This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft File: eP0LaXd70F3N_JiULu3vuwaBKC8.mft (raw, json) Hash identifier: seBrFO0JN0Ry1V11OLdkjTEQXedKm9at05W2Itjx/38= Subject key identifier: 79:2D:BA:A2:3E:7E:5E:12:3B:AD:F1:92:B8:94:70:F4:21:6B:05:05 Authority key identifier: 78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F Certificate issuer: /CN=78fd0b69777bd05dcdfc98942eedefbb0681282f Certificate serial: 019B7F70C9148B0AE002D2D1A288AF81F17C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft Manifest number: 0F38 Signing time: Fri 02 Jan 2026 16:00:56 +0000 Manifest this update: Fri 02 Jan 2026 16:00:56 +0000 Manifest next update: Sat 03 Jan 2026 16:00:56 +0000 Files and hashes: 1: eP0LaXd70F3N_JiULu3vuwaBKC8.crl (hash: VR267fL7UCr7oRL/5HKn/4IfUo0F6+M39M0GOHVxV08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:70:c9:14:8b:0a:e0:02:d2:d1:a2:88:af:81:f1:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78fd0b69777bd05dcdfc98942eedefbb0681282f Validity Not Before: Jan 2 16:00:56 2026 GMT Not After : Jan 3 16:00:56 2026 GMT Subject: CN=792dbaa23e7e5e123badf192b89470f4216b0505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d0:30:e5:ba:5c:41:4b:7e:18:92:49:57:f6: 59:95:9b:a0:53:cd:31:d2:1d:c7:9d:03:4f:25:f3: 2e:d2:d2:cc:97:21:6f:4c:5d:69:77:4f:d0:80:05: a0:e2:39:81:09:03:a5:31:31:68:24:be:80:9e:72: 55:a1:6c:d1:2b:33:c8:f2:42:66:48:95:0d:2c:7d: fa:a0:bb:b9:2f:33:61:35:46:2d:77:ed:d3:0e:4d: 14:37:85:8e:42:04:ab:19:39:70:67:ca:13:c5:06: 5c:b0:b3:0e:e7:ff:ad:f3:5c:1d:34:1f:dd:2b:2a: e1:bf:ec:59:a5:1f:61:45:08:1c:cf:9f:c9:25:50: 2b:24:3a:7d:93:64:0f:66:ee:a2:ff:69:c7:69:47: 39:d9:a2:dd:10:ba:34:97:84:ea:4d:96:58:af:5e: de:1c:66:00:b7:5f:76:cc:67:3a:80:06:dd:1c:47: ed:cf:9e:e4:70:e3:9f:0d:f4:c9:6c:0e:49:02:eb: f5:30:e3:7d:a3:da:0d:65:a1:69:65:1d:16:67:dc: fa:76:26:a4:83:e1:d0:f3:d1:da:a8:f8:ac:a4:c2: 63:af:41:09:81:e2:2f:b3:05:59:09:51:88:3e:e8: bb:4d:d6:ac:da:fe:73:f3:02:d8:55:f2:a3:66:20: 80:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2D:BA:A2:3E:7E:5E:12:3B:AD:F1:92:B8:94:70:F4:21:6B:05:05 X509v3 Authority Key Identifier: keyid:78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:8d:d5:8d:c0:a0:41:ec:b6:2c:b3:38:b3:dd:0c:0e:b7:4a: 4a:ee:26:ff:0b:b0:69:8b:cb:4f:08:d6:2e:ce:ae:77:3b:90: 39:4e:30:dc:f9:fb:18:ac:36:b1:92:8b:4c:c2:1d:5a:8b:f6: 48:2e:48:f8:5a:d8:c5:c5:0b:0d:76:d6:31:b4:c5:11:93:c1: aa:e6:cc:42:8c:ad:29:84:83:5c:af:ef:f2:3b:a7:75:5f:36: 42:e8:87:f5:ce:b4:65:4f:b1:15:0e:35:fc:64:23:8e:70:52: ff:1c:da:e2:f1:08:a8:0e:a9:9d:cb:02:87:97:f0:b5:fe:19: f9:6e:d0:b7:60:d5:9a:06:d7:d9:cf:6d:d1:2a:2e:67:2d:48: fb:7a:61:a7:af:95:09:d9:a7:ea:4b:0b:fc:00:dd:96:72:07: da:de:27:1d:c3:27:8e:17:10:6c:c4:b2:ba:d7:c4:7a:8f:6f: 79:6a:e3:d1:b6:bc:61:2a:e4:37:57:d8:3c:28:c7:02:f9:8f: d8:b8:6c:8d:35:3e:39:b5:d2:1c:f7:2f:b1:51:20:16:97:4a: 94:d6:9e:b2:06:03:3c:e6:9a:2a:b9:f0:01:a6:fb:e3:cc:d3: 81:c0:4b:7b:16:97:79:41:ee:0d:a0:2e:6c:d4:38:ce:bd:b3: 02:49:dc:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/cMkUiwrgAtLRooivgfF8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZmQwYjY5Nzc3YmQwNWRjZGZjOTg5NDJlZWRlZmJiMDY4 MTI4MmYwHhcNMjYwMTAyMTYwMDU2WhcNMjYwMTAzMTYwMDU2WjAzMTEwLwYDVQQD Eyg3OTJkYmFhMjNlN2U1ZTEyM2JhZGYxOTJiODk0NzBmNDIxNmIwNTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69Aw5bpcQUt+GJJJV/ZZlZugU80x 0h3HnQNPJfMu0tLMlyFvTF1pd0/QgAWg4jmBCQOlMTFoJL6AnnJVoWzRKzPI8kJm SJUNLH36oLu5LzNhNUYtd+3TDk0UN4WOQgSrGTlwZ8oTxQZcsLMO5/+t81wdNB/d Kyrhv+xZpR9hRQgcz5/JJVArJDp9k2QPZu6i/2nHaUc52aLdELo0l4TqTZZYr17e HGYAt192zGc6gAbdHEftz57kcOOfDfTJbA5JAuv1MON9o9oNZaFpZR0WZ9z6diak g+HQ89HaqPispMJjr0EJgeIvswVZCVGIPui7Tdas2v5z8wLYVfKjZiCAnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHktuqI+fl4SO63xkriUcPQhawUFMB8GA1UdIwQY MBaAFHj9C2l3e9BdzfyYlC7t77sGgSgvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVAwTGFYZDcwRjNOX0ppVUx1M3Z1d2FCS0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zZDNlNzAtM2Y4OC00Njk4LWJhNDEt OTVlODcyOGEyNTc3LzEvZVAwTGFYZDcwRjNOX0ppVUx1M3Z1d2FCS0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zZDNlNzAtM2Y4OC00Njk4LWJhNDEtOTVlODcyOGEyNTc3 LzEvZVAwTGFYZDcwRjNOX0ppVUx1M3Z1d2FCS0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV43VjcCg Qey2LLM4s90MDrdKSu4m/wuwaYvLTwjWLs6udzuQOU4w3Pn7GKw2sZKLTMIdWov2 SC5I+FrYxcULDXbWMbTFEZPBqubMQoytKYSDXK/v8jundV82QuiH9c60ZU+xFQ41 /GQjjnBS/xza4vEIqA6pncsCh5fwtf4Z+W7Qt2DVmgbX2c9t0SouZy1I+3php6+V Cdmn6ksL/ADdlnIH2t4nHcMnjhcQbMSyutfEeo9veWrj0ba8YSrkN1fYPCjHAvmP 2LhsjTU+ObXSHPcvsVEgFpdKlNaesgYDPOaaKrnwAab748zTgcBLexaXeUHuDaAu bNQ4zr2zAkncSw== -----END CERTIFICATE-----Generated at Fri Jan 2 21:45:20 2026 by rpki-client