This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft File: e6dzYuMUWG0NIYhNAaha23dmW3Q.mft (raw, json) Hash identifier: gk2lEHmkyAn3iOctvjFWiFLuDMw6Cg/lVVNYT1WOWSY= Subject key identifier: B4:9B:73:B7:17:4D:AB:29:93:CB:9A:2A:F6:D3:F4:D8:ED:88:26:3B Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74 Certificate issuer: /CN=7ba77362e314586d0d21884d01a85adb77665b74 Certificate serial: 019BF8AD44B7AFD15812C98415A342828218 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft Manifest number: 17EE Signing time: Mon 26 Jan 2026 05:01:03 +0000 Manifest this update: Mon 26 Jan 2026 05:01:03 +0000 Manifest next update: Tue 27 Jan 2026 05:01:03 +0000 Files and hashes: 1: IrrCu1SZ2AuOIXndqDUMakTHS3Q.roa (hash: cDrqltz5JUNSKHmEVA8KR/liv1EQj+DHA9UlbgBwDnc=) 2: e6dzYuMUWG0NIYhNAaha23dmW3Q.crl (hash: SUkN8MxqjCxyqu/dUPSiwdC3phD5feLjrnHHto36XQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:44:b7:af:d1:58:12:c9:84:15:a3:42:82:82:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74 Validity Not Before: Jan 26 05:01:03 2026 GMT Not After : Jan 27 05:01:03 2026 GMT Subject: CN=b49b73b7174dab2993cb9a2af6d3f4d8ed88263b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:be:e0:e0:28:d6:bd:52:cf:7e:1b:06:62:78: 07:38:a6:43:ce:70:a3:98:10:29:4d:30:7d:4c:53: 37:6a:89:8e:ae:7a:fc:61:34:94:7c:b7:a5:5f:a1: 9a:ac:e9:3c:93:a3:58:29:c5:86:27:61:f4:ec:88: 90:44:0b:bb:c4:d9:2c:7d:aa:43:3a:37:31:24:11: 5a:0d:d7:5d:4b:3c:d2:99:9b:45:b3:c4:03:a6:50: 7a:c3:f4:7f:0c:bf:ef:4d:af:31:41:9a:54:cf:ee: e2:b3:26:bd:bf:9b:36:1f:77:9d:0e:cc:0d:49:a8: 14:d6:09:21:64:96:25:b6:18:4a:44:3f:30:fb:ec: 49:85:b9:54:80:90:9d:3e:25:9e:32:bb:18:09:fa: f8:41:69:78:bd:ac:5f:ab:0a:d3:7d:a2:f1:42:7d: 60:77:af:b7:61:39:1a:3f:f6:5c:7f:64:f7:9f:70: 18:a7:1e:1c:25:7a:72:0d:07:c0:b5:b0:67:4c:9d: ea:2e:6a:db:18:96:a1:92:7f:11:a1:2c:8f:87:39: f8:f2:5c:81:21:2b:0d:ae:08:5d:15:8a:62:c1:1e: be:1d:b7:9a:30:89:8a:11:74:56:2a:8c:54:53:e1: 61:2a:c6:6f:df:e0:e3:bb:e0:86:f3:4e:bf:84:21: 50:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9B:73:B7:17:4D:AB:29:93:CB:9A:2A:F6:D3:F4:D8:ED:88:26:3B X509v3 Authority Key Identifier: keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:15:8e:0e:61:d1:fa:30:24:9b:c6:9a:11:e8:1a:84:12:23: 99:31:09:ce:31:00:a7:f3:92:fd:b4:31:df:39:a3:8a:b3:3e: 95:e8:45:2c:5b:bc:9a:74:10:28:d6:1f:95:14:5d:0e:1a:5b: a7:c5:40:2e:c9:71:d2:0f:41:36:ca:b2:6d:d5:b6:70:7f:39: 97:db:0b:56:c6:9b:97:69:3e:ca:fd:58:0c:7c:83:87:81:fc: fd:42:2d:9e:15:38:71:f5:8c:6e:a6:3f:08:e9:62:82:cf:50: a0:5f:0d:e8:b9:7a:7f:72:02:59:73:48:6d:0b:9b:78:8b:d2: 7b:cf:7f:e8:d4:66:95:3f:69:eb:4b:b3:44:78:ff:18:d4:ff: de:a2:7b:21:a6:29:90:67:4e:ca:c5:1b:30:9c:d5:2b:6b:42: 89:cb:f9:ec:1d:db:f1:56:88:85:ea:c1:a0:8e:66:6c:59:a1: ac:d9:49:9e:ff:03:f2:2c:85:9e:b5:55:67:a4:48:90:ce:d8: 99:22:ef:36:93:37:c1:18:5c:6c:65:a0:89:9f:72:8c:f2:59: df:1a:be:2c:70:49:80:ed:3e:6e:b2:97:e5:b3:93:32:34:1c: 84:87:a7:40:85:3e:e9:13:53:26:e2:05:5b:e9:de:f4:61:a1: 7e:65:dd:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rUS3r9FYEsmEFaNCgoIYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYTc3MzYyZTMxNDU4NmQwZDIxODg0ZDAxYTg1YWRiNzc2 NjViNzQwHhcNMjYwMTI2MDUwMTAzWhcNMjYwMTI3MDUwMTAzWjAzMTEwLwYDVQQD EyhiNDliNzNiNzE3NGRhYjI5OTNjYjlhMmFmNmQzZjRkOGVkODgyNjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr7g4CjWvVLPfhsGYngHOKZDznCj mBApTTB9TFM3aomOrnr8YTSUfLelX6GarOk8k6NYKcWGJ2H07IiQRAu7xNksfapD OjcxJBFaDdddSzzSmZtFs8QDplB6w/R/DL/vTa8xQZpUz+7isya9v5s2H3edDswN SagU1gkhZJYlthhKRD8w++xJhblUgJCdPiWeMrsYCfr4QWl4vaxfqwrTfaLxQn1g d6+3YTkaP/Zcf2T3n3AYpx4cJXpyDQfAtbBnTJ3qLmrbGJahkn8RoSyPhzn48lyB ISsNrghdFYpiwR6+HbeaMImKEXRWKoxUU+FhKsZv3+Dju+CG806/hCFQRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSbc7cXTaspk8uaKvbT9NjtiCY7MB8GA1UdIwQY MBaAFHunc2LjFFhtDSGITQGoWtt3Zlt0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTZkell1TVVXRzBOSVloTkFhaGEyM2RtVzNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jYTY5OGUtZTZhOC00MWY0LTg2OWMt OTYxZjQzNzEzNWM2LzEvZTZkell1TVVXRzBOSVloTkFhaGEyM2RtVzNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9jYTY5OGUtZTZhOC00MWY0LTg2OWMtOTYxZjQzNzEzNWM2 LzEvZTZkell1TVVXRzBOSVloTkFhaGEyM2RtVzNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABWODmHR +jAkm8aaEegahBIjmTEJzjEAp/OS/bQx3zmjirM+lehFLFu8mnQQKNYflRRdDhpb p8VALslx0g9BNsqybdW2cH85l9sLVsabl2k+yv1YDHyDh4H8/UItnhU4cfWMbqY/ COligs9QoF8N6Ll6f3ICWXNIbQubeIvSe89/6NRmlT9p60uzRHj/GNT/3qJ7IaYp kGdOysUbMJzVK2tCicv57B3b8VaIherBoI5mbFmhrNlJnv8D8iyFnrVVZ6RIkM7Y mSLvNpM3wRhcbGWgiZ9yjPJZ3xq+LHBJgO0+brKX5bOTMjQchIenQIU+6RNTJuIF W+ne9GGhfmXdsw== -----END CERTIFICATE-----Generated at Mon Jan 26 10:18:40 2026 by rpki-client