This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft File: cegLwpz58rQKwwJOD3I126LVelQ.mft (raw, json) Hash identifier: ICfYncQzsIsCw+0zUKlZOXVMB2hcyiLo5LLdD9gei08= Subject key identifier: 03:68:5A:FA:1B:70:C4:F7:BC:EC:7A:65:B3:14:DF:ED:06:BC:9F:50 Authority key identifier: 71:E8:0B:C2:9C:F9:F2:B4:0A:C3:02:4E:0F:72:35:DB:A2:D5:7A:54 Certificate issuer: /CN=71e80bc29cf9f2b40ac3024e0f7235dba2d57a54 Certificate serial: 019B8A626568F82EA30E92A0033495B05E1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft Manifest number: 06FF Signing time: Sun 04 Jan 2026 19:01:02 +0000 Manifest this update: Sun 04 Jan 2026 19:01:02 +0000 Manifest next update: Mon 05 Jan 2026 19:01:02 +0000 Files and hashes: 1: cegLwpz58rQKwwJOD3I126LVelQ.crl (hash: kSl2MuXBk1h9+nzmWzEVZzdi1etAfHuOn1kFHHZZjw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8a:62:65:68:f8:2e:a3:0e:92:a0:03:34:95:b0:5e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71e80bc29cf9f2b40ac3024e0f7235dba2d57a54 Validity Not Before: Jan 4 19:01:02 2026 GMT Not After : Jan 5 19:01:02 2026 GMT Subject: CN=03685afa1b70c4f7bcec7a65b314dfed06bc9f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8f:eb:95:2a:47:21:64:c3:bb:5d:a4:52:9c: 47:69:b6:99:a3:ab:ec:eb:68:28:c1:c3:fb:d4:cd: 9d:81:ff:47:d1:36:1f:5d:e6:a9:cd:6d:04:e6:20: e5:eb:50:57:5a:b0:ee:92:38:a1:d2:35:79:54:80: 79:8e:75:5f:28:a7:25:20:00:f2:60:3b:16:7d:e0: ca:a4:97:d8:63:c6:9c:b9:b7:23:99:48:0a:8a:7f: 92:df:7d:06:e5:7e:41:49:85:a5:0c:29:e4:52:41: 47:e5:0c:f5:d0:85:59:2a:f1:0b:88:2b:83:e6:3c: c4:97:2e:8d:03:dd:6a:73:17:09:50:26:0b:50:3e: a6:be:70:56:44:42:bb:46:39:ba:d6:80:22:f0:96: 51:61:00:8c:d2:db:fe:69:52:ce:a2:89:97:3c:a3: db:7d:70:7b:f3:04:67:07:27:70:50:11:2f:5f:6a: c1:22:33:62:c2:28:0d:85:24:46:89:bf:f9:ee:93: 10:a7:5f:2b:a6:a2:45:f9:d9:8a:1b:b7:73:c3:70: 5b:cb:50:5e:be:80:e8:fb:8e:50:04:52:49:30:03: 48:2f:ee:e2:88:80:e3:c6:b6:55:d6:f8:1c:45:7a: 21:d2:32:36:ad:8a:ae:51:b2:ba:6b:6b:35:4e:f9: b8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:68:5A:FA:1B:70:C4:F7:BC:EC:7A:65:B3:14:DF:ED:06:BC:9F:50 X509v3 Authority Key Identifier: keyid:71:E8:0B:C2:9C:F9:F2:B4:0A:C3:02:4E:0F:72:35:DB:A2:D5:7A:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:20:c2:61:73:dd:2b:98:aa:5c:39:eb:d3:a4:b2:4c:00:80: 0d:a6:97:76:7c:10:8e:c5:ef:a8:dc:66:42:06:99:57:95:f0: 1b:bd:68:95:88:1e:88:cb:59:ea:a9:dc:a6:ff:5a:4e:f2:33: 67:5b:6c:12:50:2f:e2:20:eb:35:32:aa:c8:ba:7b:e5:e0:05: 82:da:5a:e5:06:5a:ea:bb:40:02:c0:a9:7a:a0:f9:4e:f7:98: 8f:83:02:57:fe:f9:34:6f:11:62:b5:dc:b7:32:49:35:19:3e: 19:fb:4e:63:72:5c:83:04:69:5c:8e:68:36:6a:88:ce:49:e5: 6a:3e:f5:62:9a:01:e1:95:cf:8d:9a:61:6f:79:05:82:b5:23: fd:53:a7:1e:7f:62:cb:bd:11:10:91:bc:74:51:34:7e:01:6f: a1:48:6a:7c:85:68:68:6d:60:9b:3f:c8:39:86:26:ca:a4:f0: d4:82:2d:6b:12:05:96:13:b8:03:53:b6:10:14:d1:23:72:87: 5b:e6:5a:c9:7e:c6:da:5e:4a:7c:77:ae:9a:b3:5d:ef:02:f5: 70:ca:76:27:5d:f4:0d:4d:9e:b5:bd:64:3e:83:3b:73:f9:be: cd:ee:7d:7a:69:5e:d6:2c:5b:8e:fe:ce:65:2a:1e:8f:b3:86: e1:b3:6b:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuKYmVo+C6jDpKgAzSVsF4cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxZTgwYmMyOWNmOWYyYjQwYWMzMDI0ZTBmNzIzNWRiYTJk NTdhNTQwHhcNMjYwMTA0MTkwMTAyWhcNMjYwMTA1MTkwMTAyWjAzMTEwLwYDVQQD EygwMzY4NWFmYTFiNzBjNGY3YmNlYzdhNjViMzE0ZGZlZDA2YmM5ZjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4/rlSpHIWTDu12kUpxHabaZo6vs 62gowcP71M2dgf9H0TYfXeapzW0E5iDl61BXWrDukjih0jV5VIB5jnVfKKclIADy YDsWfeDKpJfYY8acubcjmUgKin+S330G5X5BSYWlDCnkUkFH5Qz10IVZKvELiCuD 5jzEly6NA91qcxcJUCYLUD6mvnBWREK7Rjm61oAi8JZRYQCM0tv+aVLOoomXPKPb fXB78wRnBydwUBEvX2rBIjNiwigNhSRGib/57pMQp18rpqJF+dmKG7dzw3Bby1Be voDo+45QBFJJMANIL+7iiIDjxrZV1vgcRXoh0jI2rYquUbK6a2s1Tvm45QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANoWvobcMT3vOx6ZbMU3+0GvJ9QMB8GA1UdIwQY MBaAFHHoC8Kc+fK0CsMCTg9yNdui1XpUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2VnTHdwejU4clFLd3dKT0QzSTEyNkxWZWxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mNTAzNTMtZjRlOC00ZjYwLWFlMTYt NzI0NzMwNGZiMTVmLzEvY2VnTHdwejU4clFLd3dKT0QzSTEyNkxWZWxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mNTAzNTMtZjRlOC00ZjYwLWFlMTYtNzI0NzMwNGZiMTVm LzEvY2VnTHdwejU4clFLd3dKT0QzSTEyNkxWZWxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCDCYXPd K5iqXDnr06SyTACADaaXdnwQjsXvqNxmQgaZV5XwG71olYgeiMtZ6qncpv9aTvIz Z1tsElAv4iDrNTKqyLp75eAFgtpa5QZa6rtAAsCpeqD5TveYj4MCV/75NG8RYrXc tzJJNRk+GftOY3JcgwRpXI5oNmqIzknlaj71YpoB4ZXPjZphb3kFgrUj/VOnHn9i y70REJG8dFE0fgFvoUhqfIVoaG1gmz/IOYYmyqTw1IItaxIFlhO4A1O2EBTRI3KH W+ZayX7G2l5KfHeumrNd7wL1cMp2J130DU2etb1kPoM7c/m+ze59emle1ixbjv7O ZSoej7OG4bNrSw== -----END CERTIFICATE-----Generated at Mon Jan 5 01:47:21 2026 by rpki-client