This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft File: EeB1VsGRhnrdkBAVgOz11bdClnE.mft (raw, json) Hash identifier: SGedUDqGqfBkr5t0lW5gNYnSwzLfkf4JAMJntXA4ats= Subject key identifier: 40:55:10:03:85:77:3B:23:B7:F1:2D:4B:B3:B7:4E:3F:96:46:0B:94 Authority key identifier: 11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71 Certificate issuer: /CN=11e07556c191867add90101580ecf5d5b7429671 Certificate serial: 019BF7D2004BB067E8F78EDD2858E2A84B61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft Manifest number: 12F3 Signing time: Mon 26 Jan 2026 01:01:33 +0000 Manifest this update: Mon 26 Jan 2026 01:01:33 +0000 Manifest next update: Tue 27 Jan 2026 01:01:33 +0000 Files and hashes: 1: EeB1VsGRhnrdkBAVgOz11bdClnE.crl (hash: NOLYTjNozmTK5PyzsDmYdbGnV9wdra5wzZrt1lTxiBs=) 2: tfF3LfL45Exv3rDezYwR5oBy1co.roa (hash: ZlVBaULfD37bwKisEYDbxu1CeranIZs3mSsmaYtd9JM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:00:4b:b0:67:e8:f7:8e:dd:28:58:e2:a8:4b:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11e07556c191867add90101580ecf5d5b7429671 Validity Not Before: Jan 26 01:01:33 2026 GMT Not After : Jan 27 01:01:33 2026 GMT Subject: CN=4055100385773b23b7f12d4bb3b74e3f96460b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fa:5c:24:42:5c:af:3d:52:57:a2:14:5b:23: fb:87:71:6f:71:8a:36:c8:c8:97:40:80:96:01:a3: dd:a2:31:a2:1f:2e:0c:a1:9e:25:66:c4:9c:4a:b9: 30:f7:7c:cb:46:52:cf:47:59:e5:1d:40:67:26:27: 88:dc:94:2a:b8:b4:4a:78:63:14:48:20:8b:0b:2a: 7a:16:ba:37:d4:52:14:c6:16:b0:1d:a7:fe:fc:b8: 77:86:02:86:ec:44:94:8a:03:71:6f:d2:e9:10:2f: b8:07:88:68:fc:b1:10:34:6e:e6:af:1e:ea:b9:88: 3c:62:10:e8:df:27:50:24:a6:d5:c0:09:a7:43:d0: 69:df:fd:07:32:81:e4:2e:c8:97:c0:1f:4a:38:02: 81:12:6e:7b:c9:74:f1:a6:ab:17:38:44:aa:c6:d8: 4e:ae:7d:39:99:55:15:2d:96:ba:0f:16:21:64:1b: e7:2c:dd:31:9d:7c:e4:2b:93:c5:0c:0b:29:48:d8: 33:66:12:10:d4:5f:91:8f:bd:eb:ad:9c:3e:9a:7f: 57:7e:63:58:46:e8:0d:38:ae:07:42:d7:c7:a0:ee: b5:09:7e:4e:a9:f7:84:f7:51:cc:3a:73:fe:a0:06: fc:74:cd:72:7b:65:04:59:de:7a:59:69:f2:55:0c: d3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:55:10:03:85:77:3B:23:B7:F1:2D:4B:B3:B7:4E:3F:96:46:0B:94 X509v3 Authority Key Identifier: keyid:11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:fd:d0:fe:2a:74:58:7d:d9:03:49:c8:f5:7f:6d:88:8a:fb: 0a:c2:4f:8b:95:9d:65:b7:96:d1:cb:1d:16:69:d0:60:9a:85: 87:31:8d:d4:23:26:de:af:3f:52:4b:be:43:af:cf:fe:4a:c7: 04:de:9e:6b:62:d4:0f:7c:44:97:aa:02:3e:48:4e:10:61:f1: b3:8c:49:8b:b7:99:80:17:03:41:e4:02:14:52:61:44:e4:32: 9d:8a:2d:39:e7:07:cf:f1:81:5a:15:35:38:25:5c:93:b2:30: 3d:cb:95:de:67:41:e5:9f:7c:b1:89:47:1a:5d:96:dc:5f:69: 38:7c:88:34:b7:08:17:62:b5:a7:c3:e9:bc:cf:cd:b5:98:ad: a3:d9:3f:8f:47:76:6a:af:3b:f4:c4:0b:ac:74:86:e4:67:de: 8b:9c:4a:dd:c2:66:15:20:68:e3:97:e9:1d:d0:2c:57:a7:35: 64:9c:07:d3:0e:03:dd:09:48:3b:a9:0c:cb:5d:62:b9:c6:44: d8:70:c8:63:60:2c:bd:59:13:fa:bc:61:0c:7e:bb:fa:1d:17: e9:9a:d6:fd:9d:b6:e5:62:55:b7:32:9b:a0:cb:dc:a5:06:df: 38:3c:95:7f:1c:03:25:20:76:7c:9d:c2:4b:cf:fc:de:69:36: 5d:71:5a:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30gBLsGfo947dKFjiqEthMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZTA3NTU2YzE5MTg2N2FkZDkwMTAxNTgwZWNmNWQ1Yjc0 Mjk2NzEwHhcNMjYwMTI2MDEwMTMzWhcNMjYwMTI3MDEwMTMzWjAzMTEwLwYDVQQD Eyg0MDU1MTAwMzg1NzczYjIzYjdmMTJkNGJiM2I3NGUzZjk2NDYwYjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvpcJEJcrz1SV6IUWyP7h3FvcYo2 yMiXQICWAaPdojGiHy4MoZ4lZsScSrkw93zLRlLPR1nlHUBnJieI3JQquLRKeGMU SCCLCyp6Fro31FIUxhawHaf+/Lh3hgKG7ESUigNxb9LpEC+4B4ho/LEQNG7mrx7q uYg8YhDo3ydQJKbVwAmnQ9Bp3/0HMoHkLsiXwB9KOAKBEm57yXTxpqsXOESqxthO rn05mVUVLZa6DxYhZBvnLN0xnXzkK5PFDAspSNgzZhIQ1F+Rj73rrZw+mn9XfmNY RugNOK4HQtfHoO61CX5OqfeE91HMOnP+oAb8dM1ye2UEWd56WWnyVQzTUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBVEAOFdzsjt/EtS7O3Tj+WRguUMB8GA1UdIwQY MBaAFBHgdVbBkYZ63ZAQFYDs9dW3QpZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZTI5MjktNjc0ZC00OTQ2LTgwNTMt YTQzNjhhMWI1ZjYzLzEvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hZTI5MjktNjc0ZC00OTQ2LTgwNTMtYTQzNjhhMWI1ZjYz LzEvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYP3Q/ip0 WH3ZA0nI9X9tiIr7CsJPi5WdZbeW0csdFmnQYJqFhzGN1CMm3q8/Uku+Q6/P/krH BN6ea2LUD3xEl6oCPkhOEGHxs4xJi7eZgBcDQeQCFFJhROQynYotOecHz/GBWhU1 OCVck7IwPcuV3mdB5Z98sYlHGl2W3F9pOHyINLcIF2K1p8PpvM/NtZito9k/j0d2 aq879MQLrHSG5Gfei5xK3cJmFSBo45fpHdAsV6c1ZJwH0w4D3QlIO6kMy11iucZE 2HDIY2AsvVkT+rxhDH67+h0X6ZrW/Z225WJVtzKboMvcpQbfODyVfxwDJSB2fJ3C S8/83mk2XXFaTg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:42 2026 by rpki-client