This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft File: E38jlE49eNqSAFXXLHTQK-VFXzU.mft (raw, json) Hash identifier: qla5doPfPtnIrdl5zfylE6Kjkqt6kUaaeSw24my3Jfw= Subject key identifier: B3:12:CB:0B:11:6A:54:87:56:4A:51:68:E2:00:78:55:F2:B6:BD:C3 Authority key identifier: 13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35 Certificate issuer: /CN=137f23944e3d78da920055d72c74d02be5455f35 Certificate serial: 019BF6F5E6AA1E1AB2B7D9ABF93D2E5F8C93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft Manifest number: 1742 Signing time: Sun 25 Jan 2026 21:01:09 +0000 Manifest this update: Sun 25 Jan 2026 21:01:09 +0000 Manifest next update: Mon 26 Jan 2026 21:01:09 +0000 Files and hashes: 1: E38jlE49eNqSAFXXLHTQK-VFXzU.crl (hash: xyMJkaaxKaTKOEft/zeOoQkjYyqH/evFMKb0U/pr6sY=) 2: mDFc7pj7Bovc-0Bk_3gf_YPWSI8.roa (hash: foLb5bYIbYqHfFOiPX+cqHpJp+lcFErw3rPGOF4xGuY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:e6:aa:1e:1a:b2:b7:d9:ab:f9:3d:2e:5f:8c:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=137f23944e3d78da920055d72c74d02be5455f35 Validity Not Before: Jan 25 21:01:09 2026 GMT Not After : Jan 26 21:01:09 2026 GMT Subject: CN=b312cb0b116a5487564a5168e2007855f2b6bdc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:79:9f:c1:b7:10:65:78:38:7a:f4:88:94:62: 80:b1:ea:62:c0:02:06:ad:6c:c8:87:17:2e:3e:84: d9:a7:b9:a2:6c:59:1f:ac:6d:ee:bb:1e:ff:65:6b: 9c:e7:35:da:d8:a9:fe:3e:ac:cb:37:61:cb:e0:9f: a3:d5:00:68:35:5b:34:b7:9a:40:47:b3:95:7d:ff: 27:b0:db:6e:05:c8:5d:30:99:7f:89:c3:9b:de:50: 03:8e:7f:43:76:9d:85:40:66:64:fd:40:3d:ea:57: a2:7a:c6:60:4b:83:5a:83:45:bb:00:be:73:27:4e: 3e:9a:fb:15:ff:c5:b0:03:f5:82:8f:b8:ac:cc:47: 3f:da:9a:1e:76:6c:f3:21:f8:eb:07:69:d7:f7:be: 08:8e:96:a2:b2:2b:d5:c3:02:11:f7:e6:8b:f3:87: b0:45:df:77:2e:78:82:07:bc:b7:d2:b1:9b:41:8c: 6d:ca:f8:ce:06:b5:5f:85:b9:c9:85:c8:ed:b6:82: c3:01:9a:dd:ea:d7:be:50:56:d9:93:a2:f9:da:60: 1f:cb:18:04:50:c0:68:53:0c:85:7b:73:4e:59:96: d3:74:14:c7:74:51:37:4d:9b:0e:11:91:6c:78:f6: 35:c1:ca:db:2e:62:60:87:fd:bb:2c:15:cb:9f:ea: a4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:12:CB:0B:11:6A:54:87:56:4A:51:68:E2:00:78:55:F2:B6:BD:C3 X509v3 Authority Key Identifier: keyid:13:7F:23:94:4E:3D:78:DA:92:00:55:D7:2C:74:D0:2B:E5:45:5F:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38jlE49eNqSAFXXLHTQK-VFXzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a164e-1e58-4105-bed1-407af89ad8e9/1/E38jlE49eNqSAFXXLHTQK-VFXzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:95:ce:b0:30:4f:e2:6a:84:9c:47:d8:c9:66:eb:62:90:9b: d3:83:aa:ab:62:10:ce:0b:de:cb:5e:0a:c8:a7:7c:ae:c1:74: f9:d1:ce:04:e5:54:f8:15:55:01:46:bd:96:43:0e:15:88:2f: 8a:8d:06:29:ff:99:6e:3a:56:a2:a0:7f:7f:42:74:9c:31:55: 13:80:f2:10:1a:b0:ee:37:18:1c:33:86:f7:c4:dd:60:33:69: 81:42:c5:89:1e:40:59:97:01:8a:6b:2e:19:d6:89:81:7c:e5: c7:2e:25:40:f0:43:5e:a6:67:5e:d8:92:9b:4c:28:9e:dd:68: ac:dd:27:e7:7b:15:4f:6c:90:86:20:be:b9:b2:b2:ae:1f:fd: 11:22:1d:72:99:ed:47:f5:84:03:05:9a:fd:86:c7:5a:7f:aa: 7e:c5:ee:2c:8b:d7:90:f5:a9:96:34:e6:13:73:e1:0e:d3:e7: 45:3d:e0:0f:97:5d:37:11:5a:32:a0:f6:1a:98:71:97:28:cf: 2b:28:f9:0e:b2:65:6c:9c:32:f4:3d:11:9d:46:91:9b:f9:17: 98:17:b7:ef:3e:ba:9d:08:92:cb:d4:a1:ba:46:b6:33:c1:85: 91:a1:07:8d:01:3f:ff:83:1c:5b:91:be:cc:a7:b5:e6:a6:1e: 54:f6:28:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29eaqHhqyt9mr+T0uX4yTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzN2YyMzk0NGUzZDc4ZGE5MjAwNTVkNzJjNzRkMDJiZTU0 NTVmMzUwHhcNMjYwMTI1MjEwMTA5WhcNMjYwMTI2MjEwMTA5WjAzMTEwLwYDVQQD EyhiMzEyY2IwYjExNmE1NDg3NTY0YTUxNjhlMjAwNzg1NWYyYjZiZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9XmfwbcQZXg4evSIlGKAsepiwAIG rWzIhxcuPoTZp7mibFkfrG3uux7/ZWuc5zXa2Kn+PqzLN2HL4J+j1QBoNVs0t5pA R7OVff8nsNtuBchdMJl/icOb3lADjn9Ddp2FQGZk/UA96leiesZgS4Nag0W7AL5z J04+mvsV/8WwA/WCj7iszEc/2poedmzzIfjrB2nX974IjpaisivVwwIR9+aL84ew Rd93LniCB7y30rGbQYxtyvjOBrVfhbnJhcjttoLDAZrd6te+UFbZk6L52mAfyxgE UMBoUwyFe3NOWZbTdBTHdFE3TZsOEZFsePY1wcrbLmJgh/27LBXLn+qk+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMSywsRalSHVkpRaOIAeFXytr3DMB8GA1UdIwQY MBaAFBN/I5ROPXjakgBV1yx00CvlRV81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTM4amxFNDllTnFTQUZYWExIVFFLLVZGWHpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80YTE2NGUtMWU1OC00MTA1LWJlZDEt NDA3YWY4OWFkOGU5LzEvRTM4amxFNDllTnFTQUZYWExIVFFLLVZGWHpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy80YTE2NGUtMWU1OC00MTA1LWJlZDEtNDA3YWY4OWFkOGU5 LzEvRTM4amxFNDllTnFTQUZYWExIVFFLLVZGWHpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJXOsDBP 4mqEnEfYyWbrYpCb04Oqq2IQzgvey14KyKd8rsF0+dHOBOVU+BVVAUa9lkMOFYgv io0GKf+ZbjpWoqB/f0J0nDFVE4DyEBqw7jcYHDOG98TdYDNpgULFiR5AWZcBimsu GdaJgXzlxy4lQPBDXqZnXtiSm0wont1orN0n53sVT2yQhiC+ubKyrh/9ESIdcpnt R/WEAwWa/YbHWn+qfsXuLIvXkPWpljTmE3PhDtPnRT3gD5ddNxFaMqD2GphxlyjP Kyj5DrJlbJwy9D0RnUaRm/kXmBe37z66nQiSy9Shuka2M8GFkaEHjQE//4McW5G+ zKe15qYeVPYo3w== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:11 2026 by rpki-client