This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft File: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft (raw, json) Hash identifier: g8hVQ+qVOQqpCB3bQe63zMog1UqYIVAtqhtBy4Jdhj8= Subject key identifier: EB:3C:81:4F:99:3C:FD:80:45:E0:F6:E3:0C:69:5D:DD:73:85:63:72 Authority key identifier: E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36 Certificate issuer: /CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636 Certificate serial: 019BAEDDBEC82717FFD71B43F969FD8EFBD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft Manifest number: 0EA8 Signing time: Sun 11 Jan 2026 21:02:06 +0000 Manifest this update: Sun 11 Jan 2026 21:02:06 +0000 Manifest next update: Mon 12 Jan 2026 21:02:06 +0000 Files and hashes: 1: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl (hash: 0M9K87lF+4Vk5HSIIdiUNT8how/FXMluhPQmKGWYAjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:dd:be:c8:27:17:ff:d7:1b:43:f9:69:fd:8e:fb:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636 Validity Not Before: Jan 11 21:02:06 2026 GMT Not After : Jan 12 21:02:06 2026 GMT Subject: CN=eb3c814f993cfd8045e0f6e30c695ddd73856372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dc:be:85:3f:bb:bf:a9:42:b1:d9:91:7c:92: 42:7d:dc:ca:a7:40:e5:ac:e1:64:a0:0a:38:86:0f: 1b:b6:72:5e:99:c0:45:d3:2b:15:8c:0e:dc:d1:d1: ad:fc:f6:61:ec:81:49:12:b6:14:02:7f:6e:85:75: 27:ff:7c:f7:94:62:88:56:54:3f:2d:a8:d4:23:86: 8f:14:50:f0:cd:04:c3:a9:8c:a7:a4:55:26:54:3b: 30:d3:b4:df:d2:58:85:ae:fa:63:39:fe:08:a9:8d: 22:6d:07:28:53:e6:47:32:35:1c:05:e9:6c:b9:45: 03:69:3c:ac:18:94:9f:0d:a1:f6:c7:e9:c7:b7:24: 24:84:b7:c4:e6:0b:28:e3:d7:ec:b4:b7:c1:7a:89: 0d:a7:c6:97:d5:da:dd:40:1e:35:37:01:27:9b:32: f2:43:ee:b6:4b:89:4a:2a:ef:63:51:40:d5:a8:de: d6:06:8b:81:c8:2f:b8:e2:14:04:23:6d:4c:62:36: 59:77:63:52:6e:b7:64:61:53:88:a0:f9:00:0c:ed: da:83:f1:1a:1f:1b:2f:2e:cd:f6:55:4c:7c:8d:33: e3:e7:fa:fa:54:60:a9:84:86:77:29:16:70:de:87: 6f:e6:d5:33:2e:08:e7:f4:03:f5:62:2c:58:72:ba: dc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3C:81:4F:99:3C:FD:80:45:E0:F6:E3:0C:69:5D:DD:73:85:63:72 X509v3 Authority Key Identifier: keyid:E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:53:11:05:24:a0:8f:2a:49:a2:8b:d7:08:9c:6a:a6:e1:d7: 38:db:e0:15:94:90:ab:70:97:b5:98:e5:88:81:50:8d:58:82: b6:4b:0e:3a:27:c7:79:57:e6:4a:34:f0:2a:51:62:9f:60:4a: 45:9f:0f:fc:40:8d:09:80:d2:c7:10:22:fe:34:15:30:c4:5b: d0:80:93:14:88:e7:5a:7a:50:4d:f5:e4:d4:de:c2:f8:93:33: 25:69:90:41:cc:1c:2c:ba:6b:a5:4d:7c:1c:2d:c7:57:f4:37: ff:0a:6f:49:50:9e:39:3c:49:8b:d5:09:89:85:29:49:d0:cd: 6e:92:61:06:a8:f3:14:82:c2:56:a7:1e:11:fb:52:0c:4a:c1: 35:16:b7:12:ab:80:59:53:2b:51:fa:6c:1e:aa:a5:41:f0:ed: 08:4a:a6:70:ef:0f:89:fc:90:ca:85:6e:48:b3:50:bc:37:b3: 50:a5:63:50:8f:e6:9d:53:aa:31:7a:fe:0b:34:7d:94:22:57: 2c:f7:0a:1f:22:fd:c4:76:b0:a5:7b:2b:a4:f5:9b:9b:39:87: 84:48:bb:65:90:6c:e5:94:a1:41:e5:8c:ae:42:bd:ab:ff:91: 2e:11:4f:bf:ab:a1:85:8d:01:a5:10:86:5b:78:c6:bf:5a:ac: 40:32:4a:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuu3b7IJxf/1xtD+Wn9jvvSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMmI3YjMwN2I4Yzk2ZTZjNzdiNWI4YTc4M2ZmNTVlMzc5 MDc2MzYwHhcNMjYwMTExMjEwMjA2WhcNMjYwMTEyMjEwMjA2WjAzMTEwLwYDVQQD EyhlYjNjODE0Zjk5M2NmZDgwNDVlMGY2ZTMwYzY5NWRkZDczODU2MzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdy+hT+7v6lCsdmRfJJCfdzKp0Dl rOFkoAo4hg8btnJemcBF0ysVjA7c0dGt/PZh7IFJErYUAn9uhXUn/3z3lGKIVlQ/ LajUI4aPFFDwzQTDqYynpFUmVDsw07Tf0liFrvpjOf4IqY0ibQcoU+ZHMjUcBels uUUDaTysGJSfDaH2x+nHtyQkhLfE5gso49fstLfBeokNp8aX1drdQB41NwEnmzLy Q+62S4lKKu9jUUDVqN7WBouByC+44hQEI21MYjZZd2NSbrdkYVOIoPkADO3ag/Ea HxsvLs32VUx8jTPj5/r6VGCphIZ3KRZw3odv5tUzLgjn9AP1YixYcrrclQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOs8gU+ZPP2AReD24wxpXd1zhWNyMB8GA1UdIwQY MBaAFOArezB7jJbmx3tbing/9V43kHY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEN0N01IdU1sdWJIZTF1S2VEXzFYamVRZGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9iNTE4OTAtMjJmMC00NmY3LTk0Zjkt MjIwZGRiZTJjMDlmLzEvNEN0N01IdU1sdWJIZTF1S2VEXzFYamVRZGpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9iNTE4OTAtMjJmMC00NmY3LTk0ZjktMjIwZGRiZTJjMDlm LzEvNEN0N01IdU1sdWJIZTF1S2VEXzFYamVRZGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlMRBSSg jypJoovXCJxqpuHXONvgFZSQq3CXtZjliIFQjViCtksOOifHeVfmSjTwKlFin2BK RZ8P/ECNCYDSxxAi/jQVMMRb0ICTFIjnWnpQTfXk1N7C+JMzJWmQQcwcLLprpU18 HC3HV/Q3/wpvSVCeOTxJi9UJiYUpSdDNbpJhBqjzFILCVqceEftSDErBNRa3EquA WVMrUfpsHqqlQfDtCEqmcO8PifyQyoVuSLNQvDezUKVjUI/mnVOqMXr+CzR9lCJX LPcKHyL9xHawpXsrpPWbmzmHhEi7ZZBs5ZShQeWMrkK9q/+RLhFPv6uhhY0BpRCG W3jGv1qsQDJKPg== -----END CERTIFICATE-----Generated at Sun Jan 11 23:04:46 2026 by rpki-client