This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft File: EX-Mmn_H8TZY1ir76285iC2lEcw.mft (raw, json) Hash identifier: L0gio1FjWmc5SP9xEl78v77EWUVUjd+AiGs1M+8JxkU= Subject key identifier: B7:2E:7F:09:3F:3D:6B:3C:3C:85:A8:D2:03:77:39:0F:3D:98:57:07 Authority key identifier: 11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC Certificate issuer: /CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc Certificate serial: 019BF687E647130AB733C59C03DD675436B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 19:00:59 +0000 Manifest this update: Sun 25 Jan 2026 19:00:59 +0000 Manifest next update: Mon 26 Jan 2026 19:00:59 +0000 Files and hashes: 1: EX-Mmn_H8TZY1ir76285iC2lEcw.crl (hash: c60SczoxeW9cDU4xU7hV+0lUqWs+5ypXmdaLnkXQhec=) 2: yZepWYso39Ktfsnpae8Nahf1b8I.roa (hash: Yiho9bvazJTbyZ+iL2xK6Eorgx+qR/zGpVpEPxoE5ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:e6:47:13:0a:b7:33:c5:9c:03:dd:67:54:36:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc Validity Not Before: Jan 25 19:00:59 2026 GMT Not After : Jan 26 19:00:59 2026 GMT Subject: CN=b72e7f093f3d6b3c3c85a8d20377390f3d985707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:54:31:24:29:28:02:70:01:97:7f:59:0a:96: ec:59:b1:96:36:fd:91:cd:a6:b0:75:75:2d:cf:28: 6f:8b:15:0a:8f:d7:bc:5e:b1:0e:a6:78:e1:da:13: d6:e6:5c:a4:4a:0b:af:33:1f:c2:20:de:f2:eb:a4: dc:2c:bf:d8:fc:20:50:1a:2a:d1:d0:60:86:7d:39: 64:b7:84:7c:d0:96:dc:f6:e1:5b:bc:e9:16:4c:26: be:1e:e8:0a:6e:fa:39:aa:12:91:6c:4b:d1:b8:a8: 1f:0e:d4:43:27:7f:6b:35:d2:bc:42:a1:6e:15:f1: 1c:a0:04:a5:86:7b:73:b0:fc:f6:5d:bd:e1:46:bd: 79:34:58:74:f4:f0:13:60:e7:70:56:ef:66:b2:c0: 2e:4c:50:ed:6a:5c:a2:86:e2:17:7a:f6:95:37:c5: dd:dd:ef:7b:c2:88:43:fe:17:a6:28:39:6d:ec:41: a1:13:22:a1:8e:4b:81:93:9a:cb:48:57:e6:68:2b: 3e:fb:83:91:af:c5:5b:ab:53:ee:75:56:4e:ac:0d: 94:4c:9c:c4:1a:8e:87:73:84:f4:06:06:04:2f:44: 1a:66:c1:66:e4:78:af:70:7f:ad:97:fa:f8:d7:3b: 8e:84:20:7f:58:8d:60:7f:52:fd:97:61:ed:ee:7f: fa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2E:7F:09:3F:3D:6B:3C:3C:85:A8:D2:03:77:39:0F:3D:98:57:07 X509v3 Authority Key Identifier: keyid:11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:0b:e9:d5:6f:8b:9b:e0:72:2e:c4:96:54:0a:20:e6:e0:b4: ba:04:ce:bc:ba:9d:03:5a:61:b3:ac:b1:dd:28:73:10:2e:0f: 3c:f8:98:82:73:80:9c:af:34:f6:bf:ce:48:79:41:a4:05:fc: 22:0e:9a:80:81:43:0c:cb:00:d9:0b:a9:70:be:fb:c0:8a:87: c1:2d:e3:34:38:48:10:d8:7b:7c:cc:a5:f2:56:ea:cd:2e:9d: 73:45:73:54:97:71:4b:e2:fc:e8:bb:7d:57:05:3d:14:9b:02: 94:ce:13:cb:a1:b5:c5:be:4b:7b:ea:9e:c9:7e:19:80:f2:e9: a3:3c:26:0f:01:1c:17:75:3b:5a:00:de:1e:c5:19:e6:3d:5f: 7d:ac:e2:8a:89:23:d4:ea:69:f8:7d:de:b4:ac:4c:66:16:a4: fc:37:69:07:f1:f4:bc:99:7f:c9:55:7b:1b:e5:e4:74:af:53: 94:36:43:2f:db:c6:44:60:9c:b2:8f:5d:8c:46:46:ec:cb:81: f8:8c:cd:cd:24:f1:ce:8b:e9:77:32:c4:ec:0a:08:7b:fb:fc: 57:f0:8e:e1:79:bd:8c:d6:c6:db:80:1b:87:e3:08:b5:6a:82: f3:d7:dd:79:f4:2e:a6:33:cb:2e:4b:60:c2:f0:30:73:54:73: 2c:3e:51:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h+ZHEwq3M8WcA91nVDa2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2Y4YzlhN2ZjN2YxMzY1OGQ2MmFmYmViNmYzOTg4MmRh NTExY2MwHhcNMjYwMTI1MTkwMDU5WhcNMjYwMTI2MTkwMDU5WjAzMTEwLwYDVQQD EyhiNzJlN2YwOTNmM2Q2YjNjM2M4NWE4ZDIwMzc3MzkwZjNkOTg1NzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlQxJCkoAnABl39ZCpbsWbGWNv2R zaawdXUtzyhvixUKj9e8XrEOpnjh2hPW5lykSguvMx/CIN7y66TcLL/Y/CBQGirR 0GCGfTlkt4R80Jbc9uFbvOkWTCa+HugKbvo5qhKRbEvRuKgfDtRDJ39rNdK8QqFu FfEcoASlhntzsPz2Xb3hRr15NFh09PATYOdwVu9mssAuTFDtalyihuIXevaVN8Xd 3e97wohD/hemKDlt7EGhEyKhjkuBk5rLSFfmaCs++4ORr8Vbq1PudVZOrA2UTJzE Go6Hc4T0BgYEL0QaZsFm5HivcH+tl/r41zuOhCB/WI1gf1L9l2Ht7n/6xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcufwk/PWs8PIWo0gN3OQ89mFcHMB8GA1UdIwQY MBaAFBF/jJp/x/E2WNYq++tvOYgtpRHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVgtTW1uX0g4VFpZMWlyNzYyODVpQzJsRWN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xMjJiMmQtNWQ4Ny00NzhjLTg1MjIt ODlkNjZhYzcyZTAyLzEvRVgtTW1uX0g4VFpZMWlyNzYyODVpQzJsRWN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8xMjJiMmQtNWQ4Ny00NzhjLTg1MjItODlkNjZhYzcyZTAy LzEvRVgtTW1uX0g4VFpZMWlyNzYyODVpQzJsRWN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyAvp1W+L m+ByLsSWVAog5uC0ugTOvLqdA1phs6yx3ShzEC4PPPiYgnOAnK809r/OSHlBpAX8 Ig6agIFDDMsA2QupcL77wIqHwS3jNDhIENh7fMyl8lbqzS6dc0VzVJdxS+L86Lt9 VwU9FJsClM4Ty6G1xb5Le+qeyX4ZgPLpozwmDwEcF3U7WgDeHsUZ5j1ffaziiokj 1Opp+H3etKxMZhak/DdpB/H0vJl/yVV7G+XkdK9TlDZDL9vGRGCcso9djEZG7MuB +IzNzSTxzovpdzLE7AoIe/v8V/CO4Xm9jNbG24Abh+MItWqC89fdefQupjPLLktg wvAwc1RzLD5Rtw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:05 2026 by rpki-client