This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft File: _EcO7LHxvgUlJRQvYKC1naXxgVY.mft (raw, json) Hash identifier: 9aw05ozRvm5Idlyul3j2YUwFMShLXhveErgnM24u+78= Subject key identifier: DC:50:AE:BD:91:5B:DD:0B:84:52:D4:52:2D:71:BD:EB:11:DA:F8:EC Authority key identifier: FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56 Certificate issuer: /CN=fc470eecb1f1be052525142f60a0b59da5f18156 Certificate serial: 019B066CCC2DA158D6CBFBF9236CBEE78312 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft Manifest number: 0D96 Signing time: Wed 10 Dec 2025 04:02:31 +0000 Manifest this update: Wed 10 Dec 2025 04:02:31 +0000 Manifest next update: Thu 11 Dec 2025 04:02:31 +0000 Files and hashes: 1: _EcO7LHxvgUlJRQvYKC1naXxgVY.crl (hash: Hz3KdqfhQiXd3Tdw/yzSsdR3XSFIE9X3lqfIbscXJMU=) 2: aCl-dDRoPO0jTR0Ib_QeJDjdmS4.roa (hash: HeEdwIKN+ZitbMNTMVlHyhG8Cl/ej6Fq6W5v+LAsobU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 04:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:6c:cc:2d:a1:58:d6:cb:fb:f9:23:6c:be:e7:83:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc470eecb1f1be052525142f60a0b59da5f18156 Validity Not Before: Dec 10 04:02:31 2025 GMT Not After : Dec 11 04:02:31 2025 GMT Subject: CN=dc50aebd915bdd0b8452d4522d71bdeb11daf8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cc:4b:c5:4b:25:70:30:c5:76:79:64:f8:9c: bd:c6:db:6b:a5:60:d2:87:d3:c6:fc:43:3d:38:10: 5d:90:5c:f8:ff:72:c2:98:b3:e8:8b:41:fa:18:0d: 3e:13:72:7f:76:e6:82:35:fb:39:f2:20:37:e0:67: c8:8a:4e:ef:15:33:57:75:6c:5e:83:88:4b:cc:19: 73:67:01:ff:dc:b8:d5:f1:f8:29:0a:b5:84:db:cf: d0:39:fe:20:43:c1:05:0d:51:e0:44:d1:83:f9:41: 7d:6c:1e:65:80:88:2e:46:1f:63:72:c2:da:03:36: 04:50:ef:8d:b0:3d:79:cc:06:26:75:a0:81:e8:30: 06:0e:9f:8f:30:0b:3e:86:3c:bc:1b:97:8b:59:25: d6:2d:1e:d9:c1:91:e1:52:2f:76:52:63:3b:74:ae: 7a:03:f1:1c:ee:d1:29:b6:69:4c:8a:9e:dd:95:38: 92:92:cb:54:ee:35:e5:cb:ec:18:0c:91:2a:0c:3b: e4:2d:f2:5b:ad:5c:6f:67:8c:8b:d9:e7:27:7f:4d: f4:25:1f:85:80:68:0d:15:ac:b7:51:6d:11:47:bc: 54:e0:fd:34:b9:9d:03:88:e0:95:4e:d3:fe:06:b2: c8:e7:96:56:55:f0:e9:10:90:89:f2:59:60:39:94: 32:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:50:AE:BD:91:5B:DD:0B:84:52:D4:52:2D:71:BD:EB:11:DA:F8:EC X509v3 Authority Key Identifier: keyid:FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:66:ff:c2:50:78:ee:c4:33:c0:4c:ec:3a:2d:9b:35:00:d5: 5f:4c:96:ac:1f:05:e5:05:4d:c1:90:f3:59:c0:1c:c3:5a:88: 47:6f:ff:8f:be:d1:f7:83:e3:f0:df:41:4b:2d:99:9f:19:db: 45:da:d1:24:34:d9:5f:1b:13:9a:06:f0:a9:bb:06:b8:db:b1: 76:b4:bc:4f:ce:03:ee:b0:ab:ba:81:82:96:6e:ae:e2:f0:05: a8:26:76:f8:84:be:b9:e3:27:12:29:58:e6:5a:b7:a9:24:46: 14:44:08:ac:ea:45:88:f3:b9:49:d0:56:21:2a:55:95:a2:84: d9:01:1d:e0:ee:fd:2e:7b:03:d6:bb:23:db:72:21:65:7b:09: 01:45:a5:4f:51:8d:e3:90:28:42:8a:96:3b:0d:e7:8d:cc:2b: fa:91:c9:f2:ab:3b:6d:6b:bd:42:85:06:48:5f:88:50:34:12: f6:12:bf:5e:6b:4d:f6:0a:66:24:b9:14:fa:57:4e:2b:e9:16: 45:9e:c5:44:85:41:d4:dc:a0:25:51:67:1d:c1:30:20:65:86: 48:1f:b1:4e:11:33:23:44:19:c1:1a:30:39:bd:ba:d5:28:96: d5:f9:e7:e1:5b:1d:ef:fd:49:09:ca:a6:04:a1:cf:65:45:b6: 9a:7a:a5:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGbMwtoVjWy/v5I2y+54MSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDcwZWVjYjFmMWJlMDUyNTI1MTQyZjYwYTBiNTlkYTVm MTgxNTYwHhcNMjUxMjEwMDQwMjMxWhcNMjUxMjExMDQwMjMxWjAzMTEwLwYDVQQD EyhkYzUwYWViZDkxNWJkZDBiODQ1MmQ0NTIyZDcxYmRlYjExZGFmOGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcxLxUslcDDFdnlk+Jy9xttrpWDS h9PG/EM9OBBdkFz4/3LCmLPoi0H6GA0+E3J/duaCNfs58iA34GfIik7vFTNXdWxe g4hLzBlzZwH/3LjV8fgpCrWE28/QOf4gQ8EFDVHgRNGD+UF9bB5lgIguRh9jcsLa AzYEUO+NsD15zAYmdaCB6DAGDp+PMAs+hjy8G5eLWSXWLR7ZwZHhUi92UmM7dK56 A/Ec7tEptmlMip7dlTiSkstU7jXly+wYDJEqDDvkLfJbrVxvZ4yL2ecnf030JR+F gGgNFay3UW0RR7xU4P00uZ0DiOCVTtP+BrLI55ZWVfDpEJCJ8llgOZQy+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxQrr2RW90LhFLUUi1xvesR2vjsMB8GA1UdIwQY MBaAFPxHDuyx8b4FJSUUL2CgtZ2l8YFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VjTzdMSHh2Z1VsSlJRdllLQzFuYVh4Z1ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82ZjgyZDQtMmVjMy00NGE1LThkYjUt Y2E3ZDA0ZTI5MTZjLzEvX0VjTzdMSHh2Z1VsSlJRdllLQzFuYVh4Z1ZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS82ZjgyZDQtMmVjMy00NGE1LThkYjUtY2E3ZDA0ZTI5MTZj LzEvX0VjTzdMSHh2Z1VsSlJRdllLQzFuYVh4Z1ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArmb/wlB4 7sQzwEzsOi2bNQDVX0yWrB8F5QVNwZDzWcAcw1qIR2//j77R94Pj8N9BSy2Znxnb RdrRJDTZXxsTmgbwqbsGuNuxdrS8T84D7rCruoGClm6u4vAFqCZ2+IS+ueMnEilY 5lq3qSRGFEQIrOpFiPO5SdBWISpVlaKE2QEd4O79LnsD1rsj23IhZXsJAUWlT1GN 45AoQoqWOw3njcwr+pHJ8qs7bWu9QoUGSF+IUDQS9hK/XmtN9gpmJLkU+ldOK+kW RZ7FRIVB1NygJVFnHcEwIGWGSB+xThEzI0QZwRowOb261SiW1fnn4Vsd7/1JCcqm BKHPZUW2mnqlzw== -----END CERTIFICATE-----Generated at Wed Dec 10 11:58:53 2025 by rpki-client