This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft File: lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft (raw, json) Hash identifier: gaJxtEwHf7EITnS8FvGSLyKb07g+dKanJ0MuFjosQ1o= Subject key identifier: 39:AA:E2:2A:85:35:03:D0:B2:9A:65:BD:66:A4:21:61:9B:89:88:A8 Authority key identifier: 94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9 Certificate issuer: /CN=94472e859957355da5ddd13496d70d70773491f9 Certificate serial: 019B4693E998486735D7F2AD24A166940513 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft Manifest number: 10B0 Signing time: Mon 22 Dec 2025 15:00:57 +0000 Manifest this update: Mon 22 Dec 2025 15:00:57 +0000 Manifest next update: Tue 23 Dec 2025 15:00:57 +0000 Files and hashes: 1: lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl (hash: NaG+9wprgyeFEGBKHli2uhKcbmJ8sRbN7+kR0O0XRmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:93:e9:98:48:67:35:d7:f2:ad:24:a1:66:94:05:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94472e859957355da5ddd13496d70d70773491f9 Validity Not Before: Dec 22 15:00:57 2025 GMT Not After : Dec 23 15:00:57 2025 GMT Subject: CN=39aae22a853503d0b29a65bd66a421619b8988a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5e:ee:33:f9:df:eb:43:b3:b7:32:e5:f9:a9: 73:48:69:1f:91:f0:12:80:e9:84:88:62:98:56:68: 03:95:7a:c8:c7:c9:8d:82:83:c1:e7:65:76:ed:e6: 03:5e:65:00:0e:b3:97:ca:2e:39:ba:b2:28:c1:e1: b1:35:60:c5:25:4e:d9:85:92:9b:58:f9:a4:20:81: a0:7f:6e:34:f1:69:ec:5b:4f:98:29:56:0d:42:a5: 64:66:c0:da:05:21:ad:75:00:9f:cc:82:b4:07:ed: ae:4e:ce:f3:b3:c3:e7:91:eb:bb:42:9c:e4:fa:0a: ce:21:d4:ef:42:01:77:ea:af:35:d9:b7:e7:0e:bb: e0:78:af:e8:e3:da:1e:23:e8:58:fd:50:14:4e:20: 52:18:78:97:80:ea:41:31:0d:82:8a:50:4c:62:4c: 19:13:67:dc:c5:9d:a1:77:6f:dc:be:08:8e:29:f8: 05:6f:fe:74:e1:1a:b5:76:c9:ad:9a:2e:cb:43:c9: 50:7f:b9:8c:8a:95:66:14:40:4f:03:f8:d7:e7:96: 55:10:76:a9:1d:b1:00:af:39:ef:a2:05:5b:6a:37: 13:ec:68:d9:64:3a:b3:5b:1f:79:8a:ec:70:43:cb: f3:56:c7:5a:54:b4:00:7c:f2:d3:66:3d:dc:39:52: d0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AA:E2:2A:85:35:03:D0:B2:9A:65:BD:66:A4:21:61:9B:89:88:A8 X509v3 Authority Key Identifier: keyid:94:47:2E:85:99:57:35:5D:A5:DD:D1:34:96:D7:0D:70:77:34:91:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEcuhZlXNV2l3dE0ltcNcHc0kfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d6c18a-55ef-4118-970c-60d1ed80c7cf/1/lEcuhZlXNV2l3dE0ltcNcHc0kfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:e9:e3:b9:66:a3:91:e8:58:37:5e:3c:87:78:dc:ad:29:12: 54:30:aa:24:75:a8:f0:64:c1:17:62:b5:21:d6:c9:6a:1f:1e: cc:69:c5:89:c6:52:6b:d3:d3:3f:bb:70:91:66:88:53:f7:d9: 7d:82:a9:cf:fd:fc:79:96:4b:1f:d2:10:93:f6:47:ca:0f:1a: 0f:aa:72:5f:8a:43:be:d0:97:e3:4e:3b:73:7e:b7:d7:a7:c4: 83:53:42:01:6b:90:e4:93:f4:9e:bf:3b:40:a4:09:4a:2b:8b: 1b:1c:f1:11:e2:14:82:52:c4:77:cc:31:20:33:00:15:e1:c9: 01:24:67:d7:22:d3:e3:63:df:cc:e2:9d:46:b5:18:cf:74:34: c3:ec:4f:e7:fa:62:e6:71:5c:a7:db:71:46:bf:c1:10:ce:e3: 6b:c6:47:bd:90:a1:42:5f:b1:9a:98:ed:57:9f:d9:b7:f7:d7: b4:60:f6:98:df:71:b6:20:1b:39:9f:06:0d:49:2c:b6:1a:88: 58:a9:cf:5b:7a:93:f2:21:09:e8:23:95:ed:83:d5:4f:86:f6: 1c:ec:1d:cf:dc:04:53:1d:fc:ad:3e:69:04:4a:e0:07:46:aa: 7e:57:c5:b2:cb:e2:66:d0:b2:12:25:e1:15:a1:39:15:8e:34: ec:66:07:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGk+mYSGc11/KtJKFmlAUTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NDcyZTg1OTk1NzM1NWRhNWRkZDEzNDk2ZDcwZDcwNzcz NDkxZjkwHhcNMjUxMjIyMTUwMDU3WhcNMjUxMjIzMTUwMDU3WjAzMTEwLwYDVQQD EygzOWFhZTIyYTg1MzUwM2QwYjI5YTY1YmQ2NmE0MjE2MTliODk4OGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs17uM/nf60OztzLl+alzSGkfkfAS gOmEiGKYVmgDlXrIx8mNgoPB52V27eYDXmUADrOXyi45urIoweGxNWDFJU7ZhZKb WPmkIIGgf2408WnsW0+YKVYNQqVkZsDaBSGtdQCfzIK0B+2uTs7zs8Pnkeu7Qpzk +grOIdTvQgF36q812bfnDrvgeK/o49oeI+hY/VAUTiBSGHiXgOpBMQ2CilBMYkwZ E2fcxZ2hd2/cvgiOKfgFb/504Rq1dsmtmi7LQ8lQf7mMipVmFEBPA/jX55ZVEHap HbEArznvogVbajcT7GjZZDqzWx95iuxwQ8vzVsdaVLQAfPLTZj3cOVLQbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmq4iqFNQPQspplvWakIWGbiYioMB8GA1UdIwQY MBaAFJRHLoWZVzVdpd3RNJbXDXB3NJH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEVjdWhabFhOVjJsM2RFMGx0Y05jSGMwa2ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNmMxOGEtNTVlZi00MTE4LTk3MGMt NjBkMWVkODBjN2NmLzEvbEVjdWhabFhOVjJsM2RFMGx0Y05jSGMwa2ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kNmMxOGEtNTVlZi00MTE4LTk3MGMtNjBkMWVkODBjN2Nm LzEvbEVjdWhabFhOVjJsM2RFMGx0Y05jSGMwa2ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABenjuWaj kehYN148h3jcrSkSVDCqJHWo8GTBF2K1IdbJah8ezGnFicZSa9PTP7twkWaIU/fZ fYKpz/38eZZLH9IQk/ZHyg8aD6pyX4pDvtCX4047c36316fEg1NCAWuQ5JP0nr87 QKQJSiuLGxzxEeIUglLEd8wxIDMAFeHJASRn1yLT42PfzOKdRrUYz3Q0w+xP5/pi 5nFcp9txRr/BEM7ja8ZHvZChQl+xmpjtV5/Zt/fXtGD2mN9xtiAbOZ8GDUksthqI WKnPW3qT8iEJ6COV7YPVT4b2HOwdz9wEUx38rT5pBErgB0aqflfFssviZtCyEiXh FaE5FY407GYHhw== -----END CERTIFICATE-----Generated at Mon Dec 22 20:44:31 2025 by rpki-client