This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft File: E_hJa3nRwE0IKvg_G-al6rDGYIk.mft (raw, json) Hash identifier: Vhb9F7R0ihomJRqqpmqHwG4Ws0t4XKcgNtxcyWvWRLU= Subject key identifier: 32:07:C2:04:D3:D4:19:8B:00:8B:22:4B:D9:49:07:74:B4:1F:45:82 Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89 Certificate issuer: /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089 Certificate serial: 019B78C9DA8694F8F9254FE9BE52D242EFD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft Manifest number: 17AD Signing time: Thu 01 Jan 2026 09:00:53 +0000 Manifest this update: Thu 01 Jan 2026 09:00:53 +0000 Manifest next update: Fri 02 Jan 2026 09:00:53 +0000 Files and hashes: 1: E_hJa3nRwE0IKvg_G-al6rDGYIk.crl (hash: J9bJXT8U7aE5vO1nfLj5K4FYKWVMTKYFuUb27q5Mc0M=) 2: Oi8bBj7abbUUGWgLnipKRlAWhqg.roa (hash: uBPR6lVF7mLe6knRM5SQ0/u91d8nwbpqoLhQPG3UKIM=) 3: jbGvVuouVUGuodE3wSjw_6Kl_WQ.roa (hash: 0q3TS/imhDlO4EU7lxVd1fwILuDkXznK6ePE6/PQttU=) 4: vyq7frrOZ18P3bS0LsRzkLQVayM.roa (hash: ahnDTdH2Zi2KbYKjlRjjF3km1v/4SmSVHP2tW2n0dn0=) 5: xqgSeGIVEF82G1UQzaanBBXZ4j0.roa (hash: DA3L+prbTCIOti4LbG2Ch15XaVBtWVA8dw3jHgvPOJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:c9:da:86:94:f8:f9:25:4f:e9:be:52:d2:42:ef:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089 Validity Not Before: Jan 1 09:00:53 2026 GMT Not After : Jan 2 09:00:53 2026 GMT Subject: CN=3207c204d3d4198b008b224bd9490774b41f4582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:38:5a:a3:4e:85:9c:0d:b1:2f:aa:62:95:73: e7:ae:be:ac:97:19:7e:f2:d3:13:ec:bb:7f:6f:be: 4a:05:32:d2:8a:84:78:dc:47:1d:d7:14:68:ca:61: 64:61:a0:9a:b3:40:07:51:fc:ee:4f:b0:6d:fc:65: 0d:20:b2:2c:af:85:dc:3b:50:c2:5c:02:39:e9:d7: df:7c:41:f3:3e:47:2e:80:6a:52:72:2d:a6:21:b4: 90:74:aa:6e:73:0a:97:8a:e1:ee:59:86:cd:3a:fc: fd:8b:f8:e8:f6:a3:2d:f4:bc:81:a2:7d:fe:07:fa: cf:0a:7b:5c:e2:6b:ec:42:20:7e:cb:93:16:29:73: 9f:c4:14:dc:91:ae:2f:10:96:8c:a0:9a:16:83:df: a3:af:c9:a7:83:53:54:aa:f0:f8:29:75:3f:04:e7: 14:1a:59:28:13:cc:f1:4f:c1:42:07:90:33:78:53: 8f:02:7c:17:c7:fd:c3:94:6e:a8:21:49:64:fa:85: 42:17:e0:2f:eb:c7:34:b3:97:5d:cc:11:bd:f4:fd: bf:b6:08:26:aa:c5:e0:08:84:e5:19:d5:97:5c:b8: d4:45:b9:d6:d5:89:e9:c5:c3:e6:e1:9b:86:f9:c0: 9f:d6:b4:2a:75:e7:44:6c:a3:98:94:94:33:31:e0: b6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:07:C2:04:D3:D4:19:8B:00:8B:22:4B:D9:49:07:74:B4:1F:45:82 X509v3 Authority Key Identifier: keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:0f:6b:cf:48:e8:61:de:a7:6f:89:62:9e:cc:d9:bd:6b:94: 12:d7:4c:f9:38:89:cf:ff:dc:69:27:b4:a8:df:6b:03:dc:03: 27:f3:2a:43:12:95:9d:98:e4:05:da:12:4f:e3:8b:37:1c:5d: 32:04:ec:88:e4:38:51:39:c7:a2:40:e3:9d:a5:c3:6e:48:6b: c8:39:39:d9:fb:8c:10:7e:95:c2:1c:98:22:ec:e6:5e:9e:55: 07:94:39:be:7b:fc:f8:62:aa:3f:a0:a9:dc:61:80:57:2b:f3: f5:41:d0:35:6e:77:09:f3:54:e3:70:c8:dc:fe:75:a6:46:33: 33:67:22:ea:a1:04:17:62:08:b2:3d:36:87:10:76:8c:7a:0f: fd:3a:2d:5d:77:26:6b:bc:9e:47:99:19:7b:b8:60:e0:05:04: 9b:d5:49:91:ef:ad:78:04:29:73:b4:42:f7:79:23:13:74:85: 0c:2e:41:17:39:3e:29:b2:e6:05:71:78:98:dc:13:8d:6d:b9: a7:fa:b8:45:b4:a3:f7:3b:13:1a:84:95:ce:ec:74:25:5f:3a: 00:17:fc:7c:6d:44:3f:38:70:64:47:fb:93:48:20:62:77:3c: f8:2b:ea:6c:93:8f:d3:98:3d:43:44:64:f9:50:eb:e9:61:e8: 93:9f:9c:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4ydqGlPj5JU/pvlLSQu/WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZjg0OTZiNzlkMWMwNGQwODJhZjgzZjFiZTZhNWVhYjBj NjYwODkwHhcNMjYwMTAxMDkwMDUzWhcNMjYwMTAyMDkwMDUzWjAzMTEwLwYDVQQD EygzMjA3YzIwNGQzZDQxOThiMDA4YjIyNGJkOTQ5MDc3NGI0MWY0NTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Dhao06FnA2xL6pilXPnrr6slxl+ 8tMT7Lt/b75KBTLSioR43Ecd1xRoymFkYaCas0AHUfzuT7Bt/GUNILIsr4XcO1DC XAI56dfffEHzPkcugGpSci2mIbSQdKpucwqXiuHuWYbNOvz9i/jo9qMt9LyBon3+ B/rPCntc4mvsQiB+y5MWKXOfxBTcka4vEJaMoJoWg9+jr8mng1NUqvD4KXU/BOcU GlkoE8zxT8FCB5AzeFOPAnwXx/3DlG6oIUlk+oVCF+Av68c0s5ddzBG99P2/tggm qsXgCITlGdWXXLjURbnW1YnpxcPm4ZuG+cCf1rQqdedEbKOYlJQzMeC2mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIHwgTT1BmLAIsiS9lJB3S0H0WCMB8GA1UdIwQY MBaAFBP4SWt50cBNCCr4PxvmpeqwxmCJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRV9oSmEzblJ3RTBJS3ZnX0ctYWw2ckRHWUlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9lZWIyNmYtNjc5MC00MmNlLThjY2Mt NTRhMjVlMmNkYWE5LzEvRV9oSmEzblJ3RTBJS3ZnX0ctYWw2ckRHWUlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9lZWIyNmYtNjc5MC00MmNlLThjY2MtNTRhMjVlMmNkYWE5 LzEvRV9oSmEzblJ3RTBJS3ZnX0ctYWw2ckRHWUlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQ9rz0jo Yd6nb4linszZvWuUEtdM+TiJz//caSe0qN9rA9wDJ/MqQxKVnZjkBdoST+OLNxxd MgTsiOQ4UTnHokDjnaXDbkhryDk52fuMEH6VwhyYIuzmXp5VB5Q5vnv8+GKqP6Cp 3GGAVyvz9UHQNW53CfNU43DI3P51pkYzM2ci6qEEF2IIsj02hxB2jHoP/TotXXcm a7yeR5kZe7hg4AUEm9VJke+teAQpc7RC93kjE3SFDC5BFzk+KbLmBXF4mNwTjW25 p/q4RbSj9zsTGoSVzux0JV86ABf8fG1EPzhwZEf7k0ggYnc8+CvqbJOP05g9Q0Rk +VDr6WHok5+c+A== -----END CERTIFICATE-----Generated at Thu Jan 1 10:22:48 2026 by rpki-client