This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft File: ec1L08m_4g3M_isZ3iMJXKJHSDU.mft (raw, json) Hash identifier: kR/fzhe3hTUEapqxWNZ6H1NMesV+8mmNZ15/s++YEV4= Subject key identifier: 2C:0A:34:9B:DC:31:04:E1:D5:E6:E4:92:9C:56:32:FD:B8:F9:78:41 Authority key identifier: 79:CD:4B:D3:C9:BF:E2:0D:CC:FE:2B:19:DE:23:09:5C:A2:47:48:35 Certificate issuer: /CN=79cd4bd3c9bfe20dccfe2b19de23095ca2474835 Certificate serial: 019BFC8A5FC5EC8DBEF7FA583182E93E0DD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft Manifest number: 0ECE Signing time: Mon 26 Jan 2026 23:01:25 +0000 Manifest this update: Mon 26 Jan 2026 23:01:25 +0000 Manifest next update: Tue 27 Jan 2026 23:01:25 +0000 Files and hashes: 1: LihjF3erJvHMjTYo7GDxbJGT55U.roa (hash: tOjtoNpUm+UuyQUObaS6VVdDcVoLBkYa2bxLOM78Y7k=) 2: ec1L08m_4g3M_isZ3iMJXKJHSDU.crl (hash: 95La6pD3TKidBcvaWRNGnSppT73TtBZuNN3J360O68Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:5f:c5:ec:8d:be:f7:fa:58:31:82:e9:3e:0d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79cd4bd3c9bfe20dccfe2b19de23095ca2474835 Validity Not Before: Jan 26 23:01:25 2026 GMT Not After : Jan 27 23:01:25 2026 GMT Subject: CN=2c0a349bdc3104e1d5e6e4929c5632fdb8f97841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2b:2e:7d:ef:fe:f6:1f:42:fe:c0:12:56:3f: 86:4a:9d:2b:be:0e:80:ce:15:95:1f:e6:99:0e:7d: 79:43:30:46:e3:bc:33:98:f8:a5:09:de:87:93:b5: 4c:17:6d:31:a8:6c:4a:f6:98:29:70:5d:7e:ed:71: ee:89:35:5a:b9:cf:f4:74:d1:4e:ba:8f:6c:05:3d: 66:db:49:26:79:7e:bd:5c:65:73:25:5d:3c:d4:e0: 40:9a:4f:63:3a:71:27:32:ed:8e:c5:a2:b3:da:91: fb:1a:8f:38:f9:a9:56:93:2b:99:3d:9e:cf:af:ca: 84:44:0b:28:76:33:29:9a:df:41:f8:7f:37:1b:5f: d2:a2:e0:4d:11:8a:69:3a:c1:3e:41:8a:1a:4c:53: d6:8d:20:bc:ab:19:27:8d:e2:35:0f:6e:9e:ce:77: 2b:83:fb:1c:0f:a4:06:c7:ea:9c:dc:bc:fb:27:31: 82:c3:5a:5c:8a:d6:e4:5d:1d:6f:7e:a7:a2:04:10: cd:f3:e6:f5:c6:3b:64:fe:99:d2:99:d1:b6:25:33: 79:82:a0:10:51:37:03:b8:83:6b:53:c1:a3:91:1c: f1:64:22:41:a6:e9:0e:36:52:bf:33:b0:88:b3:51: 19:b0:3e:3e:65:3b:af:9c:c0:3d:59:ee:2e:99:4d: 3b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0A:34:9B:DC:31:04:E1:D5:E6:E4:92:9C:56:32:FD:B8:F9:78:41 X509v3 Authority Key Identifier: keyid:79:CD:4B:D3:C9:BF:E2:0D:CC:FE:2B:19:DE:23:09:5C:A2:47:48:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:7e:c5:5e:54:d5:16:54:3e:08:b9:11:c0:e0:47:4a:a9:50: d4:56:b6:ca:3b:d6:f9:71:c3:38:0c:24:61:6e:83:a4:1a:e5: 90:79:4d:db:59:7f:16:e0:41:6c:b9:60:24:3e:3f:b2:42:9a: f9:3b:ed:2e:78:f6:61:b4:a2:59:ee:24:ff:92:4c:cd:dc:2e: 99:d4:08:23:e6:a3:30:06:4c:23:50:f3:a0:9f:67:b3:aa:23: 09:2b:84:ab:3b:c1:46:43:4e:fc:60:df:52:60:87:3e:f0:47: 31:60:6d:61:98:6f:04:d6:0d:d0:07:97:ce:bc:9d:ec:3f:9f: a5:64:a3:35:79:c5:1a:21:92:47:d2:61:f8:7e:9d:58:cd:49: 25:98:26:ee:e9:42:06:cf:f3:36:e2:fa:1e:26:c6:12:a1:21: 65:83:87:7b:ec:59:7c:3e:75:58:26:5e:8b:d4:f8:be:f3:eb: 84:44:b9:01:78:a2:dc:d9:85:48:94:01:47:7c:42:b3:a3:c7: 48:23:a8:de:92:92:ad:74:76:ea:07:64:0b:c9:5f:95:10:b6: 98:81:fb:a2:7f:1d:b5:54:c2:22:46:0e:77:3c:51:ee:93:f3: 08:8f:ef:de:b6:f0:d3:98:e2:d0:30:42:b6:87:c8:ed:bd:47: b1:59:fa:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8il/F7I2+9/pYMYLpPg3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Y2Q0YmQzYzliZmUyMGRjY2ZlMmIxOWRlMjMwOTVjYTI0 NzQ4MzUwHhcNMjYwMTI2MjMwMTI1WhcNMjYwMTI3MjMwMTI1WjAzMTEwLwYDVQQD EygyYzBhMzQ5YmRjMzEwNGUxZDVlNmU0OTI5YzU2MzJmZGI4Zjk3ODQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoisufe/+9h9C/sASVj+GSp0rvg6A zhWVH+aZDn15QzBG47wzmPilCd6Hk7VMF20xqGxK9pgpcF1+7XHuiTVauc/0dNFO uo9sBT1m20kmeX69XGVzJV081OBAmk9jOnEnMu2OxaKz2pH7Go84+alWkyuZPZ7P r8qERAsodjMpmt9B+H83G1/SouBNEYppOsE+QYoaTFPWjSC8qxknjeI1D26ezncr g/scD6QGx+qc3Lz7JzGCw1pcitbkXR1vfqeiBBDN8+b1xjtk/pnSmdG2JTN5gqAQ UTcDuINrU8GjkRzxZCJBpukONlK/M7CIs1EZsD4+ZTuvnMA9We4umU07dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwKNJvcMQTh1ebkkpxWMv24+XhBMB8GA1UdIwQY MBaAFHnNS9PJv+INzP4rGd4jCVyiR0g1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWMxTDA4bV80ZzNNX2lzWjNpTUpYS0pIU0RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mZmE5NDktODZjNC00OTg0LTg1NTct MmMyYzVmYmRhMzQxLzEvZWMxTDA4bV80ZzNNX2lzWjNpTUpYS0pIU0RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9mZmE5NDktODZjNC00OTg0LTg1NTctMmMyYzVmYmRhMzQx LzEvZWMxTDA4bV80ZzNNX2lzWjNpTUpYS0pIU0RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXn7FXlTV FlQ+CLkRwOBHSqlQ1Fa2yjvW+XHDOAwkYW6DpBrlkHlN21l/FuBBbLlgJD4/skKa +TvtLnj2YbSiWe4k/5JMzdwumdQII+ajMAZMI1DzoJ9ns6ojCSuEqzvBRkNO/GDf UmCHPvBHMWBtYZhvBNYN0AeXzryd7D+fpWSjNXnFGiGSR9Jh+H6dWM1JJZgm7ulC Bs/zNuL6HibGEqEhZYOHe+xZfD51WCZei9T4vvPrhES5AXii3NmFSJQBR3xCs6PH SCOo3pKSrXR26gdkC8lflRC2mIH7on8dtVTCIkYOdzxR7pPzCI/v3rbw05ji0DBC tofI7b1HsVn6Kw== -----END CERTIFICATE-----Generated at Tue Jan 27 02:12:14 2026 by rpki-client