This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft File: eci_aFCnp-KvNMwWI23QgwlODO4.mft (raw, json) Hash identifier: c8WnKrC0PTTNHpApqws6xKnuaeCE3PFKOda91Gr63Jg= Subject key identifier: 93:44:E3:64:97:90:BC:86:96:96:B1:9C:99:E5:F8:D3:B8:3A:78:C8 Authority key identifier: 79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE Certificate issuer: /CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee Certificate serial: 019AF1645858556A618FB2DAFDBEF714A328 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft Manifest number: 13BF Signing time: Sat 06 Dec 2025 02:01:16 +0000 Manifest this update: Sat 06 Dec 2025 02:01:16 +0000 Manifest next update: Sun 07 Dec 2025 02:01:16 +0000 Files and hashes: 1: JVEAwFILWYdCnLLaCQ5RAsK9BBQ.roa (hash: TBZiChrAp6rj4kAjmButXnHCPDHWsopt5A7i33tulpw=) 2: eci_aFCnp-KvNMwWI23QgwlODO4.crl (hash: mkor0obH9KLU19ZD0XuCZkxl9aR8+pQeIqNJeGLYXTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:58:58:55:6a:61:8f:b2:da:fd:be:f7:14:a3:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee Validity Not Before: Dec 6 02:01:16 2025 GMT Not After : Dec 7 02:01:16 2025 GMT Subject: CN=9344e3649790bc869696b19c99e5f8d3b83a78c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:54:9e:6f:4f:73:3d:ca:ae:a3:57:c7:53:32: 93:43:f0:e1:0d:c6:9d:dc:1b:80:8f:18:b1:b5:3c: 4a:30:34:d2:e0:9b:c7:64:22:22:40:a0:c4:6d:f0: af:e6:50:70:aa:05:64:cd:c5:f5:c7:7c:2e:b0:8c: 97:82:fd:c0:53:02:64:a5:1a:1b:c2:c8:4e:0b:2d: a6:69:4e:c8:2e:a6:59:c8:e7:fb:d8:68:e1:70:01: be:0e:08:80:43:49:35:d5:53:91:42:fc:69:62:af: cd:fe:82:67:85:a8:4e:2d:69:f7:d6:a0:24:a0:eb: 58:f7:32:1e:68:68:41:af:c3:57:f5:23:8f:13:f3: 8c:f3:7e:90:66:bb:6e:ca:42:91:58:be:9a:03:36: 3c:00:1f:89:22:ae:2b:fb:4f:70:fb:7f:c8:3a:90: 2f:95:7d:e6:87:88:e1:a7:31:40:52:81:ab:59:12: d4:2d:3c:9f:0f:cf:46:26:a5:3d:8c:f7:59:3d:76: c0:a2:36:09:29:24:38:6b:f7:a5:b4:a4:30:94:dd: 00:ff:97:e3:9e:9e:02:62:8e:ac:75:3b:42:13:38: 48:d6:9c:03:b5:b8:de:ba:97:78:34:5b:ad:7a:35: 3d:93:dd:93:1b:02:4d:37:00:b8:31:ae:7e:77:74: 0b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:44:E3:64:97:90:BC:86:96:96:B1:9C:99:E5:F8:D3:B8:3A:78:C8 X509v3 Authority Key Identifier: keyid:79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:bd:f2:30:90:da:a6:c0:83:41:c5:8e:9b:a5:d8:7a:d5:e7: 71:81:56:a4:6d:45:6f:59:d3:e7:b0:fa:9c:5a:89:ae:16:7b: e4:8b:77:79:99:b7:b2:12:b7:f5:8a:ea:8f:e0:0e:85:12:f3: 20:ca:fa:fd:c8:fd:05:b4:fc:a0:e7:03:fa:ea:f7:07:f9:bb: 71:ed:d2:d0:aa:b8:67:b5:dc:62:8f:b2:38:76:f9:c0:ba:63: c5:16:32:4a:30:58:82:87:93:74:73:01:d0:f3:7e:ce:ce:bf: db:4b:7c:b7:5e:84:49:7e:64:fe:f0:e5:1b:c4:a8:f9:e6:41: 44:33:e8:2a:64:0d:36:53:78:cb:be:c9:b5:82:b7:bb:b6:40: ff:42:18:4a:fa:ba:9f:c7:98:c6:e7:17:a4:d7:da:13:74:a1: f3:34:1c:af:95:bb:fb:d1:47:c6:53:69:5b:b8:b7:8d:89:46: 06:3d:a6:1d:eb:a9:bc:66:1c:0d:54:e5:c3:88:ce:75:24:e3: e4:21:43:1d:45:16:a3:52:73:00:56:c3:1e:13:e9:e6:f4:eb: af:71:bc:39:de:85:7c:c3:02:8e:cd:b2:90:3b:e2:44:6c:09: cc:1e:c1:04:7a:eb:60:a8:af:9f:14:ca:9e:73:43:4f:cf:4f: 64:99:86:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFhYVWphj7La/b73FKMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YzhiZjY4NTBhN2E3ZTJhZjM0Y2MxNjIzNmRkMDgzMDk0 ZTBjZWUwHhcNMjUxMjA2MDIwMTE2WhcNMjUxMjA3MDIwMTE2WjAzMTEwLwYDVQQD Eyg5MzQ0ZTM2NDk3OTBiYzg2OTY5NmIxOWM5OWU1ZjhkM2I4M2E3OGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlSeb09zPcquo1fHUzKTQ/DhDcad 3BuAjxixtTxKMDTS4JvHZCIiQKDEbfCv5lBwqgVkzcX1x3wusIyXgv3AUwJkpRob wshOCy2maU7ILqZZyOf72GjhcAG+DgiAQ0k11VORQvxpYq/N/oJnhahOLWn31qAk oOtY9zIeaGhBr8NX9SOPE/OM836QZrtuykKRWL6aAzY8AB+JIq4r+09w+3/IOpAv lX3mh4jhpzFAUoGrWRLULTyfD89GJqU9jPdZPXbAojYJKSQ4a/eltKQwlN0A/5fj np4CYo6sdTtCEzhI1pwDtbjeupd4NFutejU9k92TGwJNNwC4Ma5+d3QLEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNE42SXkLyGlpaxnJnl+NO4OnjIMB8GA1UdIwQY MBaAFHnIv2hQp6firzTMFiNt0IMJTgzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWNpX2FGQ25wLUt2Tk13V0kyM1Fnd2xPRE80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83NGZlMmMtODdkMS00NjhkLWExMjEt ZDEwOTViZTdjNDhmLzEvZWNpX2FGQ25wLUt2Tk13V0kyM1Fnd2xPRE80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS83NGZlMmMtODdkMS00NjhkLWExMjEtZDEwOTViZTdjNDhm LzEvZWNpX2FGQ25wLUt2Tk13V0kyM1Fnd2xPRE80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACr3yMJDa psCDQcWOm6XYetXncYFWpG1Fb1nT57D6nFqJrhZ75It3eZm3shK39Yrqj+AOhRLz IMr6/cj9BbT8oOcD+ur3B/m7ce3S0Kq4Z7XcYo+yOHb5wLpjxRYySjBYgoeTdHMB 0PN+zs6/20t8t16ESX5k/vDlG8So+eZBRDPoKmQNNlN4y77JtYK3u7ZA/0IYSvq6 n8eYxucXpNfaE3Sh8zQcr5W7+9FHxlNpW7i3jYlGBj2mHeupvGYcDVTlw4jOdSTj 5CFDHUUWo1JzAFbDHhPp5vTrr3G8Od6FfMMCjs2ykDviRGwJzB7BBHrrYKivnxTK nnNDT89PZJmGNg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:22 2025 by rpki-client