This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft File: EA5EySrUkxGKStK6gRRfHTShi8o.mft (raw, json) Hash identifier: ChIdPRfsWKM3dCOZyaYufqiV9hGgUXzaZd7Ty8ubv8s= Subject key identifier: 33:34:0A:8A:4E:E1:A8:D0:13:95:11:76:C6:EE:E2:F5:06:29:C0:FE Authority key identifier: 10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA Certificate issuer: /CN=100e44c92ad493118a4ad2ba81145f1d34a18bca Certificate serial: 019B7FDEAA46F4F5A77F96622E90F1E570A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft Manifest number: 1173 Signing time: Fri 02 Jan 2026 18:00:57 +0000 Manifest this update: Fri 02 Jan 2026 18:00:57 +0000 Manifest next update: Sat 03 Jan 2026 18:00:57 +0000 Files and hashes: 1: EA5EySrUkxGKStK6gRRfHTShi8o.crl (hash: F8VspQJUXru0aYcayIUQxIlX1ydOfmAWJDv6CvVQYEQ=) 2: bttqOJvjdl84KdYPjPqF6BIYkr0.roa (hash: pBThqHeKOS0Gks/36PiEC85JnL2dOeWyKsS2nm104jY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 18:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:de:aa:46:f4:f5:a7:7f:96:62:2e:90:f1:e5:70:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=100e44c92ad493118a4ad2ba81145f1d34a18bca Validity Not Before: Jan 2 18:00:57 2026 GMT Not After : Jan 3 18:00:57 2026 GMT Subject: CN=33340a8a4ee1a8d013951176c6eee2f50629c0fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f8:27:39:b1:a8:4a:7f:14:cc:57:74:93:3c: ca:ef:b9:7e:cd:15:7c:fe:cf:93:d8:d6:e1:8d:6c: 44:5c:9f:a9:19:ee:0e:95:c9:e5:ee:5e:9a:09:af: b2:a7:06:11:f0:91:78:8b:6c:d2:dd:e0:16:e2:4c: 91:4c:8b:5a:e1:f7:6a:dc:bd:ce:e2:da:c2:f6:10: 6c:9f:f9:3b:94:d6:1a:ec:44:2f:ac:22:b0:7c:60: 94:17:47:cd:b7:89:f9:d5:e0:4c:f9:c9:e2:50:37: 31:ba:cf:e9:c4:5d:cc:44:7c:fa:1b:0e:84:50:d7: 99:7a:11:2a:59:b7:0c:8f:f7:a7:2b:8d:26:1a:b4: 8e:e2:fc:01:9c:18:7c:98:28:68:70:48:bb:44:94: 51:0f:d5:65:f2:3d:c8:aa:16:6f:5b:9c:18:6b:72: a7:9e:fd:31:6b:8b:4c:69:33:5f:cf:18:71:70:9c: a0:3d:99:21:40:4a:e4:fe:78:e1:2a:fd:a0:d3:c9: 20:1c:99:be:d0:21:5e:d1:79:50:c7:f6:26:be:cc: 8a:1a:f0:7e:b7:12:00:5b:61:f6:3c:2f:f6:7d:b1: c3:b0:ca:c8:62:8b:8f:ce:32:05:20:f1:9e:39:04: 42:3b:1f:0e:97:23:d3:11:39:7b:91:d8:aa:9e:34: 63:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:34:0A:8A:4E:E1:A8:D0:13:95:11:76:C6:EE:E2:F5:06:29:C0:FE X509v3 Authority Key Identifier: keyid:10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:fa:60:09:07:b0:50:73:ca:6b:3a:43:74:da:f4:41:bd:33: 8c:f3:62:02:cc:29:da:6d:16:0c:e4:92:93:a7:41:6c:0a:4e: fb:bd:e7:af:51:8a:87:59:9d:34:44:b8:22:20:4d:f6:4c:71: 8d:97:68:70:0d:c9:b6:d4:bf:f2:0d:4b:f6:60:3f:21:b3:4a: cc:ac:e4:b2:69:bd:61:59:44:3a:a9:d5:00:55:b5:ee:ce:5f: 8b:6b:49:4a:6e:f3:f4:15:95:c4:f3:af:8c:77:8e:8c:cd:2c: 70:20:31:e3:52:3c:9c:4d:8f:11:22:f1:b0:c9:e3:8a:a7:d0: 5a:bb:b5:99:57:e9:b6:68:92:99:ee:16:63:72:fa:53:59:e2: 43:92:19:7a:b4:92:c5:dc:5f:92:d9:87:cd:64:52:86:cc:a0: 34:24:3d:46:71:92:56:4c:ca:95:b5:71:b8:ba:29:88:f7:8c: f0:d7:e0:cf:5f:20:44:b2:f8:80:87:60:3d:3a:dd:f0:7f:01: d7:ee:06:5f:21:0b:35:82:5a:1c:c3:31:e9:a8:9e:fd:55:85: 7c:3d:e8:3c:8e:40:60:7e:a8:c8:fb:b4:f1:1b:bc:9f:a6:c1: ec:55:97:80:03:c6:41:68:dd:47:5b:57:bd:6b:1e:cf:04:b2: 2b:be:b7:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/3qpG9PWnf5ZiLpDx5XChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMGU0NGM5MmFkNDkzMTE4YTRhZDJiYTgxMTQ1ZjFkMzRh MThiY2EwHhcNMjYwMTAyMTgwMDU3WhcNMjYwMTAzMTgwMDU3WjAzMTEwLwYDVQQD EygzMzM0MGE4YTRlZTFhOGQwMTM5NTExNzZjNmVlZTJmNTA2MjljMGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvgnObGoSn8UzFd0kzzK77l+zRV8 /s+T2NbhjWxEXJ+pGe4Olcnl7l6aCa+ypwYR8JF4i2zS3eAW4kyRTIta4fdq3L3O 4trC9hBsn/k7lNYa7EQvrCKwfGCUF0fNt4n51eBM+cniUDcxus/pxF3MRHz6Gw6E UNeZehEqWbcMj/enK40mGrSO4vwBnBh8mChocEi7RJRRD9Vl8j3IqhZvW5wYa3Kn nv0xa4tMaTNfzxhxcJygPZkhQErk/njhKv2g08kgHJm+0CFe0XlQx/YmvsyKGvB+ txIAW2H2PC/2fbHDsMrIYouPzjIFIPGeOQRCOx8OlyPTETl7kdiqnjRj5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDM0CopO4ajQE5URdsbu4vUGKcD+MB8GA1UdIwQY MBaAFBAORMkq1JMRikrSuoEUXx00oYvKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUE1RXlTclVreEdLU3RLNmdSUmZIVFNoaThvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lMWFiNTctOWMyNS00YjhmLWI1NmUt NGY1MjEyMjkwNzY5LzEvRUE1RXlTclVreEdLU3RLNmdSUmZIVFNoaThvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9lMWFiNTctOWMyNS00YjhmLWI1NmUtNGY1MjEyMjkwNzY5 LzEvRUE1RXlTclVreEdLU3RLNmdSUmZIVFNoaThvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfpgCQew UHPKazpDdNr0Qb0zjPNiAswp2m0WDOSSk6dBbApO+73nr1GKh1mdNES4IiBN9kxx jZdocA3JttS/8g1L9mA/IbNKzKzksmm9YVlEOqnVAFW17s5fi2tJSm7z9BWVxPOv jHeOjM0scCAx41I8nE2PESLxsMnjiqfQWru1mVfptmiSme4WY3L6U1niQ5IZerSS xdxfktmHzWRShsygNCQ9RnGSVkzKlbVxuLopiPeM8Nfgz18gRLL4gIdgPTrd8H8B 1+4GXyELNYJaHMMx6aie/VWFfD3oPI5AYH6oyPu08Ru8n6bB7FWXgAPGQWjdR1tX vWsezwSyK7636Q== -----END CERTIFICATE-----Generated at Sat Jan 3 00:58:22 2026 by rpki-client