This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft File: ec1L08m_4g3M_isZ3iMJXKJHSDU.mft (raw, json) Hash identifier: mnX2a5bELOVwySRSuJ/48V2YVn0ZWgKOh0WKYER3mV0= Subject key identifier: B4:CF:9F:D5:42:4B:BE:76:F1:9C:3C:74:95:D4:9F:B1:E5:CA:2D:5A Authority key identifier: 79:CD:4B:D3:C9:BF:E2:0D:CC:FE:2B:19:DE:23:09:5C:A2:47:48:35 Certificate issuer: /CN=79cd4bd3c9bfe20dccfe2b19de23095ca2474835 Certificate serial: 019B0E92A0F14A014DFAD3C2DC5667FDD81B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft Manifest number: 0E52 Signing time: Thu 11 Dec 2025 18:00:48 +0000 Manifest this update: Thu 11 Dec 2025 18:00:48 +0000 Manifest next update: Fri 12 Dec 2025 18:00:48 +0000 Files and hashes: 1: RI4n8PF4rBIO32JAZiAFIMrum4w.roa (hash: 5SmITQJiZpZC1yYBE1LcmqDZ6YGT1Ir0nVy19fwLnlQ=) 2: ec1L08m_4g3M_isZ3iMJXKJHSDU.crl (hash: tlnYwZbuw7FoS9zaVmJaflUld+WKf4w7NkbYt2ebw3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:a0:f1:4a:01:4d:fa:d3:c2:dc:56:67:fd:d8:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79cd4bd3c9bfe20dccfe2b19de23095ca2474835 Validity Not Before: Dec 11 18:00:48 2025 GMT Not After : Dec 12 18:00:48 2025 GMT Subject: CN=b4cf9fd5424bbe76f19c3c7495d49fb1e5ca2d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3d:08:5a:a5:c8:8d:c9:98:ce:1b:5a:53:8c: b5:70:85:f0:d4:4d:f7:69:e3:9f:07:ec:db:b8:24: 2d:7e:77:48:e3:47:5c:bb:d3:14:3d:63:cd:af:0b: 65:f5:64:30:c9:7b:1e:f7:b7:5a:3e:f2:7a:29:60: 76:9b:44:e8:32:cf:9a:34:c0:7e:d8:73:94:9e:76: 77:fa:66:f9:73:e8:93:f9:d8:68:c3:03:69:fe:34: e9:bc:2a:77:d5:14:d4:fd:5d:8d:4d:92:23:b6:a8: bc:d6:b4:51:5a:c0:f4:c2:cb:3c:37:7f:ab:78:b8: b3:59:91:16:d6:bf:10:e8:95:2a:8f:85:1c:e5:b3: bc:c3:9b:1d:97:c0:21:43:76:20:5a:87:6b:14:b2: 85:9b:73:ca:fa:05:21:a8:6c:3c:57:26:3e:ff:45: e8:14:91:0d:35:da:d6:75:2c:55:08:62:22:e5:c6: 93:bf:79:c9:aa:6e:fa:1a:17:af:c1:3e:31:46:86: 47:1e:c2:5a:0c:7b:eb:17:99:7f:5b:f2:5e:35:74: c9:21:cf:08:c8:f2:ee:f3:12:5c:82:7d:f5:84:39: f2:80:1d:b6:1a:9e:99:44:45:71:ca:71:f6:4d:31: f3:5d:88:d4:96:58:67:18:aa:a3:ef:98:8a:10:bb: bd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CF:9F:D5:42:4B:BE:76:F1:9C:3C:74:95:D4:9F:B1:E5:CA:2D:5A X509v3 Authority Key Identifier: keyid:79:CD:4B:D3:C9:BF:E2:0D:CC:FE:2B:19:DE:23:09:5C:A2:47:48:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:1f:40:70:91:ff:1c:00:b2:26:ec:af:76:17:d3:39:95:45: df:33:29:5e:50:53:41:93:ae:b1:d5:10:f2:f2:86:b7:58:c4: be:7d:46:31:44:99:1b:04:3b:70:86:7a:d5:ee:e3:24:a5:1f: 3f:0c:b3:04:ad:77:95:7c:3f:e5:43:6f:01:5c:59:a7:7a:79: ca:1c:16:4f:15:17:09:15:64:cc:4c:17:99:9b:e5:8c:e6:37: ab:99:6c:35:b9:7b:8c:8a:29:50:d5:0e:d7:f9:e3:5b:5c:74: ad:3f:d0:f5:21:46:27:49:8f:9d:7d:17:76:12:a4:ab:26:1e: 15:f3:eb:91:a6:6e:02:96:48:2d:69:1c:92:c7:6c:03:c9:6b: 67:8a:fa:f5:f7:ff:40:fb:a1:9d:4f:a8:c8:62:53:53:1a:07: f3:d1:71:77:59:78:98:bd:dc:47:df:97:d6:2c:4f:a7:50:70: d3:fe:8f:f0:86:42:46:0e:0d:9d:c1:69:1d:48:5a:61:0c:d3: bb:33:8d:b3:96:04:4c:6f:e1:b9:4f:a7:98:9e:ea:68:42:4e: 11:e8:0e:4d:41:73:97:a1:d5:ba:36:26:5d:ce:7f:f8:03:3d: ab:8b:80:b3:f7:8a:ff:81:e3:a1:fc:38:83:b5:66:d6:52:42: 75:46:0b:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkqDxSgFN+tPC3FZn/dgbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Y2Q0YmQzYzliZmUyMGRjY2ZlMmIxOWRlMjMwOTVjYTI0 NzQ4MzUwHhcNMjUxMjExMTgwMDQ4WhcNMjUxMjEyMTgwMDQ4WjAzMTEwLwYDVQQD EyhiNGNmOWZkNTQyNGJiZTc2ZjE5YzNjNzQ5NWQ0OWZiMWU1Y2EyZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj0IWqXIjcmYzhtaU4y1cIXw1E33 aeOfB+zbuCQtfndI40dcu9MUPWPNrwtl9WQwyXse97daPvJ6KWB2m0ToMs+aNMB+ 2HOUnnZ3+mb5c+iT+dhowwNp/jTpvCp31RTU/V2NTZIjtqi81rRRWsD0wss8N3+r eLizWZEW1r8Q6JUqj4Uc5bO8w5sdl8AhQ3YgWodrFLKFm3PK+gUhqGw8VyY+/0Xo FJENNdrWdSxVCGIi5caTv3nJqm76GhevwT4xRoZHHsJaDHvrF5l/W/JeNXTJIc8I yPLu8xJcgn31hDnygB22Gp6ZREVxynH2TTHzXYjUllhnGKqj75iKELu9fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTPn9VCS7528Zw8dJXUn7Hlyi1aMB8GA1UdIwQY MBaAFHnNS9PJv+INzP4rGd4jCVyiR0g1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWMxTDA4bV80ZzNNX2lzWjNpTUpYS0pIU0RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mZmE5NDktODZjNC00OTg0LTg1NTct MmMyYzVmYmRhMzQxLzEvZWMxTDA4bV80ZzNNX2lzWjNpTUpYS0pIU0RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9mZmE5NDktODZjNC00OTg0LTg1NTctMmMyYzVmYmRhMzQx LzEvZWMxTDA4bV80ZzNNX2lzWjNpTUpYS0pIU0RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkR9AcJH/ HACyJuyvdhfTOZVF3zMpXlBTQZOusdUQ8vKGt1jEvn1GMUSZGwQ7cIZ61e7jJKUf PwyzBK13lXw/5UNvAVxZp3p5yhwWTxUXCRVkzEwXmZvljOY3q5lsNbl7jIopUNUO 1/njW1x0rT/Q9SFGJ0mPnX0XdhKkqyYeFfPrkaZuApZILWkcksdsA8lrZ4r69ff/ QPuhnU+oyGJTUxoH89Fxd1l4mL3cR9+X1ixPp1Bw0/6P8IZCRg4NncFpHUhaYQzT uzONs5YETG/huU+nmJ7qaEJOEegOTUFzl6HVujYmXc5/+AM9q4uAs/eK/4Hjofw4 g7Vm1lJCdUYLKQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:21:50 2025 by rpki-client