This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft File: ES1lq7x-8AUScohER5KrhvsVwu4.mft (raw, json) Hash identifier: 3Klm/1n4kowGURcmS2snWJCrwGWohrraYJtAep/SxZ8= Subject key identifier: 1D:E3:80:20:80:1E:7C:22:E5:D1:15:72:33:21:08:D2:B5:59:CA:E8 Authority key identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE Certificate issuer: /CN=112d65abbc7ef005127288444792ab86fb15c2ee Certificate serial: 019B7E94D5CC821E7F826D8A288DBB195BBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft Manifest number: 092D Signing time: Fri 02 Jan 2026 12:00:41 +0000 Manifest this update: Fri 02 Jan 2026 12:00:41 +0000 Manifest next update: Sat 03 Jan 2026 12:00:41 +0000 Files and hashes: 1: ES1lq7x-8AUScohER5KrhvsVwu4.crl (hash: XH96dJjbEZjrz/ePE7LCsvvY9+orzry8DFPC/1yq45I=) 2: NyqJ3HcC-3DqTRjPEZHaf1vVpmk.roa (hash: kzMbI7FhKbCR9OfECdQk1NAYRQo9Ic9dt4s+QetZXtQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:94:d5:cc:82:1e:7f:82:6d:8a:28:8d:bb:19:5b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=112d65abbc7ef005127288444792ab86fb15c2ee Validity Not Before: Jan 2 12:00:41 2026 GMT Not After : Jan 3 12:00:41 2026 GMT Subject: CN=1de38020801e7c22e5d11572332108d2b559cae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:aa:64:db:06:34:c8:15:d6:8b:39:85:11:73: 83:86:70:ba:11:8e:4b:c6:5b:c4:16:0f:68:21:d2: ec:c6:8d:de:8e:2f:ba:cc:dd:1f:4d:55:a2:e9:1d: ea:b1:96:a2:a1:6d:e0:26:4a:2d:06:86:8a:f6:b2: 22:7b:7e:2f:88:57:07:7f:4d:9c:95:df:3a:b0:49: 81:af:71:ef:e9:ef:b2:c7:fc:da:1f:25:3b:6e:21: e8:7b:ca:df:ec:18:72:f8:f3:1f:2a:68:a8:36:49: 1f:f2:24:f6:4e:c4:b1:08:d0:7e:af:1f:be:0f:21: 07:f8:c8:a3:dd:49:79:95:5d:9d:2a:e0:0e:74:9b: 37:34:81:ab:cd:c1:9a:21:93:25:23:69:be:b3:e9: 69:bb:b3:52:db:c9:69:39:28:c1:a5:ba:a8:2d:e4: 30:6c:b4:97:45:da:95:6f:c0:b5:a9:23:9e:35:f2: b5:fc:93:c3:e0:bf:4a:a7:d3:e6:b6:25:b9:06:5c: 15:37:f2:db:a1:46:d5:41:be:f2:a2:1b:e4:c8:b6: b8:6c:80:95:76:91:f7:71:89:dc:31:76:b1:2e:f3: 57:68:50:32:16:d6:bf:b3:f6:a9:f5:02:18:1b:d2: d5:f7:de:84:b8:9e:1d:f8:88:5c:35:22:84:36:ef: 5e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E3:80:20:80:1E:7C:22:E5:D1:15:72:33:21:08:D2:B5:59:CA:E8 X509v3 Authority Key Identifier: keyid:11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:69:5f:f4:de:76:10:1d:a6:dd:8a:7d:b8:d1:ef:e2:fd:02: a9:bb:89:5d:d3:88:94:5f:75:ce:70:ec:e8:df:b8:49:63:22: f4:64:ca:fb:25:e0:ae:b3:2c:c6:d7:ba:be:9e:9e:97:ef:90: 60:81:2f:99:3d:8e:e1:9b:05:34:3b:4f:34:9d:cf:6d:7e:8c: 09:ab:df:2e:67:eb:e3:1c:0d:e6:e8:7f:e7:0a:21:5b:8f:6a: 6d:9b:03:03:96:b0:05:89:bc:f7:9d:2e:cf:c1:bb:0b:03:73: dd:2d:cc:34:e6:80:21:f9:ec:41:ee:7d:7b:f9:c1:70:68:04: 08:83:f3:97:05:b7:7a:87:61:c3:fd:e7:17:72:a3:7b:45:55: a2:ef:fb:ef:32:9e:e5:81:79:cb:49:57:65:49:2a:96:7a:2e: 08:69:ad:19:53:26:89:08:5f:24:d6:1f:0d:27:0e:bf:dc:9e: b3:32:40:37:f6:31:b0:e9:9c:88:75:00:6a:d5:03:ea:2f:1c: 0e:ac:ac:ab:79:bd:77:bf:e3:f5:ae:ed:72:29:fe:05:df:01: 44:38:af:99:5f:24:12:06:7b:f5:ff:3d:62:71:03:c3:6d:b1: 87:4c:c0:75:d8:92:0a:7c:a5:35:e1:e5:86:5f:19:35:94:1d: bc:8a:94:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt+lNXMgh5/gm2KKI27GVu+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMmQ2NWFiYmM3ZWYwMDUxMjcyODg0NDQ3OTJhYjg2ZmIx NWMyZWUwHhcNMjYwMTAyMTIwMDQxWhcNMjYwMTAzMTIwMDQxWjAzMTEwLwYDVQQD EygxZGUzODAyMDgwMWU3YzIyZTVkMTE1NzIzMzIxMDhkMmI1NTljYWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6pk2wY0yBXWizmFEXODhnC6EY5L xlvEFg9oIdLsxo3eji+6zN0fTVWi6R3qsZaioW3gJkotBoaK9rIie34viFcHf02c ld86sEmBr3Hv6e+yx/zaHyU7biHoe8rf7Bhy+PMfKmioNkkf8iT2TsSxCNB+rx++ DyEH+Mij3Ul5lV2dKuAOdJs3NIGrzcGaIZMlI2m+s+lpu7NS28lpOSjBpbqoLeQw bLSXRdqVb8C1qSOeNfK1/JPD4L9Kp9PmtiW5BlwVN/LboUbVQb7yohvkyLa4bICV dpH3cYncMXaxLvNXaFAyFta/s/ap9QIYG9LV996EuJ4d+IhcNSKENu9eVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3jgCCAHnwi5dEVcjMhCNK1WcroMB8GA1UdIwQY MBaAFBEtZau8fvAFEnKIREeSq4b7FcLuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVMxbHE3eC04QVVTY29oRVI1S3JodnNWd3U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hMDM3YjEtMTMzYS00NjM5LThjN2Yt NjM2ODU3ZWUxNzkyLzEvRVMxbHE3eC04QVVTY29oRVI1S3JodnNWd3U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9hMDM3YjEtMTMzYS00NjM5LThjN2YtNjM2ODU3ZWUxNzky LzEvRVMxbHE3eC04QVVTY29oRVI1S3JodnNWd3U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamlf9N52 EB2m3Yp9uNHv4v0CqbuJXdOIlF91znDs6N+4SWMi9GTK+yXgrrMsxte6vp6el++Q YIEvmT2O4ZsFNDtPNJ3PbX6MCavfLmfr4xwN5uh/5wohW49qbZsDA5awBYm8950u z8G7CwNz3S3MNOaAIfnsQe59e/nBcGgECIPzlwW3eodhw/3nF3Kje0VVou/77zKe 5YF5y0lXZUkqlnouCGmtGVMmiQhfJNYfDScOv9yeszJAN/YxsOmciHUAatUD6i8c Dqysq3m9d7/j9a7tcin+Bd8BRDivmV8kEgZ79f89YnEDw22xh0zAddiSCnylNeHl hl8ZNZQdvIqUaQ== -----END CERTIFICATE-----Generated at Fri Jan 2 20:06:34 2026 by rpki-client