This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft File: ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json) Hash identifier: QWufFnvx623no86hv9VMODCE3JAnpRBhuy4Gdh7PwPw= Subject key identifier: 15:F3:82:E1:D0:9D:82:4F:DC:8C:55:10:8D:B1:A4:75:EE:00:19:9B Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91 Certificate issuer: /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691 Certificate serial: 019B0E92A00274DEA0E5F5CD69B1BA3B0BB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 18:00:48 +0000 Manifest this update: Thu 11 Dec 2025 18:00:48 +0000 Manifest next update: Fri 12 Dec 2025 18:00:48 +0000 Files and hashes: 1: WLmUyFV8H24Y5kzvnWadWBycLgo.roa (hash: E+HDKH3BqBvsQRxbFmxgjKgFmfAPfEm3M2aQXUVUkSg=) 2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: xwBY1UsH7Ni1QZxbtKplJYkOmjEtqOh9IkK3zdhOO3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:a0:02:74:de:a0:e5:f5:cd:69:b1:ba:3b:0b:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691 Validity Not Before: Dec 11 18:00:48 2025 GMT Not After : Dec 12 18:00:48 2025 GMT Subject: CN=15f382e1d09d824fdc8c55108db1a475ee00199b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1b:1f:0b:8e:99:e8:4d:c3:72:dc:ab:ec:00: 4f:4c:c7:48:27:ea:55:2e:ab:7d:36:c8:af:06:97: 01:63:e3:df:c1:35:1c:3d:fa:c0:00:b9:8b:d1:2d: cd:11:83:a5:0b:01:d2:a0:d9:73:11:82:27:4a:38: 21:9d:b5:e6:87:7e:4c:05:49:f3:c0:2f:e4:c9:39: de:6d:82:66:65:f2:c1:0b:e7:98:53:39:90:e0:e0: f1:04:af:f7:a6:81:c3:59:9b:96:ef:a4:f0:52:57: b3:99:ff:26:54:bb:74:63:50:cb:0e:ec:c7:1c:01: a5:05:bb:c1:aa:19:5b:43:c0:e2:ec:04:f7:9f:06: eb:e3:e5:bd:d7:9c:9a:26:91:dc:fc:6d:17:fe:d3: 7d:a4:87:3c:e0:f1:1e:75:1b:ed:07:36:13:e2:5c: 94:06:03:fe:46:cb:a9:ed:2f:73:ba:fd:be:80:20: 35:2b:21:c0:5f:de:ec:c6:79:8a:88:08:d8:7e:ee: 5b:d1:c7:51:d3:12:dc:09:bf:d3:e3:d0:13:38:f0: 86:33:a6:d2:5e:fa:89:94:55:e1:26:43:df:9a:30: 02:31:a8:72:c8:10:be:6f:eb:5c:31:9d:dc:66:d4: a3:88:2a:3d:7c:48:e0:e1:e5:c1:6e:99:2d:19:38: bd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F3:82:E1:D0:9D:82:4F:DC:8C:55:10:8D:B1:A4:75:EE:00:19:9B X509v3 Authority Key Identifier: keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:4c:5b:77:f1:47:70:cf:84:54:a0:f7:21:a9:af:d1:8a:d9: fd:0c:31:94:c4:b6:ae:6e:fc:d2:e6:dd:ce:c2:13:49:7e:02: f5:42:cb:95:35:19:32:bd:a3:45:8b:a7:99:2d:0a:6f:8c:b0: 82:9d:dd:d5:10:58:ef:66:c3:53:5a:e1:7a:6b:f0:3e:0a:76: 0f:f4:12:94:34:7d:bc:9a:bc:9a:31:ab:9c:3e:93:bc:46:d5: 1a:4b:7e:f7:af:74:6e:3a:54:dc:54:27:67:48:33:33:a0:76: b3:e2:b9:ee:90:f8:23:d6:78:34:4a:b3:6f:36:8a:0d:a7:51: dd:82:a7:9b:28:11:fc:c2:6b:54:de:78:92:d5:ca:af:7b:36: e5:1a:1c:53:21:0f:02:01:9d:70:92:35:51:d9:8b:16:73:2b: 70:a4:a1:0b:06:f5:29:66:7f:2c:3f:45:2f:27:c8:17:4a:ed: b6:ab:65:3e:29:15:24:ac:b0:b6:ac:bf:a3:05:2e:d5:5a:fc: 6e:d6:fb:5d:dc:ce:07:5c:cb:40:9d:ea:3a:c7:e8:1a:8b:47: 12:4d:71:df:07:96:28:62:4c:0b:4f:f4:21:11:1f:7a:01:e5: 3e:6c:1e:15:6a:1d:a5:b5:66:a6:0a:c8:8c:54:bc:52:fb:72: 0f:58:d9:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkqACdN6g5fXNabG6Owu5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Yzk4Y2JiMzdmZWEyZTljOWE2ZWI2ZjkyODg3YzA1YTRj NTA2OTEwHhcNMjUxMjExMTgwMDQ4WhcNMjUxMjEyMTgwMDQ4WjAzMTEwLwYDVQQD EygxNWYzODJlMWQwOWQ4MjRmZGM4YzU1MTA4ZGIxYTQ3NWVlMDAxOTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBsfC46Z6E3Dctyr7ABPTMdIJ+pV Lqt9NsivBpcBY+PfwTUcPfrAALmL0S3NEYOlCwHSoNlzEYInSjghnbXmh35MBUnz wC/kyTnebYJmZfLBC+eYUzmQ4ODxBK/3poHDWZuW76TwUlezmf8mVLt0Y1DLDuzH HAGlBbvBqhlbQ8Di7AT3nwbr4+W915yaJpHc/G0X/tN9pIc84PEedRvtBzYT4lyU BgP+Rsup7S9zuv2+gCA1KyHAX97sxnmKiAjYfu5b0cdR0xLcCb/T49ATOPCGM6bS XvqJlFXhJkPfmjACMahyyBC+b+tcMZ3cZtSjiCo9fEjg4eXBbpktGTi90QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXzguHQnYJP3IxVEI2xpHXuABmbMB8GA1UdIwQY MBaAFHnJjLs3/qLpyabrb5KIfAWkxQaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81OGZlZTktMzgzMC00ZGE0LWIxNDQt OTE1MTc1ZTM2ZThlLzEvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81OGZlZTktMzgzMC00ZGE0LWIxNDQtOTE1MTc1ZTM2ZThl LzEvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsExbd/FH cM+EVKD3Iamv0YrZ/QwxlMS2rm780ubdzsITSX4C9ULLlTUZMr2jRYunmS0Kb4yw gp3d1RBY72bDU1rhemvwPgp2D/QSlDR9vJq8mjGrnD6TvEbVGkt+9690bjpU3FQn Z0gzM6B2s+K57pD4I9Z4NEqzbzaKDadR3YKnmygR/MJrVN54ktXKr3s25RocUyEP AgGdcJI1UdmLFnMrcKShCwb1KWZ/LD9FLyfIF0rttqtlPikVJKywtqy/owUu1Vr8 btb7XdzOB1zLQJ3qOsfoGotHEk1x3weWKGJMC0/0IREfegHlPmweFWodpbVmpgrI jFS8UvtyD1jZcQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:13:23 2025 by rpki-client