This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft File: EL2oyoaUjZ_gKdoRGgyecNMEalo.mft (raw, json) Hash identifier: 8NX1/iV280GVxOrplW0g2TrkUHygBUsuoRf1AmcEw+I= Subject key identifier: 4A:97:60:65:CB:EA:8E:22:F7:A3:21:EA:3E:60:DC:4E:01:28:AF:91 Authority key identifier: 10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A Certificate issuer: /CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a Certificate serial: 019BF68784C87A865C9D7144E680AC029FD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft Manifest number: 0AC9 Signing time: Sun 25 Jan 2026 19:00:34 +0000 Manifest this update: Sun 25 Jan 2026 19:00:34 +0000 Manifest next update: Mon 26 Jan 2026 19:00:34 +0000 Files and hashes: 1: 26reGS5JGM2591eEk2BzmmAasUs.roa (hash: 3M1FfFlULQW8/C7W2Zc2Fn0/lGmaDkz7biCpnx34NUk=) 2: EL2oyoaUjZ_gKdoRGgyecNMEalo.crl (hash: KZaLZKejiXsfmghSBk4cTbFyLBDFgs5Y854f0aSWssc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:84:c8:7a:86:5c:9d:71:44:e6:80:ac:02:9f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a Validity Not Before: Jan 25 19:00:34 2026 GMT Not After : Jan 26 19:00:34 2026 GMT Subject: CN=4a976065cbea8e22f7a321ea3e60dc4e0128af91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:75:c6:b5:0c:25:cb:24:93:92:bc:7f:f0: 3a:2e:0f:86:51:dd:a7:01:15:ee:d3:ef:13:b2:aa: b9:00:d4:af:1c:8c:05:a2:1f:b5:bf:3a:6d:88:fe: 2f:88:8f:c2:f2:2d:72:43:cf:0a:d3:11:d6:58:40: 69:05:80:b6:07:87:54:aa:3c:fa:53:0d:fb:21:5b: b3:18:89:74:47:42:5f:b4:c4:bc:d0:14:33:33:28: d2:95:ce:39:bf:6c:cf:ac:1f:cd:76:70:f6:0a:f2: 7a:37:64:ad:b0:56:26:c8:a3:de:45:47:44:4e:0e: 18:16:3a:da:9c:33:7e:51:5f:85:ee:62:4a:4a:8b: b1:14:1c:8f:af:f8:21:6c:56:ba:c3:5b:24:ed:ed: b1:a9:8a:5e:f4:9b:79:e9:7f:fd:9b:1e:86:ef:41: dd:15:92:63:09:85:4c:93:01:67:b7:90:e5:a8:87: 6c:7b:e8:96:34:ac:80:fd:35:19:a1:5f:d1:89:26: 23:1b:dc:d1:f4:af:fd:7e:9f:42:ee:ac:5d:bf:48: 1d:e0:0a:b8:bf:01:60:d4:71:1f:4a:4d:77:d3:9f: 97:bd:7a:ba:9b:a3:a3:70:64:65:d3:e2:6b:0b:cc: 70:a9:99:8d:ab:78:ac:3f:83:6a:00:b7:27:17:7c: 2d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:97:60:65:CB:EA:8E:22:F7:A3:21:EA:3E:60:DC:4E:01:28:AF:91 X509v3 Authority Key Identifier: keyid:10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:52:d3:f2:2a:16:08:58:9f:4a:29:50:af:5f:4c:42:20:e5: 88:90:bf:9b:8e:6f:68:a7:0b:04:fa:7a:2d:b8:5d:b7:0c:b4: 6f:35:6c:ce:cc:97:fc:eb:80:bf:66:a0:e7:99:ce:58:90:e0: 8a:64:a1:e4:c2:ba:a9:cb:64:35:8d:a7:b0:b3:b4:05:2b:36: e4:ee:67:c9:e7:c5:a5:db:48:84:66:b8:71:55:70:2c:51:7c: 2b:ab:ac:c1:4d:8f:b0:9f:ad:da:c1:58:b9:e7:3f:70:fa:6f: 4d:f3:6f:f0:0b:68:1f:28:46:d9:1e:46:05:e2:da:32:3f:92: d6:47:db:48:25:1e:a9:46:3e:46:5e:57:8c:f1:fc:61:20:4b: ce:ef:93:d9:dd:e0:39:b6:7e:97:a9:20:9d:79:ee:c5:b9:42: 7c:ea:29:a2:99:c2:54:bf:74:4a:3f:f2:d2:aa:09:ae:25:09: 7a:f8:a4:85:d5:d4:77:65:8a:87:41:25:c2:60:e7:56:5e:74: db:47:12:37:b0:f8:a8:2c:43:60:f6:bf:f1:f7:1a:2b:70:8e: b8:18:17:1b:83:c3:ff:c7:e0:37:58:9f:37:8b:af:12:04:f7: 6f:02:e5:66:63:c7:63:5a:e9:0b:17:c9:7d:e4:59:aa:08:37: da:14:68:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h4TIeoZcnXFE5oCsAp/WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYmRhOGNhODY5NDhkOWZlMDI5ZGExMTFhMGM5ZTcwZDMw NDZhNWEwHhcNMjYwMTI1MTkwMDM0WhcNMjYwMTI2MTkwMDM0WjAzMTEwLwYDVQQD Eyg0YTk3NjA2NWNiZWE4ZTIyZjdhMzIxZWEzZTYwZGM0ZTAxMjhhZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYR1xrUMJcskk5K8f/A6Lg+GUd2n ARXu0+8Tsqq5ANSvHIwFoh+1vzptiP4viI/C8i1yQ88K0xHWWEBpBYC2B4dUqjz6 Uw37IVuzGIl0R0JftMS80BQzMyjSlc45v2zPrB/NdnD2CvJ6N2StsFYmyKPeRUdE Tg4YFjranDN+UV+F7mJKSouxFByPr/ghbFa6w1sk7e2xqYpe9Jt56X/9mx6G70Hd FZJjCYVMkwFnt5DlqIdse+iWNKyA/TUZoV/RiSYjG9zR9K/9fp9C7qxdv0gd4Aq4 vwFg1HEfSk1305+XvXq6m6OjcGRl0+JrC8xwqZmNq3isP4NqALcnF3wtLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqXYGXL6o4i96Mh6j5g3E4BKK+RMB8GA1UdIwQY MBaAFBC9qMqGlI2f4CnaERoMnnDTBGpaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUwyb3lvYVVqWl9nS2RvUkdneWVjTk1FYWxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jMGE3OTAtNGVkOS00NGMzLThkZmQt MGJlZjlhM2JhYmE4LzEvRUwyb3lvYVVqWl9nS2RvUkdneWVjTk1FYWxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9jMGE3OTAtNGVkOS00NGMzLThkZmQtMGJlZjlhM2JhYmE4 LzEvRUwyb3lvYVVqWl9nS2RvUkdneWVjTk1FYWxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVLT8ioW CFifSilQr19MQiDliJC/m45vaKcLBPp6Lbhdtwy0bzVszsyX/OuAv2ag55nOWJDg imSh5MK6qctkNY2nsLO0BSs25O5nyefFpdtIhGa4cVVwLFF8K6uswU2PsJ+t2sFY uec/cPpvTfNv8AtoHyhG2R5GBeLaMj+S1kfbSCUeqUY+Rl5XjPH8YSBLzu+T2d3g ObZ+l6kgnXnuxblCfOopopnCVL90Sj/y0qoJriUJevikhdXUd2WKh0ElwmDnVl50 20cSN7D4qCxDYPa/8fcaK3COuBgXG4PD/8fgN1ifN4uvEgT3bwLlZmPHY1rpCxfJ feRZqgg32hRocA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:49 2026 by rpki-client