This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft File: eHnrndYtUa-lAS76Gp0QxmQAxEU.mft (raw, json) Hash identifier: S0vrydghZ70iu4hMxtaD4QhtfTtWJ+YPnjGjJqKSPMQ= Subject key identifier: B4:81:34:A1:1C:A5:D2:F5:CC:B7:CE:BF:3D:13:33:00:01:0A:AA:FD Authority key identifier: 78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45 Certificate issuer: /CN=7879eb9dd62d51afa5012efa1a9d10c66400c445 Certificate serial: 019BF5AC2C0CF88AF0F1787F0457870E9428 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 15:00:59 +0000 Manifest this update: Sun 25 Jan 2026 15:00:59 +0000 Manifest next update: Mon 26 Jan 2026 15:00:59 +0000 Files and hashes: 1: eHnrndYtUa-lAS76Gp0QxmQAxEU.crl (hash: px6dQzQiKFBGR0BM7/Qu4h68wvUt6Z0YPLHW97ABo14=) 2: u20Y3FANdfmda1Xtsnh_0s435JM.roa (hash: S9BpRBE4oWaa9W/9qIMquDTbVfqR1JKGeq8wj5z0rN4=) 3: w2BN5Okc8CAi7WJd5D6lCmGLa9o.roa (hash: U6ZbAgCOETb02sjUGl8fc/vrWrB/9CMYg74fhgDMPO4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:2c:0c:f8:8a:f0:f1:78:7f:04:57:87:0e:94:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7879eb9dd62d51afa5012efa1a9d10c66400c445 Validity Not Before: Jan 25 15:00:59 2026 GMT Not After : Jan 26 15:00:59 2026 GMT Subject: CN=b48134a11ca5d2f5ccb7cebf3d133300010aaafd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:34:dc:cc:f1:9d:c7:de:63:7d:19:65:29:58: e4:e8:66:26:01:f0:c6:3a:93:bf:a4:45:a8:6c:b4: e4:15:a2:f1:8c:1c:05:14:f9:3a:8f:4c:fb:87:3f: e7:b7:7f:cb:f6:a0:0f:73:39:26:f0:e5:2c:88:f8: 9d:c6:f3:c8:8e:eb:5d:35:80:b7:d3:00:00:f3:fe: 93:3d:73:90:5a:a6:a4:ba:46:4a:83:ef:eb:99:ea: b6:78:04:4b:d5:89:77:fe:2c:ca:e9:eb:3e:64:92: e9:90:9f:cb:57:50:d3:c5:40:43:a4:41:69:e1:f2: 6a:1b:8e:e0:48:f1:88:6f:29:4e:2e:6c:d5:19:ff: b3:4d:49:09:9c:fa:ee:b3:7a:af:d8:af:ae:c9:05: 2d:fe:9e:e8:0b:a7:90:07:dd:20:9f:90:89:53:f4: d9:0e:ce:cd:a2:57:de:c6:5d:d0:68:f2:01:cc:10: 2b:8d:bd:fe:fd:e5:eb:59:fe:f0:0e:0f:e4:bb:dc: c3:2b:fa:1f:bc:2a:94:19:d7:e3:d8:1a:44:78:39: 49:f5:f1:b2:c3:84:8c:2c:fb:52:e9:ab:6a:b9:5b: fd:4d:ec:6c:30:9b:dc:94:92:1e:c0:4b:5e:2c:f5: 71:56:82:1f:6a:ca:ca:4f:75:e2:46:5c:3b:5d:ab: c7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:81:34:A1:1C:A5:D2:F5:CC:B7:CE:BF:3D:13:33:00:01:0A:AA:FD X509v3 Authority Key Identifier: keyid:78:79:EB:9D:D6:2D:51:AF:A5:01:2E:FA:1A:9D:10:C6:64:00:C4:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHnrndYtUa-lAS76Gp0QxmQAxEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c58fa-06d5-4d39-8b5d-74acf82af596/1/eHnrndYtUa-lAS76Gp0QxmQAxEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b8:ef:b8:9f:83:0d:fd:58:c3:59:7b:b8:fa:48:88:58:8f: 18:9c:13:5d:4a:63:e3:01:29:8a:1b:af:75:62:4f:ca:2f:ea: 58:29:9f:19:0e:52:df:2b:45:40:2a:7a:f9:ce:b9:55:80:4e: ea:24:aa:22:9d:05:6f:56:62:d0:cb:0c:e8:95:02:bc:4f:a5: bb:b7:46:3d:ab:c2:32:55:77:22:22:48:6c:6d:84:69:2d:4e: bf:34:fd:52:dc:13:04:e4:18:77:a3:c8:f4:00:5b:34:8d:46: 9d:48:87:14:01:05:91:e3:60:43:36:2b:4d:7a:8d:b4:8b:7e: 40:67:3b:e7:85:43:36:88:d8:e3:36:2a:f1:c2:9c:86:27:c1: 4d:ad:c2:f9:da:92:42:ea:29:25:84:ce:6b:0e:e7:dd:b2:11: ae:04:4a:c4:aa:e0:ea:01:f6:85:1c:00:f5:aa:0a:1c:f2:f2: 10:c4:a8:14:43:39:85:06:32:1a:bf:35:ec:b3:47:ea:71:33: 55:9c:bf:59:9f:a2:9c:29:ca:36:5f:95:09:00:88:ef:0f:bd: f6:63:9c:2a:a6:f1:f4:c7:ff:d2:29:43:57:99:54:e1:b4:84: e4:13:c9:74:5b:2a:24:ba:60:a7:74:32:c4:75:61:43:09:63: 43:0c:65:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rCwM+Irw8Xh/BFeHDpQoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4NzllYjlkZDYyZDUxYWZhNTAxMmVmYTFhOWQxMGM2NjQw MGM0NDUwHhcNMjYwMTI1MTUwMDU5WhcNMjYwMTI2MTUwMDU5WjAzMTEwLwYDVQQD EyhiNDgxMzRhMTFjYTVkMmY1Y2NiN2NlYmYzZDEzMzMwMDAxMGFhYWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zTczPGdx95jfRllKVjk6GYmAfDG OpO/pEWobLTkFaLxjBwFFPk6j0z7hz/nt3/L9qAPczkm8OUsiPidxvPIjutdNYC3 0wAA8/6TPXOQWqakukZKg+/rmeq2eARL1Yl3/izK6es+ZJLpkJ/LV1DTxUBDpEFp 4fJqG47gSPGIbylOLmzVGf+zTUkJnPrus3qv2K+uyQUt/p7oC6eQB90gn5CJU/TZ Ds7Nolfexl3QaPIBzBArjb3+/eXrWf7wDg/ku9zDK/ofvCqUGdfj2BpEeDlJ9fGy w4SMLPtS6atquVv9TexsMJvclJIewEteLPVxVoIfasrKT3XiRlw7XavH2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSBNKEcpdL1zLfOvz0TMwABCqr9MB8GA1UdIwQY MBaAFHh5653WLVGvpQEu+hqdEMZkAMRFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUhucm5kWXRVYS1sQVM3NkdwMFF4bVFBeEVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yYzU4ZmEtMDZkNS00ZDM5LThiNWQt NzRhY2Y4MmFmNTk2LzEvZUhucm5kWXRVYS1sQVM3NkdwMFF4bVFBeEVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8yYzU4ZmEtMDZkNS00ZDM5LThiNWQtNzRhY2Y4MmFmNTk2 LzEvZUhucm5kWXRVYS1sQVM3NkdwMFF4bVFBeEVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObjvuJ+D Df1Yw1l7uPpIiFiPGJwTXUpj4wEpihuvdWJPyi/qWCmfGQ5S3ytFQCp6+c65VYBO 6iSqIp0Fb1Zi0MsM6JUCvE+lu7dGPavCMlV3IiJIbG2EaS1OvzT9UtwTBOQYd6PI 9ABbNI1GnUiHFAEFkeNgQzYrTXqNtIt+QGc754VDNojY4zYq8cKchifBTa3C+dqS QuopJYTOaw7n3bIRrgRKxKrg6gH2hRwA9aoKHPLyEMSoFEM5hQYyGr817LNH6nEz VZy/WZ+inCnKNl+VCQCI7w+99mOcKqbx9Mf/0ilDV5lU4bSE5BPJdFsqJLpgp3Qy xHVhQwljQwxlYg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:45:20 2026 by rpki-client