This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft File: eci_aFCnp-KvNMwWI23QgwlODO4.mft (raw, json) Hash identifier: JWzDVgpxKDR4k3qR2b+v8vhdNaoRxUJHAA+XvF7AcG8= Subject key identifier: 44:3B:BC:65:90:9B:27:EA:A7:20:EE:A3:73:9A:D2:3D:E4:73:2F:76 Authority key identifier: 79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE Certificate issuer: /CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee Certificate serial: 019B38D866B71436C68916B2FDB7BAEFD233 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft Manifest number: 13E4 Signing time: Fri 19 Dec 2025 23:01:04 +0000 Manifest this update: Fri 19 Dec 2025 23:01:04 +0000 Manifest next update: Sat 20 Dec 2025 23:01:04 +0000 Files and hashes: 1: JVEAwFILWYdCnLLaCQ5RAsK9BBQ.roa (hash: TBZiChrAp6rj4kAjmButXnHCPDHWsopt5A7i33tulpw=) 2: eci_aFCnp-KvNMwWI23QgwlODO4.crl (hash: M3BdKbd7pji9m3y7pHSe/BNA61QibZmbrspc3LMZHuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:66:b7:14:36:c6:89:16:b2:fd:b7:ba:ef:d2:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee Validity Not Before: Dec 19 23:01:04 2025 GMT Not After : Dec 20 23:01:04 2025 GMT Subject: CN=443bbc65909b27eaa720eea3739ad23de4732f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:82:99:bc:63:56:83:7e:ad:0b:85:55:c5:1c: e3:6e:75:28:75:c5:73:26:9d:db:8c:91:4e:31:57: c7:c8:4a:57:e6:ff:30:f1:70:21:45:c3:0a:12:ce: 0c:40:de:49:20:98:c0:07:67:82:50:3c:5a:23:e9: 5f:fe:c0:1d:20:e1:16:1f:57:e1:6c:2c:9a:d0:ca: 9b:35:b7:6d:5d:49:d2:3d:88:4f:b4:3a:d5:73:fc: 74:c4:78:88:d6:ee:f6:e0:f1:83:c0:78:3c:99:64: 56:3c:71:48:98:0c:4e:7c:11:fd:eb:16:87:bc:36: 19:4c:5c:72:3c:0e:5c:7a:54:94:7d:52:a8:2f:6e: b5:29:e7:f1:1c:4e:65:d2:62:d6:79:5e:a7:08:08: 16:4f:48:f1:09:14:1d:4b:e0:dc:c9:0c:3c:62:0b: d5:32:9c:f5:37:d9:49:81:86:f8:c3:66:f8:6b:03: d5:d1:76:45:f9:71:7f:b0:d4:a4:67:88:3a:e1:a5: 3c:dc:6d:3b:f5:29:84:f1:05:60:70:99:11:0b:aa: 3d:86:01:2d:bf:66:c8:6d:c1:e4:4e:65:6f:27:d3: bd:0d:30:81:63:26:56:f9:f8:23:cc:9c:85:19:c5: 5f:f9:42:e1:28:20:7d:fa:97:82:9c:a8:e4:9a:5f: 84:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3B:BC:65:90:9B:27:EA:A7:20:EE:A3:73:9A:D2:3D:E4:73:2F:76 X509v3 Authority Key Identifier: keyid:79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:a5:53:93:b1:2f:55:90:8f:46:ad:be:e7:8d:db:b3:03:83: ed:23:c4:57:34:de:dd:12:b1:69:6a:2c:57:1b:ae:d2:fd:a2: b9:68:7e:1c:5b:2a:9c:52:3d:d7:3b:7e:6a:ec:7e:f9:c2:b5: f4:af:a0:25:42:b1:b2:eb:ac:c8:34:e2:72:d1:a7:54:43:cf: e2:c9:0e:a7:d8:99:15:10:8f:24:bf:ec:cc:68:57:b3:1e:8a: 0c:c4:7e:80:48:37:75:18:0a:4a:a5:0a:a8:14:b9:91:c8:ad: 85:5c:77:bb:53:f2:e1:80:d6:d1:d8:20:79:b7:fc:1a:6f:dd: 21:40:d3:7b:35:fc:e2:53:10:5c:02:eb:12:02:0f:40:87:3f: 74:4f:1f:48:aa:1a:53:6c:5f:60:32:54:70:5d:19:2d:4d:11: b0:4f:a1:cc:0a:8e:0c:e1:d5:22:f0:4a:58:e9:b8:51:7d:13: dd:0b:2a:24:a7:3b:d9:bd:60:75:9a:04:b9:cd:e5:3c:6c:a0: 1a:34:4e:2b:17:76:1c:77:8d:da:44:8f:46:34:59:98:4a:65: b7:58:62:78:a1:7d:cc:3f:b6:83:33:8a:d3:7b:b6:00:4a:22: 13:f0:98:57:73:5e:17:10:6a:2b:b9:ee:53:92:da:1d:9d:b5: 00:81:3a:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42Ga3FDbGiRay/be679IzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YzhiZjY4NTBhN2E3ZTJhZjM0Y2MxNjIzNmRkMDgzMDk0 ZTBjZWUwHhcNMjUxMjE5MjMwMTA0WhcNMjUxMjIwMjMwMTA0WjAzMTEwLwYDVQQD Eyg0NDNiYmM2NTkwOWIyN2VhYTcyMGVlYTM3MzlhZDIzZGU0NzMyZjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IKZvGNWg36tC4VVxRzjbnUodcVz Jp3bjJFOMVfHyEpX5v8w8XAhRcMKEs4MQN5JIJjAB2eCUDxaI+lf/sAdIOEWH1fh bCya0MqbNbdtXUnSPYhPtDrVc/x0xHiI1u724PGDwHg8mWRWPHFImAxOfBH96xaH vDYZTFxyPA5celSUfVKoL261KefxHE5l0mLWeV6nCAgWT0jxCRQdS+DcyQw8YgvV Mpz1N9lJgYb4w2b4awPV0XZF+XF/sNSkZ4g64aU83G079SmE8QVgcJkRC6o9hgEt v2bIbcHkTmVvJ9O9DTCBYyZW+fgjzJyFGcVf+ULhKCB9+peCnKjkml+EBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQ7vGWQmyfqpyDuo3Oa0j3kcy92MB8GA1UdIwQY MBaAFHnIv2hQp6firzTMFiNt0IMJTgzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWNpX2FGQ25wLUt2Tk13V0kyM1Fnd2xPRE80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83NGZlMmMtODdkMS00NjhkLWExMjEt ZDEwOTViZTdjNDhmLzEvZWNpX2FGQ25wLUt2Tk13V0kyM1Fnd2xPRE80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS83NGZlMmMtODdkMS00NjhkLWExMjEtZDEwOTViZTdjNDhm LzEvZWNpX2FGQ25wLUt2Tk13V0kyM1Fnd2xPRE80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKVTk7Ev VZCPRq2+543bswOD7SPEVzTe3RKxaWosVxuu0v2iuWh+HFsqnFI91zt+aux++cK1 9K+gJUKxsuusyDTictGnVEPP4skOp9iZFRCPJL/szGhXsx6KDMR+gEg3dRgKSqUK qBS5kcithVx3u1Py4YDW0dggebf8Gm/dIUDTezX84lMQXALrEgIPQIc/dE8fSKoa U2xfYDJUcF0ZLU0RsE+hzAqODOHVIvBKWOm4UX0T3QsqJKc72b1gdZoEuc3lPGyg GjROKxd2HHeN2kSPRjRZmEplt1hieKF9zD+2gzOK03u2AEoiE/CYV3NeFxBqK7nu U5LaHZ21AIE6OA== -----END CERTIFICATE-----Generated at Sat Dec 20 08:41:22 2025 by rpki-client