This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft File: ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json) Hash identifier: 4NRm73E9n1uMJ0J/XIvaEt37BMG585YUOnocHvwFAw0= Subject key identifier: 0F:A1:1E:5B:1A:6F:FB:F8:73:E0:CC:07:94:C0:D5:18:E6:E4:1B:22 Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1 Certificate issuer: /CN=111b09710acdb72086d658e90d8f025fa6a111b1 Certificate serial: 019BF53E5E4456FA52ECFDA3E65066EDC546 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft Manifest number: 0A87 Signing time: Sun 25 Jan 2026 13:01:03 +0000 Manifest this update: Sun 25 Jan 2026 13:01:03 +0000 Manifest next update: Mon 26 Jan 2026 13:01:03 +0000 Files and hashes: 1: 185JWtL1nJVygOFr95-RQtms_58.roa (hash: KasP2muj3cS9GbttmeKweMSTbVCW9PhTnMbBxoVVNls=) 2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: ESnVgz2wkzTzFOhh07s/daPERPtxYttecg1KNB1S07Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:5e:44:56:fa:52:ec:fd:a3:e6:50:66:ed:c5:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1 Validity Not Before: Jan 25 13:01:03 2026 GMT Not After : Jan 26 13:01:03 2026 GMT Subject: CN=0fa11e5b1a6ffbf873e0cc0794c0d518e6e41b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a8:a4:43:cc:3f:d9:95:45:44:0d:bb:0f:d9: e4:ef:93:ab:5c:21:fe:56:af:b6:c2:d9:4f:db:cf: a1:4a:ab:d0:a1:e4:93:ba:be:1d:45:07:40:3c:9c: c8:44:4e:8f:cd:d9:ec:02:16:be:15:3f:bb:b4:9b: bd:27:7c:14:de:ef:f7:23:b0:a3:03:d2:a3:36:57: 0d:9f:43:44:24:97:41:a1:8b:2b:a3:c4:40:b6:aa: 7c:91:11:97:00:87:7e:2a:05:60:c8:52:1d:e2:f0: 6e:9c:0c:32:5f:ee:f2:79:12:de:b7:31:70:c5:38: eb:9d:d8:a4:9f:64:ec:47:22:ab:16:f3:ab:96:3d: 6a:5c:69:c6:53:87:66:ad:4f:f9:c1:77:cd:bb:ea: 6a:58:98:f2:96:2a:5c:ac:76:5c:dc:43:74:e4:01: c3:af:df:a3:fc:ad:61:47:ed:a5:e3:57:96:5d:51: a1:f6:2c:b9:58:f0:31:45:3f:4f:8d:13:e2:13:1d: f6:70:e5:8e:91:59:82:e2:bf:6a:1e:9e:00:91:9a: af:da:26:1b:31:e5:51:01:71:2d:4d:ba:c5:2c:50: 2d:9e:2b:d2:59:ba:4d:6a:9e:f2:7f:cd:63:d6:9a: 1f:30:f3:b9:77:71:1f:a8:94:4d:25:51:ce:21:bc: 63:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A1:1E:5B:1A:6F:FB:F8:73:E0:CC:07:94:C0:D5:18:E6:E4:1B:22 X509v3 Authority Key Identifier: keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7a:89:c7:f8:bf:c7:57:73:da:85:b6:cc:00:67:7f:61:5e: b8:37:79:e3:b9:b0:ac:98:eb:ab:f7:be:4d:f3:78:bc:2d:96: 6b:83:6b:a8:34:0e:2f:f3:5c:ef:5e:16:0e:65:81:6d:2d:b6: 72:8d:e7:d7:ee:9a:29:c4:9d:1b:75:2a:5a:6e:d5:57:19:5d: 48:fe:d5:fa:c4:72:6a:96:4f:3e:32:64:39:f6:d8:36:f1:62: 73:af:7d:78:26:76:84:8d:c9:cc:28:4a:f2:fd:c8:d7:88:19: d0:ce:15:ae:ef:93:59:9b:6a:54:f0:9a:3e:88:68:4a:5a:05: 7f:99:eb:9d:67:c6:a7:0c:e3:65:21:c5:e3:61:ed:e9:ba:26: fe:8f:45:4c:0f:8d:b7:c6:ca:e0:af:34:b9:20:c0:98:5e:85: 36:e7:e0:b6:d4:7a:0d:5b:24:43:32:3d:e8:6b:fb:c9:d2:3b: 3b:d9:b0:67:4a:33:bd:22:a2:70:8c:78:2c:6b:6b:fe:79:7d: 6f:9f:6d:d7:bb:41:37:21:f6:f1:00:61:83:9d:7d:61:73:8a: 6b:f8:80:13:84:b5:b0:a0:fd:27:13:5a:76:40:ac:09:79:c8: 28:e3:dd:62:f4:1c:73:30:28:99:44:00:2f:c9:3c:0b:ec:1d: 12:29:9f:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pl5EVvpS7P2j5lBm7cVGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWIwOTcxMGFjZGI3MjA4NmQ2NThlOTBkOGYwMjVmYTZh MTExYjEwHhcNMjYwMTI1MTMwMTAzWhcNMjYwMTI2MTMwMTAzWjAzMTEwLwYDVQQD EygwZmExMWU1YjFhNmZmYmY4NzNlMGNjMDc5NGMwZDUxOGU2ZTQxYjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16ikQ8w/2ZVFRA27D9nk75OrXCH+ Vq+2wtlP28+hSqvQoeSTur4dRQdAPJzIRE6PzdnsAha+FT+7tJu9J3wU3u/3I7Cj A9KjNlcNn0NEJJdBoYsro8RAtqp8kRGXAId+KgVgyFId4vBunAwyX+7yeRLetzFw xTjrndikn2TsRyKrFvOrlj1qXGnGU4dmrU/5wXfNu+pqWJjylipcrHZc3EN05AHD r9+j/K1hR+2l41eWXVGh9iy5WPAxRT9PjRPiEx32cOWOkVmC4r9qHp4AkZqv2iYb MeVRAXEtTbrFLFAtnivSWbpNap7yf81j1pofMPO5d3EfqJRNJVHOIbxjUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+hHlsab/v4c+DMB5TA1Rjm5BsiMB8GA1UdIwQY MBaAFBEbCXEKzbcghtZY6Q2PAl+moRGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjkt N2JmMDM1NmE2YmFiLzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjktN2JmMDM1NmE2YmFi LzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATnqJx/i/ x1dz2oW2zABnf2FeuDd547mwrJjrq/e+TfN4vC2Wa4NrqDQOL/Nc714WDmWBbS22 co3n1+6aKcSdG3UqWm7VVxldSP7V+sRyapZPPjJkOfbYNvFic699eCZ2hI3JzChK 8v3I14gZ0M4Vru+TWZtqVPCaPohoSloFf5nrnWfGpwzjZSHF42Ht6bom/o9FTA+N t8bK4K80uSDAmF6FNufgttR6DVskQzI96Gv7ydI7O9mwZ0ozvSKicIx4LGtr/nl9 b59t17tBNyH28QBhg519YXOKa/iAE4S1sKD9JxNadkCsCXnIKOPdYvQcczAomUQA L8k8C+wdEimfuA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:41 2026 by rpki-client