This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft File: eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft (raw, json) Hash identifier: gC7aDspftkpoc3khFJH96JWyM4+OuajeKkcBVVtYfWs= Subject key identifier: EB:18:2C:00:E6:9F:27:0C:A7:67:2B:30:F9:87:6E:C7:24:D5:6F:93 Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93 Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693 Certificate serial: 019B7F709920E2039FCB65F12EE8A315550B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft Manifest number: 07AF Signing time: Fri 02 Jan 2026 16:00:44 +0000 Manifest this update: Fri 02 Jan 2026 16:00:44 +0000 Manifest next update: Sat 03 Jan 2026 16:00:44 +0000 Files and hashes: 1: AAxqzE_DaNwqJtSiSRt01LrD11E.roa (hash: AsdkBWjUsMF1PMPWszixSJb73omz0Nujo4Z01ynXMW8=) 2: PKXuRc_5_wM56Jttnq1znbxTNrM.roa (hash: wNBNrg7iwt49739UTs0ZF6veqyOIJdBVUfKeZkV8DDw=) 3: eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl (hash: P6ctnA3uq/QA1t1V3ppvm/HZ+RbOMkK5tzdg1ZTGY5Y=) 4: haFLcC9NWw9ub46milFGifb1wm8.roa (hash: MLM9+m/KRPi8dl+vkuj88InrFcUl/TiXCjaTZOweCP8=) 5: nVrsmiE4mZkUHdQosAPmUQgfiN8.roa (hash: HnvmyHFabWozXyzydQ+3XrK2DXsd/lYo1fc4nVOwXr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 16:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:70:99:20:e2:03:9f:cb:65:f1:2e:e8:a3:15:55:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693 Validity Not Before: Jan 2 16:00:44 2026 GMT Not After : Jan 3 16:00:44 2026 GMT Subject: CN=eb182c00e69f270ca7672b30f9876ec724d56f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a5:b3:a8:d1:bb:7a:30:73:5b:87:39:42:a8: 25:04:b0:f2:98:56:c8:75:09:66:d8:3d:66:ba:33: 34:9a:ce:28:5e:e3:5f:ba:a9:e9:d7:f2:1b:ee:da: 4b:10:5f:f8:9b:1f:44:95:59:29:62:d1:30:53:bd: 7b:14:eb:e6:a9:e8:0f:6b:8a:72:0e:c7:95:d7:2f: 59:1e:9e:4b:0f:6c:1d:c2:07:a8:2f:20:73:24:ef: 2f:d0:18:20:ed:81:6d:a3:ec:8d:93:af:26:b7:7b: b1:2c:95:a9:c6:9d:ed:37:7f:87:f4:eb:49:6a:25: fd:f0:14:c1:4b:2d:27:21:9b:d8:11:75:b4:01:79: b2:eb:23:68:70:8f:a9:6e:c6:59:63:78:43:ec:02: ea:3c:a0:c0:7a:d0:00:09:fb:4e:b8:44:b1:13:05: d0:a2:e6:f2:5b:29:51:0a:ab:59:5e:af:80:68:75: 0e:1d:c0:51:d1:58:48:b7:7a:e1:f7:a0:54:04:5f: bb:7f:66:19:40:85:6a:fb:94:e3:56:dc:b9:50:05: 80:76:a8:ce:05:8d:75:ce:b2:bb:c4:21:3d:54:2a: ea:a1:f8:74:64:f6:bb:3d:ea:55:30:35:02:96:0e: bd:f9:e7:49:7c:2d:36:08:69:be:29:4b:6f:f7:ff: c7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:18:2C:00:E6:9F:27:0C:A7:67:2B:30:F9:87:6E:C7:24:D5:6F:93 X509v3 Authority Key Identifier: keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:cb:b9:2f:38:f1:16:5a:f9:6c:2d:61:de:55:15:68:74:51: cc:92:47:38:94:dd:72:43:6e:1d:fe:dc:dc:4a:2b:18:b1:c5: e2:c6:c4:8c:fe:91:d3:52:ee:86:3d:23:2e:42:8a:03:dc:f9: 77:94:1b:d1:08:b4:91:76:41:52:6d:3f:f8:db:9a:af:82:85: dd:7a:cf:be:b2:10:bc:d4:35:c6:86:69:28:0e:cd:c7:de:42: 24:de:4f:33:36:32:14:7a:95:c9:2b:69:c9:81:bb:a6:8e:26: e0:0b:d8:7f:57:27:6e:0e:53:08:4f:b5:33:6b:7c:e5:d4:71: a7:76:35:63:ef:65:4b:fa:41:1c:44:dc:72:8f:1b:25:e8:32: 04:c7:37:8c:4e:21:a4:92:13:b2:0f:63:cb:6e:2e:64:49:f3: 26:3c:cf:00:b6:e3:1c:1a:e4:6a:26:70:a7:a4:77:f5:0f:7d: 8a:5f:c5:ff:84:88:97:12:d3:39:df:6d:3c:6f:08:39:53:3c: 94:cc:6f:eb:15:60:f9:40:4b:14:06:7b:75:22:15:6d:ab:f7: 6b:8a:8e:60:96:6e:17:03:97:85:8e:f4:69:ed:be:fe:8e:7b: 52:a6:d2:26:e0:9d:2f:d4:36:1c:5a:ad:66:3f:4d:01:bb:b4: 86:83:5b:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/cJkg4gOfy2XxLuijFVULMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NzZkN2QwYmJjYzA4NTE2NTIzZDVkZjI0ZTY4ODJiNzJj YTU2OTMwHhcNMjYwMTAyMTYwMDQ0WhcNMjYwMTAzMTYwMDQ0WjAzMTEwLwYDVQQD EyhlYjE4MmMwMGU2OWYyNzBjYTc2NzJiMzBmOTg3NmVjNzI0ZDU2ZjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6WzqNG7ejBzW4c5QqglBLDymFbI dQlm2D1mujM0ms4oXuNfuqnp1/Ib7tpLEF/4mx9ElVkpYtEwU717FOvmqegPa4py DseV1y9ZHp5LD2wdwgeoLyBzJO8v0Bgg7YFto+yNk68mt3uxLJWpxp3tN3+H9OtJ aiX98BTBSy0nIZvYEXW0AXmy6yNocI+pbsZZY3hD7ALqPKDAetAACftOuESxEwXQ oubyWylRCqtZXq+AaHUOHcBR0VhIt3rh96BUBF+7f2YZQIVq+5TjVty5UAWAdqjO BY11zrK7xCE9VCrqofh0ZPa7PepVMDUClg69+edJfC02CGm+KUtv9//H+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsYLADmnycMp2crMPmHbsck1W+TMB8GA1UdIwQY MBaAFHl219C7zAhRZSPV3yTmiCtyylaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMt ODU0MTgyY2IwNmE2LzEvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMtODU0MTgyY2IwNmE2 LzEvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8u5Lzjx Flr5bC1h3lUVaHRRzJJHOJTdckNuHf7c3EorGLHF4sbEjP6R01Luhj0jLkKKA9z5 d5Qb0Qi0kXZBUm0/+Nuar4KF3XrPvrIQvNQ1xoZpKA7Nx95CJN5PMzYyFHqVyStp yYG7po4m4AvYf1cnbg5TCE+1M2t85dRxp3Y1Y+9lS/pBHETcco8bJegyBMc3jE4h pJITsg9jy24uZEnzJjzPALbjHBrkaiZwp6R39Q99il/F/4SIlxLTOd9tPG8IOVM8 lMxv6xVg+UBLFAZ7dSIVbav3a4qOYJZuFwOXhY70ae2+/o57UqbSJuCdL9Q2HFqt Zj9NAbu0hoNbgw== -----END CERTIFICATE-----Generated at Fri Jan 2 23:51:56 2026 by rpki-client