This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft File: ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json) Hash identifier: Yg/ZWqiO/JRP3G73CseuexvIrfB7CSedeCJqqOax2VY= Subject key identifier: 08:91:D9:82:9F:CF:C1:AE:E5:FC:54:0E:AA:01:47:8C:D4:51:00:B3 Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91 Certificate issuer: /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691 Certificate serial: 019B4882B09453A61411100B002F4D5C9F23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft Manifest number: 178E Signing time: Tue 23 Dec 2025 00:01:22 +0000 Manifest this update: Tue 23 Dec 2025 00:01:22 +0000 Manifest next update: Wed 24 Dec 2025 00:01:22 +0000 Files and hashes: 1: WLmUyFV8H24Y5kzvnWadWBycLgo.roa (hash: E+HDKH3BqBvsQRxbFmxgjKgFmfAPfEm3M2aQXUVUkSg=) 2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: n2h2BUQWUFnAYmkD0Ruy1wsEQXRiaKR1BWnODmvVAE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:b0:94:53:a6:14:11:10:0b:00:2f:4d:5c:9f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691 Validity Not Before: Dec 23 00:01:22 2025 GMT Not After : Dec 24 00:01:22 2025 GMT Subject: CN=0891d9829fcfc1aee5fc540eaa01478cd45100b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:36:94:39:00:9a:c4:a0:58:ae:6f:98:9d:5c: 6d:5e:05:2c:75:2f:54:19:e8:a8:3d:a5:d9:09:b8: 14:c3:98:71:8b:82:8d:3b:fb:43:94:4c:3a:1e:9b: dc:11:f7:07:ba:80:50:95:cf:c4:39:ba:96:f7:39: a5:32:d0:a8:fc:3d:95:38:f0:ba:a8:f1:cf:fd:e0: a1:7e:8d:14:c3:22:88:ab:76:75:05:fb:37:d7:d5: 5f:3c:cc:95:42:5d:3d:d4:90:3b:98:f8:9e:c8:eb: 1c:a6:ae:af:e2:c4:11:49:a9:78:fd:fa:52:0d:d3: c3:1f:39:ee:7e:09:65:49:53:2e:2e:4f:82:a2:77: 21:94:49:02:65:e8:f7:1f:3a:7d:6d:72:9e:fc:38: 9f:e2:5d:44:1a:b5:fc:23:c5:60:82:ff:eb:85:31: d5:69:b7:c1:eb:d8:18:ae:ec:e1:a3:c9:7e:02:2b: 90:24:a2:16:1f:06:df:61:26:2a:c9:25:ad:2e:21: 9d:45:59:59:ba:c3:77:9a:ac:db:60:5a:e1:4b:b2: a3:4e:f5:d8:ba:36:f7:15:4e:0f:6c:1b:52:30:ef: 04:02:b7:e9:fc:3c:e5:d3:65:e1:cd:ea:3f:24:31: 74:26:83:1e:6a:a7:39:e5:f8:7a:a0:c9:66:42:f3: af:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:91:D9:82:9F:CF:C1:AE:E5:FC:54:0E:AA:01:47:8C:D4:51:00:B3 X509v3 Authority Key Identifier: keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:f0:06:2c:cd:51:8f:31:ad:fa:9a:9a:7b:44:c9:51:2f:d4: 91:30:1a:71:5b:bc:47:64:2a:9f:cc:a7:eb:35:70:89:e0:ec: c2:87:6c:80:aa:82:45:58:4f:26:8b:70:9d:df:aa:cc:c8:1d: 4b:2b:63:a0:f3:9a:47:46:73:c0:ca:77:5a:47:52:5d:91:b5: 44:b3:e3:2d:16:1b:18:fc:96:39:4e:9e:03:fb:27:1c:54:09: e9:3f:1c:2d:d8:40:7e:28:51:f0:0e:4f:2e:d5:cd:2b:e7:5f: 54:0d:28:67:9e:89:f1:ef:a5:7e:0a:79:e2:c6:ae:ca:84:c0: ef:e5:9d:2d:16:ac:59:9b:5d:b6:92:9a:45:7e:e7:78:60:b0: 48:48:b0:0b:93:85:b0:2a:12:78:75:65:23:ca:d3:0b:cd:da: 67:7f:57:80:70:37:6c:d4:a2:af:36:d3:e7:2a:52:ed:b4:1f: bf:50:eb:03:f1:ea:84:82:65:1c:f5:cf:9c:5b:f8:77:9d:35: e7:44:6b:5c:d3:2a:de:37:de:c5:f6:e4:5e:ad:67:c6:94:12: c6:7c:15:67:0b:55:cd:fa:89:cb:c8:95:0a:a9:b0:84:ae:cc: 77:55:52:24:c7:e1:72:23:e8:9a:fc:0d:89:db:45:96:64:92: b5:f2:b3:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgrCUU6YUERALAC9NXJ8jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Yzk4Y2JiMzdmZWEyZTljOWE2ZWI2ZjkyODg3YzA1YTRj NTA2OTEwHhcNMjUxMjIzMDAwMTIyWhcNMjUxMjI0MDAwMTIyWjAzMTEwLwYDVQQD EygwODkxZDk4MjlmY2ZjMWFlZTVmYzU0MGVhYTAxNDc4Y2Q0NTEwMGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzaUOQCaxKBYrm+YnVxtXgUsdS9U GeioPaXZCbgUw5hxi4KNO/tDlEw6HpvcEfcHuoBQlc/EObqW9zmlMtCo/D2VOPC6 qPHP/eChfo0UwyKIq3Z1Bfs319VfPMyVQl091JA7mPieyOscpq6v4sQRSal4/fpS DdPDHznufgllSVMuLk+ConchlEkCZej3Hzp9bXKe/Dif4l1EGrX8I8Vggv/rhTHV abfB69gYruzho8l+AiuQJKIWHwbfYSYqySWtLiGdRVlZusN3mqzbYFrhS7KjTvXY ujb3FU4PbBtSMO8EArfp/Dzl02Xhzeo/JDF0JoMeaqc55fh6oMlmQvOv1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAiR2YKfz8Gu5fxUDqoBR4zUUQCzMB8GA1UdIwQY MBaAFHnJjLs3/qLpyabrb5KIfAWkxQaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81OGZlZTktMzgzMC00ZGE0LWIxNDQt OTE1MTc1ZTM2ZThlLzEvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81OGZlZTktMzgzMC00ZGE0LWIxNDQtOTE1MTc1ZTM2ZThl LzEvZWNtTXV6Zi1vdW5KcHV0dmtvaDhCYVRGQnBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifAGLM1R jzGt+pqae0TJUS/UkTAacVu8R2Qqn8yn6zVwieDswodsgKqCRVhPJotwnd+qzMgd SytjoPOaR0ZzwMp3WkdSXZG1RLPjLRYbGPyWOU6eA/snHFQJ6T8cLdhAfihR8A5P LtXNK+dfVA0oZ56J8e+lfgp54sauyoTA7+WdLRasWZtdtpKaRX7neGCwSEiwC5OF sCoSeHVlI8rTC83aZ39XgHA3bNSirzbT5ypS7bQfv1DrA/HqhIJlHPXPnFv4d501 50RrXNMq3jfexfbkXq1nxpQSxnwVZwtVzfqJy8iVCqmwhK7Md1VSJMfhciPomvwN idtFlmSStfKzsA== -----END CERTIFICATE-----Generated at Tue Dec 23 06:49:54 2025 by rpki-client