This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft File: Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft (raw, json) Hash identifier: li85bsd3bXSh+oMsHozkGKdihEjIG18ZiPCimex5VPU= Subject key identifier: F1:36:B6:CF:8A:4E:A0:09:8A:91:46:EB:BA:16:EE:09:12:3C:9E:DB Authority key identifier: 12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D Certificate issuer: /CN=121f13882dd06d098ec49a759101329b1f201f1d Certificate serial: 019BF7637D61E3CD8ACF85AC27DA4D821204 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft Manifest number: 177C Signing time: Sun 25 Jan 2026 23:00:50 +0000 Manifest this update: Sun 25 Jan 2026 23:00:50 +0000 Manifest next update: Mon 26 Jan 2026 23:00:50 +0000 Files and hashes: 1: 03K81b7pfVVjypqVCITF7p4JxKM.roa (hash: PP40BChMOh4s2ABeNP+SORVGIO6bgC5+kty6waeJlqk=) 2: Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl (hash: W+vcUHEMcKflFrB/neUXiq5rH26fjJT7z36CJShH5go=) 3: kY0iPrlp2DFcIszfKgZ7jk3A9ls.roa (hash: B98fM5TLrUnwgXpz2kR4adHMCSlg8M1bTdaWmo1lkZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:7d:61:e3:cd:8a:cf:85:ac:27:da:4d:82:12:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=121f13882dd06d098ec49a759101329b1f201f1d Validity Not Before: Jan 25 23:00:50 2026 GMT Not After : Jan 26 23:00:50 2026 GMT Subject: CN=f136b6cf8a4ea0098a9146ebba16ee09123c9edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:00:22:36:5a:1c:22:d2:ac:18:9e:d5:09:36: 18:d6:22:e0:4c:ea:1d:f3:f4:02:a5:25:5d:79:25: 80:f7:ce:2f:ee:2a:71:3c:b9:a7:33:76:e5:45:7f: 7a:61:84:1c:e9:ba:76:6f:5a:49:40:2e:a3:81:8a: f5:bf:50:5d:7f:67:99:d1:f4:07:0b:9a:9a:5e:25: 64:88:28:64:06:2c:fd:dd:7b:f0:78:ee:cb:c2:55: e3:7a:08:09:20:90:a6:00:ad:68:a6:66:21:45:eb: 53:01:e1:9b:01:c7:0e:f7:9b:d1:80:f5:b6:58:7a: f1:7c:11:93:4e:e9:dd:92:df:bc:8c:7b:4b:40:9e: 43:b4:3f:5e:e9:42:97:7f:6b:2f:07:29:04:06:98: 4f:20:77:9b:7e:62:1d:98:67:f6:8b:ed:81:31:f0: 68:56:8f:a8:da:2a:54:9e:e5:bd:f0:f7:b9:3f:80: b8:72:b1:25:bf:f0:bb:66:4d:e6:78:fb:9f:db:4d: 79:f8:ca:c5:05:9c:c0:e5:c9:48:1b:97:e0:d7:a6: 15:d4:41:83:cc:53:81:ca:23:2f:dc:b8:c0:a2:75: db:3f:af:e4:1c:2a:8d:a2:6b:36:23:fe:4b:d4:f3: 43:c5:4c:b5:71:75:a5:4a:bb:62:cf:55:6b:3a:f3: 95:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:36:B6:CF:8A:4E:A0:09:8A:91:46:EB:BA:16:EE:09:12:3C:9E:DB X509v3 Authority Key Identifier: keyid:12:1F:13:88:2D:D0:6D:09:8E:C4:9A:75:91:01:32:9B:1F:20:1F:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eh8TiC3QbQmOxJp1kQEymx8gHx0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/35df0a-8af6-4ff0-b345-0d27767374ec/1/Eh8TiC3QbQmOxJp1kQEymx8gHx0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:74:a8:37:cc:23:9e:ed:62:a3:46:f3:99:a7:c0:b6:be:0b: 0d:25:9a:6a:2d:a1:49:67:74:76:6a:c7:40:d5:79:15:47:6c: 47:c5:21:91:ac:f5:f9:e1:7e:24:6c:1b:f6:a2:c2:3f:2d:df: 5c:a6:1d:e2:78:68:ef:3c:63:23:7c:25:76:7d:6c:ad:4f:02: bd:20:60:bb:da:4e:8f:28:47:10:56:78:00:96:6d:73:f7:6c: 75:5e:7a:55:13:be:67:b9:6f:b5:12:a3:51:57:0b:06:d0:dd: 23:4d:41:81:8d:52:23:6d:f9:21:96:d8:7e:96:c0:ad:71:ba: 77:97:c6:03:e5:98:da:aa:0c:f2:54:82:00:77:08:3d:36:58: 70:ed:99:fe:78:24:17:3e:6c:dc:53:50:17:34:bf:e0:a7:eb: 37:3f:69:e1:72:cf:33:0a:95:d2:25:53:a2:97:4c:74:b4:a5: 98:a4:61:98:e4:01:90:5e:d2:f9:84:22:8e:e5:7d:f4:d2:81: 40:8c:d9:00:32:66:7b:40:16:88:02:8e:16:0c:92:79:6d:6a: 5d:1f:09:17:80:d0:87:12:c2:90:82:47:1e:9d:8f:a1:b6:cf: ad:3d:9e:39:e1:1e:69:5a:ea:e4:76:7e:27:dc:f5:7e:cc:3b: 59:e8:d0:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y31h482Kz4WsJ9pNghIEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMWYxMzg4MmRkMDZkMDk4ZWM0OWE3NTkxMDEzMjliMWYy MDFmMWQwHhcNMjYwMTI1MjMwMDUwWhcNMjYwMTI2MjMwMDUwWjAzMTEwLwYDVQQD EyhmMTM2YjZjZjhhNGVhMDA5OGE5MTQ2ZWJiYTE2ZWUwOTEyM2M5ZWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gAiNlocItKsGJ7VCTYY1iLgTOod 8/QCpSVdeSWA984v7ipxPLmnM3blRX96YYQc6bp2b1pJQC6jgYr1v1Bdf2eZ0fQH C5qaXiVkiChkBiz93XvweO7LwlXjeggJIJCmAK1opmYhRetTAeGbAccO95vRgPW2 WHrxfBGTTundkt+8jHtLQJ5DtD9e6UKXf2svBykEBphPIHebfmIdmGf2i+2BMfBo Vo+o2ipUnuW98Pe5P4C4crElv/C7Zk3mePuf2015+MrFBZzA5clIG5fg16YV1EGD zFOByiMv3LjAonXbP6/kHCqNoms2I/5L1PNDxUy1cXWlSrtiz1VrOvOVgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPE2ts+KTqAJipFG67oW7gkSPJ7bMB8GA1UdIwQY MBaAFBIfE4gt0G0JjsSadZEBMpsfIB8dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUt MGQyNzc2NzM3NGVjLzEvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8zNWRmMGEtOGFmNi00ZmYwLWIzNDUtMGQyNzc2NzM3NGVj LzEvRWg4VGlDM1FiUW1PeEpwMWtRRXlteDhnSHgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXSoN8wj nu1io0bzmafAtr4LDSWaai2hSWd0dmrHQNV5FUdsR8Uhkaz1+eF+JGwb9qLCPy3f XKYd4nho7zxjI3wldn1srU8CvSBgu9pOjyhHEFZ4AJZtc/dsdV56VRO+Z7lvtRKj UVcLBtDdI01BgY1SI235IZbYfpbArXG6d5fGA+WY2qoM8lSCAHcIPTZYcO2Z/ngk Fz5s3FNQFzS/4KfrNz9p4XLPMwqV0iVTopdMdLSlmKRhmOQBkF7S+YQijuV99NKB QIzZADJme0AWiAKOFgySeW1qXR8JF4DQhxLCkIJHHp2PobbPrT2eOeEeaVrq5HZ+ J9z1fsw7WejQcg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:46 2026 by rpki-client