This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft File: eCMlMhowLwusExvuEcmuppblELo.mft (raw, json) Hash identifier: G2xLHL3dilaYznkrCHg1J2kaJtsMB7kFiWH9cMObVs8= Subject key identifier: 83:25:E7:B9:11:C2:37:DE:05:19:F9:B7:2F:0C:33:A8:AA:D0:00:24 Authority key identifier: 78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA Certificate issuer: /CN=782325321a302f0bac131bee11c9aea696e510ba Certificate serial: 019B5AF61422C9C0A7810EE91866EAB143CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft Manifest number: 0DAC Signing time: Fri 26 Dec 2025 14:00:34 +0000 Manifest this update: Fri 26 Dec 2025 14:00:34 +0000 Manifest next update: Sat 27 Dec 2025 14:00:34 +0000 Files and hashes: 1: HkPgyjtfc2I2XR8BvT3Oa9Siabg.roa (hash: AzeYfXAKdYBKYZ/1I42CQO+bIphQdlonjepjXKZIBPs=) 2: eCMlMhowLwusExvuEcmuppblELo.crl (hash: hFQKp4MxW9MjECw3zT5gugMYcYfq1IFipQhZ3BKYqwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:14:22:c9:c0:a7:81:0e:e9:18:66:ea:b1:43:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=782325321a302f0bac131bee11c9aea696e510ba Validity Not Before: Dec 26 14:00:34 2025 GMT Not After : Dec 27 14:00:34 2025 GMT Subject: CN=8325e7b911c237de0519f9b72f0c33a8aad00024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:08:65:37:66:13:8b:d8:53:ee:3e:cc:d4:97: 79:74:64:34:44:9d:bd:d9:2a:c7:d0:9c:f8:fd:8b: 73:3b:ff:32:89:cd:69:4c:2d:6b:d8:c9:d0:84:80: 79:0c:76:74:2d:99:12:d9:3f:0a:d5:a0:e5:ed:53: 35:fc:5f:64:44:a5:6f:fc:d3:5d:ed:fb:82:f5:72: d6:d3:74:79:7a:3b:78:c0:dd:33:3c:82:7c:ab:45: cd:b4:c8:d8:ce:3d:e6:cd:08:3d:ed:ca:92:43:9e: fa:a8:79:70:a3:97:ab:5d:0a:fc:81:9d:93:30:4a: aa:49:91:f9:87:80:6a:fe:53:f6:4a:d2:8c:22:cd: 32:f9:b2:0b:c9:fe:95:e6:6a:a7:bc:59:cb:6b:6a: 4f:31:5b:31:bc:17:65:d9:1c:f0:b7:d4:f3:e9:23: 38:e8:28:b9:09:af:2a:46:5e:46:f3:bd:44:2b:f8: 19:6c:a9:e1:20:5c:49:b3:5a:9f:d6:f4:ea:17:6c: 81:81:f7:d7:54:92:e8:e7:e1:f2:f0:f0:5b:0c:5d: e6:38:a1:6b:54:f1:e8:15:f7:cc:a1:69:a5:15:74: 4f:ef:78:eb:ca:16:27:40:60:a6:ed:b1:6e:6c:f1: 41:f0:72:af:83:a3:21:8c:93:48:46:c9:0f:99:8b: 72:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:25:E7:B9:11:C2:37:DE:05:19:F9:B7:2F:0C:33:A8:AA:D0:00:24 X509v3 Authority Key Identifier: keyid:78:23:25:32:1A:30:2F:0B:AC:13:1B:EE:11:C9:AE:A6:96:E5:10:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCMlMhowLwusExvuEcmuppblELo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c75642-172b-42c1-a1d1-d25466a1fa9f/1/eCMlMhowLwusExvuEcmuppblELo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:71:a3:50:9d:20:80:6c:72:ec:5f:90:e5:76:a1:d9:5a:2d: f8:28:0c:03:08:60:a2:c8:a6:99:ed:1a:65:d3:39:38:44:ef: e5:64:5f:dc:c8:f0:7e:95:b8:9e:7f:a2:e7:19:68:89:51:58: 37:a1:52:f5:b4:ee:5d:61:31:02:db:71:eb:a8:08:9f:a9:a4: 59:41:98:84:be:6b:c2:23:9b:d2:87:fd:e8:04:ce:cc:77:12: a2:04:60:57:e0:0e:4c:92:87:7b:6e:33:4d:a6:8f:62:91:4e: 04:59:0d:3f:03:66:13:e3:65:b4:14:62:7d:eb:41:72:62:c8: f7:63:22:89:0b:af:04:92:fa:22:c4:fc:c2:86:a2:47:3e:ab: 70:f0:7e:15:61:a6:f7:81:14:79:12:d8:50:b3:7f:1b:8a:98: 77:a7:90:ab:42:db:3e:0b:81:9b:fe:2d:92:1e:d5:b5:25:33: 81:d5:7a:0c:e2:6e:39:6a:a9:be:00:30:98:e8:6e:f4:10:c5: 85:51:88:01:02:a1:2c:0f:0a:b0:ae:48:51:64:99:e0:10:62: ba:5d:6c:1d:87:cf:07:46:eb:cd:9c:01:45:e2:3f:51:61:f3: cd:76:75:5e:af:0c:1a:80:04:5e:6f:f9:e8:8a:a6:2a:33:77: 97:a4:ab:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9hQiycCngQ7pGGbqsUPOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MjMyNTMyMWEzMDJmMGJhYzEzMWJlZTExYzlhZWE2OTZl NTEwYmEwHhcNMjUxMjI2MTQwMDM0WhcNMjUxMjI3MTQwMDM0WjAzMTEwLwYDVQQD Eyg4MzI1ZTdiOTExYzIzN2RlMDUxOWY5YjcyZjBjMzNhOGFhZDAwMDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmghlN2YTi9hT7j7M1Jd5dGQ0RJ29 2SrH0Jz4/YtzO/8yic1pTC1r2MnQhIB5DHZ0LZkS2T8K1aDl7VM1/F9kRKVv/NNd 7fuC9XLW03R5ejt4wN0zPIJ8q0XNtMjYzj3mzQg97cqSQ576qHlwo5erXQr8gZ2T MEqqSZH5h4Bq/lP2StKMIs0y+bILyf6V5mqnvFnLa2pPMVsxvBdl2Rzwt9Tz6SM4 6Ci5Ca8qRl5G871EK/gZbKnhIFxJs1qf1vTqF2yBgffXVJLo5+Hy8PBbDF3mOKFr VPHoFffMoWmlFXRP73jryhYnQGCm7bFubPFB8HKvg6MhjJNIRskPmYty+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMl57kRwjfeBRn5ty8MM6iq0AAkMB8GA1UdIwQY MBaAFHgjJTIaMC8LrBMb7hHJrqaW5RC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUNNbE1ob3dMd3VzRXh2dUVjbXVwcGJsRUxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jNzU2NDItMTcyYi00MmMxLWExZDEt ZDI1NDY2YTFmYTlmLzEvZUNNbE1ob3dMd3VzRXh2dUVjbXVwcGJsRUxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9jNzU2NDItMTcyYi00MmMxLWExZDEtZDI1NDY2YTFmYTlm LzEvZUNNbE1ob3dMd3VzRXh2dUVjbXVwcGJsRUxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXGjUJ0g gGxy7F+Q5Xah2Vot+CgMAwhgosimme0aZdM5OETv5WRf3MjwfpW4nn+i5xloiVFY N6FS9bTuXWExAttx66gIn6mkWUGYhL5rwiOb0of96ATOzHcSogRgV+AOTJKHe24z TaaPYpFOBFkNPwNmE+NltBRifetBcmLI92MiiQuvBJL6IsT8woaiRz6rcPB+FWGm 94EUeRLYULN/G4qYd6eQq0LbPguBm/4tkh7VtSUzgdV6DOJuOWqpvgAwmOhu9BDF hVGIAQKhLA8KsK5IUWSZ4BBiul1sHYfPB0brzZwBReI/UWHzzXZ1Xq8MGoAEXm/5 6IqmKjN3l6SrDA== -----END CERTIFICATE-----Generated at Sat Dec 27 00:14:53 2025 by rpki-client