This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft File: eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft (raw, json) Hash identifier: kEVv3dfVS01ARtbbxOyzJSRh8+uVuKJyLX3ltvvSa74= Subject key identifier: AE:A4:D0:2C:4C:70:52:85:B9:75:49:B0:84:91:4D:37:EB:78:AE:4F Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2 Certificate issuer: /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2 Certificate serial: 019BF7D21EA8279F7ACAB4913334AE85E541 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft Manifest number: 1433 Signing time: Mon 26 Jan 2026 01:01:41 +0000 Manifest this update: Mon 26 Jan 2026 01:01:41 +0000 Manifest next update: Tue 27 Jan 2026 01:01:41 +0000 Files and hashes: 1: IkSWs7EkuQhyXRbP9F6EHBtTz1o.roa (hash: Byu4YYkguBqvjzQYm5SoI51Ex0ZiZOLUbV6kTS2GuBk=) 2: eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl (hash: qUPg9EoBVEb5LQ8JsbaB4EPXtQMpUZjtGP1hmVu+k0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:1e:a8:27:9f:7a:ca:b4:91:33:34:ae:85:e5:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2 Validity Not Before: Jan 26 01:01:41 2026 GMT Not After : Jan 27 01:01:41 2026 GMT Subject: CN=aea4d02c4c705285b97549b084914d37eb78ae4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:df:cb:f4:1d:0d:67:1a:5b:c7:7c:04:3f:76: 28:c8:cb:a6:02:8d:a8:74:e0:0e:ea:1f:5c:09:a4: c6:98:b2:35:f2:57:9d:24:c7:81:4b:ad:98:1a:99: 6f:12:09:d8:aa:49:ff:17:09:29:63:78:d7:04:9f: b7:98:0e:14:75:99:fe:0b:1f:26:50:5c:b7:10:87: 69:94:8d:64:4e:81:9b:01:3c:7c:88:35:b9:4d:cf: 00:83:cc:d5:4a:73:7b:85:a7:bd:74:cc:36:e2:a4: 5d:cc:96:6a:44:a5:30:1b:f3:9b:dd:c1:7e:2a:e0: e6:08:c3:f5:02:f0:e1:67:0f:9c:c7:96:c6:fe:36: ad:b6:d5:6c:7e:35:23:81:97:2d:dc:90:e0:a4:6d: 25:8f:ff:19:f3:c4:2a:7d:91:77:ff:78:63:4e:92: b4:5a:d9:6b:5b:ae:07:72:9a:08:1e:93:43:d8:24: 20:20:c1:57:c7:4e:b1:c2:ef:1e:2c:93:a1:0a:a9: c0:cd:71:9f:1c:e2:80:af:f0:a9:5b:bc:05:fa:0f: d8:ac:67:df:50:00:9f:ee:50:8f:28:5c:79:b5:3d: 85:b6:4e:a0:8b:32:55:93:96:fc:e6:5b:21:f3:f6: 3d:f8:10:50:5d:7f:a4:34:5e:c5:50:89:b2:1c:f9: e4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A4:D0:2C:4C:70:52:85:B9:75:49:B0:84:91:4D:37:EB:78:AE:4F X509v3 Authority Key Identifier: keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:ff:be:f5:40:a0:70:77:66:bc:f3:05:df:89:ee:a1:2b:69: 35:b8:f6:93:18:04:44:c2:b0:13:69:44:cd:5a:6d:b0:0a:80: 0c:33:e3:16:7c:38:c5:5d:d2:3d:be:4c:e8:5f:df:6b:a1:a6: 68:30:4a:0f:2e:c6:de:88:1d:72:87:46:ff:07:57:cd:84:48: 87:1a:00:d4:b7:a4:91:81:c5:73:e0:e4:60:60:7b:cc:70:cb: 3e:7d:0c:42:22:14:75:01:20:1c:0e:da:19:1b:34:de:7c:4d: ed:b5:81:85:77:3c:0c:ac:0e:f2:96:4a:a2:c8:8b:ba:d7:c0: bd:fb:46:bb:59:53:f5:18:69:ca:b3:90:2a:bc:45:a2:3a:0d: 74:ec:c1:9d:5e:14:dc:09:83:cf:04:fd:c7:09:b6:24:5f:db: 06:4f:03:9b:20:4f:fa:4b:98:c6:86:1d:18:84:7f:04:70:28: e0:d4:30:eb:f0:11:86:54:1f:b0:6d:ad:48:f5:66:cc:96:49: 79:62:87:0b:e5:25:bb:f2:0e:9b:21:b2:8e:06:3a:fe:09:75: c0:fa:df:0e:e9:dc:1a:8f:bd:8b:0f:da:64:01:5e:87:e8:3f: 22:de:ef:f6:95:92:b7:18:49:bb:5e:43:7a:27:23:75:a2:cd: 58:96:9a:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30h6oJ596yrSRMzSuheVBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4YzIzNjU4MGNjMmVlMTkzZGJkY2MzMTI2ZGY0MTcwY2Mx MTdjZDIwHhcNMjYwMTI2MDEwMTQxWhcNMjYwMTI3MDEwMTQxWjAzMTEwLwYDVQQD EyhhZWE0ZDAyYzRjNzA1Mjg1Yjk3NTQ5YjA4NDkxNGQzN2ViNzhhZTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd/L9B0NZxpbx3wEP3YoyMumAo2o dOAO6h9cCaTGmLI18ledJMeBS62YGplvEgnYqkn/FwkpY3jXBJ+3mA4UdZn+Cx8m UFy3EIdplI1kToGbATx8iDW5Tc8Ag8zVSnN7hae9dMw24qRdzJZqRKUwG/Ob3cF+ KuDmCMP1AvDhZw+cx5bG/jatttVsfjUjgZct3JDgpG0lj/8Z88QqfZF3/3hjTpK0 WtlrW64HcpoIHpND2CQgIMFXx06xwu8eLJOhCqnAzXGfHOKAr/CpW7wF+g/YrGff UACf7lCPKFx5tT2Ftk6gizJVk5b85lsh8/Y9+BBQXX+kNF7FUImyHPnkcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6k0CxMcFKFuXVJsISRTTfreK5PMB8GA1UdIwQY MBaAFHjCNlgMwu4ZPb3MMSbfQXDMEXzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU1JMldBekM3aGs5dmN3eEp0OUJjTXdSZk5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82OWNlMmItYWEzNi00YmFiLWI2NWUt ZjllNjUzOWJiZTZiLzEvZU1JMldBekM3aGs5dmN3eEp0OUJjTXdSZk5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS82OWNlMmItYWEzNi00YmFiLWI2NWUtZjllNjUzOWJiZTZi LzEvZU1JMldBekM3aGs5dmN3eEp0OUJjTXdSZk5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/++9UCg cHdmvPMF34nuoStpNbj2kxgERMKwE2lEzVptsAqADDPjFnw4xV3SPb5M6F/fa6Gm aDBKDy7G3ogdcodG/wdXzYRIhxoA1LekkYHFc+DkYGB7zHDLPn0MQiIUdQEgHA7a GRs03nxN7bWBhXc8DKwO8pZKosiLutfAvftGu1lT9RhpyrOQKrxFojoNdOzBnV4U 3AmDzwT9xwm2JF/bBk8DmyBP+kuYxoYdGIR/BHAo4NQw6/ARhlQfsG2tSPVmzJZJ eWKHC+Ulu/IOmyGyjgY6/gl1wPrfDuncGo+9iw/aZAFeh+g/It7v9pWStxhJu15D eicjdaLNWJaaYA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:00 2026 by rpki-client