This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft File: E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft (raw, json) Hash identifier: t2zJhToCmWdbExBpznny2QxuPAymeb9YrueJ7UYlujk= Subject key identifier: 92:A2:FE:4A:98:3F:C4:96:F8:C3:AE:84:DD:11:AB:A4:57:FC:5B:ED Authority key identifier: 13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3 Certificate issuer: /CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3 Certificate serial: 019B785D25B8D8939F691342EBC99A0ECFAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft Manifest number: 0F2F Signing time: Thu 01 Jan 2026 07:02:08 +0000 Manifest this update: Thu 01 Jan 2026 07:02:08 +0000 Manifest next update: Fri 02 Jan 2026 07:02:08 +0000 Files and hashes: 1: 8uZf_YXrnrFcX5OGm1hy0aMncrA.roa (hash: FJ+rC+vSFCLpeii+a3s75dE3+VofCsTHLoOQv8k1S8Q=) 2: E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl (hash: NsvwYOp6kDIF24sbXmlN7bnCGn/mmoqlenVXws2FBwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 07:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:5d:25:b8:d8:93:9f:69:13:42:eb:c9:9a:0e:cf:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3 Validity Not Before: Jan 1 07:02:08 2026 GMT Not After : Jan 2 07:02:08 2026 GMT Subject: CN=92a2fe4a983fc496f8c3ae84dd11aba457fc5bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ba:92:88:0b:89:32:81:71:e8:02:c8:b0:9b: c2:53:85:ef:bf:3f:a1:f2:c9:6b:3f:64:c4:79:48: d4:83:a8:13:50:f2:84:af:1c:1f:11:5b:4a:92:3e: 54:3c:ed:d7:31:49:be:d1:8d:10:56:3f:69:b8:b0: 60:49:e8:0f:5e:91:e4:1a:22:12:a8:db:43:cd:30: ba:91:da:3d:da:53:f2:52:80:8c:ff:be:f0:22:63: b6:fe:5c:91:20:16:a3:53:8e:2d:2e:5b:13:d9:51: 5c:72:95:8a:d6:93:56:b8:4f:d6:3b:14:93:b1:54: 6a:aa:10:fe:71:18:ef:97:50:90:30:8c:d8:be:f1: 99:e4:cb:f4:3b:e9:ea:f3:a8:07:e4:6c:90:c3:b6: dd:13:e2:80:9c:08:6c:fd:67:a5:f6:4a:90:f6:0a: b0:77:2a:b0:75:cb:67:21:d2:42:bf:74:ba:37:2b: d3:ec:a4:57:09:fa:0b:b8:e2:8a:ea:5f:af:2f:c7: 32:0f:c5:5e:35:5a:a0:a6:0e:11:33:8f:03:c5:59: f4:e7:0a:97:d2:85:eb:48:33:3a:37:93:84:71:32: e5:bd:06:79:ad:4f:49:fe:84:5c:0d:4b:00:9d:ea: db:03:12:37:74:a1:62:fb:92:5c:30:ce:80:b0:2f: 9d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A2:FE:4A:98:3F:C4:96:F8:C3:AE:84:DD:11:AB:A4:57:FC:5B:ED X509v3 Authority Key Identifier: keyid:13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:37:79:a5:a5:d3:6d:75:32:36:b0:2e:d3:5f:83:54:fc:43: 8a:5a:f2:53:23:79:03:a4:31:76:2d:dc:52:4c:e1:2f:eb:33: 76:ae:20:ac:97:1f:8d:f4:21:b5:64:16:fc:85:8e:84:d0:ec: 4f:cc:d2:72:67:c3:99:f7:df:dc:3a:ac:4a:47:9c:80:f6:a3: 92:01:d0:c1:4e:ec:b5:24:18:e7:53:01:dc:32:db:c4:cb:71: ec:39:b8:0b:72:39:64:e8:65:bd:a0:a2:4e:41:99:0a:b0:2f: 19:14:e0:e6:cb:b2:ea:ea:9c:83:80:af:97:10:bf:b4:77:37: 7c:28:13:c7:f8:f8:30:45:5c:9f:af:55:48:1e:56:42:96:3e: c4:58:67:c4:fe:ca:85:7c:72:ee:b6:60:aa:2d:2c:b0:a0:fd: 78:c5:26:cc:d5:fe:0b:46:06:8a:62:46:ce:7d:ac:6f:c1:0d: 8b:89:31:c7:5a:61:38:18:56:dc:87:7c:28:35:5d:73:ea:c9: 9c:44:be:d0:b9:00:72:dd:95:d5:47:e1:dd:9e:4a:bd:e6:54: 53:7d:e5:5d:4e:cc:77:00:9e:d8:c5:a7:c7:ea:0b:97:2a:85: 2f:02:f7:a7:53:13:8f:50:a5:29:a7:23:0b:6f:e9:07:4a:c1: c8:18:46:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4XSW42JOfaRNC68maDs+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzOWU4MzYxNmY1MWYwMGIxZTU1YzBjNjE3YjNhNWYwNGFi NzQxYTMwHhcNMjYwMTAxMDcwMjA4WhcNMjYwMTAyMDcwMjA4WjAzMTEwLwYDVQQD Eyg5MmEyZmU0YTk4M2ZjNDk2ZjhjM2FlODRkZDExYWJhNDU3ZmM1YmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LqSiAuJMoFx6ALIsJvCU4Xvvz+h 8slrP2TEeUjUg6gTUPKErxwfEVtKkj5UPO3XMUm+0Y0QVj9puLBgSegPXpHkGiIS qNtDzTC6kdo92lPyUoCM/77wImO2/lyRIBajU44tLlsT2VFccpWK1pNWuE/WOxST sVRqqhD+cRjvl1CQMIzYvvGZ5Mv0O+nq86gH5GyQw7bdE+KAnAhs/Wel9kqQ9gqw dyqwdctnIdJCv3S6NyvT7KRXCfoLuOKK6l+vL8cyD8VeNVqgpg4RM48DxVn05wqX 0oXrSDM6N5OEcTLlvQZ5rU9J/oRcDUsAnerbAxI3dKFi+5JcMM6AsC+dUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKi/kqYP8SW+MOuhN0Rq6RX/FvtMB8GA1UdIwQY MBaAFBOeg2FvUfALHlXAxhezpfBKt0GjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTU2RFlXOVI4QXNlVmNER0Y3T2w4RXEzUWFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zNmYzNzgtYTRkMi00NzU4LTkzZTIt Njc4MmUyZGFlZjc0LzEvRTU2RFlXOVI4QXNlVmNER0Y3T2w4RXEzUWFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8zNmYzNzgtYTRkMi00NzU4LTkzZTItNjc4MmUyZGFlZjc0 LzEvRTU2RFlXOVI4QXNlVmNER0Y3T2w4RXEzUWFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDd5paXT bXUyNrAu01+DVPxDilryUyN5A6Qxdi3cUkzhL+szdq4grJcfjfQhtWQW/IWOhNDs T8zScmfDmfff3DqsSkecgPajkgHQwU7stSQY51MB3DLbxMtx7Dm4C3I5ZOhlvaCi TkGZCrAvGRTg5suy6uqcg4CvlxC/tHc3fCgTx/j4MEVcn69VSB5WQpY+xFhnxP7K hXxy7rZgqi0ssKD9eMUmzNX+C0YGimJGzn2sb8ENi4kxx1phOBhW3Id8KDVdc+rJ nES+0LkAct2V1Ufh3Z5KveZUU33lXU7MdwCe2MWnx+oLlyqFLwL3p1MTj1ClKacj C2/pB0rByBhGDw== -----END CERTIFICATE-----Generated at Thu Jan 1 11:02:21 2026 by rpki-client