This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
File: ECKCU36wATC3llH0CAAO3KVkUOo.mft (raw, json)
Hash identifier: jsXZOo6dNwJUKUo2uxuqTNLOxfLGp+z9+aO89efoMMY=
Subject key identifier: 25:F6:FC:5B:21:21:11:BF:75:B3:9E:D8:F3:47:AB:40:AB:43:2B:71
Authority key identifier: 10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
Certificate issuer: /CN=102282537eb00130b79651f408000edca56450ea
Certificate serial: 019C41A19BB2C84E7CAE05691B8B0F468D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
Manifest number: 10F9
Signing time: Mon 09 Feb 2026 09:00:35 +0000
Manifest this update: Mon 09 Feb 2026 09:00:35 +0000
Manifest next update: Tue 10 Feb 2026 09:00:35 +0000
Files and hashes: 1: ECKCU36wATC3llH0CAAO3KVkUOo.crl (hash: NnMjGwRPmjOPGXf3RluhfGt1yuGAsOvs8GM45qRySBI=)
2: PtloqyiZbbnOWREO8NaRPMXJYjc.roa (hash: Uge7+7ajlI43nf85To0akQVcLl5k7mGSDfVfABa+GiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:9b:b2:c8:4e:7c:ae:05:69:1b:8b:0f:46:8d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102282537eb00130b79651f408000edca56450ea
Validity
Not Before: Feb 9 09:00:35 2026 GMT
Not After : Feb 10 09:00:35 2026 GMT
Subject: CN=25f6fc5b212111bf75b39ed8f347ab40ab432b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:6d:24:b3:3f:6e:e8:e4:1b:85:e9:8d:64:
e9:ec:a4:75:0d:a5:30:b3:5d:8a:bb:69:6e:97:61:
e3:a2:fb:4e:1c:29:31:91:56:a3:45:c3:54:67:72:
f1:6e:bf:ab:14:5d:fa:9f:48:ef:b7:b2:96:5e:fe:
44:29:c7:fa:32:bd:fd:b3:64:c4:a1:21:a6:e2:4b:
b3:91:e7:6b:21:c4:eb:1e:4a:12:f9:59:bd:56:2f:
9f:c9:36:d6:6d:34:77:0b:4a:b2:26:65:4a:a9:13:
c9:d7:c3:7e:1d:8c:f7:1b:ad:dc:d2:16:46:3e:de:
f4:f9:b8:7c:23:bc:b3:49:31:64:dd:01:aa:bd:d0:
fd:e3:a7:62:ae:9b:eb:16:48:9d:16:6e:8a:74:3f:
a1:ee:4c:41:a6:f4:07:2f:17:72:57:3f:cb:e7:f1:
88:79:b7:24:bc:e4:02:a1:eb:74:96:93:54:64:b0:
3e:9d:70:3e:38:1b:ad:49:5f:15:2e:c2:88:d5:9e:
52:d2:27:4a:c3:31:b3:ad:a5:28:ea:e6:d2:1e:d1:
c9:14:c7:f5:0b:f1:3a:e5:cd:18:33:40:9b:b1:bf:
d3:5c:7b:af:0b:76:a3:ca:5f:77:7d:49:9d:94:e6:
3f:1c:8c:27:12:fe:cc:6e:96:27:d4:5a:c6:85:7f:
2f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F6:FC:5B:21:21:11:BF:75:B3:9E:D8:F3:47:AB:40:AB:43:2B:71
X509v3 Authority Key Identifier:
keyid:10:22:82:53:7E:B0:01:30:B7:96:51:F4:08:00:0E:DC:A5:64:50:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECKCU36wATC3llH0CAAO3KVkUOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4ef2c3-06d8-4f11-84b7-338196935050/1/ECKCU36wATC3llH0CAAO3KVkUOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f4:83:de:ec:c3:06:7b:34:88:bb:fd:63:61:3e:8a:c8:e3:
5e:68:94:ca:25:81:5e:e6:59:8b:65:e8:b9:16:f8:b4:25:f6:
2d:e2:36:98:b0:93:02:c8:72:44:77:25:7c:f8:79:71:b7:cb:
db:9b:60:5a:d2:72:dc:a7:06:33:86:49:c7:b1:45:1d:0a:58:
e7:12:4f:14:d4:b1:9a:97:13:19:76:76:38:78:a4:32:b1:69:
50:84:f5:39:3f:08:29:e2:5e:52:59:83:bb:c1:7f:b5:64:4e:
0b:88:90:e5:3c:61:34:a1:8a:a3:ff:a0:af:96:2e:93:f8:d7:
27:24:a5:7b:46:ed:28:53:ae:a5:24:bf:e1:57:c1:b4:00:0d:
13:dc:10:02:11:3a:10:4a:5b:08:52:0f:08:bc:46:fe:47:07:
65:1d:41:56:09:fe:78:eb:1b:8a:1a:21:f8:fa:20:a3:e1:16:
47:57:87:2c:1e:22:78:dc:27:76:8a:a3:af:de:45:00:83:c0:
9f:4c:63:2c:b9:ea:39:cf:30:76:bd:bc:4e:55:72:f9:18:30:
bb:c8:ab:b8:d3:ac:fb:29:ec:d6:9f:a3:7b:54:6e:2b:33:1b:
82:6e:a3:95:d2:bc:e9:57:2e:32:4e:b1:eb:2b:3f:22:76:99:
09:38:63:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:54 2026 by rpki-client