LWFmYmItZWYyZDdhMjNmNjA5 LzEvRWNseF93MGw4Z05NQmFzcFdLaHZjeXZHZHpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVn055Yhz lt+8KDfHTosgq7lpBrwdb/wdgqIkKz3mjb23WZssuLMHfM8BoLQW76xLjY0Dz/z7 BcY59jIQQ9bT6CPa6NDHlCLiYVXrLFzRp65RJnezIebhQE0aCMOyZw+XLf0mOhkf vouNhEchvEsBzIZ3vNIALtB0J/lpjYVmkl/RfM156qJlNdjueLnjIfC17lvAW+l8 4AP4+8lUQahqAfj9roGDcEQUwwVuYePLhWt8FsndZnG/3jJ+FRZYVof6s8y2aaf/ BBWtmlJV0eclfp0yPCb1+huu+bf+azX6tt1R+bewebzJFe0G/jYe9fAtVu2tvrse t4Slx0sL0GC5hw== -----END CERTIFICATE-----Generated at Wed Dec 24 03:37:45 2025 by rpki-client