This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft File: 26EkBVXYbI296Dbt0WTNMo-uY7U.mft (raw, json) Hash identifier: Aip8SkRJ+98BITOfNDjBBybyupe2ggnjHCzzIi/7yig= Subject key identifier: D1:A1:3C:A8:A0:2B:76:DF:87:D2:42:55:C4:F6:0F:C8:72:EE:55:6C Authority key identifier: DB:A1:24:05:55:D8:6C:8D:BD:E8:36:ED:D1:64:CD:32:8F:AE:63:B5 Certificate issuer: /CN=dba1240555d86c8dbde836edd164cd328fae63b5 Certificate serial: 019B42B7418E5B35EE94B667DD62D6F8C9E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/26EkBVXYbI296Dbt0WTNMo-uY7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft Manifest number: 0404 Signing time: Sun 21 Dec 2025 21:01:04 +0000 Manifest this update: Sun 21 Dec 2025 21:01:04 +0000 Manifest next update: Mon 22 Dec 2025 21:01:04 +0000 Files and hashes: 1: 26EkBVXYbI296Dbt0WTNMo-uY7U.crl (hash: Wd+TKySVTvjwSp7pb4v0KhnnNQm9chs2JHShSD9eMAw=) 2: UjW7yWELLZ4wmIBJun9f47O3M5s.roa (hash: BN8elBK909fGWcFpTeqxq0IE/blqpykN7942105/TNY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.crl rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft rsync://rpki.ripe.net/repository/DEFAULT/26EkBVXYbI296Dbt0WTNMo-uY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:41:8e:5b:35:ee:94:b6:67:dd:62:d6:f8:c9:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dba1240555d86c8dbde836edd164cd328fae63b5 Validity Not Before: Dec 21 21:01:04 2025 GMT Not After : Dec 22 21:01:04 2025 GMT Subject: CN=d1a13ca8a02b76df87d24255c4f60fc872ee556c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6f:ae:1d:50:78:87:73:a8:52:f6:7d:49:23: 57:69:23:f4:31:1e:65:a2:18:5d:d6:31:25:f0:20: 1e:f5:ab:01:b4:17:fe:36:4f:60:a3:1c:d1:8d:78: c4:ba:0a:fc:91:b5:bd:ad:99:29:5e:f6:d1:44:23: 34:d1:5e:e7:59:10:ad:b4:13:20:49:ee:3f:24:ff: 37:db:35:bb:d8:c5:b3:f3:9a:ac:f2:08:3a:52:dc: 0c:02:a7:e9:63:a6:2c:3c:61:43:b4:e0:7e:42:c9: 59:ea:99:d0:f3:c4:0f:7a:e7:e3:14:56:2f:a7:dd: 61:e4:91:cf:bd:16:56:37:4a:11:1a:73:20:cd:9c: f9:77:5a:86:a6:b9:38:00:04:79:2b:03:d6:7e:28: 3a:1e:01:82:ff:dc:7d:5d:0d:09:8a:b3:e9:64:9c: 8c:4c:d0:d5:89:7d:17:c4:86:40:bf:a1:34:2c:d3: 1b:0f:f4:41:72:d0:b8:a1:05:9a:57:4c:42:bb:9b: d9:77:9f:12:41:96:bf:43:62:1d:dd:76:45:10:b6: 24:50:41:49:37:21:19:34:ac:5b:6f:b9:08:5b:27: 37:3d:52:67:b2:2a:13:45:87:a6:19:db:a1:78:05: 40:63:8f:5f:42:e6:c8:cb:3a:c0:dc:67:20:c2:a7: ad:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A1:3C:A8:A0:2B:76:DF:87:D2:42:55:C4:F6:0F:C8:72:EE:55:6C X509v3 Authority Key Identifier: keyid:DB:A1:24:05:55:D8:6C:8D:BD:E8:36:ED:D1:64:CD:32:8F:AE:63:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EkBVXYbI296Dbt0WTNMo-uY7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e2db7-43a7-4899-ad49-4bec8f1b58ee/1/26EkBVXYbI296Dbt0WTNMo-uY7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:3c:51:fc:ba:8e:7f:16:0c:e4:a5:01:a9:9d:dd:f6:9c:93: 1f:a5:f2:5e:b4:0a:2b:e5:bd:32:e1:fb:98:04:4f:6e:d3:e2: 84:79:7b:e6:76:f7:1a:42:d8:e0:38:ee:47:79:04:e2:9b:85: 36:87:7e:78:48:97:56:ad:c4:c6:38:bd:a8:96:66:f4:a4:37: ca:e8:21:07:1f:6f:fd:5a:8a:eb:57:c9:4c:31:77:be:76:2f: 78:e7:d1:a8:8e:71:0e:95:c6:20:8f:24:3b:3a:f5:60:27:5e: ca:99:65:95:48:6a:94:e2:78:8e:ef:d0:e2:b9:d4:32:76:03: 7a:aa:be:a7:cc:79:f9:af:ef:0d:f4:91:c5:9c:a9:ec:60:2b: 52:07:0f:7b:0e:77:39:e3:9b:eb:ff:5b:f5:10:ad:ce:5f:dd: 8b:39:18:33:e2:42:d1:4d:98:a0:72:23:2a:e0:48:93:ab:df: c8:b8:ac:97:79:7f:d4:34:e5:05:1f:13:0d:ed:68:e5:76:56: 7c:25:65:bf:fb:f3:de:ab:23:ba:94:d2:87:ce:f1:19:02:b3: 63:26:ba:04:cf:70:24:71:5c:58:34:c7:44:8f:b2:52:3f:0a: fc:bd:2e:a7:73:cd:5d:61:de:ce:9b:7f:f2:6f:6b:38:48:f6: 46:8c:02:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt0GOWzXulLZn3WLW+MnoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYTEyNDA1NTVkODZjOGRiZGU4MzZlZGQxNjRjZDMyOGZh ZTYzYjUwHhcNMjUxMjIxMjEwMTA0WhcNMjUxMjIyMjEwMTA0WjAzMTEwLwYDVQQD EyhkMWExM2NhOGEwMmI3NmRmODdkMjQyNTVjNGY2MGZjODcyZWU1NTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG+uHVB4h3OoUvZ9SSNXaSP0MR5l ohhd1jEl8CAe9asBtBf+Nk9goxzRjXjEugr8kbW9rZkpXvbRRCM00V7nWRCttBMg Se4/JP832zW72MWz85qs8gg6UtwMAqfpY6YsPGFDtOB+QslZ6pnQ88QPeufjFFYv p91h5JHPvRZWN0oRGnMgzZz5d1qGprk4AAR5KwPWfig6HgGC/9x9XQ0JirPpZJyM TNDViX0XxIZAv6E0LNMbD/RBctC4oQWaV0xCu5vZd58SQZa/Q2Id3XZFELYkUEFJ NyEZNKxbb7kIWyc3PVJnsioTRYemGduheAVAY49fQubIyzrA3GcgwqetKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGhPKigK3bfh9JCVcT2D8hy7lVsMB8GA1UdIwQY MBaAFNuhJAVV2GyNveg27dFkzTKPrmO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjZFa0JWWFliSTI5NkRidDBXVE5Nby11WTdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82ZTJkYjctNDNhNy00ODk5LWFkNDkt NGJlYzhmMWI1OGVlLzEvMjZFa0JWWFliSTI5NkRidDBXVE5Nby11WTdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82ZTJkYjctNDNhNy00ODk5LWFkNDktNGJlYzhmMWI1OGVl LzEvMjZFa0JWWFliSTI5NkRidDBXVE5Nby11WTdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTxR/LqO fxYM5KUBqZ3d9pyTH6XyXrQKK+W9MuH7mARPbtPihHl75nb3GkLY4DjuR3kE4puF Nod+eEiXVq3Exji9qJZm9KQ3yughBx9v/VqK61fJTDF3vnYveOfRqI5xDpXGII8k Ozr1YCdeyplllUhqlOJ4ju/Q4rnUMnYDeqq+p8x5+a/vDfSRxZyp7GArUgcPew53 OeOb6/9b9RCtzl/dizkYM+JC0U2YoHIjKuBIk6vfyLisl3l/1DTlBR8TDe1o5XZW fCVlv/vz3qsjupTSh87xGQKzYya6BM9wJHFcWDTHRI+yUj8K/L0up3PNXWHezpt/ 8m9rOEj2RowC5A== -----END CERTIFICATE-----Generated at Mon Dec 22 00:05:54 2025 by rpki-client