This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft File: ecfqTTn1y19FhgoJ6jgz74rdaCg.mft (raw, json) Hash identifier: DXeC/L3xkzDIlbCmX19/qul/wSYhPX+vvR6PZxbeIXc= Subject key identifier: 34:6A:61:83:60:5A:20:39:65:0D:1B:DB:0D:33:E2:62:5A:D2:40:4E Authority key identifier: 79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28 Certificate issuer: /CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828 Certificate serial: 019B7CA70EF71B35EDCA073A5790A69F5C6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft Manifest number: 11A4 Signing time: Fri 02 Jan 2026 03:01:21 +0000 Manifest this update: Fri 02 Jan 2026 03:01:21 +0000 Manifest next update: Sat 03 Jan 2026 03:01:21 +0000 Files and hashes: 1: dcYzfKgMLWUSmc87zTpEWATDf3g.roa (hash: u+h/4AryCzwpCIQR5wy3fZ9DxV6BlPTBzPZ0uYrCmuI=) 2: ecfqTTn1y19FhgoJ6jgz74rdaCg.crl (hash: QucIvyWMsgM9u69rdWiQPOsIW89kz7HCUqEQyuhtvNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:a7:0e:f7:1b:35:ed:ca:07:3a:57:90:a6:9f:5c:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828 Validity Not Before: Jan 2 03:01:21 2026 GMT Not After : Jan 3 03:01:21 2026 GMT Subject: CN=346a6183605a2039650d1bdb0d33e2625ad2404e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7f:3c:b3:b9:0b:69:ee:59:4f:c5:90:8f:8a: 4f:e9:d8:bf:3d:0e:51:27:45:77:20:39:95:98:ce: 25:6e:53:25:ad:fa:79:6a:ef:f2:28:21:c5:a8:43: 80:f4:fe:15:59:3a:1c:b0:22:33:54:8d:67:d2:eb: b2:8b:bc:b5:ee:98:51:70:61:b5:d4:e4:f0:63:bb: 1d:2f:76:d3:5a:3e:64:c6:29:52:ec:02:4b:15:1d: cc:64:86:2f:b9:60:4d:6e:06:f2:c5:49:ff:93:ce: 8f:5c:9a:d7:1d:12:02:33:b0:39:9a:41:4f:8b:ed: 1f:9d:25:57:17:aa:8e:6a:e9:74:c0:a3:71:f4:d4: 26:34:88:f4:cc:f2:f0:26:e2:de:1d:be:27:29:6a: 5e:38:c6:c0:db:e4:c6:35:83:91:e3:cb:68:bc:84: 66:ae:8c:17:b2:5e:8b:8c:ef:86:9e:20:10:84:e0: 28:c9:38:2d:83:56:57:f1:3e:b9:36:33:f2:f0:2c: ec:b4:b9:48:87:4c:5d:de:b1:54:ce:17:37:d8:41: ac:b4:7f:07:6a:7d:0e:e7:5a:87:d3:df:1f:d8:54: a2:a6:03:ef:d8:13:3d:69:b5:cd:a2:46:5c:99:ec: 9e:f0:50:78:aa:6e:05:a6:30:5c:12:52:eb:75:65: 98:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6A:61:83:60:5A:20:39:65:0D:1B:DB:0D:33:E2:62:5A:D2:40:4E X509v3 Authority Key Identifier: keyid:79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ca:87:a9:66:2c:2a:d7:4f:c5:32:64:84:85:30:fb:21:35: e0:ec:e1:95:c3:34:80:86:cf:0d:20:9c:a6:b3:b9:37:7e:b9: 5a:7c:5a:4f:e3:5c:8c:dd:a9:0c:f0:62:42:52:eb:d6:7d:34: 54:f9:a0:d8:cc:12:9b:86:cb:f0:8a:93:55:22:42:a4:01:c3: 81:cc:87:08:85:7d:e6:3e:d9:40:b8:63:85:96:40:8a:2e:97: af:02:ab:a1:cd:48:e5:32:1a:2f:4c:dc:1b:a9:2d:b7:a2:93: d7:65:f3:0b:d4:09:be:69:95:f7:c8:df:ac:b9:47:5d:02:5e: 52:4e:73:56:75:28:cd:13:66:15:ba:33:30:07:d0:11:73:a2: 47:66:f4:58:3b:93:71:dd:eb:bd:aa:96:e2:ac:5d:f4:d4:cd: 5f:66:ec:8f:9d:c3:da:fe:a7:7c:ae:74:9e:84:b7:62:98:0f: c4:5d:f2:67:11:e6:4e:8b:cd:d5:09:a8:31:c5:49:fa:f8:b5: 48:14:6f:a6:d5:9e:22:1c:ed:7c:3b:20:f8:2a:30:32:40:e4: f4:cb:05:06:36:28:01:e3:d3:60:32:3d:5e:e9:53:f3:20:d6: fd:1f:37:26:33:b5:f6:1f:02:87:cf:9e:3e:f9:0d:7e:97:09: d7:cd:0d:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt8pw73GzXtygc6V5Cmn1xtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YzdlYTRkMzlmNWNiNWY0NTg2MGEwOWVhMzgzM2VmOGFk ZDY4MjgwHhcNMjYwMTAyMDMwMTIxWhcNMjYwMTAzMDMwMTIxWjAzMTEwLwYDVQQD EygzNDZhNjE4MzYwNWEyMDM5NjUwZDFiZGIwZDMzZTI2MjVhZDI0MDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6X88s7kLae5ZT8WQj4pP6di/PQ5R J0V3IDmVmM4lblMlrfp5au/yKCHFqEOA9P4VWTocsCIzVI1n0uuyi7y17phRcGG1 1OTwY7sdL3bTWj5kxilS7AJLFR3MZIYvuWBNbgbyxUn/k86PXJrXHRICM7A5mkFP i+0fnSVXF6qOaul0wKNx9NQmNIj0zPLwJuLeHb4nKWpeOMbA2+TGNYOR48tovIRm rowXsl6LjO+GniAQhOAoyTgtg1ZX8T65NjPy8CzstLlIh0xd3rFUzhc32EGstH8H an0O51qH098f2FSipgPv2BM9abXNokZcmeye8FB4qm4FpjBcElLrdWWYQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRqYYNgWiA5ZQ0b2w0z4mJa0kBOMB8GA1UdIwQY MBaAFHnH6k059ctfRYYKCeo4M++K3WgoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWNmcVRUbjF5MTlGaGdvSjZqZ3o3NHJkYUNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iZWVkOTMtNDE3MC00ZjY4LWEzOTIt MjhiZjNkOTBiZDdiLzEvZWNmcVRUbjF5MTlGaGdvSjZqZ3o3NHJkYUNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iZWVkOTMtNDE3MC00ZjY4LWEzOTItMjhiZjNkOTBiZDdi LzEvZWNmcVRUbjF5MTlGaGdvSjZqZ3o3NHJkYUNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcqHqWYs KtdPxTJkhIUw+yE14OzhlcM0gIbPDSCcprO5N365WnxaT+NcjN2pDPBiQlLr1n00 VPmg2MwSm4bL8IqTVSJCpAHDgcyHCIV95j7ZQLhjhZZAii6XrwKroc1I5TIaL0zc G6ktt6KT12XzC9QJvmmV98jfrLlHXQJeUk5zVnUozRNmFbozMAfQEXOiR2b0WDuT cd3rvaqW4qxd9NTNX2bsj53D2v6nfK50noS3YpgPxF3yZxHmTovN1QmoMcVJ+vi1 SBRvptWeIhztfDsg+CowMkDk9MsFBjYoAePTYDI9XulT8yDW/R83JjO19h8Ch8+e PvkNfpcJ180Nfw== -----END CERTIFICATE-----Generated at Fri Jan 2 08:15:06 2026 by rpki-client