This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft File: ECj33ciVlk4jyFY_4akArZcb8EQ.mft (raw, json) Hash identifier: NMcGD662223vdV7+mNjIUI/iWF1mGcDuSCYnniqt+5U= Subject key identifier: 78:CA:1E:7C:DD:6F:3A:1C:00:DA:6C:2B:B0:7B:D4:B0:C0:92:4D:EC Authority key identifier: 10:28:F7:DD:C8:95:96:4E:23:C8:56:3F:E1:A9:00:AD:97:1B:F0:44 Certificate issuer: /CN=1028f7ddc895964e23c8563fe1a900ad971bf044 Certificate serial: 019BA2D968C08BA73F2907E9647EBD2C1D0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECj33ciVlk4jyFY_4akArZcb8EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft Manifest number: 0271 Signing time: Fri 09 Jan 2026 13:01:55 +0000 Manifest this update: Fri 09 Jan 2026 13:01:55 +0000 Manifest next update: Sat 10 Jan 2026 13:01:55 +0000 Files and hashes: 1: ECj33ciVlk4jyFY_4akArZcb8EQ.crl (hash: h97zTMSiqAfl5hjYqrOIGkTfzeEy4vlEsb3W+ihyb1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ECj33ciVlk4jyFY_4akArZcb8EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:d9:68:c0:8b:a7:3f:29:07:e9:64:7e:bd:2c:1d:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1028f7ddc895964e23c8563fe1a900ad971bf044 Validity Not Before: Jan 9 13:01:55 2026 GMT Not After : Jan 10 13:01:55 2026 GMT Subject: CN=78ca1e7cdd6f3a1c00da6c2bb07bd4b0c0924dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8c:47:06:c6:f2:ae:14:22:ef:a6:eb:af:9f: 80:be:5e:db:18:77:26:18:10:19:0a:1e:17:c7:8e: e2:55:59:a7:2b:db:09:08:ec:e3:b3:14:67:c3:27: f8:b4:92:da:22:fa:90:fb:41:5c:ec:0e:00:b1:a0: 70:d1:f5:0d:08:cb:9c:0a:0b:eb:28:10:f6:5c:52: f0:34:29:e3:34:6f:d8:96:da:f2:b3:fd:f9:05:37: a7:45:7e:18:6e:a7:72:70:ac:46:7d:3b:32:a8:37: ee:52:86:93:90:21:c2:80:69:36:ae:d3:26:6d:78: 9a:95:f5:28:02:12:ea:80:1e:21:65:d4:87:ae:8a: c0:18:4b:23:5b:4d:33:f5:87:30:5a:1d:ba:ba:5f: ab:5b:41:3e:96:f5:f3:03:0c:0e:fa:b4:80:e5:09: 1a:2a:b9:67:25:b5:e8:fe:d9:9e:83:b7:92:e6:86: 78:ac:64:60:5b:5d:12:f9:04:c5:65:8e:d5:b9:d8: 4b:56:1f:ae:f0:a1:dc:7f:ff:64:2c:dc:36:5b:0a: 3e:9e:d8:63:a8:17:59:63:f6:7b:e7:2d:89:3f:b8: 82:00:26:f8:6e:45:6e:64:bf:a5:fe:84:01:05:e7: 2e:15:ef:25:86:fd:f6:66:59:68:fe:45:21:a2:25: a0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CA:1E:7C:DD:6F:3A:1C:00:DA:6C:2B:B0:7B:D4:B0:C0:92:4D:EC X509v3 Authority Key Identifier: keyid:10:28:F7:DD:C8:95:96:4E:23:C8:56:3F:E1:A9:00:AD:97:1B:F0:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECj33ciVlk4jyFY_4akArZcb8EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/77336a-b583-4b12-9af0-fc540365eff7/1/ECj33ciVlk4jyFY_4akArZcb8EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:03:97:32:2d:7f:95:28:d3:89:73:b5:a8:c6:4f:10:f3:19: 25:06:78:f1:e6:a8:f0:3d:85:ed:b2:a2:ca:c3:8b:b2:c7:77: bb:ef:2b:8a:52:60:dd:b6:64:5e:ca:ad:b9:77:8a:1a:f8:eb: d8:5d:18:0b:be:14:39:50:87:40:e5:93:a3:14:0d:9a:24:de: 95:32:0c:95:13:7c:d0:96:a6:12:e7:02:8b:6b:e4:0c:fc:07: 72:41:a2:a9:ec:62:c0:0c:a1:7c:fa:d7:57:07:3e:80:25:4b: 34:13:ee:8c:b1:9e:72:f7:2d:5f:e3:5a:02:45:6b:d5:40:4b: 26:1a:71:be:1a:df:63:86:58:81:85:7a:af:ef:be:6a:75:14: 14:10:e4:b4:27:12:39:d3:bf:81:50:12:a6:43:fb:06:b0:09: c3:7f:dd:4b:28:b3:21:20:26:78:f4:35:15:44:ab:20:13:50: 60:76:8f:a9:aa:8e:4f:42:cb:b7:12:31:ff:45:94:72:e2:52: bf:e0:28:9a:5d:3a:f8:0d:f3:0a:15:fd:62:76:dc:15:4c:db: f1:00:23:df:73:a2:78:81:03:23:26:11:be:2a:ca:89:34:5c: 30:bb:68:4b:48:5d:36:07:8c:9b:9c:d6:c1:ba:39:cd:19:02: be:d4:b4:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZui2WjAi6c/KQfpZH69LB0MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMjhmN2RkYzg5NTk2NGUyM2M4NTYzZmUxYTkwMGFkOTcx YmYwNDQwHhcNMjYwMTA5MTMwMTU1WhcNMjYwMTEwMTMwMTU1WjAzMTEwLwYDVQQD Eyg3OGNhMWU3Y2RkNmYzYTFjMDBkYTZjMmJiMDdiZDRiMGMwOTI0ZGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44xHBsbyrhQi76brr5+Avl7bGHcm GBAZCh4Xx47iVVmnK9sJCOzjsxRnwyf4tJLaIvqQ+0Fc7A4AsaBw0fUNCMucCgvr KBD2XFLwNCnjNG/Yltrys/35BTenRX4YbqdycKxGfTsyqDfuUoaTkCHCgGk2rtMm bXialfUoAhLqgB4hZdSHrorAGEsjW00z9YcwWh26ul+rW0E+lvXzAwwO+rSA5Qka KrlnJbXo/tmeg7eS5oZ4rGRgW10S+QTFZY7VudhLVh+u8KHcf/9kLNw2Wwo+nthj qBdZY/Z75y2JP7iCACb4bkVuZL+l/oQBBecuFe8lhv32Zllo/kUhoiWgPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjKHnzdbzocANpsK7B71LDAkk3sMB8GA1UdIwQY MBaAFBAo993IlZZOI8hWP+GpAK2XG/BEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUNqMzNjaVZsazRqeUZZXzRha0FyWmNiOEVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83NzMzNmEtYjU4My00YjEyLTlhZjAt ZmM1NDAzNjVlZmY3LzEvRUNqMzNjaVZsazRqeUZZXzRha0FyWmNiOEVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83NzMzNmEtYjU4My00YjEyLTlhZjAtZmM1NDAzNjVlZmY3 LzEvRUNqMzNjaVZsazRqeUZZXzRha0FyWmNiOEVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwOXMi1/ lSjTiXO1qMZPEPMZJQZ48eao8D2F7bKiysOLssd3u+8rilJg3bZkXsqtuXeKGvjr 2F0YC74UOVCHQOWToxQNmiTelTIMlRN80JamEucCi2vkDPwHckGiqexiwAyhfPrX Vwc+gCVLNBPujLGecvctX+NaAkVr1UBLJhpxvhrfY4ZYgYV6r+++anUUFBDktCcS OdO/gVASpkP7BrAJw3/dSyizISAmePQ1FUSrIBNQYHaPqaqOT0LLtxIx/0WUcuJS v+Aoml06+A3zChX9YnbcFUzb8QAj33OieIEDIyYRvirKiTRcMLtoS0hdNgeMm5zW wbo5zRkCvtS0+A== -----END CERTIFICATE-----Generated at Fri Jan 9 16:04:04 2026 by rpki-client