This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft File: e6Ix0pxKI7PpixSBPawJg-OjQFk.mft (raw, json) Hash identifier: /fHD9H99URldSwVPkV4nkQaq4aev2418jLdVDAQTMpo= Subject key identifier: C2:5F:05:98:D1:7A:64:CA:91:23:DC:7A:40:24:0C:B7:5E:AE:DF:5C Authority key identifier: 7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59 Certificate issuer: /CN=7ba231d29c4a23b3e98b14813dac0983e3a34059 Certificate serial: 019BA18F038519EA544329A2228FD3B4291C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft Manifest number: 0794 Signing time: Fri 09 Jan 2026 07:01:02 +0000 Manifest this update: Fri 09 Jan 2026 07:01:02 +0000 Manifest next update: Sat 10 Jan 2026 07:01:02 +0000 Files and hashes: 1: e6Ix0pxKI7PpixSBPawJg-OjQFk.crl (hash: MYOX3/htS/EJQtreTQY4T4aRqRA2TfFR+qJUJ+nueao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 07:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:8f:03:85:19:ea:54:43:29:a2:22:8f:d3:b4:29:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ba231d29c4a23b3e98b14813dac0983e3a34059 Validity Not Before: Jan 9 07:01:02 2026 GMT Not After : Jan 10 07:01:02 2026 GMT Subject: CN=c25f0598d17a64ca9123dc7a40240cb75eaedf5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:06:86:39:52:59:fc:38:bd:16:71:63:24:40: 14:e3:02:db:1c:e7:23:4b:40:10:2e:1c:15:fe:c2: 5b:55:a7:13:57:64:c9:8c:36:9b:53:52:c1:27:87: cb:f1:a1:42:bd:a9:59:8f:f3:ed:b5:6c:16:16:cd: cc:4a:0a:29:1e:73:d1:3f:ad:4b:12:a8:c5:48:48: 6a:dc:a6:d4:5c:06:48:f3:96:b1:bf:13:b9:cb:30: 9b:a7:a2:0c:1f:bc:82:fb:11:d2:ff:32:03:ab:1d: 29:1e:aa:38:9e:8e:16:c6:51:09:f8:d7:cd:7c:3a: 5a:21:4e:93:f1:89:a3:46:e0:15:18:a1:1a:04:21: 99:30:22:b1:b8:a8:9b:03:42:cb:55:5d:82:4e:d2: ec:d4:8f:c8:6a:f5:d3:38:2b:60:33:94:aa:3c:1f: 2d:f6:d3:af:21:97:04:cc:5c:35:c9:97:66:6e:ec: 1c:1b:f6:b9:04:3b:8f:9f:0e:2a:01:94:28:2c:c3: 33:3e:3b:41:39:14:9d:99:1b:73:04:87:d9:52:d1: f9:7e:8f:1e:3c:b2:82:d0:9f:16:eb:6d:f8:70:9e: cc:74:7a:8c:19:86:25:6e:ed:0c:84:d0:71:c7:b2: 0c:b5:2c:2b:94:59:c4:f4:eb:54:40:36:ee:d2:c7: 98:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5F:05:98:D1:7A:64:CA:91:23:DC:7A:40:24:0C:B7:5E:AE:DF:5C X509v3 Authority Key Identifier: keyid:7B:A2:31:D2:9C:4A:23:B3:E9:8B:14:81:3D:AC:09:83:E3:A3:40:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6Ix0pxKI7PpixSBPawJg-OjQFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65b1ae-7d9f-4d70-9f8b-5124e9515b14/1/e6Ix0pxKI7PpixSBPawJg-OjQFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:64:81:28:9e:25:7e:18:5d:05:a5:07:5a:a8:15:84:4b:0f: 20:3c:14:dc:4c:bf:74:be:cc:b1:67:94:9f:28:f0:b4:06:de: 3a:e2:ad:6d:84:48:c8:4a:22:3a:07:63:39:87:97:47:56:dd: d7:d8:77:86:27:df:e3:33:af:11:cc:2f:cc:b3:4b:73:79:a0: 17:53:3e:2a:86:e8:b7:c4:5b:3f:4e:1c:ac:69:4c:58:c8:f9: 3a:c9:4f:3f:95:e1:6a:a4:9f:5e:df:b4:e7:cf:bf:fc:26:86: 17:db:aa:e7:7f:b8:0b:9a:d9:e1:cc:53:e1:94:ac:62:b8:dc: 06:a8:92:9e:1d:df:e3:6b:8a:ea:70:51:f6:c7:1b:9d:82:e6: db:99:db:b8:41:69:ea:b6:ba:0f:fb:8c:49:fe:14:45:57:46: 6e:29:8d:65:35:6a:d4:2c:e4:26:80:13:ac:61:bc:69:d3:b8: ea:dd:93:c1:f7:95:03:a4:1a:c7:d5:c5:b0:29:f7:9f:0f:70: 01:58:fe:9c:3a:fc:36:6b:7a:73:f7:48:53:18:d4:f7:d0:c6: 98:58:09:38:36:84:cf:94:bc:86:c3:67:95:db:52:f0:0d:1e: 7f:d5:70:f0:0e:25:59:fb:96:ca:2c:55:85:18:ad:84:1d:4e: e2:9d:fa:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuhjwOFGepUQymiIo/TtCkcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYTIzMWQyOWM0YTIzYjNlOThiMTQ4MTNkYWMwOTgzZTNh MzQwNTkwHhcNMjYwMTA5MDcwMTAyWhcNMjYwMTEwMDcwMTAyWjAzMTEwLwYDVQQD EyhjMjVmMDU5OGQxN2E2NGNhOTEyM2RjN2E0MDI0MGNiNzVlYWVkZjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AaGOVJZ/Di9FnFjJEAU4wLbHOcj S0AQLhwV/sJbVacTV2TJjDabU1LBJ4fL8aFCvalZj/PttWwWFs3MSgopHnPRP61L EqjFSEhq3KbUXAZI85axvxO5yzCbp6IMH7yC+xHS/zIDqx0pHqo4no4WxlEJ+NfN fDpaIU6T8YmjRuAVGKEaBCGZMCKxuKibA0LLVV2CTtLs1I/IavXTOCtgM5SqPB8t 9tOvIZcEzFw1yZdmbuwcG/a5BDuPnw4qAZQoLMMzPjtBORSdmRtzBIfZUtH5fo8e PLKC0J8W6234cJ7MdHqMGYYlbu0MhNBxx7IMtSwrlFnE9OtUQDbu0seYwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJfBZjRemTKkSPcekAkDLdert9cMB8GA1UdIwQY MBaAFHuiMdKcSiOz6YsUgT2sCYPjo0BZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTZJeDBweEtJN1BwaXhTQlBhd0pnLU9qUUZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82NWIxYWUtN2Q5Zi00ZDcwLTlmOGIt NTEyNGU5NTE1YjE0LzEvZTZJeDBweEtJN1BwaXhTQlBhd0pnLU9qUUZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82NWIxYWUtN2Q5Zi00ZDcwLTlmOGItNTEyNGU5NTE1YjE0 LzEvZTZJeDBweEtJN1BwaXhTQlBhd0pnLU9qUUZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2SBKJ4l fhhdBaUHWqgVhEsPIDwU3Ey/dL7MsWeUnyjwtAbeOuKtbYRIyEoiOgdjOYeXR1bd 19h3hiff4zOvEcwvzLNLc3mgF1M+Kobot8RbP04crGlMWMj5OslPP5XhaqSfXt+0 58+//CaGF9uq53+4C5rZ4cxT4ZSsYrjcBqiSnh3f42uK6nBR9scbnYLm25nbuEFp 6ra6D/uMSf4URVdGbimNZTVq1CzkJoATrGG8adO46t2TwfeVA6Qax9XFsCn3nw9w AVj+nDr8Nmt6c/dIUxjU99DGmFgJODaEz5S8hsNnldtS8A0ef9Vw8A4lWfuWyixV hRithB1O4p364g== -----END CERTIFICATE-----Generated at Fri Jan 9 15:59:42 2026 by rpki-client