This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft File: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft (raw, json) Hash identifier: hn6hGokn1kIwZA6XXmIfdr82moKL7GZe5613tpJlUKQ= Subject key identifier: 56:7A:D3:80:07:52:30:1F:41:03:47:EE:65:98:CB:03:A3:77:BC:2C Authority key identifier: DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6 Certificate issuer: /CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6 Certificate serial: 019B785BD708C7C3E39BFAEB5A9F4F6F9077 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft Manifest number: 0EB6 Signing time: Thu 01 Jan 2026 07:00:43 +0000 Manifest this update: Thu 01 Jan 2026 07:00:43 +0000 Manifest next update: Fri 02 Jan 2026 07:00:43 +0000 Files and hashes: 1: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl (hash: 2QTEoNlExbAWLLGi6pojro+XydMDIryFRqpGERVNJ0s=) 2: G0H1NZGAbtsyoA2e--eIMeks25w.asa (hash: hXpme5X4li6UsZQl1l4A/uCi4ohrlAjpSmRIc/a8sgw=) 3: vmqKHuLzrPkqklGr2oHlX4A5H1s.roa (hash: HWx6FXZlLIKlHVfqDThyZuNv2Ccv+hNVkaueWiNq1XE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 07:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:5b:d7:08:c7:c3:e3:9b:fa:eb:5a:9f:4f:6f:90:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6 Validity Not Before: Jan 1 07:00:43 2026 GMT Not After : Jan 2 07:00:43 2026 GMT Subject: CN=567ad3800752301f410347ee6598cb03a377bc2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2b:e8:cb:54:9a:ed:d1:47:d1:16:68:98:4a: 5f:e7:24:32:90:9b:af:0a:b7:a5:0d:c1:a7:ee:97: 43:82:2e:bc:0f:72:2a:74:09:74:e8:22:97:38:fb: 02:9e:3b:14:05:5b:19:cc:21:ae:83:69:f5:44:cd: 6e:ab:d2:db:de:06:a7:9f:90:fa:d1:7e:ca:6f:35: 85:9f:d0:6e:f2:81:f3:52:5c:d5:1e:b4:26:cd:9f: 6d:8e:e2:b0:68:28:a3:f3:a6:a7:55:84:08:8d:2f: dc:7b:7d:7e:4d:3e:c5:cb:40:2b:f3:ed:f2:0b:ce: a6:83:f1:09:38:56:1d:1a:29:52:7d:c8:07:e1:9f: d9:1e:1a:e9:70:6a:0d:a0:ed:ce:3e:ae:7d:ab:75: c7:0a:67:67:8d:b3:49:4a:12:e4:5a:01:80:bb:e7: 8d:17:bf:5e:da:97:1f:bd:64:0b:05:cc:ec:6d:bd: 01:31:a8:33:12:d7:40:6f:dd:3d:e3:d1:b4:59:08: 47:28:29:7f:e1:4e:55:de:93:91:1e:5a:c0:79:0f: 47:7e:d5:4c:7c:0e:e9:2d:7e:17:06:a8:e7:cc:11: 48:7e:1c:5f:8b:c7:3c:e0:ee:dc:87:a4:03:30:fb: bb:bb:57:51:52:9c:52:d1:7e:4d:b5:74:f2:6d:3f: a5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:7A:D3:80:07:52:30:1F:41:03:47:EE:65:98:CB:03:A3:77:BC:2C X509v3 Authority Key Identifier: keyid:DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:3b:05:80:a0:17:b1:b1:ba:89:14:10:96:68:e3:44:aa:5c: da:80:d8:dc:ca:38:24:9f:43:36:b1:28:bc:97:e5:37:81:71: 82:77:d4:88:5e:22:2e:a8:a8:e0:6b:b9:75:d4:4b:07:7e:3d: b4:9e:f6:4b:08:cf:e3:13:0d:75:e0:31:7e:f3:71:4e:9b:71: 62:15:b9:57:00:d3:0a:05:91:8c:d0:5d:65:eb:2c:df:51:e9: 35:46:8f:8c:1d:6f:d4:b4:fe:4e:7b:29:02:8f:28:2f:f6:41: db:d1:e8:dd:3c:54:de:9a:3c:7a:14:f0:57:37:79:2d:14:84: 59:53:f6:44:ba:f5:94:07:a0:c6:f8:75:e3:da:d8:03:d5:92: 98:52:20:89:13:52:d8:e9:1d:ea:7d:66:52:b5:4d:2c:8a:89: 78:ad:f8:ea:f0:7b:26:02:ca:d2:57:48:1c:92:cc:19:32:b5: ee:7b:81:41:c7:cc:8a:b3:47:52:02:f8:40:f4:b1:52:42:3f: a9:f7:7b:9b:45:de:97:4a:e5:88:b9:51:ea:87:81:90:f5:10: e7:80:17:57:56:86:0d:de:6e:ab:1e:4f:7b:1d:9a:52:c2:2d: e1:5c:47:0c:14:2f:c2:66:51:91:f0:61:39:27:3b:ae:5f:85: 3f:dd:df:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4W9cIx8Pjm/rrWp9Pb5B3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNWU2YzIzMzA5MTFiYzFkYzhjODNkNDExZWY2YjEyMDhi M2JiZDYwHhcNMjYwMTAxMDcwMDQzWhcNMjYwMTAyMDcwMDQzWjAzMTEwLwYDVQQD Eyg1NjdhZDM4MDA3NTIzMDFmNDEwMzQ3ZWU2NTk4Y2IwM2EzNzdiYzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Svoy1Sa7dFH0RZomEpf5yQykJuv CrelDcGn7pdDgi68D3IqdAl06CKXOPsCnjsUBVsZzCGug2n1RM1uq9Lb3gann5D6 0X7KbzWFn9Bu8oHzUlzVHrQmzZ9tjuKwaCij86anVYQIjS/ce31+TT7Fy0Ar8+3y C86mg/EJOFYdGilSfcgH4Z/ZHhrpcGoNoO3OPq59q3XHCmdnjbNJShLkWgGAu+eN F79e2pcfvWQLBczsbb0BMagzEtdAb90949G0WQhHKCl/4U5V3pORHlrAeQ9HftVM fA7pLX4XBqjnzBFIfhxfi8c84O7ch6QDMPu7u1dRUpxS0X5NtXTybT+lawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZ604AHUjAfQQNH7mWYywOjd7wsMB8GA1UdIwQY MBaAFN5ebCMwkRvB3IyD1BHvaxIIs7vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kZTlkNzItZmNkNC00YzdjLTg5Y2Et ZGU0YmE3ODZmODcyLzEvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9kZTlkNzItZmNkNC00YzdjLTg5Y2EtZGU0YmE3ODZmODcy LzEvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDsFgKAX sbG6iRQQlmjjRKpc2oDY3Mo4JJ9DNrEovJflN4FxgnfUiF4iLqio4Gu5ddRLB349 tJ72SwjP4xMNdeAxfvNxTptxYhW5VwDTCgWRjNBdZess31HpNUaPjB1v1LT+Tnsp Ao8oL/ZB29Ho3TxU3po8ehTwVzd5LRSEWVP2RLr1lAegxvh149rYA9WSmFIgiRNS 2Okd6n1mUrVNLIqJeK346vB7JgLK0ldIHJLMGTK17nuBQcfMirNHUgL4QPSxUkI/ qfd7m0Xel0rliLlR6oeBkPUQ54AXV1aGDd5uqx5Pex2aUsIt4VxHDBQvwmZRkfBh OSc7rl+FP93fhw== -----END CERTIFICATE-----Generated at Thu Jan 1 11:06:00 2026 by rpki-client