This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft File: EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json) Hash identifier: oOPyq7Z7cZEwOirQRvwmqanR2qbm7f6EcPnK87cgm4o= Subject key identifier: 85:65:72:2A:73:4B:DE:43:7E:DA:4C:1B:31:EA:28:69:56:40:AD:B7 Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e Certificate serial: 019BF5AC1F6B4560202DF82DABE59595D996 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft Manifest number: 14F1 Signing time: Sun 25 Jan 2026 15:00:56 +0000 Manifest this update: Sun 25 Jan 2026 15:00:56 +0000 Manifest next update: Mon 26 Jan 2026 15:00:56 +0000 Files and hashes: 1: 9EbWOWRofqpIjBa4vozEsoLxjYM.roa (hash: x7SOGLYmI9OiM+ggvSbmLAxdesreHqxj6Es4xw9IiFM=) 2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: By8NSeLmShx7Jj/uqVN5/TPcseP6EYuQgJ7NqCDmM88=) 3: uNs7lPFNPshEKIeKrT9kYzvj6PU.roa (hash: 1d4TVLPu2hGqSAh+/9a4WZpxJbG8fGNAEg4csKG4Azw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:1f:6b:45:60:20:2d:f8:2d:ab:e5:95:95:d9:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e Validity Not Before: Jan 25 15:00:56 2026 GMT Not After : Jan 26 15:00:56 2026 GMT Subject: CN=8565722a734bde437eda4c1b31ea28695640adb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:46:58:ef:93:bb:99:85:96:3d:57:7e:a9:eb: e8:8f:77:a7:a0:53:39:12:0c:15:4a:0b:e5:fe:c3: 47:8a:2a:00:b9:f8:74:11:6c:a5:bc:a1:bf:a6:e8: 9e:59:59:8e:94:a2:12:69:cd:82:56:ad:e4:db:43: 58:b4:dd:f1:fc:8d:ee:74:42:f4:7d:cd:e8:ec:ca: 01:b3:96:a4:96:34:b5:93:54:61:42:64:6c:88:3b: bb:df:2b:1e:99:62:9f:e1:0f:44:30:db:3b:f0:69: 3b:ae:9e:79:09:f3:1d:c1:ae:e1:d7:e4:f3:d4:d2: ae:08:51:ee:af:fa:63:a7:d5:c3:31:5b:f3:00:77: 60:92:af:be:9b:8d:85:df:d2:19:33:4b:92:36:45: e2:c7:a0:2b:bb:e3:18:2c:9b:8f:04:d2:0a:ca:9b: e3:6b:14:a5:b3:b6:9b:bb:87:08:f4:3e:5c:fd:d1: b6:2b:76:21:5a:34:5e:2e:e9:e3:a6:fe:5b:90:ce: 83:72:27:32:9a:76:66:03:ca:46:5d:a2:0e:a7:df: 9b:04:08:28:91:8c:fe:cf:02:f2:e0:8c:f9:17:31: e1:93:48:99:3b:af:79:87:8d:8e:8b:bf:6a:d9:ee: 63:d1:77:ca:bc:ca:13:d7:79:e8:76:8a:31:33:b2: 66:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:65:72:2A:73:4B:DE:43:7E:DA:4C:1B:31:EA:28:69:56:40:AD:B7 X509v3 Authority Key Identifier: keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:cb:48:e6:c8:86:64:d5:44:f9:b2:bb:f0:af:09:76:03:2a: 43:42:81:a9:5f:e5:b2:a6:aa:f7:f3:18:5c:c2:c8:1f:85:f2: 0b:d9:67:e3:fd:1a:f4:21:cf:c8:4c:ae:b3:c8:f7:9e:61:7e: 3b:e8:84:80:15:dc:01:56:44:fb:9c:3e:21:d9:f3:7c:a4:c1: 9a:dc:cf:a1:82:2b:40:80:4b:03:ea:23:dc:1a:56:e1:c8:36: da:eb:59:2e:a9:22:a8:0d:97:bd:f3:93:16:6d:56:6c:4a:d2: a6:54:4b:aa:8d:8a:d1:c6:a4:3d:40:47:77:17:db:47:95:d6: 72:78:7f:e9:ca:e2:0b:49:71:9b:85:80:56:47:3a:a2:83:26: be:2c:a5:df:d2:4a:32:32:a3:a9:71:f6:99:62:99:21:71:17: bc:6d:47:29:f6:12:9b:bd:54:54:c7:86:5a:8f:49:69:0c:69: b3:0d:01:e5:7b:7a:3e:b5:04:4f:a0:d9:ac:04:89:ea:26:be: 84:49:b3:47:8a:58:d8:74:ad:e9:17:b6:f6:76:af:16:83:d5: fc:29:87:91:15:a0:e6:6d:ab:21:f3:71:1c:66:e4:6d:69:65: 68:76:99:30:4f:b5:aa:f1:7e:67:1b:08:8d:e0:c8:aa:9a:de: 10:c6:87:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rB9rRWAgLfgtq+WVldmWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzMxMmE1MDE2YTNjZGNjMGI3ZTYxZGM3OWY1NWQzZDVl Y2IzN2UwHhcNMjYwMTI1MTUwMDU2WhcNMjYwMTI2MTUwMDU2WjAzMTEwLwYDVQQD Eyg4NTY1NzIyYTczNGJkZTQzN2VkYTRjMWIzMWVhMjg2OTU2NDBhZGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0ZY75O7mYWWPVd+qevoj3enoFM5 EgwVSgvl/sNHiioAufh0EWylvKG/puieWVmOlKISac2CVq3k20NYtN3x/I3udEL0 fc3o7MoBs5akljS1k1RhQmRsiDu73ysemWKf4Q9EMNs78Gk7rp55CfMdwa7h1+Tz 1NKuCFHur/pjp9XDMVvzAHdgkq++m42F39IZM0uSNkXix6Aru+MYLJuPBNIKypvj axSls7abu4cI9D5c/dG2K3YhWjReLunjpv5bkM6DcicymnZmA8pGXaIOp9+bBAgo kYz+zwLy4Iz5FzHhk0iZO695h42Oi79q2e5j0XfKvMoT13nodooxM7Jm8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVlcipzS95DftpMGzHqKGlWQK23MB8GA1UdIwQY MBaAFBBzEqUBajzcwLfmHcefVdPV7LN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhNU3BRRnFQTnpBdC1ZZHg1OVYwOVhzczM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC85OWY1YzMtNmI3NS00OGJjLWE4YWEt M2ZkYmE5NzY5MzAyLzEvRUhNU3BRRnFQTnpBdC1ZZHg1OVYwOVhzczM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC85OWY1YzMtNmI3NS00OGJjLWE4YWEtM2ZkYmE5NzY5MzAy LzEvRUhNU3BRRnFQTnpBdC1ZZHg1OVYwOVhzczM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANstI5siG ZNVE+bK78K8JdgMqQ0KBqV/lsqaq9/MYXMLIH4XyC9ln4/0a9CHPyEyus8j3nmF+ O+iEgBXcAVZE+5w+IdnzfKTBmtzPoYIrQIBLA+oj3BpW4cg22utZLqkiqA2XvfOT Fm1WbErSplRLqo2K0cakPUBHdxfbR5XWcnh/6criC0lxm4WAVkc6ooMmviyl39JK MjKjqXH2mWKZIXEXvG1HKfYSm71UVMeGWo9JaQxpsw0B5Xt6PrUET6DZrASJ6ia+ hEmzR4pY2HSt6Re29navFoPV/CmHkRWg5m2rIfNxHGbkbWllaHaZME+1qvF+ZxsI jeDIqpreEMaH7Q== -----END CERTIFICATE-----Generated at Mon Jan 26 01:50:44 2026 by rpki-client