This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft File: EfLjWzxVm22ENmfK1drGdOAblsM.mft (raw, json) Hash identifier: a9z0f8Ale75qonYs9rgFTC7Cifi/c1uhNF1wZoJndbg= Subject key identifier: DC:D9:C8:67:CF:E4:48:DB:D4:F2:02:39:80:73:3A:95:66:F9:C9:F3 Authority key identifier: 11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3 Certificate issuer: /CN=11f2e35b3c559b6d843667cad5dac674e01b96c3 Certificate serial: 019B796E742F7C1EE57A0A83C4F226F02051 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft Manifest number: 0F9C Signing time: Thu 01 Jan 2026 12:00:40 +0000 Manifest this update: Thu 01 Jan 2026 12:00:40 +0000 Manifest next update: Fri 02 Jan 2026 12:00:40 +0000 Files and hashes: 1: A-AGhnJX9Bou2rtGJEVxpp70P0k.roa (hash: 8oKZWa78oAwwYr/+i37u8p1ocYsZreiBnXNl6eWkZHg=) 2: EfLjWzxVm22ENmfK1drGdOAblsM.crl (hash: 4vRCDPac99g2NsbexKMvauScDiRxIDdqlry5iaPZDC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 12:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:6e:74:2f:7c:1e:e5:7a:0a:83:c4:f2:26:f0:20:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11f2e35b3c559b6d843667cad5dac674e01b96c3 Validity Not Before: Jan 1 12:00:40 2026 GMT Not After : Jan 2 12:00:40 2026 GMT Subject: CN=dcd9c867cfe448dbd4f2023980733a9566f9c9f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e3:e4:f7:ab:f0:de:ba:be:b8:62:ad:62:02: ab:63:31:19:20:6b:a9:5e:52:8b:35:dd:c9:15:ac: b9:fb:6d:55:6b:6a:70:de:f8:44:6c:ae:21:d3:0d: af:7a:08:88:26:63:a9:a9:1a:35:7c:f9:19:4e:e6: c0:0f:55:4e:91:cb:b2:b7:b5:09:44:fc:89:96:b7: de:af:c4:6e:63:71:9c:58:e1:9e:ac:17:ed:d9:0d: c0:43:d2:bd:1e:da:ba:82:f4:03:59:67:df:27:cf: 83:a2:30:3e:45:f6:ef:20:42:02:09:7b:c2:52:5a: 5f:ec:df:39:90:f0:3b:b7:f9:e8:a3:a5:70:1f:8a: ba:e3:00:f2:21:79:08:1c:fd:d2:d2:2a:9a:00:6c: 03:13:da:0a:52:b6:2d:ba:b6:c4:29:4b:e4:8a:94: 5a:9c:fa:90:62:7a:c0:52:a6:ba:78:9b:bd:60:eb: b9:7d:20:d8:5e:ed:6f:cb:ad:00:a1:9d:4e:06:46: a3:7e:3c:b6:f8:f6:cf:9b:5f:2f:e5:3a:72:db:f0: d9:b7:47:ee:91:a0:2c:07:2b:cc:19:c2:54:ef:e4: 0a:34:27:38:68:50:9f:7e:2f:91:88:87:96:43:23: bd:f8:55:e4:68:5a:dc:52:7a:ba:9f:e4:04:af:90: 04:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D9:C8:67:CF:E4:48:DB:D4:F2:02:39:80:73:3A:95:66:F9:C9:F3 X509v3 Authority Key Identifier: keyid:11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:5a:f7:c7:0d:c1:0d:69:ea:92:95:76:90:64:06:48:86:c9: b4:d4:15:25:c0:e8:2b:47:36:d4:5f:4f:ae:6e:b4:d9:14:df: 01:41:77:15:c3:75:f6:d6:ee:87:fd:ed:12:1c:a4:18:27:ac: ff:a9:21:29:c1:37:4a:3b:d9:35:10:26:88:d6:eb:eb:bc:ca: 5d:12:94:9d:3d:a6:6a:cd:6b:a0:90:07:99:17:24:d1:ee:b6: bb:1e:28:52:45:7b:f3:53:09:cf:c6:9d:f8:93:9a:f1:8a:76: 52:7e:73:06:47:09:c4:f0:e9:df:af:f9:d6:fa:be:17:f7:02: 61:e5:af:11:a8:0c:bd:53:e8:9d:a5:9b:7a:0d:45:ec:7f:b6: 48:79:1f:5b:fa:eb:60:6f:18:b2:1c:dc:bb:ad:c7:6f:65:95: 9d:ed:e5:f8:fb:3c:d2:10:41:98:07:80:91:1b:18:e7:37:d1: 21:47:99:12:7a:d2:1a:47:95:ea:cc:a2:93:87:cd:65:3c:b1: 57:f4:66:f2:51:a9:04:a9:7e:2c:1f:7a:50:41:d1:c8:16:1a: 53:df:ba:9a:e1:cc:ac:52:ee:bb:82:32:d4:87:f1:3e:60:fe: 3e:3b:52:52:18:76:08:7a:de:68:e8:cd:f7:9b:f6:2c:5f:0c: 1d:84:e7:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5bnQvfB7legqDxPIm8CBRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZjJlMzViM2M1NTliNmQ4NDM2NjdjYWQ1ZGFjNjc0ZTAx Yjk2YzMwHhcNMjYwMTAxMTIwMDQwWhcNMjYwMTAyMTIwMDQwWjAzMTEwLwYDVQQD EyhkY2Q5Yzg2N2NmZTQ0OGRiZDRmMjAyMzk4MDczM2E5NTY2ZjljOWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruPk96vw3rq+uGKtYgKrYzEZIGup XlKLNd3JFay5+21Va2pw3vhEbK4h0w2vegiIJmOpqRo1fPkZTubAD1VOkcuyt7UJ RPyJlrfer8RuY3GcWOGerBft2Q3AQ9K9Htq6gvQDWWffJ8+DojA+RfbvIEICCXvC Ulpf7N85kPA7t/noo6VwH4q64wDyIXkIHP3S0iqaAGwDE9oKUrYturbEKUvkipRa nPqQYnrAUqa6eJu9YOu5fSDYXu1vy60AoZ1OBkajfjy2+PbPm18v5Tpy2/DZt0fu kaAsByvMGcJU7+QKNCc4aFCffi+RiIeWQyO9+FXkaFrcUnq6n+QEr5AEdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzZyGfP5Ejb1PICOYBzOpVm+cnzMB8GA1UdIwQY MBaAFBHy41s8VZtthDZnytXaxnTgG5bDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWZMald6eFZtMjJFTm1mSzFkckdkT0FibHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi85OWQ2OGUtMjdjMy00YjJkLTk1ZjUt MjUwYTllNjcwOGQwLzEvRWZMald6eFZtMjJFTm1mSzFkckdkT0FibHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi85OWQ2OGUtMjdjMy00YjJkLTk1ZjUtMjUwYTllNjcwOGQw LzEvRWZMald6eFZtMjJFTm1mSzFkckdkT0FibHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1r3xw3B DWnqkpV2kGQGSIbJtNQVJcDoK0c21F9Prm602RTfAUF3FcN19tbuh/3tEhykGCes /6khKcE3SjvZNRAmiNbr67zKXRKUnT2mas1roJAHmRck0e62ux4oUkV781MJz8ad +JOa8Yp2Un5zBkcJxPDp36/51vq+F/cCYeWvEagMvVPonaWbeg1F7H+2SHkfW/rr YG8Yshzcu63Hb2WVne3l+Ps80hBBmAeAkRsY5zfRIUeZEnrSGkeV6syik4fNZTyx V/Rm8lGpBKl+LB96UEHRyBYaU9+6muHMrFLuu4Iy1IfxPmD+PjtSUhh2CHreaOjN 95v2LF8MHYTn5g== -----END CERTIFICATE-----Generated at Thu Jan 1 19:47:30 2026 by rpki-client