This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft File: eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json) Hash identifier: ZyvFbeAHqWnvM/UpAjxVTLgo7M6U9JnKZIvAnw5dhZA= Subject key identifier: 2E:44:66:ED:AD:4F:7E:82:FF:02:6B:B2:6C:FF:0F:23:75:CE:6F:11 Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB Certificate issuer: /CN=7913f8c13ba8290f60da63ba89e935b275893adb Certificate serial: 019B7F704E25CA13225D24C2CBEDA27B279D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft Manifest number: 0652 Signing time: Fri 02 Jan 2026 16:00:24 +0000 Manifest this update: Fri 02 Jan 2026 16:00:24 +0000 Manifest next update: Sat 03 Jan 2026 16:00:24 +0000 Files and hashes: 1: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: NLZUGsCptVnfIIDyQhWZxuAhDv5TT65AO+AnjYf0b9E=) 2: qXkw0QfrHcnGQSy5HSSgU96t89k.roa (hash: 0wRXU7/knPguYz2PH2GBKtyb9XdxaFy8E6VNNqtVEPw=) 3: tF9YKOONiKk1CscCM98zlB8EJLs.roa (hash: 6wUmwqGkAOvn8GZ/bao7dMUtyUHLPWG5h6PlJNzejcg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 16:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:70:4e:25:ca:13:22:5d:24:c2:cb:ed:a2:7b:27:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb Validity Not Before: Jan 2 16:00:24 2026 GMT Not After : Jan 3 16:00:24 2026 GMT Subject: CN=2e4466edad4f7e82ff026bb26cff0f2375ce6f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c0:db:30:c0:ca:c0:d7:eb:24:c0:96:d4:e0: f0:59:06:35:64:02:2f:af:99:2d:a8:3c:f9:e3:43: ee:5b:16:c9:75:ce:a9:04:43:cb:0a:1d:17:93:8a: aa:17:91:68:e5:c9:d1:36:87:af:d7:9e:75:d4:ec: 88:e4:b1:d7:8b:af:34:f6:aa:8c:8f:6f:ea:02:80: c6:3a:a2:49:58:f0:d1:6f:6c:19:27:54:78:58:3a: 41:f8:a5:ad:5d:46:58:49:18:83:00:15:60:1f:29: c1:64:f0:bc:14:b1:7e:82:75:d6:25:98:95:f0:d2: e5:c7:eb:71:1b:ed:28:91:8d:6c:05:25:14:5c:a0: 44:6c:90:5c:da:0d:b6:cb:a9:17:6d:2b:ba:12:fc: 9f:4e:c6:87:38:d8:eb:2b:ed:8c:e5:0d:88:d0:42: 0a:fc:8b:5a:7d:56:f2:a3:31:99:74:7e:f9:db:bc: 4e:44:92:b8:8b:df:34:b6:d4:d3:c0:a0:d1:4c:d6: b8:fc:61:62:f2:bf:27:71:e8:f8:ba:fe:48:46:4f: 06:23:36:0a:a9:50:f6:4f:c7:da:f9:21:35:08:a2: 87:07:84:9e:01:c3:9c:14:23:6f:9d:f1:d0:bc:39: 0e:43:ab:4d:96:7f:73:4d:c6:c6:61:8d:c5:96:c3: 27:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:44:66:ED:AD:4F:7E:82:FF:02:6B:B2:6C:FF:0F:23:75:CE:6F:11 X509v3 Authority Key Identifier: keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:37:7a:97:92:cf:97:e4:ca:ab:da:8c:d6:8e:87:5c:48:ae: 28:63:ef:60:b4:56:02:23:9e:52:ad:e1:ef:4e:4c:ef:95:de: e7:e3:bf:ae:e8:6d:42:88:52:ba:99:3c:ff:c3:68:47:18:a1: e8:03:ae:af:d5:1a:98:8e:8f:e6:e6:e3:98:9c:ee:1c:17:af: 78:a5:f2:26:1f:e4:fa:6b:ac:1a:f8:5e:50:41:e5:6c:b4:0b: bb:3c:bf:da:47:d9:30:13:40:ce:7c:d9:b5:81:96:15:11:e4: d7:77:42:93:5d:6b:2e:29:df:03:b3:64:3c:58:7f:49:2b:ad: 6c:65:5b:7c:9f:4f:55:6c:67:07:56:66:4c:3c:43:05:8d:1e: 9c:89:f8:3f:29:55:5c:da:f9:dd:7c:ed:67:85:15:c6:7c:de: ea:6a:11:e4:25:49:ef:6d:00:89:13:b2:83:62:93:9e:ec:a4: 85:55:b1:55:36:f7:07:1c:d0:e5:c0:b3:c3:97:3f:9b:50:b5: 9d:ae:a3:a4:bf:ae:ad:91:aa:de:05:36:12:12:b1:d1:12:76: b1:b2:09:0e:29:19:86:8c:a7:e3:bd:d5:a7:8c:a1:33:78:03: d4:dc:12:c1:a8:76:aa:01:13:6a:3c:8a:f5:b3:3d:01:35:59: af:cf:c8:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/cE4lyhMiXSTCy+2ieyedMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MTNmOGMxM2JhODI5MGY2MGRhNjNiYTg5ZTkzNWIyNzU4 OTNhZGIwHhcNMjYwMTAyMTYwMDI0WhcNMjYwMTAzMTYwMDI0WjAzMTEwLwYDVQQD EygyZTQ0NjZlZGFkNGY3ZTgyZmYwMjZiYjI2Y2ZmMGYyMzc1Y2U2ZjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssDbMMDKwNfrJMCW1ODwWQY1ZAIv r5ktqDz540PuWxbJdc6pBEPLCh0Xk4qqF5Fo5cnRNoev15511OyI5LHXi6809qqM j2/qAoDGOqJJWPDRb2wZJ1R4WDpB+KWtXUZYSRiDABVgHynBZPC8FLF+gnXWJZiV 8NLlx+txG+0okY1sBSUUXKBEbJBc2g22y6kXbSu6EvyfTsaHONjrK+2M5Q2I0EIK /ItafVbyozGZdH7527xORJK4i980ttTTwKDRTNa4/GFi8r8ncej4uv5IRk8GIzYK qVD2T8fa+SE1CKKHB4SeAcOcFCNvnfHQvDkOQ6tNln9zTcbGYY3FlsMnvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5EZu2tT36C/wJrsmz/DyN1zm8RMB8GA1UdIwQY MBaAFHkT+ME7qCkPYNpjuonpNbJ1iTrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVJQNHdUdW9LUTlnMm1PNmllazFzbldKT3RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jZTFjOTktMGFiZS00Mjc3LWFjYTIt ZmUxY2YzMDhhMDA4LzEvZVJQNHdUdW9LUTlnMm1PNmllazFzbldKT3RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jZTFjOTktMGFiZS00Mjc3LWFjYTItZmUxY2YzMDhhMDA4 LzEvZVJQNHdUdW9LUTlnMm1PNmllazFzbldKT3RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjd6l5LP l+TKq9qM1o6HXEiuKGPvYLRWAiOeUq3h705M75Xe5+O/ruhtQohSupk8/8NoRxih 6AOur9UamI6P5ubjmJzuHBeveKXyJh/k+musGvheUEHlbLQLuzy/2kfZMBNAznzZ tYGWFRHk13dCk11rLinfA7NkPFh/SSutbGVbfJ9PVWxnB1ZmTDxDBY0enIn4PylV XNr53XztZ4UVxnze6moR5CVJ720AiROyg2KTnuykhVWxVTb3BxzQ5cCzw5c/m1C1 na6jpL+urZGq3gU2EhKx0RJ2sbIJDikZhoyn473Vp4yhM3gD1NwSwah2qgETajyK 9bM9ATVZr8/ItQ== -----END CERTIFICATE-----Generated at Fri Jan 2 23:52:29 2026 by rpki-client