This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft File: eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft (raw, json) Hash identifier: MSspyaDO+lqS7/g34iAFMOzzZEHZ7hHmVkWklYFwJVc= Subject key identifier: DF:6A:84:AF:67:84:38:B9:2A:81:FF:5B:BE:20:D9:E5:9B:F0:7C:91 Authority key identifier: 79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53 Certificate issuer: /CN=794f6b59b439d1769932059d198428cb806ae753 Certificate serial: 019B78CA0622A60BEBBC7D0214FC7848FE38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft Manifest number: 162A Signing time: Thu 01 Jan 2026 09:01:04 +0000 Manifest this update: Thu 01 Jan 2026 09:01:04 +0000 Manifest next update: Fri 02 Jan 2026 09:01:04 +0000 Files and hashes: 1: eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl (hash: ZFKIlVs92CpdVP4vQXMWLRKV9A1Xw9HWCm/9OR6hNfM=) 2: wVHVc0bqRNzroQm7A3wRlpqpwnw.roa (hash: c/GhDxl0nFCEK8Y/vnuoeBfu7bdOUD08bFNu1z8ZDmE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:ca:06:22:a6:0b:eb:bc:7d:02:14:fc:78:48:fe:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=794f6b59b439d1769932059d198428cb806ae753 Validity Not Before: Jan 1 09:01:04 2026 GMT Not After : Jan 2 09:01:04 2026 GMT Subject: CN=df6a84af678438b92a81ff5bbe20d9e59bf07c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f5:2c:5f:c2:4c:38:55:b9:cc:8e:8f:09:cc: c1:2f:67:40:46:dd:1c:42:17:c4:16:07:b1:04:dd: 0d:91:09:2a:e4:bc:d0:09:cd:ac:8a:d3:65:1b:59: 37:e6:ea:ed:bf:45:d9:60:0a:33:f2:3f:27:31:fa: f3:58:24:5d:62:ae:9e:c4:4d:3a:4f:cf:92:58:1c: 7e:d4:9f:e1:f9:fb:d2:0d:02:a8:a3:7e:b6:0e:52: 61:59:0b:31:e9:f7:8f:51:a2:d2:09:0e:f5:fe:fe: b4:f0:7f:6e:07:d0:c2:8c:de:ff:a9:2e:4c:ed:3d: 02:e3:58:64:ca:a7:23:78:39:08:c2:34:e6:0f:b9: 5e:1f:2d:ff:e9:05:e6:7e:52:f6:1f:5c:d1:83:82: ba:95:d8:f7:e5:a3:13:60:71:36:bd:6c:c4:1f:fe: bb:75:cb:a2:65:87:80:06:ff:8f:7f:f1:f6:43:3d: e3:ef:df:c2:1e:e4:f4:7a:b0:9b:b9:2c:a5:81:2a: 34:2c:29:3e:ce:49:01:fa:6e:3c:b0:87:54:71:51: 0b:a4:3e:90:95:9e:c3:b8:88:fb:48:9d:1e:03:b5: b4:02:f9:15:3e:c2:23:3b:3c:da:f2:52:77:57:c0: f7:05:bb:36:ee:69:2f:3e:14:29:89:bd:1a:6f:b5: d2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6A:84:AF:67:84:38:B9:2A:81:FF:5B:BE:20:D9:E5:9B:F0:7C:91 X509v3 Authority Key Identifier: keyid:79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:6c:69:d4:4c:78:8d:27:f5:66:a6:d5:be:c3:76:bb:07:df: 9d:65:cb:65:83:f4:6d:8e:4f:05:07:71:c4:0d:3d:bf:c1:bc: e8:6e:98:7d:77:03:4b:59:fd:dd:c8:df:db:3a:d4:18:bb:d5: a5:c8:77:92:37:d8:50:ae:e8:1d:ba:9f:eb:d3:11:80:97:4e: 3c:0e:1f:ee:97:06:fb:e3:8f:d0:10:c0:6c:3d:32:ff:fa:95: 76:4e:36:95:48:6b:e9:92:a2:39:4c:1c:a0:e5:65:50:ac:5d: 57:85:8d:a6:ef:2c:66:c8:cc:e2:91:f3:35:10:eb:5a:9e:8d: 4e:8c:04:4b:11:06:04:da:5b:eb:6e:36:53:7a:96:43:06:a4: 12:c5:52:66:55:6d:4b:b3:79:e9:ab:ce:3b:4a:7c:c1:6c:a4: 85:2e:a0:e9:d7:1b:26:6b:51:6d:cf:f5:f5:9d:a5:70:46:8d: 17:cf:8a:41:0e:43:2b:cb:ad:50:6a:52:b3:18:f3:7f:fb:39: 77:91:0d:f0:22:4d:71:6a:90:97:b8:51:53:64:fb:4a:c8:52: 46:64:73:af:dc:aa:7d:ba:26:3e:4d:bd:11:89:fa:20:70:58: 34:e0:8a:83:f0:86:15:6b:82:11:35:bd:f0:b9:1f:5a:e8:0e: c7:e8:35:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4ygYipgvrvH0CFPx4SP44MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NGY2YjU5YjQzOWQxNzY5OTMyMDU5ZDE5ODQyOGNiODA2 YWU3NTMwHhcNMjYwMTAxMDkwMTA0WhcNMjYwMTAyMDkwMTA0WjAzMTEwLwYDVQQD EyhkZjZhODRhZjY3ODQzOGI5MmE4MWZmNWJiZTIwZDllNTliZjA3YzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fUsX8JMOFW5zI6PCczBL2dARt0c QhfEFgexBN0NkQkq5LzQCc2sitNlG1k35urtv0XZYAoz8j8nMfrzWCRdYq6exE06 T8+SWBx+1J/h+fvSDQKoo362DlJhWQsx6fePUaLSCQ71/v608H9uB9DCjN7/qS5M 7T0C41hkyqcjeDkIwjTmD7leHy3/6QXmflL2H1zRg4K6ldj35aMTYHE2vWzEH/67 dcuiZYeABv+Pf/H2Qz3j79/CHuT0erCbuSylgSo0LCk+zkkB+m48sIdUcVELpD6Q lZ7DuIj7SJ0eA7W0AvkVPsIjOzza8lJ3V8D3Bbs27mkvPhQpib0ab7XSiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9qhK9nhDi5KoH/W74g2eWb8HyRMB8GA1UdIwQY MBaAFHlPa1m0OdF2mTIFnRmEKMuAaudTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVU5cldiUTUwWGFaTWdXZEdZUW95NEJxNTFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xN2QwYWQtODAxYy00ODE0LWI4OTEt ZTBhNjUyMDA0ODc4LzEvZVU5cldiUTUwWGFaTWdXZEdZUW95NEJxNTFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xN2QwYWQtODAxYy00ODE0LWI4OTEtZTBhNjUyMDA0ODc4 LzEvZVU5cldiUTUwWGFaTWdXZEdZUW95NEJxNTFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmxp1Ex4 jSf1ZqbVvsN2uwffnWXLZYP0bY5PBQdxxA09v8G86G6YfXcDS1n93cjf2zrUGLvV pch3kjfYUK7oHbqf69MRgJdOPA4f7pcG++OP0BDAbD0y//qVdk42lUhr6ZKiOUwc oOVlUKxdV4WNpu8sZsjM4pHzNRDrWp6NTowESxEGBNpb6242U3qWQwakEsVSZlVt S7N56avOO0p8wWykhS6g6dcbJmtRbc/19Z2lcEaNF8+KQQ5DK8utUGpSsxjzf/s5 d5EN8CJNcWqQl7hRU2T7SshSRmRzr9yqfbomPk29EYn6IHBYNOCKg/CGFWuCETW9 8LkfWugOx+g1hA== -----END CERTIFICATE-----Generated at Thu Jan 1 12:31:24 2026 by rpki-client