This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft File: IEmVw2J_eqzf4jkV5ELj05AGMa8.mft (raw, json) Hash identifier: 7nUu/NHjVjjO7pLwasfnzHnHncMXHBrzeKGy2vDz4Eg= Subject key identifier: 94:4B:6A:50:C6:E6:1A:4C:CA:2A:C1:2D:CC:91:2A:6E:49:BC:AE:98 Authority key identifier: 20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF Certificate issuer: /CN=204995c3627f7aacdfe23915e442e3d3900631af Certificate serial: 019B793770198746DA0029303A102BA06D23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft Manifest number: 0855 Signing time: Thu 01 Jan 2026 11:00:34 +0000 Manifest this update: Thu 01 Jan 2026 11:00:34 +0000 Manifest next update: Fri 02 Jan 2026 11:00:34 +0000 Files and hashes: 1: 9-7PXLkycA5xYo3u8CzH5ezxMXA.roa (hash: LxSeuXbVik2u1NmfM2g79qr+/r9wrH4InvPIstg23Fs=) 2: IEmVw2J_eqzf4jkV5ELj05AGMa8.crl (hash: dFv0GbN8GL4EdtDnZXXowI19CJvLCK5r1yMvd9GXNwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:37:70:19:87:46:da:00:29:30:3a:10:2b:a0:6d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=204995c3627f7aacdfe23915e442e3d3900631af Validity Not Before: Jan 1 11:00:34 2026 GMT Not After : Jan 2 11:00:34 2026 GMT Subject: CN=944b6a50c6e61a4cca2ac12dcc912a6e49bcae98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:61:f5:78:53:37:45:88:0b:04:95:3f:06:20: 06:56:c4:67:04:3e:a0:77:cb:78:5a:10:4d:31:6e: 53:0f:5f:0f:10:17:ed:8d:0e:2c:85:ce:fb:62:61: d6:1a:52:80:e0:f5:56:51:d6:ae:ff:ab:29:20:55: 1f:b2:c5:ae:60:bf:40:d0:58:f3:47:ed:2d:ca:87: 47:89:60:bf:2b:01:12:93:ce:37:75:61:57:1d:de: 6d:8e:f5:81:39:21:9e:27:54:d2:29:ac:35:75:c0: 74:e2:f0:fa:ea:84:67:35:ce:2a:65:32:e5:54:1c: 9d:9a:47:d5:11:11:3a:d4:d2:4f:18:06:12:c5:56: 03:8e:ee:8a:26:0e:94:fb:25:f5:02:d6:a3:8a:8f: b3:37:f3:00:7d:e6:6f:07:52:98:08:1c:af:1b:a3: 49:51:e2:e6:ee:23:b6:dc:a2:3f:02:b4:d7:0d:5a: 39:01:54:a4:5a:67:31:df:58:ba:98:d6:0c:57:2f: 71:59:33:26:22:13:b0:5d:63:4f:d8:06:9b:8e:b7: 81:b2:b0:27:af:f9:d6:37:27:74:1d:3b:ab:30:4c: dd:96:3f:df:d5:e5:a8:74:33:02:6a:5a:ae:65:ef: 60:fc:bd:0b:7a:a2:e5:72:9c:1f:7e:eb:2d:bc:f4: 26:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4B:6A:50:C6:E6:1A:4C:CA:2A:C1:2D:CC:91:2A:6E:49:BC:AE:98 X509v3 Authority Key Identifier: keyid:20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:0f:94:0c:ac:f6:e9:22:b8:e0:cc:a2:3d:9c:ca:d0:0e:55: 1a:2d:34:c1:da:59:e7:81:0d:a5:63:52:d2:04:9a:86:ab:7a: f7:d0:6d:ba:42:04:49:74:66:93:d1:9a:9e:a7:ee:61:d7:e3: b9:5a:fd:7a:0a:dc:a4:aa:36:f8:9c:b5:63:68:4d:0a:8f:e0: 9f:4f:55:a0:3c:f9:ad:e5:31:26:7c:07:47:1e:99:ea:1c:4d: 40:24:23:99:f0:63:09:05:f9:a3:4f:6f:ac:a8:81:5f:64:f7: 11:8b:72:8f:6c:fc:c6:e5:32:ca:38:e9:74:e1:12:39:b4:6d: 86:28:ad:bd:d4:70:15:f1:fd:fd:19:2e:ed:89:3f:6f:cb:09: 77:7f:7a:1f:8e:25:86:a2:16:dd:40:20:5d:47:b5:04:1a:1b: b5:29:2d:12:14:9d:74:24:86:be:f1:6f:93:3b:61:fc:8e:19: 2d:45:b8:fa:cf:91:f7:50:79:db:f8:b1:d8:0c:34:3d:78:9c: 39:dc:87:58:09:38:06:b5:a5:7b:89:58:78:02:56:f9:44:2d: 4d:43:ad:f1:bf:1e:b3:4b:1d:41:7b:e8:c2:87:64:60:03:b9: 1b:8f:bf:ae:13:6d:ee:de:1d:d4:2d:7a:d0:04:54:09:a1:5b: 6c:50:54:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5N3AZh0baACkwOhAroG0jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNDk5NWMzNjI3ZjdhYWNkZmUyMzkxNWU0NDJlM2QzOTAw NjMxYWYwHhcNMjYwMTAxMTEwMDM0WhcNMjYwMTAyMTEwMDM0WjAzMTEwLwYDVQQD Eyg5NDRiNmE1MGM2ZTYxYTRjY2EyYWMxMmRjYzkxMmE2ZTQ5YmNhZTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGH1eFM3RYgLBJU/BiAGVsRnBD6g d8t4WhBNMW5TD18PEBftjQ4shc77YmHWGlKA4PVWUdau/6spIFUfssWuYL9A0Fjz R+0tyodHiWC/KwESk843dWFXHd5tjvWBOSGeJ1TSKaw1dcB04vD66oRnNc4qZTLl VBydmkfVERE61NJPGAYSxVYDju6KJg6U+yX1Atajio+zN/MAfeZvB1KYCByvG6NJ UeLm7iO23KI/ArTXDVo5AVSkWmcx31i6mNYMVy9xWTMmIhOwXWNP2AabjreBsrAn r/nWNyd0HTurMEzdlj/f1eWodDMCalquZe9g/L0LeqLlcpwffustvPQmLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRLalDG5hpMyirBLcyRKm5JvK6YMB8GA1UdIwQY MBaAFCBJlcNif3qs3+I5FeRC49OQBjGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUVtVncySl9lcXpmNGprVjVFTGowNUFHTWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lYWMyYWYtNGJkMy00MzkyLWI1ZjQt NDg0NTlkMDdiNDFlLzEvSUVtVncySl9lcXpmNGprVjVFTGowNUFHTWE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9lYWMyYWYtNGJkMy00MzkyLWI1ZjQtNDg0NTlkMDdiNDFl LzEvSUVtVncySl9lcXpmNGprVjVFTGowNUFHTWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKA+UDKz2 6SK44MyiPZzK0A5VGi00wdpZ54ENpWNS0gSahqt699BtukIESXRmk9GanqfuYdfj uVr9egrcpKo2+Jy1Y2hNCo/gn09VoDz5reUxJnwHRx6Z6hxNQCQjmfBjCQX5o09v rKiBX2T3EYtyj2z8xuUyyjjpdOESObRthiitvdRwFfH9/Rku7Yk/b8sJd396H44l hqIW3UAgXUe1BBobtSktEhSddCSGvvFvkzth/I4ZLUW4+s+R91B52/ix2Aw0PXic OdyHWAk4BrWle4lYeAJW+UQtTUOt8b8es0sdQXvowodkYAO5G4+/rhNt7t4d1C16 0ARUCaFbbFBUwQ== -----END CERTIFICATE-----Generated at Thu Jan 1 18:01:46 2026 by rpki-client