This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft File: ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft (raw, json) Hash identifier: SEuuyewoKFHTNI0ng2BKd0ev+64rBLzCJeU8ARFOcZE= Subject key identifier: 82:CC:67:9A:46:70:FB:07:15:2B:BC:04:07:57:0E:B1:A4:3C:B0:79 Authority key identifier: 10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94 Certificate issuer: /CN=102a93b92f5845be62a6241f23cfadb14cb16994 Certificate serial: 019B34FB2BC52F7ED2C9687AFC183B3B8187 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 05:00:34 +0000 Manifest this update: Fri 19 Dec 2025 05:00:34 +0000 Manifest next update: Sat 20 Dec 2025 05:00:34 +0000 Files and hashes: 1: ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl (hash: +BT4zO0OGWUG1OcQL3+INVeQRI4Q8AXmGFvi2/6UGm8=) 2: oAVRAKAVX9ZdTzx0acx5PyMyT-o.roa (hash: OUAmV9WMtswHLR9c4KKcHWFm3C1cc4HUY52wOre6m1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:2b:c5:2f:7e:d2:c9:68:7a:fc:18:3b:3b:81:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=102a93b92f5845be62a6241f23cfadb14cb16994 Validity Not Before: Dec 19 05:00:34 2025 GMT Not After : Dec 20 05:00:34 2025 GMT Subject: CN=82cc679a4670fb07152bbc0407570eb1a43cb079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8a:3b:bf:11:ba:3e:4f:70:91:21:33:41:b6: 10:d7:1d:8b:28:7c:75:ea:41:1a:0d:21:98:df:2b: 5b:79:79:51:42:2a:19:4b:d0:23:9f:33:3a:6c:16: e3:8b:26:72:44:1a:64:7b:37:ba:96:e7:6a:75:ba: e6:6c:67:8a:31:90:c1:e1:e6:59:e8:c1:1c:da:03: 74:bf:23:e6:53:03:d3:d4:32:41:f7:55:40:e0:db: eb:28:ec:42:fd:0e:a1:63:42:15:5b:f2:22:fe:f6: 60:8a:30:74:19:6e:d6:ca:70:46:7f:cd:9e:79:7f: c8:44:9a:2b:c8:59:24:06:0b:05:7a:1d:e8:14:ab: 7c:1d:15:1b:11:44:87:7c:dc:46:c7:52:39:c0:0c: ab:60:22:f5:37:07:2c:53:f7:f7:89:54:3d:c0:a3: f0:24:b8:7a:66:1a:ae:09:61:ff:50:69:58:24:15: f5:1f:ea:e5:fe:d5:68:92:dc:d2:5b:9f:9b:92:85: 83:68:83:63:16:af:4e:c6:26:5b:bb:61:fe:7c:09: 03:b8:0f:3c:c5:64:b2:44:32:8b:f3:d3:58:6d:a9: 2d:95:af:c7:04:2a:e6:a0:5e:bb:43:63:61:19:b2: 26:54:72:24:86:a3:6d:36:0d:e6:94:96:e3:01:23: a9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CC:67:9A:46:70:FB:07:15:2B:BC:04:07:57:0E:B1:A4:3C:B0:79 X509v3 Authority Key Identifier: keyid:10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:ea:83:d5:53:56:e7:da:e6:3f:16:08:7b:68:ef:61:52:bf: a6:03:6c:0a:9d:08:ce:05:21:f8:e8:55:f4:25:3d:78:22:fb: 00:7f:36:15:ce:e8:c0:1d:92:b6:21:10:60:60:0c:0e:0a:39: 1a:fd:42:4f:c6:87:2c:ac:a5:42:40:b5:fd:0c:64:69:63:ca: 9c:70:47:e9:1d:07:be:b4:13:8e:60:eb:6b:4b:f6:8c:f8:ad: 05:01:70:28:fd:61:34:99:b9:76:ef:f6:95:4a:37:68:b3:51: 39:0f:18:5e:e7:24:c5:11:71:81:9c:b8:91:dd:1e:a7:da:0b: a4:bc:4d:df:af:51:ac:4f:c9:fd:a1:0c:a8:ea:a2:88:4d:11: a8:a8:0a:82:5f:1f:09:7c:87:65:46:43:37:51:2b:87:f8:cf: d2:84:02:88:34:83:4e:fc:bb:4d:3f:67:63:e6:1d:5b:27:db: 34:77:df:09:56:a3:56:bb:74:c2:b3:0d:4a:dd:39:ae:d8:13: 2e:0a:f2:c8:4a:43:74:bc:75:17:88:4b:e4:c7:5f:2e:07:33: 27:e3:cc:2f:5f:df:e8:74:3e:25:af:1f:1b:e7:98:db:fc:70: 9e:9e:ed:81:f7:ff:85:0e:11:96:c8:b6:8b:30:cb:76:5b:8b: 50:cb:b7:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+yvFL37SyWh6/Bg7O4GHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMmE5M2I5MmY1ODQ1YmU2MmE2MjQxZjIzY2ZhZGIxNGNi MTY5OTQwHhcNMjUxMjE5MDUwMDM0WhcNMjUxMjIwMDUwMDM0WjAzMTEwLwYDVQQD Eyg4MmNjNjc5YTQ2NzBmYjA3MTUyYmJjMDQwNzU3MGViMWE0M2NiMDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoo7vxG6Pk9wkSEzQbYQ1x2LKHx1 6kEaDSGY3ytbeXlRQioZS9AjnzM6bBbjiyZyRBpkeze6ludqdbrmbGeKMZDB4eZZ 6MEc2gN0vyPmUwPT1DJB91VA4NvrKOxC/Q6hY0IVW/Ii/vZgijB0GW7WynBGf82e eX/IRJoryFkkBgsFeh3oFKt8HRUbEUSHfNxGx1I5wAyrYCL1NwcsU/f3iVQ9wKPw JLh6ZhquCWH/UGlYJBX1H+rl/tVoktzSW5+bkoWDaINjFq9OxiZbu2H+fAkDuA88 xWSyRDKL89NYbaktla/HBCrmoF67Q2NhGbImVHIkhqNtNg3mlJbjASOp3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILMZ5pGcPsHFSu8BAdXDrGkPLB5MB8GA1UdIwQY MBaAFBAqk7kvWEW+YqYkHyPPrbFMsWmUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUNxVHVTOVlSYjVpcGlRZkk4LXRzVXl4YVpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mMWI0MWYtYTQ0Yy00NGUxLWI4ZDIt MzdjYjhhNTcwODdiLzEvRUNxVHVTOVlSYjVpcGlRZkk4LXRzVXl4YVpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9mMWI0MWYtYTQ0Yy00NGUxLWI4ZDItMzdjYjhhNTcwODdi LzEvRUNxVHVTOVlSYjVpcGlRZkk4LXRzVXl4YVpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAruqD1VNW 59rmPxYIe2jvYVK/pgNsCp0IzgUh+OhV9CU9eCL7AH82Fc7owB2StiEQYGAMDgo5 Gv1CT8aHLKylQkC1/QxkaWPKnHBH6R0HvrQTjmDra0v2jPitBQFwKP1hNJm5du/2 lUo3aLNROQ8YXuckxRFxgZy4kd0ep9oLpLxN369RrE/J/aEMqOqiiE0RqKgKgl8f CXyHZUZDN1Erh/jP0oQCiDSDTvy7TT9nY+YdWyfbNHffCVajVrt0wrMNSt05rtgT LgryyEpDdLx1F4hL5MdfLgczJ+PML1/f6HQ+Ja8fG+eY2/xwnp7tgff/hQ4Rlsi2 izDLdluLUMu3YQ== -----END CERTIFICATE-----Generated at Fri Dec 19 09:57:16 2025 by rpki-client