This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft File: ec1L08m_4g3M_isZ3iMJXKJHSDU.mft (raw, json) Hash identifier: 5Mc0sk8rQGaHztrPeCWEQz3mTVZWuTh+g4i3CPvi38c= Subject key identifier: 8B:92:C2:34:F2:0F:35:A2:98:6E:39:01:74:E7:75:3A:C3:0C:54:53 Authority key identifier: 79:CD:4B:D3:C9:BF:E2:0D:CC:FE:2B:19:DE:23:09:5C:A2:47:48:35 Certificate issuer: /CN=79cd4bd3c9bfe20dccfe2b19de23095ca2474835 Certificate serial: 019B46942DF850FB036499A57E7A79DA33FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft Manifest number: 0E6F Signing time: Mon 22 Dec 2025 15:01:14 +0000 Manifest this update: Mon 22 Dec 2025 15:01:14 +0000 Manifest next update: Tue 23 Dec 2025 15:01:14 +0000 Files and hashes: 1: RI4n8PF4rBIO32JAZiAFIMrum4w.roa (hash: 5SmITQJiZpZC1yYBE1LcmqDZ6YGT1Ir0nVy19fwLnlQ=) 2: ec1L08m_4g3M_isZ3iMJXKJHSDU.crl (hash: RgeBr05l+ypmI4P35F7t36Umirbu6X7Gvnf+giz6qFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:94:2d:f8:50:fb:03:64:99:a5:7e:7a:79:da:33:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79cd4bd3c9bfe20dccfe2b19de23095ca2474835 Validity Not Before: Dec 22 15:01:14 2025 GMT Not After : Dec 23 15:01:14 2025 GMT Subject: CN=8b92c234f20f35a2986e390174e7753ac30c5453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b9:3d:aa:56:4b:12:58:78:8c:5c:7c:e2:b0: 01:43:6c:44:8b:63:3d:c6:5d:cb:b3:90:18:1b:79: 99:60:2b:19:24:74:49:4f:5e:14:4d:0f:c2:19:63: 59:3a:43:96:f1:81:ba:ae:d3:4d:c6:64:b5:a2:5a: e5:51:c8:55:da:91:8a:0d:be:48:22:ee:3e:d6:fc: 72:18:07:68:28:73:90:6c:c6:d8:5b:ae:1c:fd:b2: 88:4b:4c:25:73:9f:6e:a4:e5:fc:35:19:9c:6b:c5: 3a:3a:4f:28:7d:a3:1b:97:da:22:3f:93:24:e1:a8: 86:aa:a7:26:fe:ab:43:47:08:17:6f:61:a9:ee:ce: ce:da:78:2a:14:97:f9:4f:59:a4:49:45:e4:bf:15: 6a:5a:89:26:e7:45:9c:7b:9c:9b:e8:96:22:a6:26: d3:d1:95:55:a5:62:e8:95:52:20:f2:75:0b:82:5e: ea:2c:5e:40:d6:45:4f:c8:8c:a2:f1:4b:67:94:cd: eb:6b:21:09:a1:65:dc:8a:18:ce:8c:d8:28:f8:99: 6a:6b:e3:27:00:7c:77:cd:e9:5c:6b:7d:40:20:b0: af:9e:6d:67:9f:14:67:88:39:a3:4c:81:fc:f3:ec: b7:d8:c5:ed:cf:38:29:98:5f:c0:52:cb:b4:f4:ea: 28:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:92:C2:34:F2:0F:35:A2:98:6E:39:01:74:E7:75:3A:C3:0C:54:53 X509v3 Authority Key Identifier: keyid:79:CD:4B:D3:C9:BF:E2:0D:CC:FE:2B:19:DE:23:09:5C:A2:47:48:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b0:d6:7a:d3:40:33:aa:b2:18:ef:5b:84:15:30:60:42:d2: d4:a8:63:1e:e1:f1:03:2b:13:88:54:d9:e9:67:75:74:57:3c: b4:a7:ee:f5:b5:f4:98:8e:bf:6c:84:cb:40:79:3d:cb:dc:21: 51:17:72:ca:ff:63:51:6a:17:05:1d:df:46:e8:02:52:bc:ab: f0:9e:ed:f2:78:85:83:31:06:33:f8:18:53:5d:9f:6a:16:42: a0:cd:61:ec:fc:01:5d:d8:05:12:9f:2b:81:87:5f:17:33:2e: 51:24:4f:28:84:77:20:12:18:48:5c:45:ca:c5:11:10:84:53: 36:75:ef:1c:f9:72:1a:6a:0f:fc:7e:26:94:95:2d:92:42:0e: 51:c3:3e:1c:5d:ce:59:c0:f8:f7:8a:40:a9:b4:9b:cb:70:75: 96:ae:3d:7d:a4:c3:a3:9a:ca:da:01:2e:cd:e2:cc:d9:ce:ac: dd:4f:49:62:14:a6:07:7a:7f:ee:1a:fa:d6:7e:0e:e0:95:20: e4:fe:8a:b2:56:92:24:24:89:83:f1:79:90:31:c9:1c:57:2b: f2:99:ef:43:ae:1d:0f:ad:56:69:15:ed:0f:13:3b:5c:ce:a8: ac:0a:c8:b3:59:00:fe:ea:f3:e7:6e:90:b3:63:38:55:ef:05: e6:39:ab:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGlC34UPsDZJmlfnp52jP9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Y2Q0YmQzYzliZmUyMGRjY2ZlMmIxOWRlMjMwOTVjYTI0 NzQ4MzUwHhcNMjUxMjIyMTUwMTE0WhcNMjUxMjIzMTUwMTE0WjAzMTEwLwYDVQQD Eyg4YjkyYzIzNGYyMGYzNWEyOTg2ZTM5MDE3NGU3NzUzYWMzMGM1NDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7k9qlZLElh4jFx84rABQ2xEi2M9 xl3Ls5AYG3mZYCsZJHRJT14UTQ/CGWNZOkOW8YG6rtNNxmS1olrlUchV2pGKDb5I Iu4+1vxyGAdoKHOQbMbYW64c/bKIS0wlc59upOX8NRmca8U6Ok8ofaMbl9oiP5Mk 4aiGqqcm/qtDRwgXb2Gp7s7O2ngqFJf5T1mkSUXkvxVqWokm50Wce5yb6JYipibT 0ZVVpWLolVIg8nULgl7qLF5A1kVPyIyi8UtnlM3rayEJoWXcihjOjNgo+Jlqa+Mn AHx3zelca31AILCvnm1nnxRniDmjTIH88+y32MXtzzgpmF/AUsu09OoouQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuSwjTyDzWimG45AXTndTrDDFRTMB8GA1UdIwQY MBaAFHnNS9PJv+INzP4rGd4jCVyiR0g1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWMxTDA4bV80ZzNNX2lzWjNpTUpYS0pIU0RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mZmE5NDktODZjNC00OTg0LTg1NTct MmMyYzVmYmRhMzQxLzEvZWMxTDA4bV80ZzNNX2lzWjNpTUpYS0pIU0RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9mZmE5NDktODZjNC00OTg0LTg1NTctMmMyYzVmYmRhMzQx LzEvZWMxTDA4bV80ZzNNX2lzWjNpTUpYS0pIU0RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbDWetNA M6qyGO9bhBUwYELS1KhjHuHxAysTiFTZ6Wd1dFc8tKfu9bX0mI6/bITLQHk9y9wh URdyyv9jUWoXBR3fRugCUryr8J7t8niFgzEGM/gYU12fahZCoM1h7PwBXdgFEp8r gYdfFzMuUSRPKIR3IBIYSFxFysUREIRTNnXvHPlyGmoP/H4mlJUtkkIOUcM+HF3O WcD494pAqbSby3B1lq49faTDo5rK2gEuzeLM2c6s3U9JYhSmB3p/7hr61n4O4JUg 5P6KslaSJCSJg/F5kDHJHFcr8pnvQ64dD61WaRXtDxM7XM6orArIs1kA/urz526Q s2M4Ve8F5jmrpg== -----END CERTIFICATE-----Generated at Mon Dec 22 17:10:18 2025 by rpki-client