This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft File: ECKCU36wATC3llH0CAAO3KVkUOo.mft (raw, json) Hash identifier: W9Jje/yC/GKN182URljgDSc/6q3tJGlp36b5xpV8fmo= Subject key identifier: 2E:DD:BB:70:02:29:33:83:FF:91:9B:57:E3:AD:86:28:25:61:8C:AF Authority key identifier: 10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA Certificate issuer: /CN=102282537eb00130b79651f408000edca56450ea Certificate serial: 019B2098A4C7F5F22477CDF1150BAEA24DE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft Manifest number: 1063 Signing time: Mon 15 Dec 2025 06:00:33 +0000 Manifest this update: Mon 15 Dec 2025 06:00:33 +0000 Manifest next update: Tue 16 Dec 2025 06:00:33 +0000 Files and hashes: 1: ECKCU36wATC3llH0CAAO3KVkUOo.crl (hash: 8INDBk/GNEp0e8IdJvEImqcdmUcrvnhXyXMozQNINpI=) 2: mNpTYlNKotcL-0Zd_8NTbLjemtY.roa (hash: fghzEiX2an8ofk9BT1CH7W5YLfyP+hGmPzrsnOAoc1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 06:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:98:a4:c7:f5:f2:24:77:cd:f1:15:0b:ae:a2:4d:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=102282537eb00130b79651f408000edca56450ea Validity Not Before: Dec 15 06:00:33 2025 GMT Not After : Dec 16 06:00:33 2025 GMT Subject: CN=2eddbb7002293383ff919b57e3ad862825618caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:76:da:1a:5b:c9:9c:8e:0a:b2:72:1a:13:9d: 3a:06:59:dd:34:ce:af:29:f2:6e:3b:97:ec:6e:a3: b2:71:ab:e3:d1:9e:1e:a6:74:a8:3d:16:36:5b:71: a0:a4:11:7d:a6:c5:c5:0e:ee:69:b6:3f:e7:31:1c: d2:88:b5:50:98:e7:bd:97:39:e1:07:d0:c6:6e:ed: 9a:e5:84:e5:1c:ad:65:4b:eb:28:65:e2:0d:79:42: e5:e4:63:c1:a6:8f:99:be:1f:7b:1d:62:69:40:55: 7c:7f:a7:bf:42:d9:5b:0c:69:51:29:92:14:b7:e0: 80:b0:fe:05:c0:ac:4f:7b:31:ee:36:4b:df:73:ec: 47:d2:1f:7e:9c:52:a9:21:e3:db:69:c7:8d:91:a2: 94:47:8c:b7:15:8d:dc:12:0d:5b:59:c9:b5:f4:9a: 91:a3:17:09:41:9f:70:b2:9d:a3:c9:b5:d4:e3:7b: 1b:db:b2:ad:b3:94:46:15:03:77:f9:31:53:cd:a7: 28:78:cd:f2:a3:7a:1a:af:61:29:0a:41:72:e2:50: 4a:e6:c1:62:52:d0:75:68:22:a7:57:0b:ad:af:ac: b2:fc:36:74:8f:1d:8d:7e:bf:be:e1:e3:cc:2c:96: 00:f2:25:32:20:e3:4a:b0:e2:c5:b8:d7:af:90:6c: 90:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DD:BB:70:02:29:33:83:FF:91:9B:57:E3:AD:86:28:25:61:8C:AF X509v3 Authority Key Identifier: keyid:10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:56:6f:6a:30:df:63:d2:46:9b:b4:c8:e6:08:b0:84:2b:0e: 24:7f:a2:37:89:85:02:99:1f:9e:8f:3e:b9:5e:4d:2b:38:07: 64:cc:53:20:63:2a:5e:c8:fb:bf:a8:43:4a:78:30:c8:ab:18: a4:e3:af:99:7e:9d:60:95:49:c5:2d:43:e1:4e:e1:2b:02:40: 7b:13:f3:03:60:1b:8a:c8:c3:b6:f6:be:0b:7e:6c:b0:95:e7: a2:66:10:4d:23:bb:3f:76:3f:28:a4:9c:9a:43:4e:82:d9:5b: a1:3e:3a:f6:5f:47:74:ec:43:b6:38:00:a3:de:88:b5:2b:c1: 47:34:f3:68:c6:dc:71:ea:63:5b:4f:d4:c9:06:dd:66:cd:5c: b4:cc:11:d2:5d:64:0e:3b:81:fd:0c:2f:2e:1f:8a:0b:81:bf: 1c:29:88:d1:68:04:df:47:db:07:4b:ed:0f:ef:d2:cc:8d:16: 96:91:ab:56:a5:62:62:f4:6c:ab:8b:1d:40:08:27:c0:72:99: e6:28:16:f5:08:77:06:6a:80:45:b2:19:9c:7c:cb:a6:4f:ef: 20:be:89:72:29:c4:55:09:d9:c2:0a:61:4f:8c:df:ee:43:e3: 78:eb:50:11:d9:6e:1d:a3:c4:97:48:85:79:d4:99:5c:43:fc: 1e:a7:6d:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgmKTH9fIkd83xFQuuok3nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMjI4MjUzN2ViMDAxMzBiNzk2NTFmNDA4MDAwZWRjYTU2 NDUwZWEwHhcNMjUxMjE1MDYwMDMzWhcNMjUxMjE2MDYwMDMzWjAzMTEwLwYDVQQD EygyZWRkYmI3MDAyMjkzMzgzZmY5MTliNTdlM2FkODYyODI1NjE4Y2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53baGlvJnI4KsnIaE506BlndNM6v KfJuO5fsbqOycavj0Z4epnSoPRY2W3GgpBF9psXFDu5ptj/nMRzSiLVQmOe9lznh B9DGbu2a5YTlHK1lS+soZeINeULl5GPBpo+Zvh97HWJpQFV8f6e/QtlbDGlRKZIU t+CAsP4FwKxPezHuNkvfc+xH0h9+nFKpIePbaceNkaKUR4y3FY3cEg1bWcm19JqR oxcJQZ9wsp2jybXU43sb27Kts5RGFQN3+TFTzacoeM3yo3oar2EpCkFy4lBK5sFi UtB1aCKnVwutr6yy/DZ0jx2Nfr++4ePMLJYA8iUyIONKsOLFuNevkGyQMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7du3ACKTOD/5GbV+OthiglYYyvMB8GA1UdIwQY MBaAFBAiglN+sAEwt5ZR9AgADtylZFDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUNLQ1UzNndBVEMzbGxIMENBQU8zS1ZrVU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi80ZWYyYzMtMDZkOC00ZjExLTg0Yjct MzM4MTk2OTM1MDUwLzEvRUNLQ1UzNndBVEMzbGxIMENBQU8zS1ZrVU9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi80ZWYyYzMtMDZkOC00ZjExLTg0YjctMzM4MTk2OTM1MDUw LzEvRUNLQ1UzNndBVEMzbGxIMENBQU8zS1ZrVU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVZvajDf Y9JGm7TI5giwhCsOJH+iN4mFApkfno8+uV5NKzgHZMxTIGMqXsj7v6hDSngwyKsY pOOvmX6dYJVJxS1D4U7hKwJAexPzA2AbisjDtva+C35ssJXnomYQTSO7P3Y/KKSc mkNOgtlboT469l9HdOxDtjgAo96ItSvBRzTzaMbccepjW0/UyQbdZs1ctMwR0l1k DjuB/QwvLh+KC4G/HCmI0WgE30fbB0vtD+/SzI0WlpGrVqViYvRsq4sdQAgnwHKZ 5igW9Qh3BmqARbIZnHzLpk/vIL6JcinEVQnZwgphT4zf7kPjeOtQEdluHaPEl0iF edSZXEP8HqdtVQ== -----END CERTIFICATE-----Generated at Mon Dec 15 12:24:16 2025 by rpki-client