This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft File: ecuROUt5B4HTqHc6hV5amjryCBA.mft (raw, json) Hash identifier: TlhSYnu44xVIn7XdAFoWv8hnxoLFjqFRsqZisFe4Mno= Subject key identifier: 93:52:DE:BB:8E:4E:4D:78:86:7F:C9:CE:A2:62:FE:EA:46:94:47:92 Authority key identifier: 79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10 Certificate issuer: /CN=79cb91394b790781d3a8773a855e5a9a3af20810 Certificate serial: 019C42B3FCD0B8426AD36C5493A8D925CE0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft Manifest number: 0358 Signing time: Mon 09 Feb 2026 14:00:17 +0000 Manifest this update: Mon 09 Feb 2026 14:00:17 +0000 Manifest next update: Tue 10 Feb 2026 14:00:17 +0000 Files and hashes: 1: ecuROUt5B4HTqHc6hV5amjryCBA.crl (hash: w27kc2ybJjsd39unjqysqF+B0i/lmUViOjVI3bwFjkc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.crl rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b3:fc:d0:b8:42:6a:d3:6c:54:93:a8:d9:25:ce:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79cb91394b790781d3a8773a855e5a9a3af20810 Validity Not Before: Feb 9 14:00:17 2026 GMT Not After : Feb 10 14:00:17 2026 GMT Subject: CN=9352debb8e4e4d78867fc9cea262feea46944792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6b:66:d8:7c:99:42:69:35:a6:5d:a4:4c:7c: a1:03:e2:cc:4e:24:63:8f:8d:b8:a1:34:9d:ea:bf: 2a:cf:d5:95:68:94:69:b8:b1:c5:50:fa:c3:3d:78: 32:4c:2c:d4:11:41:c5:6a:86:0b:66:55:f3:77:79: f4:17:44:33:1e:b5:98:5d:c6:5d:27:ae:7c:6a:29: 5b:80:70:5b:61:70:65:59:80:1b:2d:cb:38:08:d2: df:09:c8:93:bb:76:4d:34:74:e5:17:4a:38:27:80: 9d:80:87:69:2c:4b:d8:e6:8e:5d:c2:de:a8:9e:40: 15:23:f9:83:d9:f4:fa:c9:d7:c3:ba:a4:e0:10:c7: e5:16:de:a7:23:99:0e:14:e3:ef:0c:1c:f4:7f:4b: 4b:61:44:92:8a:53:cb:74:3c:6c:c1:3d:75:b9:84: e0:d2:72:5a:5f:d4:89:33:84:58:14:bb:1a:13:ac: c8:f1:cb:fd:7e:0b:a6:74:2e:87:0c:13:4e:2d:7f: 5b:10:fc:c5:d1:e8:fe:3e:ec:fe:e5:93:2f:15:ce: 99:9d:96:b0:e3:59:c3:c9:c5:6b:52:9b:e7:f1:51: 55:c1:2e:b3:79:0d:61:42:e1:09:6a:02:dd:da:9e: e9:ed:04:77:e6:65:4f:bb:ac:05:37:63:31:c0:ea: 3d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:52:DE:BB:8E:4E:4D:78:86:7F:C9:CE:A2:62:FE:EA:46:94:47:92 X509v3 Authority Key Identifier: keyid:79:CB:91:39:4B:79:07:81:D3:A8:77:3A:85:5E:5A:9A:3A:F2:08:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecuROUt5B4HTqHc6hV5amjryCBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e4637f-2de1-4815-bb6b-f11712149966/1/ecuROUt5B4HTqHc6hV5amjryCBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a6:e4:fb:32:25:5d:12:a4:d7:48:b1:6b:90:0e:55:af:f9: aa:84:73:b6:ec:78:6b:e7:3d:62:27:05:e3:f4:8f:82:f5:ab: a2:cf:46:47:8e:57:51:6e:1a:2b:9b:95:a1:f0:a7:d0:52:eb: 79:e9:9d:ca:4d:4a:0d:dc:64:bd:3b:b5:cc:ff:4f:e6:ba:98: c0:d3:fc:f6:8f:b3:0c:f3:69:d6:b7:3f:22:99:56:e3:8e:42: 5f:bb:3c:9a:ab:cf:be:bd:2d:c4:71:6a:5f:a2:72:76:c1:57: bf:ed:a5:50:02:5c:7b:25:0a:2d:2e:62:0f:d6:e0:49:76:cf: 85:60:6e:f7:ed:0f:cb:d7:4a:9c:3d:0d:92:51:81:59:25:9d: c2:a6:ab:cc:d1:37:b7:ca:e9:c3:b4:0a:fc:8a:bd:48:e4:36: 9a:20:fd:42:a6:7f:83:4f:12:f6:08:24:36:83:81:c1:76:91: af:c2:c3:6e:9d:c8:65:2b:74:02:bd:47:49:65:42:d8:a9:82: a4:f9:84:3e:c2:5a:0f:a6:e8:5c:90:1a:d2:92:51:ed:09:de: 81:39:1a:e6:13:8d:16:ea:fe:e3:19:a3:88:50:5f:06:48:8b: 74:93:51:9e:ba:e1:b7:5e:58:7a:65:33:b6:4a:de:1b:e8:17: d5:4a:1e:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCs/zQuEJq02xUk6jZJc4KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Y2I5MTM5NGI3OTA3ODFkM2E4NzczYTg1NWU1YTlhM2Fm MjA4MTAwHhcNMjYwMjA5MTQwMDE3WhcNMjYwMjEwMTQwMDE3WjAzMTEwLwYDVQQD Eyg5MzUyZGViYjhlNGU0ZDc4ODY3ZmM5Y2VhMjYyZmVlYTQ2OTQ0NzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Wtm2HyZQmk1pl2kTHyhA+LMTiRj j424oTSd6r8qz9WVaJRpuLHFUPrDPXgyTCzUEUHFaoYLZlXzd3n0F0QzHrWYXcZd J658ailbgHBbYXBlWYAbLcs4CNLfCciTu3ZNNHTlF0o4J4CdgIdpLEvY5o5dwt6o nkAVI/mD2fT6ydfDuqTgEMflFt6nI5kOFOPvDBz0f0tLYUSSilPLdDxswT11uYTg 0nJaX9SJM4RYFLsaE6zI8cv9fgumdC6HDBNOLX9bEPzF0ej+Puz+5ZMvFc6ZnZaw 41nDycVrUpvn8VFVwS6zeQ1hQuEJagLd2p7p7QR35mVPu6wFN2MxwOo9uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNS3ruOTk14hn/JzqJi/upGlEeSMB8GA1UdIwQY MBaAFHnLkTlLeQeB06h3OoVeWpo68ggQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWN1Uk9VdDVCNEhUcUhjNmhWNWFtanJ5Q0JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9lNDYzN2YtMmRlMS00ODE1LWJiNmIt ZjExNzEyMTQ5OTY2LzEvZWN1Uk9VdDVCNEhUcUhjNmhWNWFtanJ5Q0JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9lNDYzN2YtMmRlMS00ODE1LWJiNmItZjExNzEyMTQ5OTY2 LzEvZWN1Uk9VdDVCNEhUcUhjNmhWNWFtanJ5Q0JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6bk+zIl XRKk10ixa5AOVa/5qoRztux4a+c9YicF4/SPgvWros9GR45XUW4aK5uVofCn0FLr eemdyk1KDdxkvTu1zP9P5rqYwNP89o+zDPNp1rc/IplW445CX7s8mqvPvr0txHFq X6JydsFXv+2lUAJceyUKLS5iD9bgSXbPhWBu9+0Py9dKnD0NklGBWSWdwqarzNE3 t8rpw7QK/Iq9SOQ2miD9QqZ/g08S9ggkNoOBwXaRr8LDbp3IZSt0Ar1HSWVC2KmC pPmEPsJaD6boXJAa0pJR7QnegTka5hONFur+4xmjiFBfBkiLdJNRnrrht15YemUz tkreG+gX1Uoe6w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:06 2026 by rpki-client