This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft File: _ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft (raw, json) Hash identifier: s8iDZTUHvTZmyWP89P2uoDb6XvuMY5XNWdo3vElt+Ug= Subject key identifier: ED:03:DD:43:29:E8:3B:71:7F:E4:8F:40:D2:34:92:6B:87:ED:95:88 Authority key identifier: FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6 Certificate issuer: /CN=fde72d43f4c82b1146737b116197231830bf65d6 Certificate serial: 019B559A7BB6FC1A15CD0F65B380C125C28F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft Manifest number: 1794 Signing time: Thu 25 Dec 2025 13:02:26 +0000 Manifest this update: Thu 25 Dec 2025 13:02:26 +0000 Manifest next update: Fri 26 Dec 2025 13:02:26 +0000 Files and hashes: 1: NEbsKu77gYfpibY3_TC8dQH80XA.roa (hash: aeVQJbng3C7RHWncwne+AehQ3FDANQdssqp/Bjc9vag=) 2: _ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl (hash: XWZjKSat6wphcD5OADJpOxQlI6TWw+6HbxUo007Rpro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:9a:7b:b6:fc:1a:15:cd:0f:65:b3:80:c1:25:c2:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde72d43f4c82b1146737b116197231830bf65d6 Validity Not Before: Dec 25 13:02:26 2025 GMT Not After : Dec 26 13:02:26 2025 GMT Subject: CN=ed03dd4329e83b717fe48f40d234926b87ed9588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b5:bf:79:3b:5d:93:17:3d:1d:96:72:17:48: 80:bf:ad:a9:8d:bb:bf:07:43:08:10:07:0f:62:75: 1f:4e:89:3e:4e:b6:6b:4a:2a:b2:6b:44:62:19:ee: 80:02:4f:7e:bc:09:73:db:25:e3:5a:8a:ea:36:f9: dd:55:09:e2:3a:22:d9:a2:fb:ee:f3:31:43:33:33: dd:af:e8:88:72:5c:04:27:76:1f:2a:19:a6:16:d2: f2:44:0e:91:1b:92:c1:24:8a:68:52:ad:87:cd:fe: d2:3d:7b:7a:bb:67:25:97:d7:7c:b3:ba:ad:6b:aa: a0:cf:08:ee:71:95:c9:71:f1:e2:fc:a1:74:72:9d: 69:d4:50:9e:25:8d:93:bf:3e:91:72:a7:69:a2:54: 93:b6:b5:7d:cc:de:af:62:e2:f5:18:65:81:5f:42: e0:53:86:6c:e9:5f:64:b1:71:44:d8:4a:23:b8:36: 46:23:e7:29:4f:4c:f8:25:40:b0:3b:a1:23:cf:84: f6:ec:b6:71:15:11:28:bf:d0:36:2b:27:9f:9f:f9: 5d:cd:84:66:2d:46:a9:14:07:24:e3:51:8d:2a:28: 01:d8:97:81:46:d8:79:b3:54:ff:14:91:b4:08:bd: d2:9f:f9:fa:5b:ee:3d:83:6e:6d:a1:e3:76:6b:57: 6b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:03:DD:43:29:E8:3B:71:7F:E4:8F:40:D2:34:92:6B:87:ED:95:88 X509v3 Authority Key Identifier: keyid:FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d3:59:9a:b9:a1:39:a2:c7:27:c8:44:eb:e1:7a:cc:30:b9: 61:c7:63:e3:90:39:b4:ce:5b:0a:04:f5:7a:54:34:56:c6:62: 12:39:74:78:2f:88:af:b2:51:fd:57:97:dc:92:1b:0a:e7:d0: 07:f6:f5:9e:81:0e:ba:02:ac:bc:a8:a7:d8:02:8e:c9:cd:8f: e7:c9:ee:4e:eb:21:3d:cf:c7:39:ce:50:17:50:8d:c7:ed:e6: 29:fa:36:6a:f0:23:de:c4:6f:e2:a5:66:45:26:96:6f:bd:e8: fa:17:91:3b:99:d5:3a:e6:9c:a0:33:a1:f9:e0:db:fe:45:fc: 5c:e4:c5:33:75:8b:f3:de:fd:92:41:01:0f:af:16:4f:a9:6b: c2:09:df:a2:b5:2b:58:79:2c:4d:e8:84:28:b4:b7:5e:c2:7f: 08:b0:4c:6c:69:ff:a0:9f:1e:07:91:76:11:97:df:e4:39:6f: fd:82:4e:2b:f0:e1:1a:fe:fa:32:b6:d7:87:f9:2e:27:a4:b1: 87:06:de:10:6b:52:c4:b8:4c:f5:5a:c8:91:45:8a:3d:ad:08: d0:53:e7:2c:ac:84:00:de:ec:ec:cc:7f:60:e2:fd:14:20:65: 0b:8f:43:ca:cd:8d:e8:46:7e:1a:c0:c3:13:21:ec:9e:67:b1: c1:17:1c:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmnu2/BoVzQ9ls4DBJcKPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZTcyZDQzZjRjODJiMTE0NjczN2IxMTYxOTcyMzE4MzBi ZjY1ZDYwHhcNMjUxMjI1MTMwMjI2WhcNMjUxMjI2MTMwMjI2WjAzMTEwLwYDVQQD EyhlZDAzZGQ0MzI5ZTgzYjcxN2ZlNDhmNDBkMjM0OTI2Yjg3ZWQ5NTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrW/eTtdkxc9HZZyF0iAv62pjbu/ B0MIEAcPYnUfTok+TrZrSiqya0RiGe6AAk9+vAlz2yXjWorqNvndVQniOiLZovvu 8zFDMzPdr+iIclwEJ3YfKhmmFtLyRA6RG5LBJIpoUq2Hzf7SPXt6u2cll9d8s7qt a6qgzwjucZXJcfHi/KF0cp1p1FCeJY2Tvz6RcqdpolSTtrV9zN6vYuL1GGWBX0Lg U4Zs6V9ksXFE2EojuDZGI+cpT0z4JUCwO6Ejz4T27LZxFREov9A2Kyefn/ldzYRm LUapFAck41GNKigB2JeBRth5s1T/FJG0CL3Sn/n6W+49g25toeN2a1drjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0D3UMp6Dtxf+SPQNI0kmuH7ZWIMB8GA1UdIwQY MBaAFP3nLUP0yCsRRnN7EWGXIxgwv2XWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2VjdFFfVElLeEZHYzNzUllaY2pHRENfWmRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kZWJjMjktNWIyYi00YmFiLWI0Zjct ZTFjOTE5OGNkZDg4LzEvX2VjdFFfVElLeEZHYzNzUllaY2pHRENfWmRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9kZWJjMjktNWIyYi00YmFiLWI0ZjctZTFjOTE5OGNkZDg4 LzEvX2VjdFFfVElLeEZHYzNzUllaY2pHRENfWmRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9NZmrmh OaLHJ8hE6+F6zDC5Ycdj45A5tM5bCgT1elQ0VsZiEjl0eC+Ir7JR/VeX3JIbCufQ B/b1noEOugKsvKin2AKOyc2P58nuTushPc/HOc5QF1CNx+3mKfo2avAj3sRv4qVm RSaWb73o+heRO5nVOuacoDOh+eDb/kX8XOTFM3WL8979kkEBD68WT6lrwgnforUr WHksTeiEKLS3XsJ/CLBMbGn/oJ8eB5F2EZff5Dlv/YJOK/DhGv76MrbXh/kuJ6Sx hwbeEGtSxLhM9VrIkUWKPa0I0FPnLKyEAN7s7Mx/YOL9FCBlC49Dys2N6EZ+GsDD EyHsnmexwRccfA== -----END CERTIFICATE-----Generated at Thu Dec 25 16:06:04 2025 by rpki-client