This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft File: eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft (raw, json) Hash identifier: A2bFwR30I6FD3ZpRPcrzhieNhhm00yQTYcUpO8qWeWc= Subject key identifier: AD:E6:64:45:8F:8A:22:3F:BC:2C:E1:E6:FE:40:49:38:91:A4:E1:CC Authority key identifier: 79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F Certificate issuer: /CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f Certificate serial: 019B785CB0D1A662517B72C022FA4C71ECAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft Manifest number: 17A9 Signing time: Thu 01 Jan 2026 07:01:38 +0000 Manifest this update: Thu 01 Jan 2026 07:01:38 +0000 Manifest next update: Fri 02 Jan 2026 07:01:38 +0000 Files and hashes: 1: T5ztfNUXWpcUexx1Ow5PIo80ytg.roa (hash: 1oOYGrHxVD+BaS7VqGZM3T/tDWbPcSE3UrszJqW1KJQ=) 2: eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl (hash: 5U6gs6uZ/aOfgaou3JXzynqB3Sn35kEjYglIXk0mGRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:5c:b0:d1:a6:62:51:7b:72:c0:22:fa:4c:71:ec:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f Validity Not Before: Jan 1 07:01:38 2026 GMT Not After : Jan 2 07:01:38 2026 GMT Subject: CN=ade664458f8a223fbc2ce1e6fe40493891a4e1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:47:95:df:3d:d7:c8:7c:73:e3:4d:fd:6c:0a: 9c:a1:b0:a3:6e:20:a9:22:1f:03:aa:b9:f6:9e:ae: 80:5f:04:b2:3f:a6:73:dd:c8:d1:f8:d8:88:2a:c7: 97:b9:48:6f:ae:60:3d:01:d1:69:58:0d:b0:a4:0e: 4b:99:2a:56:5a:de:e5:98:a0:9f:cc:60:76:2a:03: 74:8a:2f:9b:41:7b:92:fc:6e:22:a1:90:b6:75:7d: e9:3d:d7:da:f2:81:7a:d5:9d:4e:b9:4d:be:77:48: 81:cd:2a:bf:9d:24:83:8e:e4:26:c7:4e:18:97:93: f8:95:ed:3c:c3:c1:e5:78:10:53:33:df:15:58:85: 84:73:c9:57:41:e6:f2:0e:75:08:de:a0:a1:80:a9: 9d:f7:ad:93:a5:7a:ff:98:e0:ec:2a:73:f4:07:4c: 98:af:a8:c5:01:e1:6c:0e:c5:b4:bc:ed:87:47:e7: 45:4c:fe:07:0b:20:02:30:d4:0d:9c:96:b9:8d:cb: 43:fb:ab:3d:af:bf:f4:93:8a:80:6b:b4:a6:b8:f3: 75:96:8f:d3:7e:60:d1:05:de:c4:10:8b:0c:a9:cd: ee:7d:46:fc:d4:e4:3f:55:65:db:54:05:4b:5e:ef: b5:92:68:a5:b3:e4:c8:91:a1:18:b7:f1:42:6a:5f: 2b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E6:64:45:8F:8A:22:3F:BC:2C:E1:E6:FE:40:49:38:91:A4:E1:CC X509v3 Authority Key Identifier: keyid:79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:66:37:0e:2a:92:ce:2f:d4:5c:14:ae:31:ba:50:7f:e0:1d: 4b:59:d9:59:94:cd:2e:3e:fd:46:f7:63:dc:d5:79:e9:fb:bc: 57:7a:24:72:60:47:00:eb:74:23:92:b3:f0:32:18:62:d5:9e: 8e:04:60:6a:8c:4c:1c:c0:d8:cd:8c:58:30:19:3e:d5:04:39: 56:f1:92:fc:d6:33:a3:04:2a:4b:71:50:f1:21:c2:00:19:18: 2e:d2:b0:fd:58:34:77:8e:f3:18:18:35:11:56:1d:cf:01:2f: 0e:1c:00:d0:34:3c:11:22:df:0d:03:c2:ad:fb:6f:8c:e5:92: 20:3e:fc:d7:2d:ab:bd:56:71:3d:68:29:02:7a:8f:16:b3:78: 33:7b:33:af:a1:19:ee:1e:ea:2d:3c:af:7c:4f:d6:66:db:48: 04:00:9e:95:c2:2f:79:d6:19:b5:bc:67:74:85:28:d7:b9:4d: bc:01:8a:4f:a8:4c:58:ca:ed:ba:e2:7a:98:59:1f:16:fd:99: 65:9a:19:f1:0b:b3:a4:f9:20:bb:58:57:1f:52:53:2b:99:7c: 6f:d9:52:bf:90:9a:8f:3a:31:e9:8c:88:77:7c:e2:c0:ae:7c: 7f:2f:b7:08:99:f6:17:bb:0f:0b:e6:a0:a9:7d:89:23:e8:11: 13:27:4b:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4XLDRpmJRe3LAIvpMceyvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YTFjZjFhYThmYmM0ZTMzMzc4NjczZWJkMDUzNjQ4ODBl MmE5MWYwHhcNMjYwMTAxMDcwMTM4WhcNMjYwMTAyMDcwMTM4WjAzMTEwLwYDVQQD EyhhZGU2NjQ0NThmOGEyMjNmYmMyY2UxZTZmZTQwNDkzODkxYTRlMWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUeV3z3XyHxz4039bAqcobCjbiCp Ih8Dqrn2nq6AXwSyP6Zz3cjR+NiIKseXuUhvrmA9AdFpWA2wpA5LmSpWWt7lmKCf zGB2KgN0ii+bQXuS/G4ioZC2dX3pPdfa8oF61Z1OuU2+d0iBzSq/nSSDjuQmx04Y l5P4le08w8HleBBTM98VWIWEc8lXQebyDnUI3qChgKmd962TpXr/mODsKnP0B0yY r6jFAeFsDsW0vO2HR+dFTP4HCyACMNQNnJa5jctD+6s9r7/0k4qAa7SmuPN1lo/T fmDRBd7EEIsMqc3ufUb81OQ/VWXbVAVLXu+1kmils+TIkaEYt/FCal8rwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3mZEWPiiI/vCzh5v5ASTiRpOHMMB8GA1UdIwQY MBaAFHmhzxqo+8TjM3hnPr0FNkiA4qkfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kZjViYWQtYWM1OS00MTNlLTlhZDAt NTk5NWFlOGFjYjlmLzEvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9kZjViYWQtYWM1OS00MTNlLTlhZDAtNTk5NWFlOGFjYjlm LzEvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmY3DiqS zi/UXBSuMbpQf+AdS1nZWZTNLj79Rvdj3NV56fu8V3okcmBHAOt0I5Kz8DIYYtWe jgRgaoxMHMDYzYxYMBk+1QQ5VvGS/NYzowQqS3FQ8SHCABkYLtKw/Vg0d47zGBg1 EVYdzwEvDhwA0DQ8ESLfDQPCrftvjOWSID781y2rvVZxPWgpAnqPFrN4M3szr6EZ 7h7qLTyvfE/WZttIBACelcIvedYZtbxndIUo17lNvAGKT6hMWMrtuuJ6mFkfFv2Z ZZoZ8QuzpPkgu1hXH1JTK5l8b9lSv5Cajzox6YyId3ziwK58fy+3CJn2F7sPC+ag qX2JI+gREydLVQ== -----END CERTIFICATE-----Generated at Thu Jan 1 08:46:18 2026 by rpki-client