This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft File: EceeiifN6ZEb19pjhzxcxVjb1TE.mft (raw, json) Hash identifier: XXReLlGG/O9wo4qN1H5Lj+u+9eNfhG0+iKrZyaEmiW0= Subject key identifier: 48:65:B3:AC:F5:E9:3F:2A:D3:E9:BD:EA:FC:7F:38:31:E0:EB:53:B4 Authority key identifier: 11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31 Certificate issuer: /CN=11c79e8a27cde9911bd7da63873c5cc558dbd531 Certificate serial: 019B5E2E2ADFF5A293B55B35A7C05F0DD625 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft Manifest number: 1538 Signing time: Sat 27 Dec 2025 05:00:42 +0000 Manifest this update: Sat 27 Dec 2025 05:00:42 +0000 Manifest next update: Sun 28 Dec 2025 05:00:42 +0000 Files and hashes: 1: Bsu-qd4Hb1vqVvGW20Zp4q_1pjc.roa (hash: QTaT900DWiFMyweSz6j2MycvkkhCzcM06pjuvp5Vqnw=) 2: EceeiifN6ZEb19pjhzxcxVjb1TE.crl (hash: xtIUuw9fBy13lFYDR+Zc5R8+qEWwPSXoZgN5igSZDkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:2e:2a:df:f5:a2:93:b5:5b:35:a7:c0:5f:0d:d6:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11c79e8a27cde9911bd7da63873c5cc558dbd531 Validity Not Before: Dec 27 05:00:42 2025 GMT Not After : Dec 28 05:00:42 2025 GMT Subject: CN=4865b3acf5e93f2ad3e9bdeafc7f3831e0eb53b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:bf:c2:27:59:27:ab:ad:b9:42:ec:7c:f4:cd: 43:c3:25:87:5c:83:2d:1b:44:d5:0b:9a:3a:48:89: 6b:22:82:97:f4:58:4b:db:94:69:fd:25:1d:8c:ef: d4:cb:32:7a:71:6a:65:75:af:de:19:0b:1a:36:02: b0:0c:26:39:ff:e8:3b:95:4b:56:91:26:d4:c3:22: c3:08:f0:65:6e:d2:ab:5b:31:66:05:ab:ee:eb:81: 59:37:55:1f:c9:e6:23:01:91:13:06:43:8b:ce:0f: 4e:c5:0d:28:93:c6:2d:3d:f7:39:31:72:68:fb:f7: 02:a9:3e:68:ee:24:fa:1b:2d:7f:c2:2d:fa:8a:1c: d4:55:ea:ab:50:2f:fd:4c:d8:9e:9a:92:07:88:63: cb:01:47:a2:32:d1:26:c9:21:db:fb:b3:7b:61:62: 94:3a:9b:a8:9e:e7:a0:6c:20:db:4d:a3:fd:54:57: 72:60:ad:26:43:36:0c:2a:e9:65:26:ed:ea:8a:f6: 67:8d:de:ea:aa:57:a3:90:c7:43:54:e1:2d:96:97: 50:c6:c6:ab:6e:be:57:fd:1b:94:36:5e:04:58:f8: 7f:60:93:d5:a0:ce:ad:fb:ac:f4:b2:45:36:d9:4e: 0f:ff:2b:c1:3e:76:ee:73:7d:f4:3a:0c:1d:39:b6: df:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:65:B3:AC:F5:E9:3F:2A:D3:E9:BD:EA:FC:7F:38:31:E0:EB:53:B4 X509v3 Authority Key Identifier: keyid:11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:3e:c7:80:b3:e4:32:bb:59:4a:98:03:02:a8:c2:24:05:88: 7d:c2:f6:64:6c:14:55:01:69:2a:97:7d:fd:83:3a:bc:63:eb: aa:8f:73:5f:ed:20:d3:a1:12:2a:7f:44:77:60:59:09:d6:0f: d2:52:36:0d:38:ba:3b:33:86:e2:3d:22:86:88:65:4b:ce:17: 38:6d:5f:02:37:88:86:86:8e:de:28:4c:4f:2f:83:3d:82:f3: 4e:a6:8a:5b:83:91:c1:da:17:af:9a:d4:0f:73:f4:02:2a:e5: 2e:fd:52:d5:4f:4c:cf:6b:6e:11:f4:99:19:31:e5:92:ee:69: 0c:e8:7f:d2:97:47:05:52:ae:a4:1c:01:80:a3:6d:9f:2a:3f: f4:74:14:f7:bc:d2:43:e9:d8:bd:34:75:cd:7a:ab:a2:3c:2a: 3d:3e:dd:33:2e:ca:5f:e0:d9:73:82:5e:01:17:e4:4f:1a:da: 97:f5:5e:97:0f:e7:21:a2:cb:a4:2c:39:a3:94:27:3a:a6:9c: 1c:f1:07:41:cc:d2:f4:5c:d7:f6:da:ef:84:d2:a1:bc:60:7b: 0e:43:fd:d8:d0:59:0d:9a:de:e9:cd:04:1b:7b:35:ae:16:ad: 15:22:3a:b3:2c:52:2a:3b:f9:52:37:b2:e8:7f:8a:de:ce:02: 6b:f1:f7:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZteLirf9aKTtVs1p8BfDdYlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYzc5ZThhMjdjZGU5OTExYmQ3ZGE2Mzg3M2M1Y2M1NThk YmQ1MzEwHhcNMjUxMjI3MDUwMDQyWhcNMjUxMjI4MDUwMDQyWjAzMTEwLwYDVQQD Eyg0ODY1YjNhY2Y1ZTkzZjJhZDNlOWJkZWFmYzdmMzgzMWUwZWI1M2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67/CJ1knq625Qux89M1DwyWHXIMt G0TVC5o6SIlrIoKX9FhL25Rp/SUdjO/UyzJ6cWplda/eGQsaNgKwDCY5/+g7lUtW kSbUwyLDCPBlbtKrWzFmBavu64FZN1UfyeYjAZETBkOLzg9OxQ0ok8YtPfc5MXJo +/cCqT5o7iT6Gy1/wi36ihzUVeqrUC/9TNiempIHiGPLAUeiMtEmySHb+7N7YWKU OpuonuegbCDbTaP9VFdyYK0mQzYMKullJu3qivZnjd7qqlejkMdDVOEtlpdQxsar br5X/RuUNl4EWPh/YJPVoM6t+6z0skU22U4P/yvBPnbuc330OgwdObbfiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhls6z16T8q0+m96vx/ODHg61O0MB8GA1UdIwQY MBaAFBHHnoonzemRG9faY4c8XMVY29UxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWNlZWlpZk42WkViMTlwamh6eGN4VmpiMVRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80MTRlNWEtNTJmOC00ODQ1LWIxYmIt Yjk5MzA1MTBkMGEwLzEvRWNlZWlpZk42WkViMTlwamh6eGN4VmpiMVRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS80MTRlNWEtNTJmOC00ODQ1LWIxYmItYjk5MzA1MTBkMGEw LzEvRWNlZWlpZk42WkViMTlwamh6eGN4VmpiMVRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIT7HgLPk MrtZSpgDAqjCJAWIfcL2ZGwUVQFpKpd9/YM6vGPrqo9zX+0g06ESKn9Ed2BZCdYP 0lI2DTi6OzOG4j0ihohlS84XOG1fAjeIhoaO3ihMTy+DPYLzTqaKW4ORwdoXr5rU D3P0AirlLv1S1U9Mz2tuEfSZGTHlku5pDOh/0pdHBVKupBwBgKNtnyo/9HQU97zS Q+nYvTR1zXqrojwqPT7dMy7KX+DZc4JeARfkTxral/Velw/nIaLLpCw5o5QnOqac HPEHQczS9FzX9trvhNKhvGB7DkP92NBZDZre6c0EG3s1rhatFSI6syxSKjv5Ujey 6H+K3s4Ca/H3pQ== -----END CERTIFICATE-----Generated at Sat Dec 27 07:24:35 2025 by rpki-client