This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft File: ec1L08m_4g3M_isZ3iMJXKJHSDU.mft (raw, json) Hash identifier: MWahE168GjWa2i86mMtEiNiBtBzSxkAGutPvVSyc11M= Subject key identifier: 60:EB:73:A7:B8:0A:25:A7:3F:31:51:6F:8B:72:8C:ED:53:37:5E:33 Authority key identifier: 79:CD:4B:D3:C9:BF:E2:0D:CC:FE:2B:19:DE:23:09:5C:A2:47:48:35 Certificate issuer: /CN=79cd4bd3c9bfe20dccfe2b19de23095ca2474835 Certificate serial: 019BF4D0D5A9A1BD09E4188E1914C5CC62C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft Manifest number: 0ECA Signing time: Sun 25 Jan 2026 11:01:25 +0000 Manifest this update: Sun 25 Jan 2026 11:01:25 +0000 Manifest next update: Mon 26 Jan 2026 11:01:25 +0000 Files and hashes: 1: LihjF3erJvHMjTYo7GDxbJGT55U.roa (hash: tOjtoNpUm+UuyQUObaS6VVdDcVoLBkYa2bxLOM78Y7k=) 2: ec1L08m_4g3M_isZ3iMJXKJHSDU.crl (hash: 5tWHLAJ7fYlBApZf3wH9JlmhxSxpLwC75RyT5k8dq3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:d5:a9:a1:bd:09:e4:18:8e:19:14:c5:cc:62:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79cd4bd3c9bfe20dccfe2b19de23095ca2474835 Validity Not Before: Jan 25 11:01:25 2026 GMT Not After : Jan 26 11:01:25 2026 GMT Subject: CN=60eb73a7b80a25a73f31516f8b728ced53375e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:59:f5:82:35:d2:5e:38:b7:ab:c9:87:65:fc: 21:a9:0a:af:7b:47:70:f8:47:3b:78:a3:c2:43:7d: af:fa:53:d3:7d:38:4e:27:44:53:e6:33:19:9e:ab: 91:38:cc:d7:0d:03:8a:4f:59:32:83:b0:b6:2c:32: 19:42:3f:49:7d:8b:c3:1d:f2:1a:1a:49:b0:82:91: db:f1:3b:94:ee:fe:cb:4b:7f:7d:1f:da:54:57:17: 43:b4:e4:28:d9:ef:cc:db:ba:4f:cd:a5:e5:d4:6a: 7f:cf:47:7d:77:d3:a6:90:33:12:f1:fa:88:db:11: 47:73:9d:49:a3:35:06:f4:49:51:bd:f1:d9:76:a3: 36:93:2d:f6:11:e2:e6:e1:62:47:80:1a:5d:c1:9e: f1:cb:46:f8:b3:53:19:f3:6e:39:c8:bd:66:95:11: 6e:5a:f1:b8:f9:8e:64:87:9a:6e:21:61:82:8c:05: 8c:f9:32:bf:41:81:c4:0d:38:a2:d7:5c:09:9c:dc: 45:e5:68:c6:5b:3f:84:5e:23:82:2e:fd:5a:ab:96: 44:8e:69:50:72:65:bb:7e:6d:b1:1e:b2:e8:0b:62: a5:30:62:ed:2a:99:a0:d1:ca:7f:ae:62:df:09:41: 77:4c:a0:2a:81:65:92:ca:b5:2d:80:f2:4a:58:6e: d2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EB:73:A7:B8:0A:25:A7:3F:31:51:6F:8B:72:8C:ED:53:37:5E:33 X509v3 Authority Key Identifier: keyid:79:CD:4B:D3:C9:BF:E2:0D:CC:FE:2B:19:DE:23:09:5C:A2:47:48:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:cf:9d:0d:f4:fc:be:53:7e:c1:57:9e:c8:73:d1:b7:d4:c6: cb:82:d9:7f:66:85:44:30:ea:7b:98:6a:25:44:ba:da:08:ba: 6a:bf:6a:96:1d:11:1e:f6:14:8e:50:8e:ba:54:8f:15:7a:05: fe:81:91:a1:f6:87:67:dd:f1:c5:b9:1d:16:35:65:a4:f9:60: 12:3b:eb:b0:06:37:6c:a4:55:71:9c:f8:71:19:4f:ea:7b:96: 68:8e:69:c0:c5:1f:78:c3:6e:62:86:09:e9:18:0a:9e:15:2a: 88:2a:4a:49:a5:46:cf:71:af:c3:80:dd:26:83:9f:76:b3:72: 8a:c8:74:ff:45:0d:91:5a:10:68:4d:3e:1b:61:06:89:84:a7: d4:7f:b4:80:7b:f1:97:0d:23:33:41:ef:19:8a:9c:e8:e1:70: 79:02:cd:83:f1:f2:f8:c1:99:10:01:d8:9c:af:16:81:30:1e: aa:b0:d9:ea:f8:ac:71:c0:9f:46:47:23:aa:35:02:c5:c1:4a: 11:76:0b:81:7d:1a:c8:e1:72:f7:30:a2:8c:b3:cd:b2:b8:24: c9:03:85:20:c2:60:a6:66:90:8e:9a:21:cf:f2:9f:2d:06:37: 7b:28:7c:ca:50:a4:90:74:9a:59:e9:3f:81:39:0f:98:85:71: fd:13:49:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00NWpob0J5BiOGRTFzGLCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Y2Q0YmQzYzliZmUyMGRjY2ZlMmIxOWRlMjMwOTVjYTI0 NzQ4MzUwHhcNMjYwMTI1MTEwMTI1WhcNMjYwMTI2MTEwMTI1WjAzMTEwLwYDVQQD Eyg2MGViNzNhN2I4MGEyNWE3M2YzMTUxNmY4YjcyOGNlZDUzMzc1ZTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVn1gjXSXji3q8mHZfwhqQqve0dw +Ec7eKPCQ32v+lPTfThOJ0RT5jMZnquROMzXDQOKT1kyg7C2LDIZQj9JfYvDHfIa GkmwgpHb8TuU7v7LS399H9pUVxdDtOQo2e/M27pPzaXl1Gp/z0d9d9OmkDMS8fqI 2xFHc51JozUG9ElRvfHZdqM2ky32EeLm4WJHgBpdwZ7xy0b4s1MZ8245yL1mlRFu WvG4+Y5kh5puIWGCjAWM+TK/QYHEDTii11wJnNxF5WjGWz+EXiOCLv1aq5ZEjmlQ cmW7fm2xHrLoC2KlMGLtKpmg0cp/rmLfCUF3TKAqgWWSyrUtgPJKWG7SfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDrc6e4CiWnPzFRb4tyjO1TN14zMB8GA1UdIwQY MBaAFHnNS9PJv+INzP4rGd4jCVyiR0g1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWMxTDA4bV80ZzNNX2lzWjNpTUpYS0pIU0RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mZmE5NDktODZjNC00OTg0LTg1NTct MmMyYzVmYmRhMzQxLzEvZWMxTDA4bV80ZzNNX2lzWjNpTUpYS0pIU0RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9mZmE5NDktODZjNC00OTg0LTg1NTctMmMyYzVmYmRhMzQx LzEvZWMxTDA4bV80ZzNNX2lzWjNpTUpYS0pIU0RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADc+dDfT8 vlN+wVeeyHPRt9TGy4LZf2aFRDDqe5hqJUS62gi6ar9qlh0RHvYUjlCOulSPFXoF /oGRofaHZ93xxbkdFjVlpPlgEjvrsAY3bKRVcZz4cRlP6nuWaI5pwMUfeMNuYoYJ 6RgKnhUqiCpKSaVGz3Gvw4DdJoOfdrNyish0/0UNkVoQaE0+G2EGiYSn1H+0gHvx lw0jM0HvGYqc6OFweQLNg/Hy+MGZEAHYnK8WgTAeqrDZ6visccCfRkcjqjUCxcFK EXYLgX0ayOFy9zCijLPNsrgkyQOFIMJgpmaQjpohz/KfLQY3eyh8ylCkkHSaWek/ gTkPmIVx/RNJXg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:04 2026 by rpki-client