This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft File: 738xvW2YXkUpnDHQUspKjr71V4s.mft (raw, json) Hash identifier: UQU/b80LJ4zr28VOUViyKGoHMeeZHWzWSImm3JTYv58= Subject key identifier: 16:E6:31:DA:85:01:BB:35:3B:D5:B7:FA:8A:26:54:42:5B:04:77:D5 Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b Certificate serial: 019BF3BDF4AAF4C24F0138D2449287E3B1F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 06:01:10 +0000 Manifest this update: Sun 25 Jan 2026 06:01:10 +0000 Manifest next update: Mon 26 Jan 2026 06:01:10 +0000 Files and hashes: 1: 1hsgVZkjGiwPGwbT4Yu5mw_gR1E.roa (hash: sbJm7A7LKoBguraWEh+cEaoDEunVqRtivursvoz8Rkw=) 2: 738xvW2YXkUpnDHQUspKjr71V4s.crl (hash: OkIgjodTaNhRSEchXz5NPPWz8xCC0STNfM92T3HQj7E=) 3: uTawXit8aKEj4eVxiOZXv6mDUXQ.roa (hash: XkBO6tOwqDjqwxQC1w04z4HLKY8F+H0OZu2mmN1+iAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:f4:aa:f4:c2:4f:01:38:d2:44:92:87:e3:b1:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b Validity Not Before: Jan 25 06:01:10 2026 GMT Not After : Jan 26 06:01:10 2026 GMT Subject: CN=16e631da8501bb353bd5b7fa8a2654425b0477d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:53:a2:0d:a6:5f:a9:2a:2b:c3:97:51:57:a2: cd:f2:90:56:d6:f6:cb:9b:30:93:d3:55:bd:15:5a: 9e:44:bb:c9:53:57:6b:46:d7:c2:6f:24:0b:e7:bc: a0:7e:b3:42:b2:c7:b3:b5:15:30:46:de:e4:a1:0f: 66:69:a5:ea:67:13:b4:75:b2:81:71:96:d1:9b:61: e9:4a:df:60:70:ee:c4:99:54:3c:e6:ed:3d:73:a8: 53:2d:4b:c2:89:25:98:fc:e9:09:1f:29:59:d3:75: e7:c6:d3:27:76:71:81:83:11:31:48:79:ef:20:08: c3:af:bb:75:21:5d:a0:71:8a:f5:17:3a:45:ac:3e: 24:54:39:2e:36:ab:e0:48:3f:a6:71:e8:c2:1c:27: 8a:02:1b:dc:07:3e:04:6c:87:f0:4c:c1:cc:9d:ba: d9:5b:8d:04:18:ce:47:af:61:d0:31:e1:f7:e4:f5: 1c:70:05:fa:47:ee:2c:f7:9e:1f:fd:1c:00:5d:9c: c2:08:f2:d9:03:44:76:bf:10:5b:41:75:41:97:ae: 2f:23:2d:59:bb:bd:25:c5:49:e1:f2:9a:a7:5c:03: 4f:27:04:70:52:d0:ce:2e:49:61:d2:9c:1f:c5:56: 0f:2d:5c:a6:6b:37:45:22:20:2c:1f:56:58:8c:2c: e0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E6:31:DA:85:01:BB:35:3B:D5:B7:FA:8A:26:54:42:5B:04:77:D5 X509v3 Authority Key Identifier: keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:48:ac:3b:e7:cd:1f:88:4f:77:ea:d6:97:63:97:5d:c3:0b: 68:5e:a4:6d:b0:c2:b4:65:d8:5b:34:d9:3e:f0:28:05:87:0c: 49:41:81:a4:87:4e:28:0f:6d:86:b6:a4:49:3e:a4:c0:c2:03: 3a:74:9c:a5:02:93:0e:1b:da:d2:f7:a7:32:42:d4:71:ab:7c: cc:1b:bc:4d:f8:85:f4:18:fa:0a:18:2e:07:af:ec:91:7a:82: b4:77:a6:b4:2f:0b:f6:08:a1:0c:82:1e:be:57:84:8c:33:93: b6:bd:a2:89:9b:ce:fb:3b:62:9b:58:3c:95:76:00:ba:b3:6f: 2e:c4:7a:e6:15:1a:26:5b:c9:f2:7d:0f:af:eb:40:58:80:61: 3e:b2:81:19:4a:3d:ee:9e:d2:4f:29:f3:83:5b:f4:9d:88:eb: 88:85:9c:50:31:21:9d:2e:50:6d:19:9d:03:33:36:ef:56:53: dd:29:5b:94:ef:b3:09:5b:19:b7:79:1e:e8:69:d5:51:e2:96: 09:b4:52:6d:06:77:f2:42:86:cf:1d:67:bd:c1:84:b1:76:b1: e2:be:92:91:0f:16:f4:d9:8a:57:e1:ea:af:35:d8:0f:ba:be: fc:0a:75:92:96:48:e3:ac:b3:42:d6:eb:7e:bf:9a:15:ca:34: ad:75:63:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvfSq9MJPATjSRJKH47H1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmN2YzMWJkNmQ5ODVlNDUyOTljMzFkMDUyY2E0YThlYmVm NTU3OGIwHhcNMjYwMTI1MDYwMTEwWhcNMjYwMTI2MDYwMTEwWjAzMTEwLwYDVQQD EygxNmU2MzFkYTg1MDFiYjM1M2JkNWI3ZmE4YTI2NTQ0MjViMDQ3N2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41OiDaZfqSorw5dRV6LN8pBW1vbL mzCT01W9FVqeRLvJU1drRtfCbyQL57ygfrNCsseztRUwRt7koQ9maaXqZxO0dbKB cZbRm2HpSt9gcO7EmVQ85u09c6hTLUvCiSWY/OkJHylZ03XnxtMndnGBgxExSHnv IAjDr7t1IV2gcYr1FzpFrD4kVDkuNqvgSD+mcejCHCeKAhvcBz4EbIfwTMHMnbrZ W40EGM5Hr2HQMeH35PUccAX6R+4s954f/RwAXZzCCPLZA0R2vxBbQXVBl64vIy1Z u70lxUnh8pqnXANPJwRwUtDOLklh0pwfxVYPLVymazdFIiAsH1ZYjCzgzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbmMdqFAbs1O9W3+oomVEJbBHfVMB8GA1UdIwQY MBaAFO9/Mb1tmF5FKZwx0FLKSo6+9VeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQt YTc2M2RmM2FlZTZkLzEvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lYmVhNjAtZDIzMS00ODBiLTg0ZmQtYTc2M2RmM2FlZTZk LzEvNzM4eHZXMllYa1VwbkRIUVVzcEtqcjcxVjRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUisO+fN H4hPd+rWl2OXXcMLaF6kbbDCtGXYWzTZPvAoBYcMSUGBpIdOKA9thrakST6kwMID OnScpQKTDhva0venMkLUcat8zBu8TfiF9Bj6ChguB6/skXqCtHemtC8L9gihDIIe vleEjDOTtr2iiZvO+ztim1g8lXYAurNvLsR65hUaJlvJ8n0Pr+tAWIBhPrKBGUo9 7p7STynzg1v0nYjriIWcUDEhnS5QbRmdAzM271ZT3SlblO+zCVsZt3ke6GnVUeKW CbRSbQZ38kKGzx1nvcGEsXax4r6SkQ8W9NmKV+HqrzXYD7q+/Ap1kpZI46yzQtbr fr+aFco0rXVjaw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:59:20 2026 by rpki-client