This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft File: ECC2D1AF90663968C0983906E34503A5F531FBA9.mft (raw, json) Hash identifier: TM8ifgikcFWwUnzI299lpim3P1/tldRwi04T8DlSIfc= Subject key identifier: FD:B9:16:52:7D:06:E6:94:A5:3F:5C:D8:0D:EC:AC:AF:BA:04:A6:65 Authority key identifier: EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 Certificate issuer: /CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Certificate serial: 69005A463EA3D70C607A4C6C004191B233D2F015 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft Manifest number: 17 Signing time: Sun 25 Jan 2026 05:27:53 +0000 Manifest this update: Sun 25 Jan 2026 05:22:53 +0000 Manifest next update: Mon 26 Jan 2026 06:59:53 +0000 Files and hashes: 1: ECC2D1AF90663968C0983906E34503A5F531FBA9.crl (hash: lWHaeSAVCJ9IZd4ovvpWRHsArj42HspjojpihFB9e4A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:00:5a:46:3e:a3:d7:0c:60:7a:4c:6c:00:41:91:b2:33:d2:f0:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECC2D1AF90663968C0983906E34503A5F531FBA9 Validity Not Before: Jan 25 05:22:53 2026 GMT Not After : Jan 26 06:59:53 2026 GMT Subject: CN=FDB916527D06E694A53F5CD80DECACAFBA04A665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9c:ae:f1:8a:79:4f:01:c5:ae:be:d2:ab:d6: 6b:56:22:31:95:97:11:a0:42:6f:c7:31:51:7b:76: 1d:d3:f3:45:9b:ee:db:6a:1f:da:bf:7a:d9:ae:7d: fc:fc:b2:6b:6a:e7:eb:eb:83:25:35:92:b7:f3:5b: 73:d2:02:5b:a0:b7:37:53:06:a9:5b:77:a2:36:7a: 70:be:c3:5f:bd:3b:97:cf:a4:38:c5:df:76:9b:6d: 0b:ba:22:c9:38:25:f9:bb:6d:6b:65:69:83:4c:bd: 41:6b:74:3a:2c:53:c9:01:ce:0e:55:55:73:39:86: 92:c7:59:db:fc:f6:dc:d7:3b:3c:30:76:27:cb:d5: 18:54:4f:6e:c7:6e:68:1f:2a:cb:ae:e3:bf:24:0a: 64:84:5e:d7:41:e8:6a:74:06:96:8d:f6:d3:99:58: 29:62:90:6a:88:f2:04:94:66:de:3c:f7:53:32:09: 44:4b:f9:80:9e:cc:e1:24:94:a8:c6:f7:ad:15:60: 48:24:6e:3c:97:db:bd:1e:c3:22:62:6c:25:4a:83: 49:dd:96:5b:55:cc:8b:74:17:ef:25:56:9a:a6:57: 57:8b:4e:87:a0:a2:50:b5:67:f9:ba:ec:d3:5a:74: d6:f9:f5:3c:f3:91:2f:80:d1:8b:67:d3:47:c1:c9: 83:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B9:16:52:7D:06:E6:94:A5:3F:5C:D8:0D:EC:AC:AF:BA:04:A6:65 X509v3 Authority Key Identifier: keyid:EC:C2:D1:AF:90:66:39:68:C0:98:39:06:E3:45:03:A5:F5:31:FB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/ECC2D1AF90663968C0983906E34503A5F531FBA9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/3/ECC2D1AF90663968C0983906E34503A5F531FBA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:c1:1a:6e:cd:db:74:c0:53:9e:ec:d2:e5:35:cc:51:94:ac: 5f:ab:14:1f:e0:30:37:a8:6c:e9:cd:bd:d8:46:03:a3:f5:5b: 6c:70:0b:0e:65:fd:42:b4:d7:86:f5:d0:ac:fd:e0:b5:a7:de: 5b:5d:9b:e5:ff:c1:0a:f7:a9:84:cf:4b:29:90:18:45:9b:9a: 49:9c:df:93:95:67:2b:89:ea:57:5e:5b:be:bc:26:2b:24:74: 62:75:32:b5:44:f3:75:7a:7b:ec:b2:20:ff:e7:d0:27:76:59: e0:e7:f3:e2:77:f9:1a:35:ee:0a:ef:03:b7:a8:4e:d6:3b:71: b0:a7:a8:b4:a2:32:ca:d1:a9:59:81:ee:aa:11:8c:07:59:5b: ae:8c:a7:28:b8:40:b4:56:b0:9d:27:0b:a5:f3:91:35:0b:d2: 5d:ee:55:70:1d:c7:c5:bb:8f:f7:54:06:31:68:b2:8d:de:24: 2f:16:ed:5c:58:68:14:7b:c4:b9:63:bc:5f:ba:60:2e:88:15: 1c:b3:1a:47:24:05:6c:44:8a:b9:2c:a5:69:f7:7c:81:50:85: 6b:d9:c5:70:8c:79:e9:d0:c3:7a:39:f9:b0:1b:d8:b3:dc:a6: 6b:28:7e:17:65:be:f3:91:5b:88:85:92:87:4a:df:45:cd:41: 7b:ff:ee:2a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaQBaRj6j1wxgekxsAEGRsjPS8BUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVG NTMxRkJBOTAeFw0yNjAxMjUwNTIyNTNaFw0yNjAxMjYwNjU5NTNaMDMxMTAvBgNV BAMTKEZEQjkxNjUyN0QwNkU2OTRBNTNGNUNEODBERUNBQ0FGQkEwNEE2NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUnK7xinlPAcWuvtKr1mtWIjGV lxGgQm/HMVF7dh3T80Wb7ttqH9q/etmuffz8smtq5+vrgyU1krfzW3PSAlugtzdT Bqlbd6I2enC+w1+9O5fPpDjF33abbQu6Isk4Jfm7bWtlaYNMvUFrdDosU8kBzg5V VXM5hpLHWdv89tzXOzwwdifL1RhUT27HbmgfKsuu478kCmSEXtdB6Gp0BpaN9tOZ WClikGqI8gSUZt4891MyCURL+YCezOEklKjG960VYEgkbjyX270ewyJibCVKg0nd lltVzIt0F+8lVpqmV1eLToegolC1Z/m67NNadNb59TzzkS+A0Ytn00fByYMHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU/bkWUn0G5pSlP1zYDeysr7oEpmUwHwYDVR0j BBgwFoAU7MLRr5BmOWjAmDkG40UDpfUx+6kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTUxN2I1ZDAtMzMxNy00YjQ5LThlYzUtYmU5MGJjNzAw NjJmLzMvRUNDMkQxQUY5MDY2Mzk2OEMwOTgzOTA2RTM0NTAzQTVGNTMxRkJBOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODFmOTc4Mi04OThlLTRi ODMtOTVlNi00ZmY0YWI3NWM5ZGMvMi9FQ0MyRDFBRjkwNjYzOTY4QzA5ODM5MDZF MzQ1MDNBNUY1MzFGQkE5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE1MTdiNWQwLTMzMTctNGI0OS04ZWM1LWJlOTBiYzcwMDYyZi8zL0VDQzJEMUFG OTA2NjM5NjhDMDk4MzkwNkUzNDUwM0E1RjUzMUZCQTkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBiwRpu zdt0wFOe7NLlNcxRlKxfqxQf4DA3qGzpzb3YRgOj9VtscAsOZf1CtNeG9dCs/eC1 p95bXZvl/8EK96mEz0spkBhFm5pJnN+TlWcriepXXlu+vCYrJHRidTK1RPN1envs siD/59Andlng5/Pid/kaNe4K7wO3qE7WO3Gwp6i0ojLK0alZge6qEYwHWVuujKco uEC0VrCdJwul85E1C9Jd7lVwHcfFu4/3VAYxaLKN3iQvFu1cWGgUe8S5Y7xfumAu iBUcsxpHJAVsRIq5LKVp93yBUIVr2cVwjHnp0MN6OfmwG9iz3KZrKH4XZb7zkVuI hZKHSt9FzUF7/+4q -----END CERTIFICATE-----Generated at Sun Jan 25 18:51:23 2026 by rpki-client