This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft File: ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft (raw, json) Hash identifier: vAOlzWP1Keg32cINSlaisbbO+0ciahoEqr1mT91D4Wk= Subject key identifier: 1D:7E:FE:02:DA:28:BB:E0:24:4E:EC:88:02:BB:9A:A9:21:77:34:25 Authority key identifier: 10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94 Certificate issuer: /CN=102a93b92f5845be62a6241f23cfadb14cb16994 Certificate serial: 019B59ACDC363C7D6A1940200F5FDE0EF538 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 08:00:59 +0000 Manifest this update: Fri 26 Dec 2025 08:00:59 +0000 Manifest next update: Sat 27 Dec 2025 08:00:59 +0000 Files and hashes: 1: ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl (hash: D0mAnsa/C8Zei6UbHDnU+5d/Kml3bdJ5k5sdsnz3q64=) 2: oAVRAKAVX9ZdTzx0acx5PyMyT-o.roa (hash: OUAmV9WMtswHLR9c4KKcHWFm3C1cc4HUY52wOre6m1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:dc:36:3c:7d:6a:19:40:20:0f:5f:de:0e:f5:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=102a93b92f5845be62a6241f23cfadb14cb16994 Validity Not Before: Dec 26 08:00:59 2025 GMT Not After : Dec 27 08:00:59 2025 GMT Subject: CN=1d7efe02da28bbe0244eec8802bb9aa921773425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2c:c8:26:53:5c:83:57:18:9b:ee:50:58:4f: 6c:aa:1d:eb:95:24:10:8f:25:91:f9:bc:71:b1:5c: a9:34:d2:ee:a2:2b:81:d0:3a:b9:c2:cc:36:dd:e0: 86:74:b4:9a:96:82:1f:f1:77:3b:fb:ac:7c:2c:2e: de:86:b8:26:32:18:e5:31:48:46:3d:d8:cb:3e:e4: 0e:ee:42:c1:45:e7:40:76:52:e6:5a:e1:1f:2f:0f: 61:32:6f:65:06:9a:d4:fb:00:89:cc:2c:96:7a:3f: 26:5f:75:f6:78:4f:42:11:5f:4a:4a:22:b1:c7:2e: f9:42:1a:55:75:4f:1b:f1:0f:44:89:d4:22:55:3c: ac:61:9e:67:d3:7a:45:fd:e0:46:42:58:54:fd:5d: 24:b1:ca:64:a1:a2:77:cd:a8:cc:b8:e8:12:39:73: f2:24:a7:d9:63:63:c0:83:a1:a3:b0:0e:c6:3f:f0: cf:32:9c:e5:ca:b1:5d:5e:f6:30:d5:0b:4f:6f:fd: 59:b1:3d:e4:de:ee:dd:70:43:75:66:4b:6a:3d:24: c3:a5:d6:f0:d8:0d:82:5c:cc:fd:5b:85:ad:0a:51: 30:e0:b6:3e:6c:8d:17:8a:54:a5:b0:bc:cc:2b:7d: c6:a5:75:3b:e4:42:91:cb:89:50:3e:11:b5:05:b6: 23:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7E:FE:02:DA:28:BB:E0:24:4E:EC:88:02:BB:9A:A9:21:77:34:25 X509v3 Authority Key Identifier: keyid:10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:68:13:0d:86:e9:bb:75:bf:f5:5a:4c:e9:d6:ec:58:4e:53: 75:04:45:f6:a7:43:ff:c2:c4:bd:b3:59:ab:2e:7d:b7:41:10: 43:cf:3f:2d:64:c1:52:f5:10:54:0a:6f:f8:2f:88:32:01:26: 55:03:fc:cf:ea:ef:a5:9a:30:84:df:20:6e:36:4f:55:0e:91: 44:74:03:70:e5:c5:da:c8:8c:42:60:87:68:8e:00:62:1a:6d: 8b:9e:cc:87:4d:33:37:62:90:13:6c:bf:f8:a0:2e:6d:7c:06: 5e:05:bd:7b:7c:a6:15:31:57:cd:73:81:61:6a:63:64:ee:ef: 27:97:45:1f:c8:8e:22:e6:b0:ef:6f:61:51:da:b7:cf:dc:f8: ed:8b:f7:43:4e:45:e5:d8:73:ff:5a:8f:e0:c6:1e:ef:61:da: a8:c6:0c:90:c3:45:65:fb:ed:1d:66:0d:b9:f6:3a:f0:34:5c: e4:a1:0c:f0:91:5f:d1:32:44:9f:b4:0b:b4:ac:8f:19:b3:41: 35:40:c4:b3:db:ab:39:22:01:59:48:e4:b1:98:a3:6b:3b:4f: 26:79:52:d8:e6:b0:f3:8d:db:d5:49:e3:95:8e:14:7e:94:e5: 6f:78:c8:35:be:18:02:0d:0d:23:cd:f2:be:f6:33:ea:32:ad: 33:57:91:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrNw2PH1qGUAgD1/eDvU4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMmE5M2I5MmY1ODQ1YmU2MmE2MjQxZjIzY2ZhZGIxNGNi MTY5OTQwHhcNMjUxMjI2MDgwMDU5WhcNMjUxMjI3MDgwMDU5WjAzMTEwLwYDVQQD EygxZDdlZmUwMmRhMjhiYmUwMjQ0ZWVjODgwMmJiOWFhOTIxNzczNDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCzIJlNcg1cYm+5QWE9sqh3rlSQQ jyWR+bxxsVypNNLuoiuB0Dq5wsw23eCGdLSaloIf8Xc7+6x8LC7ehrgmMhjlMUhG PdjLPuQO7kLBRedAdlLmWuEfLw9hMm9lBprU+wCJzCyWej8mX3X2eE9CEV9KSiKx xy75QhpVdU8b8Q9EidQiVTysYZ5n03pF/eBGQlhU/V0kscpkoaJ3zajMuOgSOXPy JKfZY2PAg6GjsA7GP/DPMpzlyrFdXvYw1QtPb/1ZsT3k3u7dcEN1ZktqPSTDpdbw 2A2CXMz9W4WtClEw4LY+bI0XilSlsLzMK33GpXU75EKRy4lQPhG1BbYjCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1+/gLaKLvgJE7siAK7mqkhdzQlMB8GA1UdIwQY MBaAFBAqk7kvWEW+YqYkHyPPrbFMsWmUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUNxVHVTOVlSYjVpcGlRZkk4LXRzVXl4YVpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mMWI0MWYtYTQ0Yy00NGUxLWI4ZDIt MzdjYjhhNTcwODdiLzEvRUNxVHVTOVlSYjVpcGlRZkk4LXRzVXl4YVpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9mMWI0MWYtYTQ0Yy00NGUxLWI4ZDItMzdjYjhhNTcwODdi LzEvRUNxVHVTOVlSYjVpcGlRZkk4LXRzVXl4YVpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnGgTDYbp u3W/9VpM6dbsWE5TdQRF9qdD/8LEvbNZqy59t0EQQ88/LWTBUvUQVApv+C+IMgEm VQP8z+rvpZowhN8gbjZPVQ6RRHQDcOXF2siMQmCHaI4AYhpti57Mh00zN2KQE2y/ +KAubXwGXgW9e3ymFTFXzXOBYWpjZO7vJ5dFH8iOIuaw729hUdq3z9z47Yv3Q05F 5dhz/1qP4MYe72HaqMYMkMNFZfvtHWYNufY68DRc5KEM8JFf0TJEn7QLtKyPGbNB NUDEs9urOSIBWUjksZijaztPJnlS2Oaw843b1UnjlY4UfpTlb3jINb4YAg0NI83y vvYz6jKtM1eRRg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:54 2025 by rpki-client