This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft File: ecfqTTn1y19FhgoJ6jgz74rdaCg.mft (raw, json) Hash identifier: 9/RmRkr5tLYNl30OaUIrVBMfftqUq+PioJ7LGxLHdrI= Subject key identifier: 45:AF:9A:CF:B5:98:D9:B2:A3:E4:F5:A8:41:1C:48:9A:10:E0:1E:EE Authority key identifier: 79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28 Certificate issuer: /CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828 Certificate serial: 019B50054BE6B6B41B1AED3D55AD70D88E95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft Manifest number: 118C Signing time: Wed 24 Dec 2025 11:01:22 +0000 Manifest this update: Wed 24 Dec 2025 11:01:22 +0000 Manifest next update: Thu 25 Dec 2025 11:01:22 +0000 Files and hashes: 1: FciP2xwcV3xPRtnXfSiCoZ9ZeYM.roa (hash: qFj6Ki0fNJUUk7+HsdPDeunKpSbjzg1RQIOCqYO9NpQ=) 2: ecfqTTn1y19FhgoJ6jgz74rdaCg.crl (hash: BN/zdH0FDyLTyuCjBKwSuWuuq1dIuvh9+b4CWUvftZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:05:4b:e6:b6:b4:1b:1a:ed:3d:55:ad:70:d8:8e:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828 Validity Not Before: Dec 24 11:01:22 2025 GMT Not After : Dec 25 11:01:22 2025 GMT Subject: CN=45af9acfb598d9b2a3e4f5a8411c489a10e01eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8e:73:f9:e2:dc:2a:32:c3:60:0f:7d:5c:18: ab:a1:6b:5b:bf:d9:be:c4:f3:7d:e2:f4:dc:11:8d: be:74:39:63:3d:a0:cd:a9:f0:f9:c7:64:df:67:53: cc:41:36:71:3c:20:2b:99:1d:ff:8f:6e:16:b3:c8: 99:9a:2d:0f:f3:60:a5:82:dd:4e:37:5c:8d:44:1c: e5:d8:70:07:d6:86:f2:a1:ee:77:5a:0e:1c:03:14: da:df:c2:4b:6f:51:f0:d6:c8:a4:7b:77:e8:90:25: 91:6f:06:bb:b5:2f:0b:6a:b4:38:8c:d8:a3:c0:26: 2a:3d:89:c7:97:55:9b:3f:b4:55:a3:58:56:7e:3e: e5:35:d3:b4:7c:59:23:17:f4:93:fb:17:b7:7a:ef: 03:be:b4:20:15:aa:8a:b4:25:5d:b3:ca:be:28:ad: 04:c4:94:c4:c0:6b:59:09:b5:f1:2c:f2:46:df:5a: 2d:4f:23:76:d8:47:4f:df:ab:41:6a:09:f0:6f:11: 23:b1:2a:14:13:1f:42:1f:96:70:bb:6d:96:df:27: 65:b2:f1:67:c7:03:c5:e7:9d:40:15:85:94:d2:99: 3d:6b:d5:60:ba:3e:8f:5c:bb:9e:61:7a:08:75:20: 4d:eb:ea:5d:d7:31:df:6f:71:be:ff:3f:f5:9e:0e: 24:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AF:9A:CF:B5:98:D9:B2:A3:E4:F5:A8:41:1C:48:9A:10:E0:1E:EE X509v3 Authority Key Identifier: keyid:79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e8:0a:a1:0d:15:bf:22:3b:06:94:23:5b:49:d5:e1:eb:42: ba:3e:79:c8:8a:c3:55:e3:a2:fc:af:d6:ac:d2:b2:60:43:65: 8d:0e:4d:9c:a8:3b:9e:e9:f2:ef:c8:c6:73:1c:ed:49:3b:25: 1e:8b:82:df:c0:9b:0e:db:97:80:30:f0:5a:17:f3:c2:18:8b: e7:fd:ea:0b:b5:df:f2:d7:f9:d9:e3:8a:73:6c:26:f0:80:30: 95:f4:6a:7d:9e:68:9a:e0:ce:c4:44:28:c4:65:e6:e6:81:f6: 96:b0:23:ae:84:03:d8:dd:7f:4a:b6:92:63:5b:21:b6:19:32: 0c:52:94:86:cf:06:56:b0:8a:f7:3b:47:ac:fa:56:04:46:4f: 42:af:e1:fc:8f:19:64:00:81:34:01:90:4a:20:d7:cf:21:6b: 67:b9:4d:86:2a:61:7d:18:3b:d4:28:a8:0e:8d:2a:1d:9a:d6: 1f:d2:e6:c1:85:3b:11:79:65:dc:95:51:77:f7:92:11:15:0d: 35:95:23:e6:dd:10:ab:28:62:5e:9e:90:58:67:3e:3d:d6:1a: 59:7e:f8:2b:40:95:28:90:b9:2a:c2:b0:6e:52:26:41:9e:41: 51:94:e3:7f:2e:35:db:a8:af:24:57:32:e0:f8:56:e3:dc:c1: 19:0b:d4:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQBUvmtrQbGu09Va1w2I6VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YzdlYTRkMzlmNWNiNWY0NTg2MGEwOWVhMzgzM2VmOGFk ZDY4MjgwHhcNMjUxMjI0MTEwMTIyWhcNMjUxMjI1MTEwMTIyWjAzMTEwLwYDVQQD Eyg0NWFmOWFjZmI1OThkOWIyYTNlNGY1YTg0MTFjNDg5YTEwZTAxZWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk45z+eLcKjLDYA99XBiroWtbv9m+ xPN94vTcEY2+dDljPaDNqfD5x2TfZ1PMQTZxPCArmR3/j24Ws8iZmi0P82Clgt1O N1yNRBzl2HAH1obyoe53Wg4cAxTa38JLb1Hw1sike3fokCWRbwa7tS8LarQ4jNij wCYqPYnHl1WbP7RVo1hWfj7lNdO0fFkjF/ST+xe3eu8DvrQgFaqKtCVds8q+KK0E xJTEwGtZCbXxLPJG31otTyN22EdP36tBagnwbxEjsSoUEx9CH5Zwu22W3ydlsvFn xwPF551AFYWU0pk9a9Vguj6PXLueYXoIdSBN6+pd1zHfb3G+/z/1ng4kFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWvms+1mNmyo+T1qEEcSJoQ4B7uMB8GA1UdIwQY MBaAFHnH6k059ctfRYYKCeo4M++K3WgoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWNmcVRUbjF5MTlGaGdvSjZqZ3o3NHJkYUNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iZWVkOTMtNDE3MC00ZjY4LWEzOTIt MjhiZjNkOTBiZDdiLzEvZWNmcVRUbjF5MTlGaGdvSjZqZ3o3NHJkYUNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iZWVkOTMtNDE3MC00ZjY4LWEzOTItMjhiZjNkOTBiZDdi LzEvZWNmcVRUbjF5MTlGaGdvSjZqZ3o3NHJkYUNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXOgKoQ0V vyI7BpQjW0nV4etCuj55yIrDVeOi/K/WrNKyYENljQ5NnKg7nuny78jGcxztSTsl HouC38CbDtuXgDDwWhfzwhiL5/3qC7Xf8tf52eOKc2wm8IAwlfRqfZ5omuDOxEQo xGXm5oH2lrAjroQD2N1/SraSY1shthkyDFKUhs8GVrCK9ztHrPpWBEZPQq/h/I8Z ZACBNAGQSiDXzyFrZ7lNhiphfRg71CioDo0qHZrWH9LmwYU7EXll3JVRd/eSERUN NZUj5t0QqyhiXp6QWGc+PdYaWX74K0CVKJC5KsKwblImQZ5BUZTjfy4126ivJFcy 4PhW49zBGQvUbQ== -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:34 2025 by rpki-client