This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft File: eci_aFCnp-KvNMwWI23QgwlODO4.mft (raw, json) Hash identifier: x/Bu4vPROe49mUpZgj/g8JEICbr79CWHd1vvNwLTzhA= Subject key identifier: 5A:B2:4C:63:F5:A1:C1:0A:05:7C:18:C2:D6:7D:E6:8E:66:49:48:7E Authority key identifier: 79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE Certificate issuer: /CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee Certificate serial: 019B3CB4C859561655E4836BCD2B5A2DE81A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft Manifest number: 13E6 Signing time: Sat 20 Dec 2025 17:00:39 +0000 Manifest this update: Sat 20 Dec 2025 17:00:39 +0000 Manifest next update: Sun 21 Dec 2025 17:00:39 +0000 Files and hashes: 1: JVEAwFILWYdCnLLaCQ5RAsK9BBQ.roa (hash: TBZiChrAp6rj4kAjmButXnHCPDHWsopt5A7i33tulpw=) 2: eci_aFCnp-KvNMwWI23QgwlODO4.crl (hash: Cud04El+f0NoEgcZSgNCb/NJooL7sf/7FrICxNO+KLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:c8:59:56:16:55:e4:83:6b:cd:2b:5a:2d:e8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee Validity Not Before: Dec 20 17:00:39 2025 GMT Not After : Dec 21 17:00:39 2025 GMT Subject: CN=5ab24c63f5a1c10a057c18c2d67de68e6649487e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2c:76:b1:36:38:25:12:87:00:05:f2:c0:c8: 49:12:d1:8e:a8:89:73:3b:92:bf:dc:2f:0e:53:43: 14:5c:f9:27:fb:1e:32:ff:5e:76:04:e2:84:69:1e: 29:cc:b4:71:6b:d8:5e:44:6a:d8:f2:60:c7:36:a1: fc:99:3d:3a:77:db:1d:1a:30:1c:98:fe:c8:4e:64: 28:47:35:fb:9c:c6:25:61:bd:70:ee:dd:46:05:68: 8f:09:33:3d:85:8d:55:08:a9:a7:76:1b:3b:a8:47: 58:1f:49:8d:9f:fc:12:ac:30:90:c9:16:4e:3e:a6: 3c:b0:4f:e4:b2:a9:ca:20:a3:84:e1:a0:4a:73:74: 28:8f:72:2e:99:5b:80:3b:fd:47:b0:8b:48:21:98: 04:3b:d2:6e:90:21:da:ff:77:66:67:05:15:1d:30: 5e:85:6f:9a:a7:1c:be:27:1a:99:a7:19:d0:b5:3a: 6e:3c:91:3e:be:bb:85:c7:de:47:0e:55:6e:09:75: 93:74:60:d9:06:fe:fa:6d:f4:67:c3:ad:98:ec:4b: 45:1b:b3:48:9a:fc:4f:80:04:93:ad:9b:8f:44:9b: 1b:ce:0e:90:9f:3e:bb:49:1c:f4:b6:aa:cb:87:f1: ae:a4:0c:30:c0:9c:ff:e4:ea:33:5b:37:f1:bd:69: 2b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B2:4C:63:F5:A1:C1:0A:05:7C:18:C2:D6:7D:E6:8E:66:49:48:7E X509v3 Authority Key Identifier: keyid:79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:c7:04:89:e1:d3:97:61:0a:cf:80:d3:5a:75:87:62:7d:67: 01:85:50:df:d3:b0:2b:c7:bf:28:a5:5e:7f:d8:bb:37:65:eb: 6f:a2:c6:4f:f2:bc:18:ab:4c:c8:e5:cc:56:e3:52:8a:6f:3a: f1:ea:8b:ad:8f:78:45:26:b0:f2:3a:13:25:8a:f8:e3:a4:a4: 70:dd:64:27:3d:1f:8c:5e:4c:5c:c7:e7:0e:5a:39:d6:43:18: b0:1a:e1:d0:c8:60:ad:a8:82:55:7b:f6:94:90:d5:6e:b9:15: f5:7a:3e:f5:11:c0:32:78:cb:0b:81:9b:da:ed:13:12:cd:0b: 91:17:64:0b:68:5e:0b:06:d3:12:2e:9f:c3:99:44:ab:19:fd: cf:cc:3a:ec:5e:9d:dc:ef:c7:d8:87:95:1c:09:a4:44:aa:c0: 50:63:5a:6a:79:70:27:25:e9:84:95:5a:91:d7:70:4e:68:8e: 04:68:1e:da:c9:40:86:08:65:ba:29:86:d1:04:5d:18:05:a4: bb:ba:c7:83:e5:e1:09:bf:04:51:ab:58:a7:b9:6a:d0:5b:29: 85:dd:d4:a0:45:9a:02:2d:79:01:58:b1:e4:6d:30:66:17:e5: d3:4f:19:6d:d5:ed:a2:70:16:f0:1d:c5:0b:23:2e:d5:ed:85: ef:5b:ab:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tMhZVhZV5INrzStaLegaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YzhiZjY4NTBhN2E3ZTJhZjM0Y2MxNjIzNmRkMDgzMDk0 ZTBjZWUwHhcNMjUxMjIwMTcwMDM5WhcNMjUxMjIxMTcwMDM5WjAzMTEwLwYDVQQD Eyg1YWIyNGM2M2Y1YTFjMTBhMDU3YzE4YzJkNjdkZTY4ZTY2NDk0ODdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCx2sTY4JRKHAAXywMhJEtGOqIlz O5K/3C8OU0MUXPkn+x4y/152BOKEaR4pzLRxa9heRGrY8mDHNqH8mT06d9sdGjAc mP7ITmQoRzX7nMYlYb1w7t1GBWiPCTM9hY1VCKmndhs7qEdYH0mNn/wSrDCQyRZO PqY8sE/ksqnKIKOE4aBKc3Qoj3IumVuAO/1HsItIIZgEO9JukCHa/3dmZwUVHTBe hW+apxy+JxqZpxnQtTpuPJE+vruFx95HDlVuCXWTdGDZBv76bfRnw62Y7EtFG7NI mvxPgASTrZuPRJsbzg6Qnz67SRz0tqrLh/GupAwwwJz/5OozWzfxvWkrrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqyTGP1ocEKBXwYwtZ95o5mSUh+MB8GA1UdIwQY MBaAFHnIv2hQp6firzTMFiNt0IMJTgzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWNpX2FGQ25wLUt2Tk13V0kyM1Fnd2xPRE80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83NGZlMmMtODdkMS00NjhkLWExMjEt ZDEwOTViZTdjNDhmLzEvZWNpX2FGQ25wLUt2Tk13V0kyM1Fnd2xPRE80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS83NGZlMmMtODdkMS00NjhkLWExMjEtZDEwOTViZTdjNDhm LzEvZWNpX2FGQ25wLUt2Tk13V0kyM1Fnd2xPRE80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIccEieHT l2EKz4DTWnWHYn1nAYVQ39OwK8e/KKVef9i7N2Xrb6LGT/K8GKtMyOXMVuNSim86 8eqLrY94RSaw8joTJYr446SkcN1kJz0fjF5MXMfnDlo51kMYsBrh0MhgraiCVXv2 lJDVbrkV9Xo+9RHAMnjLC4Gb2u0TEs0LkRdkC2heCwbTEi6fw5lEqxn9z8w67F6d 3O/H2IeVHAmkRKrAUGNaanlwJyXphJVakddwTmiOBGge2slAhghluimG0QRdGAWk u7rHg+XhCb8EUatYp7lq0Fsphd3UoEWaAi15AVix5G0wZhfl008ZbdXtonAW8B3F CyMu1e2F71urcQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:05:05 2025 by rpki-client