This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json) Hash identifier: ItS1dU7OG9aXT3qo4Cs7Z5bAYktG1f1U/MZVF+5moug= Subject key identifier: 64:82:80:8C:47:BD:8F:62:D0:9F:64:DB:7A:34:F8:28:E5:E8:1B:33 Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b Certificate serial: 019BF79A8E165A39130A8D1CDFB9E63DDBAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 00:00:59 +0000 Manifest this update: Mon 26 Jan 2026 00:00:59 +0000 Manifest next update: Tue 27 Jan 2026 00:00:59 +0000 Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: y3HsHX3YUxn/F3EfLdXMd5JGEwI/TxoJurYVPILSRrA=) 2: qvuOHYoyggsc9g8iuTbD4CEqvBo.roa (hash: jWZoQBgvdhifzrjkxPZUHR/6QgarurKmN/mBEWXh09w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:8e:16:5a:39:13:0a:8d:1c:df:b9:e6:3d:db:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b Validity Not Before: Jan 26 00:00:59 2026 GMT Not After : Jan 27 00:00:59 2026 GMT Subject: CN=6482808c47bd8f62d09f64db7a34f828e5e81b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:08:27:1d:cb:a4:19:1a:c1:70:87:ee:34:d6: 9c:f1:3a:62:74:23:43:f6:60:92:c1:0b:91:13:1c: 8b:36:54:13:70:c1:a4:4f:d3:c4:3c:d8:3b:bf:78: 86:f1:7e:ac:f7:f3:2f:a9:09:8f:a2:7f:f2:9e:46: 19:27:de:ba:0b:6a:05:a5:b5:42:7b:9c:29:58:7b: b3:e7:56:af:67:fb:40:e8:32:9f:0d:9c:0b:17:0d: af:cf:bf:b4:4b:38:e9:57:98:f1:76:69:7b:60:4f: a5:bf:0e:97:6a:18:f7:ed:9f:85:ff:da:f7:ff:fe: cd:6a:2c:33:29:c3:db:23:e1:0d:f9:67:b2:ee:c2: 40:c7:a5:cb:c7:47:0e:17:61:57:9f:e0:43:25:bf: ee:04:71:f9:83:cf:a1:af:14:9b:b2:9b:8f:ee:26: 81:e8:4d:9e:f8:e5:41:33:27:96:ad:2f:d5:6e:08: 69:5a:16:95:b0:f1:81:90:31:00:f9:fc:89:39:df: 35:77:da:a5:24:d1:79:62:a5:7c:45:08:98:ae:76: 11:f2:b3:c3:64:0a:7b:3a:4f:4d:77:06:fc:df:9d: 5f:e4:a2:48:7e:a1:fe:51:a3:a4:d4:5e:c0:64:fb: 3e:9b:56:7a:0a:6c:92:70:2e:5c:65:93:de:1c:d8: ea:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:82:80:8C:47:BD:8F:62:D0:9F:64:DB:7A:34:F8:28:E5:E8:1B:33 X509v3 Authority Key Identifier: keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:80:78:fd:9f:48:71:f2:91:36:7d:0e:dd:e1:80:f1:4c:3c: 40:c0:2d:8e:8a:d4:e6:35:88:fd:05:dd:61:a6:a0:bb:8c:3b: fd:25:2d:43:c7:4b:06:41:a8:9b:16:4b:1c:62:0c:77:e8:37: bd:65:4b:f0:12:08:70:b3:cf:29:c3:6b:5c:4d:83:11:ad:7e: 1e:08:6a:b2:12:14:20:7b:0c:29:7f:d8:8b:a0:d0:c7:cc:87: 7d:67:5c:6f:74:ee:8a:a1:99:56:1c:6a:54:b9:1e:ba:7a:7c: be:a1:3e:68:b8:b6:13:57:d1:98:d8:4c:c0:fb:3a:75:c6:72: 72:4b:32:39:04:4d:f2:7f:7e:d2:ab:34:f8:28:f9:98:59:fe: ec:fb:c0:06:5a:aa:cb:e8:cc:03:20:0a:8e:e2:8c:96:85:60: 70:97:cd:3a:4a:9d:d1:a1:73:a3:e2:48:f7:07:97:e5:d2:79: 75:8c:cb:5f:d6:2f:8b:2c:07:f3:17:52:77:98:c0:54:c1:11: 30:0f:d6:d2:a8:d6:38:7c:90:54:d6:1e:0e:dc:51:58:d8:f6: 2b:51:f3:9a:25:55:ac:5e:17:e5:8e:86:05:a0:f8:12:b9:52: a4:ab:8a:0a:92:fb:d7:08:4d:de:d9:56:a7:08:33:ee:f4:23: 4c:4d:47:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mo4WWjkTCo0c37nmPdurMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYmM0MGJjYWI1ZTkwNTNhYjZkYjdkMTllMmEzOGRmMWI2 ZjlhNGIwHhcNMjYwMTI2MDAwMDU5WhcNMjYwMTI3MDAwMDU5WjAzMTEwLwYDVQQD Eyg2NDgyODA4YzQ3YmQ4ZjYyZDA5ZjY0ZGI3YTM0ZjgyOGU1ZTgxYjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQgnHcukGRrBcIfuNNac8TpidCND 9mCSwQuRExyLNlQTcMGkT9PEPNg7v3iG8X6s9/MvqQmPon/ynkYZJ966C2oFpbVC e5wpWHuz51avZ/tA6DKfDZwLFw2vz7+0SzjpV5jxdml7YE+lvw6Xahj37Z+F/9r3 //7NaiwzKcPbI+EN+Wey7sJAx6XLx0cOF2FXn+BDJb/uBHH5g8+hrxSbspuP7iaB 6E2e+OVBMyeWrS/VbghpWhaVsPGBkDEA+fyJOd81d9qlJNF5YqV8RQiYrnYR8rPD ZAp7Ok9Ndwb8351f5KJIfqH+UaOk1F7AZPs+m1Z6CmyScC5cZZPeHNjqUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSCgIxHvY9i0J9k23o0+Cjl6BszMB8GA1UdIwQY MBaAFBG8QLyrXpBTq2230Z4qON8bb5pLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kYWZmYjYtOGJkZi00MTFkLWI2YzQt YWU0Zjg0ZTE2Y2ExLzEvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9kYWZmYjYtOGJkZi00MTFkLWI2YzQtYWU0Zjg0ZTE2Y2Ex LzEvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIB4/Z9I cfKRNn0O3eGA8Uw8QMAtjorU5jWI/QXdYaagu4w7/SUtQ8dLBkGomxZLHGIMd+g3 vWVL8BIIcLPPKcNrXE2DEa1+HghqshIUIHsMKX/Yi6DQx8yHfWdcb3TuiqGZVhxq VLkeunp8vqE+aLi2E1fRmNhMwPs6dcZycksyOQRN8n9+0qs0+Cj5mFn+7PvABlqq y+jMAyAKjuKMloVgcJfNOkqd0aFzo+JI9weX5dJ5dYzLX9YviywH8xdSd5jAVMER MA/W0qjWOHyQVNYeDtxRWNj2K1HzmiVVrF4X5Y6GBaD4ErlSpKuKCpL71whN3tlW pwgz7vQjTE1HyA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:27 2026 by rpki-client