This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft File: 0euG-JN4a8R309ALoP8eI57mIm0.mft (raw, json) Hash identifier: 3386xE0lasT8qTePD3HFVQ8CzELf1I8rfH/b/PXGTJA= Subject key identifier: 55:7E:CC:F8:91:18:DA:9C:FC:26:A1:56:34:16:71:5A:B7:53:00:68 Authority key identifier: D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D Certificate issuer: /CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d Certificate serial: 019B77127BB1F4D3457DF4145B9AC22108C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft Manifest number: 034D Signing time: Thu 01 Jan 2026 01:00:58 +0000 Manifest this update: Thu 01 Jan 2026 01:00:58 +0000 Manifest next update: Fri 02 Jan 2026 01:00:58 +0000 Files and hashes: 1: 0euG-JN4a8R309ALoP8eI57mIm0.crl (hash: /T1npT5LnY45YN3J5YJWYcTsB24a/0XdKYrsspokmao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:12:7b:b1:f4:d3:45:7d:f4:14:5b:9a:c2:21:08:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d Validity Not Before: Jan 1 01:00:58 2026 GMT Not After : Jan 2 01:00:58 2026 GMT Subject: CN=557eccf89118da9cfc26a1563416715ab7530068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:12:19:e1:3a:63:6e:a8:f9:8e:7d:69:c6:8a: 29:91:7d:d9:b7:5a:df:63:18:51:6c:ba:d1:6a:d5: 96:79:0a:de:6f:42:dd:a4:6e:db:58:88:24:3c:12: 2e:4f:54:e9:06:f4:0d:64:0b:c2:55:34:26:2f:61: a8:7c:15:34:d7:d9:bc:04:2a:13:9d:22:e5:ad:d7: 6f:6a:c1:34:6a:67:0d:b8:54:39:2f:06:c8:60:2b: f8:df:3a:ee:67:2a:ba:c6:dd:bc:06:71:a6:33:cf: 4b:cb:e5:19:bf:e3:3b:7f:8a:b5:20:fb:ef:16:49: f6:4d:4a:af:96:c3:54:ba:c4:df:5d:92:8c:3e:a2: ef:55:5e:9a:06:13:d0:d8:55:c0:8c:f4:9b:59:23: b8:13:65:d5:aa:64:53:5c:42:35:dd:2f:a7:91:79: ad:5f:b0:2b:45:c9:ef:64:9e:26:ef:a6:ac:05:99: 2d:df:2c:55:9b:9c:53:e4:05:b9:82:91:da:f0:d8: cc:36:02:c0:9c:fd:b4:35:37:a8:df:8c:2b:90:61: 51:ab:c3:60:e3:d0:f2:36:a4:fb:f5:28:51:cb:3a: 8d:c3:86:96:b3:92:5d:01:6d:fc:8d:ff:c3:e3:db: 73:6f:f4:ca:12:b2:a6:75:5b:4a:ab:cb:0c:3a:e2: 0f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7E:CC:F8:91:18:DA:9C:FC:26:A1:56:34:16:71:5A:B7:53:00:68 X509v3 Authority Key Identifier: keyid:D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:25:76:50:eb:ea:40:3f:db:77:d2:bd:cb:93:35:62:9f:a1: 15:43:4c:58:17:ab:d1:52:58:b1:a5:2f:29:68:81:e2:62:06: 5d:6c:e4:f1:30:c9:c8:39:4b:96:72:83:64:b3:41:82:58:be: 4c:58:0d:ca:0f:a1:69:45:eb:17:9a:0c:e0:0a:d3:71:4d:6a: 5b:c6:45:09:4d:21:cb:80:e2:91:b1:84:04:f6:84:10:42:d0: fe:36:28:65:2c:ab:0f:d2:0b:c4:7b:d2:41:8a:2b:ea:3b:60: ac:96:ac:04:c6:da:a3:2f:89:f3:25:7f:b2:33:b1:e7:c1:74: fa:5d:6f:21:0e:ff:fd:fc:94:9e:06:9b:42:8e:fb:01:86:2e: c1:c8:9d:6b:71:ad:57:95:0d:10:dc:36:fd:22:1d:0e:b5:80: a2:92:c4:e2:bd:ab:d0:1b:d9:6f:29:1d:9a:39:46:30:d8:11: b8:4c:af:ac:b2:40:98:4c:55:0b:ff:25:24:84:b9:45:8c:ce: 2d:4d:51:d3:41:80:08:f9:3b:ee:51:b9:ec:10:9e:e2:3e:2e: 14:1d:d5:12:dd:9e:cb:af:74:ad:94:02:75:3a:a1:03:67:f1: ff:45:d1:4a:4e:34:15:54:78:07:13:57:de:42:2a:d9:97:aa: 0a:68:df:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3Enux9NNFffQUW5rCIQjIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZWI4NmY4OTM3ODZiYzQ3N2QzZDAwYmEwZmYxZTIzOWVl NjIyNmQwHhcNMjYwMTAxMDEwMDU4WhcNMjYwMTAyMDEwMDU4WjAzMTEwLwYDVQQD Eyg1NTdlY2NmODkxMThkYTljZmMyNmExNTYzNDE2NzE1YWI3NTMwMDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhIZ4Tpjbqj5jn1pxoopkX3Zt1rf YxhRbLrRatWWeQreb0LdpG7bWIgkPBIuT1TpBvQNZAvCVTQmL2GofBU019m8BCoT nSLlrddvasE0amcNuFQ5LwbIYCv43zruZyq6xt28BnGmM89Ly+UZv+M7f4q1IPvv Fkn2TUqvlsNUusTfXZKMPqLvVV6aBhPQ2FXAjPSbWSO4E2XVqmRTXEI13S+nkXmt X7ArRcnvZJ4m76asBZkt3yxVm5xT5AW5gpHa8NjMNgLAnP20NTeo34wrkGFRq8Ng 49DyNqT79ShRyzqNw4aWs5JdAW38jf/D49tzb/TKErKmdVtKq8sMOuIPvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFV+zPiRGNqc/CahVjQWcVq3UwBoMB8GA1UdIwQY MBaAFNHrhviTeGvEd9PQC6D/HiOe5iJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGV1Ry1KTjRhOFIzMDlBTG9QOGVJNTdtSW0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83MTFkZDAtNDUzYS00NWM3LTgzMDQt ZGMxNGU5YzFiNzQ1LzEvMGV1Ry1KTjRhOFIzMDlBTG9QOGVJNTdtSW0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS83MTFkZDAtNDUzYS00NWM3LTgzMDQtZGMxNGU5YzFiNzQ1 LzEvMGV1Ry1KTjRhOFIzMDlBTG9QOGVJNTdtSW0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqiV2UOvq QD/bd9K9y5M1Yp+hFUNMWBer0VJYsaUvKWiB4mIGXWzk8TDJyDlLlnKDZLNBgli+ TFgNyg+haUXrF5oM4ArTcU1qW8ZFCU0hy4DikbGEBPaEEELQ/jYoZSyrD9ILxHvS QYor6jtgrJasBMbaoy+J8yV/sjOx58F0+l1vIQ7//fyUngabQo77AYYuwcida3Gt V5UNENw2/SIdDrWAopLE4r2r0BvZbykdmjlGMNgRuEyvrLJAmExVC/8lJIS5RYzO LU1R00GACPk77lG57BCe4j4uFB3VEt2ey690rZQCdTqhA2fx/0XRSk40FVR4BxNX 3kIq2ZeqCmjfsw== -----END CERTIFICATE-----Generated at Thu Jan 1 03:51:17 2026 by rpki-client