This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft File: KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft (raw, json) Hash identifier: NI7WAubzbKqRHbCvn3/cJvx8TygnD5E+d3apFa+6m7o= Subject key identifier: 39:3B:87:82:4B:DE:63:20:1E:EE:E0:AA:0C:3B:37:6F:98:63:57:5D Authority key identifier: 2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24 Certificate issuer: /CN=2a9100a145dcb7b3795379bb0938fe89aa861924 Certificate serial: 019B7900A7BB31CB22532C97D8799FBA205E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft Manifest number: 14E4 Signing time: Thu 01 Jan 2026 10:00:44 +0000 Manifest this update: Thu 01 Jan 2026 10:00:44 +0000 Manifest next update: Fri 02 Jan 2026 10:00:44 +0000 Files and hashes: 1: KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl (hash: v8FQlfdC8w+FjfIxHp6FouypdQ1q/Z37GapZlAvNOmw=) 2: jVEebkEC2-oHzNPCTqPYuC9aoqE.roa (hash: J11dJEoO4oOPIGJkgBui1oSiw1WMmsHoIDwoMRNd+jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:00:a7:bb:31:cb:22:53:2c:97:d8:79:9f:ba:20:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a9100a145dcb7b3795379bb0938fe89aa861924 Validity Not Before: Jan 1 10:00:44 2026 GMT Not After : Jan 2 10:00:44 2026 GMT Subject: CN=393b87824bde63201eeee0aa0c3b376f9863575d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1b:03:61:8f:68:60:1f:2e:4c:c2:65:28:44: c0:62:27:68:28:21:ee:c7:a3:e2:45:0c:dd:d5:8d: 95:e5:5c:64:01:6c:89:74:3d:9f:ad:3c:0f:b3:97: 28:65:63:23:66:0b:23:bc:b0:e3:6a:5c:36:84:c0: 71:c3:e0:24:26:e8:91:13:d0:40:b2:78:a5:2d:69: 36:70:40:51:85:c3:f4:aa:6a:14:4d:17:60:cd:3d: 68:d2:2c:c0:45:4d:30:27:1c:04:ce:a4:f7:45:db: f1:48:1c:6c:f8:d7:00:50:66:bb:73:ae:fd:b0:a8: bf:21:26:b3:de:e9:e9:94:a5:05:2f:50:42:f7:29: a2:29:44:06:9e:82:ca:9a:c8:b4:fc:54:38:5e:34: 05:af:5d:a7:07:d1:20:3a:d9:ae:ad:de:57:3d:3b: e6:bc:5f:08:5d:49:ef:7f:26:de:d5:dd:03:9c:84: bd:4b:51:a7:66:9b:82:0e:0c:50:fd:84:f3:45:ca: 0f:f4:6b:b6:3a:2d:1a:d6:02:93:e6:fb:c9:a0:4d: 66:d1:a5:43:b7:e0:ff:3b:42:78:bd:23:b9:59:43: 78:17:e9:27:37:c2:14:97:89:66:ef:b8:fa:a6:e5: bd:cc:99:0f:d4:c5:f1:7b:a6:d0:97:54:77:a3:4d: 46:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:3B:87:82:4B:DE:63:20:1E:EE:E0:AA:0C:3B:37:6F:98:63:57:5D X509v3 Authority Key Identifier: keyid:2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:d7:a0:65:2f:13:cf:b3:60:b1:bc:cf:08:16:7a:0d:e0:29: 55:5f:d2:e3:33:e8:f9:cf:33:92:62:0c:cb:84:e1:15:98:5d: 94:d6:41:1d:f4:d1:62:bd:e2:c4:3c:86:bc:e0:4b:d6:60:b3: a6:a7:18:10:5f:38:75:ca:1b:de:5c:01:be:28:b3:c0:97:2f: 10:b0:fa:02:90:78:8f:0f:02:10:f2:e8:3c:cd:be:51:ec:c6: ed:b0:1d:a3:b1:ac:1d:77:8b:3c:94:f7:ba:67:bf:23:d6:09: 93:80:62:62:83:c2:98:a3:96:b5:2b:8e:93:18:be:5f:10:34: 43:67:07:31:67:b8:47:ac:95:82:f6:c1:fb:b2:05:a4:59:18: 0f:a2:8b:a8:b3:6f:23:41:5a:ab:46:de:84:7c:b0:54:08:8a: a1:4d:84:b8:c8:69:39:07:ab:f7:3b:5c:19:33:e8:21:b4:58: 73:c8:01:44:44:7a:64:64:6a:d0:ed:fd:25:a6:df:e8:f6:17: ab:76:3d:74:e9:12:37:b3:3b:88:f3:57:1d:0a:b0:61:74:6a: ce:0b:c8:f1:20:64:bf:73:83:e5:95:bc:79:9e:d3:e9:f3:12: f8:69:e2:f0:eb:73:54:20:14:72:81:66:a4:1c:1e:34:c8:97: fb:92:10:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5AKe7McsiUyyX2HmfuiBeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTEwMGExNDVkY2I3YjM3OTUzNzliYjA5MzhmZTg5YWE4 NjE5MjQwHhcNMjYwMTAxMTAwMDQ0WhcNMjYwMTAyMTAwMDQ0WjAzMTEwLwYDVQQD EygzOTNiODc4MjRiZGU2MzIwMWVlZWUwYWEwYzNiMzc2Zjk4NjM1NzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRsDYY9oYB8uTMJlKETAYidoKCHu x6PiRQzd1Y2V5VxkAWyJdD2frTwPs5coZWMjZgsjvLDjalw2hMBxw+AkJuiRE9BA snilLWk2cEBRhcP0qmoUTRdgzT1o0izARU0wJxwEzqT3RdvxSBxs+NcAUGa7c679 sKi/ISaz3unplKUFL1BC9ymiKUQGnoLKmsi0/FQ4XjQFr12nB9EgOtmurd5XPTvm vF8IXUnvfybe1d0DnIS9S1GnZpuCDgxQ/YTzRcoP9Gu2Oi0a1gKT5vvJoE1m0aVD t+D/O0J4vSO5WUN4F+knN8IUl4lm77j6puW9zJkP1MXxe6bQl1R3o01GXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDk7h4JL3mMgHu7gqgw7N2+YY1ddMB8GA1UdIwQY MBaAFCqRAKFF3LezeVN5uwk4/omqhhkkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3BFQW9VWGN0N041VTNtN0NUai1pYXFHR1NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hMzk4ZWItYzQyOS00ODM3LThlNzct NzkyNDZjODk0NTkxLzEvS3BFQW9VWGN0N041VTNtN0NUai1pYXFHR1NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hMzk4ZWItYzQyOS00ODM3LThlNzctNzkyNDZjODk0NTkx LzEvS3BFQW9VWGN0N041VTNtN0NUai1pYXFHR1NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9egZS8T z7NgsbzPCBZ6DeApVV/S4zPo+c8zkmIMy4ThFZhdlNZBHfTRYr3ixDyGvOBL1mCz pqcYEF84dcob3lwBviizwJcvELD6ApB4jw8CEPLoPM2+UezG7bAdo7GsHXeLPJT3 ume/I9YJk4BiYoPCmKOWtSuOkxi+XxA0Q2cHMWe4R6yVgvbB+7IFpFkYD6KLqLNv I0Faq0behHywVAiKoU2EuMhpOQer9ztcGTPoIbRYc8gBRER6ZGRq0O39Jabf6PYX q3Y9dOkSN7M7iPNXHQqwYXRqzgvI8SBkv3OD5ZW8eZ7T6fMS+Gni8OtzVCAUcoFm pBweNMiX+5IQKQ== -----END CERTIFICATE-----Generated at Thu Jan 1 14:11:43 2026 by rpki-client