This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft File: UEReUkREIxk_SV-8xFd05Mjke9s.mft (raw, json) Hash identifier: IorKhdhKGQhEP/fOTCAHi/V+BQqTFcS1fWgrsqf8W1o= Subject key identifier: B6:6F:8F:E2:1B:5F:B4:5C:01:67:66:C9:EC:C5:79:12:69:6A:52:20 Authority key identifier: 50:44:5E:52:44:44:23:19:3F:49:5F:BC:C4:57:74:E4:C8:E4:7B:DB Certificate issuer: /CN=50445e52444423193f495fbcc45774e4c8e47bdb Certificate serial: 019BA34737553493A6D70196A29EAE2A425E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft Manifest number: 0F4E Signing time: Fri 09 Jan 2026 15:01:51 +0000 Manifest this update: Fri 09 Jan 2026 15:01:51 +0000 Manifest next update: Sat 10 Jan 2026 15:01:51 +0000 Files and hashes: 1: UEReUkREIxk_SV-8xFd05Mjke9s.crl (hash: +DNw1FJ0KkG4afDjPEVcvt0DyTSn/SJA1IG9/FHMfoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 14:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:47:37:55:34:93:a6:d7:01:96:a2:9e:ae:2a:42:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50445e52444423193f495fbcc45774e4c8e47bdb Validity Not Before: Jan 9 15:01:51 2026 GMT Not After : Jan 10 15:01:51 2026 GMT Subject: CN=b66f8fe21b5fb45c016766c9ecc57912696a5220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:79:1d:84:b6:b0:f1:12:2f:72:83:fb:f0:64: fd:0c:41:eb:0f:8f:17:2f:be:70:2e:98:e3:f2:76: d8:7e:dc:1a:c7:5d:c2:7b:c6:3c:9d:18:38:17:0d: f9:9f:58:1f:dc:06:4d:84:a7:bd:43:4d:4c:e0:91: 4f:eb:01:54:65:dc:8e:ba:41:e5:46:0f:c6:76:8a: 66:ed:54:68:f8:a3:5d:2d:b8:af:b0:01:84:78:ad: 4b:e9:f1:8c:c3:7a:07:64:88:88:35:ce:17:d3:fb: 18:c6:3a:a7:c3:9f:18:d2:41:bc:ec:f5:ca:0b:57: 6d:8d:6c:d6:ba:47:e6:82:9e:7f:e5:f8:0b:e7:01: b0:12:ba:92:c8:0c:1e:4c:1e:fd:69:f2:8d:7c:36: a9:04:6f:db:2d:d4:17:24:04:c0:ef:b3:54:81:6d: 5e:6d:5f:45:d6:b5:b1:c9:52:21:83:0e:b6:b4:8b: 6f:30:8d:c0:b1:07:93:ff:ae:09:37:ae:0e:55:18: c4:42:ed:28:c3:8d:b6:c1:4a:46:25:25:b1:c8:86: e8:d1:50:44:37:7a:92:23:49:ed:f3:6f:ab:35:5f: e2:27:78:b6:4c:c8:81:ab:94:f1:f8:8b:9d:dd:07: 2f:ba:b8:93:c5:de:da:35:dd:de:d0:a5:10:a2:20: 8b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6F:8F:E2:1B:5F:B4:5C:01:67:66:C9:EC:C5:79:12:69:6A:52:20 X509v3 Authority Key Identifier: keyid:50:44:5E:52:44:44:23:19:3F:49:5F:BC:C4:57:74:E4:C8:E4:7B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEReUkREIxk_SV-8xFd05Mjke9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7d0304-5f49-4a41-b8f1-f8399c08e39b/1/UEReUkREIxk_SV-8xFd05Mjke9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:bb:43:a4:6c:9d:99:fc:b6:80:25:c2:23:35:3c:89:dd:20: a4:84:aa:ce:eb:36:d6:1b:c9:14:bf:71:1c:08:22:c7:59:dc: 81:8c:6a:23:b9:db:8d:7f:5d:b4:e2:92:00:e5:fb:9d:de:c1: ca:1b:f9:bf:6c:0b:47:7c:5b:fc:5c:30:f8:6c:02:07:6c:1c: 43:ba:8c:ca:95:19:6d:75:5b:52:35:bd:b2:7f:7f:a0:cb:d6: d2:a5:26:e0:d5:ef:53:0b:2b:ac:bf:c0:47:82:9a:9f:45:69: 07:73:a2:5e:12:66:23:ab:d5:ee:ea:22:ac:6b:50:99:eb:bb: 81:ff:f0:ee:ab:bf:65:74:28:98:e0:b1:9b:0b:2d:51:e3:40: 78:05:99:2a:5f:e1:b6:22:68:45:2a:8e:ed:f1:1f:a4:19:ae: 78:84:8c:a2:c1:30:63:64:b3:5c:a0:c1:a0:0b:c0:b1:12:21: 0f:56:d9:81:1f:94:93:66:b4:88:a0:f6:38:32:58:47:26:e9: 7d:f3:98:87:55:dd:9d:e3:50:59:2b:99:1a:9f:d7:46:bb:7c: 37:79:ad:ec:21:b0:41:4e:1f:a3:94:90:85:61:c8:7b:1c:88: f1:99:04:e0:74:bf:2c:70:b4:4b:1c:f8:b5:2c:56:08:82:e7: 0d:9d:e2:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZujRzdVNJOm1wGWop6uKkJeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNDQ1ZTUyNDQ0NDIzMTkzZjQ5NWZiY2M0NTc3NGU0Yzhl NDdiZGIwHhcNMjYwMTA5MTUwMTUxWhcNMjYwMTEwMTUwMTUxWjAzMTEwLwYDVQQD EyhiNjZmOGZlMjFiNWZiNDVjMDE2NzY2YzllY2M1NzkxMjY5NmE1MjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXkdhLaw8RIvcoP78GT9DEHrD48X L75wLpjj8nbYftwax13Ce8Y8nRg4Fw35n1gf3AZNhKe9Q01M4JFP6wFUZdyOukHl Rg/Gdopm7VRo+KNdLbivsAGEeK1L6fGMw3oHZIiINc4X0/sYxjqnw58Y0kG87PXK C1dtjWzWukfmgp5/5fgL5wGwErqSyAweTB79afKNfDapBG/bLdQXJATA77NUgW1e bV9F1rWxyVIhgw62tItvMI3AsQeT/64JN64OVRjEQu0ow422wUpGJSWxyIbo0VBE N3qSI0nt82+rNV/iJ3i2TMiBq5Tx+Iud3QcvuriTxd7aNd3e0KUQoiCLUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZvj+IbX7RcAWdmyezFeRJpalIgMB8GA1UdIwQY MBaAFFBEXlJERCMZP0lfvMRXdOTI5HvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUVSZVVrUkVJeGtfU1YtOHhGZDA1TWprZTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83ZDAzMDQtNWY0OS00YTQxLWI4ZjEt ZjgzOTljMDhlMzliLzEvVUVSZVVrUkVJeGtfU1YtOHhGZDA1TWprZTlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS83ZDAzMDQtNWY0OS00YTQxLWI4ZjEtZjgzOTljMDhlMzli LzEvVUVSZVVrUkVJeGtfU1YtOHhGZDA1TWprZTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbtDpGyd mfy2gCXCIzU8id0gpISqzus21hvJFL9xHAgix1ncgYxqI7nbjX9dtOKSAOX7nd7B yhv5v2wLR3xb/Fww+GwCB2wcQ7qMypUZbXVbUjW9sn9/oMvW0qUm4NXvUwsrrL/A R4Kan0VpB3OiXhJmI6vV7uoirGtQmeu7gf/w7qu/ZXQomOCxmwstUeNAeAWZKl/h tiJoRSqO7fEfpBmueISMosEwY2SzXKDBoAvAsRIhD1bZgR+Uk2a0iKD2ODJYRybp ffOYh1XdneNQWSuZGp/XRrt8N3mt7CGwQU4fo5SQhWHIexyI8ZkE4HS/LHC0Sxz4 tSxWCILnDZ3ixA== -----END CERTIFICATE-----Generated at Fri Jan 9 23:48:13 2026 by rpki-client