This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft File: ezhehhZ9XMwi_YWJJWCudgtfKJg.mft (raw, json) Hash identifier: QqRmtvTKFOk/qreJ7mKB59kS8V5oP6ZpqcRIg1w4e+s= Subject key identifier: A3:2B:01:49:D7:3D:EC:AC:77:88:DE:92:52:45:7E:A7:7D:E1:A3:9F Authority key identifier: 7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98 Certificate issuer: /CN=7b385e86167d5ccc22fd85892560ae760b5f2898 Certificate serial: 019BF53E9B263732A9D4E55A217139E66D3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 13:01:19 +0000 Manifest this update: Sun 25 Jan 2026 13:01:19 +0000 Manifest next update: Mon 26 Jan 2026 13:01:19 +0000 Files and hashes: 1: Az-iHkJejR0VdZYNnzrlZuh1_DI.roa (hash: sKSrtLFKb8T7tzu/qrkRHr+dbwySR1WM0V46K4Zjtg8=) 2: QBz4vHPmaaMrots9J1TfiJn6g8U.roa (hash: 1zuHsD0Vu63nJy0iEzu4F0kzfYEsfd1yuIUMu7fViHM=) 3: dr4ERfRqn_ghQRIttdnBh9fXjas.roa (hash: uHaHOk9OGRVoN05Lx2H15zjg2EWZadYEAqhzWiPC/Ak=) 4: ezhehhZ9XMwi_YWJJWCudgtfKJg.crl (hash: IgjYI0RrBZ9c0sA6FTTWoBMcevHiUjWY8Eatz+9B/M8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:9b:26:37:32:a9:d4:e5:5a:21:71:39:e6:6d:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b385e86167d5ccc22fd85892560ae760b5f2898 Validity Not Before: Jan 25 13:01:19 2026 GMT Not After : Jan 26 13:01:19 2026 GMT Subject: CN=a32b0149d73decac7788de9252457ea77de1a39f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ec:e1:ee:df:eb:5a:e7:4c:c3:52:3a:70:76: 35:0a:72:63:f0:8b:fb:08:e1:bb:d4:d4:9f:f1:d1: 5b:5b:05:12:95:37:35:2c:19:d6:4d:f8:69:9a:44: c3:85:f1:39:e3:c6:45:36:c2:7e:cb:f4:23:0f:f6: ec:1f:7e:38:6c:2f:41:19:88:48:38:2e:9a:9b:fa: 56:85:b6:2e:10:b0:47:4c:0e:0e:2e:77:7d:a8:f4: b5:87:38:cb:72:0c:95:8d:3c:a1:fc:4a:2d:89:64: 40:04:2c:2b:a4:20:ea:36:8d:b4:07:70:f4:03:16: 17:95:3c:86:66:c6:8b:c7:0e:48:b0:2c:45:12:f7: 37:24:65:84:26:34:2e:61:82:88:d2:75:6b:20:4d: 13:af:35:e3:9c:8f:34:de:a1:51:ca:d9:45:7a:73: 90:1e:1b:3b:f9:dc:c5:2b:3f:13:d1:c0:1b:68:15: 39:5e:c8:d2:55:20:1d:ee:b6:fa:1d:76:0a:62:37: 62:b1:5c:90:66:37:8a:51:15:98:9e:40:a0:13:bf: 86:dd:5f:94:ed:a9:62:89:c3:e5:70:51:0c:2f:e7: 8c:68:c8:74:dd:cf:ec:b5:e7:2b:db:67:a5:21:e8: c8:40:35:63:5b:ad:d3:6f:70:7d:9f:a5:02:90:0c: 66:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2B:01:49:D7:3D:EC:AC:77:88:DE:92:52:45:7E:A7:7D:E1:A3:9F X509v3 Authority Key Identifier: keyid:7B:38:5E:86:16:7D:5C:CC:22:FD:85:89:25:60:AE:76:0B:5F:28:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezhehhZ9XMwi_YWJJWCudgtfKJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b459f1-6499-4e14-acfb-ea788ad3296a/1/ezhehhZ9XMwi_YWJJWCudgtfKJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:ca:c9:c9:7e:e2:03:6e:ba:e9:39:18:9b:10:94:54:50:69: fd:1a:6b:a6:3d:3f:e4:b8:b4:be:5c:a4:fc:8c:1e:aa:71:d7: d6:0e:99:dd:10:9e:cf:2c:9c:4e:47:9d:36:d8:3f:4e:88:72: c9:70:36:db:a0:0e:51:b3:ec:b3:58:4b:ad:82:b6:81:04:07: 4c:e3:e0:5b:31:fd:0c:a2:a8:c9:e9:d0:23:9f:3c:28:06:af: 8a:f9:30:2a:98:7b:ca:45:57:c5:22:e7:5d:d3:d5:5b:00:91: b3:1c:d8:d2:f4:c7:a8:4a:c2:b3:31:d8:62:f1:02:37:9a:3a: c0:35:4a:fd:e3:d6:0b:b1:ca:03:af:81:8a:25:4a:cd:4b:68: d8:99:6e:3c:df:06:86:db:a3:cf:a1:3c:4c:eb:5d:2c:46:b1: 4e:62:95:b8:b0:d2:33:b1:3e:92:22:f1:e2:b4:af:68:4d:99: ea:70:cc:b3:f6:d5:62:7f:29:cd:38:ce:a3:e1:5a:af:9c:42: 4d:2f:ef:f0:40:4e:da:a0:59:75:b1:af:df:11:e9:66:2f:bb: af:4d:d8:83:c7:27:8f:e0:c9:d1:88:02:ab:c6:95:ad:e7:c3: 68:84:d5:0f:71:a5:21:8e:49:87:4f:b8:7e:93:1d:a9:08:47: 2e:bf:d5:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PpsmNzKp1OVaIXE55m0+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMzg1ZTg2MTY3ZDVjY2MyMmZkODU4OTI1NjBhZTc2MGI1 ZjI4OTgwHhcNMjYwMTI1MTMwMTE5WhcNMjYwMTI2MTMwMTE5WjAzMTEwLwYDVQQD EyhhMzJiMDE0OWQ3M2RlY2FjNzc4OGRlOTI1MjQ1N2VhNzdkZTFhMzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruzh7t/rWudMw1I6cHY1CnJj8Iv7 COG71NSf8dFbWwUSlTc1LBnWTfhpmkTDhfE548ZFNsJ+y/QjD/bsH344bC9BGYhI OC6am/pWhbYuELBHTA4OLnd9qPS1hzjLcgyVjTyh/EotiWRABCwrpCDqNo20B3D0 AxYXlTyGZsaLxw5IsCxFEvc3JGWEJjQuYYKI0nVrIE0TrzXjnI803qFRytlFenOQ Hhs7+dzFKz8T0cAbaBU5XsjSVSAd7rb6HXYKYjdisVyQZjeKURWYnkCgE7+G3V+U 7aliicPlcFEML+eMaMh03c/stecr22elIejIQDVjW63Tb3B9n6UCkAxm0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMrAUnXPeysd4jeklJFfqd94aOfMB8GA1UdIwQY MBaAFHs4XoYWfVzMIv2FiSVgrnYLXyiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXpoZWhoWjlYTXdpX1lXSkpXQ3VkZ3RmS0pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iNDU5ZjEtNjQ5OS00ZTE0LWFjZmIt ZWE3ODhhZDMyOTZhLzEvZXpoZWhoWjlYTXdpX1lXSkpXQ3VkZ3RmS0pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9iNDU5ZjEtNjQ5OS00ZTE0LWFjZmItZWE3ODhhZDMyOTZh LzEvZXpoZWhoWjlYTXdpX1lXSkpXQ3VkZ3RmS0pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8rJyX7i A2666TkYmxCUVFBp/Rprpj0/5Li0vlyk/IweqnHX1g6Z3RCezyycTkedNtg/Tohy yXA226AOUbPss1hLrYK2gQQHTOPgWzH9DKKoyenQI588KAavivkwKph7ykVXxSLn XdPVWwCRsxzY0vTHqErCszHYYvECN5o6wDVK/ePWC7HKA6+BiiVKzUto2JluPN8G htujz6E8TOtdLEaxTmKVuLDSM7E+kiLx4rSvaE2Z6nDMs/bVYn8pzTjOo+Far5xC TS/v8EBO2qBZdbGv3xHpZi+7r03Yg8cnj+DJ0YgCq8aVrefDaITVD3GlIY5Jh0+4 fpMdqQhHLr/VPQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:48 2026 by rpki-client