This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft File: F3XdxSn1elmets19uiuSstN190o.mft (raw, json) Hash identifier: cP+4PJrI28PZGQVkzQwoaSvT5fzAM99QzS7yHEpa/zM= Subject key identifier: AC:F6:96:29:D3:CD:F8:AF:05:5F:3B:B8:DF:10:C2:F8:60:11:DA:45 Authority key identifier: 17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A Certificate issuer: /CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a Certificate serial: 019B785CEE250FB5B34B30E896FAFC82E3D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft Manifest number: 09DC Signing time: Thu 01 Jan 2026 07:01:54 +0000 Manifest this update: Thu 01 Jan 2026 07:01:54 +0000 Manifest next update: Fri 02 Jan 2026 07:01:54 +0000 Files and hashes: 1: F3XdxSn1elmets19uiuSstN190o.crl (hash: e+HiBFZX6H00WwV2wEsbHabUmOJ1IEA5OLiQMqLC6Ok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 07:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:5c:ee:25:0f:b5:b3:4b:30:e8:96:fa:fc:82:e3:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a Validity Not Before: Jan 1 07:01:54 2026 GMT Not After : Jan 2 07:01:54 2026 GMT Subject: CN=acf69629d3cdf8af055f3bb8df10c2f86011da45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a2:3a:10:1c:4a:2b:dc:9c:2b:e8:d2:be:d4: c1:c3:f5:c9:3c:03:8b:e3:91:7a:67:cb:0e:00:a2: 93:d1:5f:8b:0a:1d:c4:04:a0:2c:df:22:b5:18:5f: 44:0d:a7:6d:90:e9:ae:14:76:20:28:35:94:20:a0: 23:4d:80:32:3e:41:90:21:99:88:2d:56:d2:20:d8: c7:68:59:99:30:23:bd:e1:4a:3f:64:7a:72:72:37: b5:82:d8:84:57:7c:77:57:f9:05:61:d4:f2:cc:29: 02:11:7f:70:d2:de:66:5f:02:67:d9:3d:ba:4d:2c: d1:34:65:1c:c4:9e:3e:81:66:1f:73:b2:85:54:71: d4:ea:b3:0a:2b:ea:00:a6:ea:2e:b5:07:41:5a:f5: 67:c6:72:c6:1d:1c:21:3f:a9:54:8f:f2:3a:97:45: 5d:d0:0e:cc:0e:ca:05:1a:6d:a6:48:f4:69:5a:6f: c4:35:ee:16:8e:ee:a2:27:9e:47:93:d3:48:06:bd: aa:3d:aa:23:fa:4d:87:51:79:08:f6:a3:c5:35:c1: 5c:cc:8c:cb:39:8b:dd:f6:15:d4:8d:8c:2c:65:11: 12:cc:5e:94:c8:75:32:3c:80:6c:77:1e:12:fb:6d: eb:aa:fc:b9:87:7e:43:3f:47:18:79:aa:c2:00:10: 94:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F6:96:29:D3:CD:F8:AF:05:5F:3B:B8:DF:10:C2:F8:60:11:DA:45 X509v3 Authority Key Identifier: keyid:17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:f0:09:5f:87:66:31:55:05:9f:56:a6:b4:22:77:f8:17:19: f5:ab:c7:b5:9f:08:74:ee:ec:7f:99:25:71:0d:7c:65:2e:f4: f3:ac:c7:75:31:c3:30:92:ae:30:19:ca:4a:4a:3f:ae:42:fb: 7c:a9:f0:af:83:1d:fc:da:58:94:c0:f4:ee:07:7e:69:4b:f2: b7:6d:96:58:6c:9b:be:bb:b4:bc:ba:c4:4a:4a:2a:5c:1d:07: e0:a8:ca:8e:84:1a:9b:f9:7b:de:b1:34:2a:54:81:c0:c9:bf: 12:dd:cb:89:97:fe:a1:6d:81:87:42:ef:ff:75:64:8c:1b:c0: d0:59:4c:aa:8c:92:54:b8:8f:09:23:cd:a7:4b:09:d7:d8:91: be:f4:52:1e:35:95:68:9a:6f:5a:47:26:04:69:3d:ca:5d:d1: ea:c2:c2:b7:6e:98:4e:20:16:da:80:6e:a0:b0:45:62:6b:ff: 3c:91:ab:c8:18:d7:13:68:c1:25:c4:d1:62:28:1d:2d:6a:fa: 4b:de:ca:5e:be:f0:6d:6a:71:c2:5b:e1:3e:bd:29:57:61:8b: ec:87:dd:71:9d:2b:f4:45:09:0e:73:0e:d9:3d:a3:c5:07:8e: 13:21:c7:34:2f:bb:23:e0:db:79:f6:cc:3d:56:70:70:49:aa: ee:8c:b5:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4XO4lD7WzSzDolvr8guPZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzVkZGM1MjlmNTdhNTk5ZWI2Y2Q3ZGJhMmI5MmIyZDM3 NWY3NGEwHhcNMjYwMTAxMDcwMTU0WhcNMjYwMTAyMDcwMTU0WjAzMTEwLwYDVQQD EyhhY2Y2OTYyOWQzY2RmOGFmMDU1ZjNiYjhkZjEwYzJmODYwMTFkYTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6I6EBxKK9ycK+jSvtTBw/XJPAOL 45F6Z8sOAKKT0V+LCh3EBKAs3yK1GF9EDadtkOmuFHYgKDWUIKAjTYAyPkGQIZmI LVbSINjHaFmZMCO94Uo/ZHpycje1gtiEV3x3V/kFYdTyzCkCEX9w0t5mXwJn2T26 TSzRNGUcxJ4+gWYfc7KFVHHU6rMKK+oApuoutQdBWvVnxnLGHRwhP6lUj/I6l0Vd 0A7MDsoFGm2mSPRpWm/ENe4Wju6iJ55Hk9NIBr2qPaoj+k2HUXkI9qPFNcFczIzL OYvd9hXUjYwsZRESzF6UyHUyPIBsdx4S+23rqvy5h35DP0cYearCABCUAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKz2linTzfivBV87uN8QwvhgEdpFMB8GA1UdIwQY MBaAFBd13cUp9XpZnrbNfborkrLTdfdKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNYZHhTbjFlbG1ldHMxOXVpdVNzdE4xOTBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lNzk0YjMtOGEyZS00Yjc2LThmMGQt MjlhMzM5MDJhNzZmLzEvRjNYZHhTbjFlbG1ldHMxOXVpdVNzdE4xOTBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9lNzk0YjMtOGEyZS00Yjc2LThmMGQtMjlhMzM5MDJhNzZm LzEvRjNYZHhTbjFlbG1ldHMxOXVpdVNzdE4xOTBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx/AJX4dm MVUFn1amtCJ3+BcZ9avHtZ8IdO7sf5klcQ18ZS7086zHdTHDMJKuMBnKSko/rkL7 fKnwr4Md/NpYlMD07gd+aUvyt22WWGybvru0vLrESkoqXB0H4KjKjoQam/l73rE0 KlSBwMm/Et3LiZf+oW2Bh0Lv/3VkjBvA0FlMqoySVLiPCSPNp0sJ19iRvvRSHjWV aJpvWkcmBGk9yl3R6sLCt26YTiAW2oBuoLBFYmv/PJGryBjXE2jBJcTRYigdLWr6 S97KXr7wbWpxwlvhPr0pV2GL7IfdcZ0r9EUJDnMO2T2jxQeOEyHHNC+7I+DbefbM PVZwcEmq7oy1Cg== -----END CERTIFICATE-----Generated at Thu Jan 1 10:58:09 2026 by rpki-client