This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft File: EYuk75AarBCHbM-Xal99FsTKefA.mft (raw, json) Hash identifier: Jw1ihzzz8M6PVIPiNfJPSVG/l2947lcQ+PYbbtFdAHM= Subject key identifier: ED:36:C7:BC:D8:7B:8C:66:EA:9D:86:3D:93:EC:49:EE:67:F1:EF:01 Authority key identifier: 11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0 Certificate issuer: /CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0 Certificate serial: 019B7F39D5AD787F38F707825408C34FC87A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft Manifest number: 17AA Signing time: Fri 02 Jan 2026 15:00:55 +0000 Manifest this update: Fri 02 Jan 2026 15:00:55 +0000 Manifest next update: Sat 03 Jan 2026 15:00:55 +0000 Files and hashes: 1: 6oE2tV5xJLygHD8211ohyUC5Fhg.roa (hash: Z/3O7eTXu9453+Wb+f/D4hi5mlRSIZ2Q9SX36foWOhU=) 2: EYuk75AarBCHbM-Xal99FsTKefA.crl (hash: eXKd1Bpip8Z/YVLpy3nuMUcAX6/Rvdi4QFnQ8EqXNmg=) 3: FSc2LNK0DXWFbmxIzJTQoPNPaHI.roa (hash: GV3WKNU7MtJ1suHdu7xzv5MkwegHMMBiDtRM53ANEdc=) 4: a6C5SFiUk80yaQysAFlbgHQ3BJE.roa (hash: vtb8i4mZAE6TV6J6coLOSP+tnQ8FsVz6tF34wr10+CY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:39:d5:ad:78:7f:38:f7:07:82:54:08:c3:4f:c8:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0 Validity Not Before: Jan 2 15:00:55 2026 GMT Not After : Jan 3 15:00:55 2026 GMT Subject: CN=ed36c7bcd87b8c66ea9d863d93ec49ee67f1ef01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c0:91:71:7a:02:f4:04:c1:3e:0a:8c:11:86: 09:13:bd:a8:01:6a:f4:cb:b3:58:51:30:59:9b:69: 0e:ac:4e:d1:be:4c:97:55:2b:d2:65:39:4a:85:42: 48:70:9c:81:5c:d7:ad:4d:17:83:3e:e5:29:cf:c4: 13:83:0b:21:ee:1f:ef:be:c9:16:e1:2d:b7:dd:3a: 9f:01:3c:2e:48:df:c1:1d:21:09:03:6b:65:89:f2: 75:24:aa:62:e0:b3:be:90:91:03:ed:db:b7:aa:4a: 93:28:3c:24:11:be:11:df:32:ab:ed:7c:03:98:b8: 5a:a5:59:12:22:48:d2:5d:13:d5:05:cc:64:0c:6a: 73:84:79:62:84:46:ce:ac:97:71:8b:b9:4d:bd:00: e9:3a:dc:2d:2e:19:2f:4b:b1:f2:08:2a:1f:d7:91: eb:6d:39:8e:0b:95:66:69:e8:21:b4:a8:9c:32:8a: 2f:d1:ba:f3:53:4f:8f:ed:fa:ce:b2:70:bd:f2:7d: 5a:e6:7f:e4:e2:66:75:dc:ec:c3:cf:9f:34:7e:f5: 17:db:f9:76:cc:7b:c7:45:73:d5:3f:7c:66:10:bb: 6f:f1:c9:f0:09:85:a4:5f:db:30:33:0c:56:52:0f: 28:80:b0:aa:97:1a:2c:5e:b2:b7:b6:82:e8:d4:27: e7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:36:C7:BC:D8:7B:8C:66:EA:9D:86:3D:93:EC:49:EE:67:F1:EF:01 X509v3 Authority Key Identifier: keyid:11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:e8:b2:1e:83:48:2b:2a:6c:74:73:6d:a1:9c:8f:17:01:4d: 70:20:65:01:e1:da:1d:4c:4c:92:c7:85:d9:59:29:db:e7:e2: 63:72:66:79:d3:d7:08:06:59:5a:60:79:7e:9f:09:1c:2b:e4: f8:42:1c:c2:83:cd:c9:fd:75:b5:4f:28:0c:ce:71:b2:f4:f8: 47:d3:13:8a:cf:59:70:41:9f:2b:c2:b3:8e:27:af:0d:70:1a: d1:a3:90:7b:2c:aa:01:a5:94:59:64:d1:97:f4:f6:51:84:a3: 0d:44:d9:d0:f8:fc:09:0a:bd:aa:48:70:1b:5b:42:47:40:d5: e3:27:13:db:8c:d3:e7:43:f9:75:ad:ac:cb:73:86:88:4c:8a: 6c:f2:ea:24:22:09:b4:4b:36:83:f6:46:8e:2b:34:c1:a9:79: 21:1e:9d:8c:a4:32:76:56:4c:f2:15:d1:64:81:a3:0b:91:c9: a9:9a:8c:9f:b7:2a:89:36:7a:ce:0c:4c:e3:46:ae:d7:3e:b1: a3:a4:0f:0f:7f:10:c2:29:9d:3e:7b:8f:2e:ea:34:f4:92:51: 86:7f:7f:8b:a8:21:07:22:b5:c5:19:5f:ac:8f:c9:55:cf:c5: e3:18:37:4a:b4:68:24:45:dd:2a:93:3f:a5:15:63:c3:6e:c2: f7:8b:94:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/OdWteH849weCVAjDT8h6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExOGJhNGVmOTAxYWFjMTA4NzZjY2Y5NzZhNWY3ZDE2YzRj YTc5ZjAwHhcNMjYwMTAyMTUwMDU1WhcNMjYwMTAzMTUwMDU1WjAzMTEwLwYDVQQD EyhlZDM2YzdiY2Q4N2I4YzY2ZWE5ZDg2M2Q5M2VjNDllZTY3ZjFlZjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsCRcXoC9ATBPgqMEYYJE72oAWr0 y7NYUTBZm2kOrE7RvkyXVSvSZTlKhUJIcJyBXNetTReDPuUpz8QTgwsh7h/vvskW 4S233TqfATwuSN/BHSEJA2tlifJ1JKpi4LO+kJED7du3qkqTKDwkEb4R3zKr7XwD mLhapVkSIkjSXRPVBcxkDGpzhHlihEbOrJdxi7lNvQDpOtwtLhkvS7HyCCof15Hr bTmOC5VmaeghtKicMoov0brzU0+P7frOsnC98n1a5n/k4mZ13OzDz580fvUX2/l2 zHvHRXPVP3xmELtv8cnwCYWkX9swMwxWUg8ogLCqlxosXrK3toLo1CfnsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO02x7zYe4xm6p2GPZPsSe5n8e8BMB8GA1UdIwQY MBaAFBGLpO+QGqwQh2zPl2pffRbEynnwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVl1azc1QWFyQkNIYk0tWGFsOTlGc1RLZWZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iZDRkOGQtOTM4MC00MGU5LTgxNDIt ZjJiNGVmYmE1OWJjLzEvRVl1azc1QWFyQkNIYk0tWGFsOTlGc1RLZWZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9iZDRkOGQtOTM4MC00MGU5LTgxNDItZjJiNGVmYmE1OWJj LzEvRVl1azc1QWFyQkNIYk0tWGFsOTlGc1RLZWZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXuiyHoNI KypsdHNtoZyPFwFNcCBlAeHaHUxMkseF2Vkp2+fiY3JmedPXCAZZWmB5fp8JHCvk +EIcwoPNyf11tU8oDM5xsvT4R9MTis9ZcEGfK8KzjievDXAa0aOQeyyqAaWUWWTR l/T2UYSjDUTZ0Pj8CQq9qkhwG1tCR0DV4ycT24zT50P5da2sy3OGiEyKbPLqJCIJ tEs2g/ZGjis0wal5IR6djKQydlZM8hXRZIGjC5HJqZqMn7cqiTZ6zgxM40au1z6x o6QPD38QwimdPnuPLuo09JJRhn9/i6ghByK1xRlfrI/JVc/F4xg3SrRoJEXdKpM/ pRVjw27C94uUEg== -----END CERTIFICATE-----Generated at Fri Jan 2 18:09:04 2026 by rpki-client