This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft File: EtcnGNFVrA59Mn9jhKLkyVQW12A.mft (raw, json) Hash identifier: RrfedXgYZPaSg8P9ZxkiGcprMjBa0g0CCwJYysVH68g= Subject key identifier: 72:63:AA:70:A0:F4:A3:27:0C:78:42:81:78:2E:00:BF:B1:E8:61:F9 Authority key identifier: 12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60 Certificate issuer: /CN=12d72718d155ac0e7d327f6384a2e4c95416d760 Certificate serial: 019BF5073B852109A94999EC6112F773C7BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 12:00:50 +0000 Manifest this update: Sun 25 Jan 2026 12:00:50 +0000 Manifest next update: Mon 26 Jan 2026 12:00:50 +0000 Files and hashes: 1: EtcnGNFVrA59Mn9jhKLkyVQW12A.crl (hash: 4VZqMfg21hP7PYjQ0DVRvD1cl6o/XnPxIDlMwifGW3E=) 2: IkrlVjIBIVx5J9vbaylHLa_tgfM.roa (hash: V3uMqSa5WshlPBOs9YrJkuRAc1fggP1aMeBrmefuIRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:3b:85:21:09:a9:49:99:ec:61:12:f7:73:c7:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12d72718d155ac0e7d327f6384a2e4c95416d760 Validity Not Before: Jan 25 12:00:50 2026 GMT Not After : Jan 26 12:00:50 2026 GMT Subject: CN=7263aa70a0f4a3270c784281782e00bfb1e861f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:73:8b:75:d9:7f:e9:bc:d0:28:32:74:3c:37: ad:37:e1:cf:69:87:6d:1c:d8:91:8e:20:b0:e2:d0: 8e:aa:21:bc:f7:e4:2d:b2:e8:5b:27:f2:e2:ad:26: 24:43:62:cd:d5:fa:79:b3:29:f7:27:eb:66:50:31: f8:da:df:d1:db:7b:bf:66:c8:f9:9f:c3:f3:34:24: e6:92:67:6a:84:6c:b6:30:91:76:db:e7:21:1d:d1: 87:47:68:e1:a0:11:f1:32:59:95:66:76:70:d2:05: e1:e8:65:18:27:09:84:f2:67:ed:c2:f7:cd:09:75: 6c:bd:70:29:49:f0:6e:a3:03:08:6e:17:ef:57:af: 28:f7:76:bc:41:01:8d:b3:b8:3f:48:68:f2:c0:51: 71:91:49:a3:75:bf:af:1e:f2:ef:16:35:14:37:94: 19:df:a4:9b:d1:24:97:1f:26:58:fd:d4:f6:52:fa: 8b:36:10:68:28:8d:9d:62:a4:3a:a1:0e:8d:a9:08: e6:66:e0:26:0d:e1:b6:25:45:3f:51:8b:94:7d:01: 02:76:26:32:51:c5:8b:57:39:e6:b7:d6:86:39:2a: 4b:04:b1:ab:a7:33:c4:fb:db:86:b9:d1:f7:03:0d: 12:30:0a:8d:8a:68:85:6f:1b:9e:eb:60:fe:9f:67: d8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:63:AA:70:A0:F4:A3:27:0C:78:42:81:78:2E:00:BF:B1:E8:61:F9 X509v3 Authority Key Identifier: keyid:12:D7:27:18:D1:55:AC:0E:7D:32:7F:63:84:A2:E4:C9:54:16:D7:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtcnGNFVrA59Mn9jhKLkyVQW12A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/74f5b2-c7e2-4a7e-b6c4-58765f193fec/1/EtcnGNFVrA59Mn9jhKLkyVQW12A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:05:cc:07:6f:f1:c7:06:5d:e8:ef:4f:c5:45:71:9f:6f:64: ae:b3:63:0f:35:87:fc:56:e9:fc:d4:22:99:2c:3f:f4:98:ee: 23:5c:94:67:44:37:11:9e:df:93:b3:d7:62:70:d4:38:6d:e0: 10:63:72:d2:4b:da:76:56:03:e8:f9:3b:bd:28:ed:6f:23:37: ef:b4:ab:35:29:96:4b:4a:76:ed:8d:5c:5a:d2:da:79:32:4f: c4:06:64:d3:86:c0:79:0e:35:4f:3f:0d:50:ba:3e:e9:34:86: 5c:9f:6f:7a:38:d1:f9:03:47:0e:cc:6d:33:a8:3a:b7:1a:0b: 2f:be:51:d3:8b:e9:c7:7f:5c:e6:9c:2a:d9:5f:f1:3e:c1:b5: f6:53:16:97:1a:a6:67:d7:64:d7:f8:d4:8b:22:51:62:31:90: 7a:ea:70:d5:d4:b4:2d:93:19:52:d1:e0:90:bf:66:ce:51:ef: 7f:67:d5:a5:5b:b7:bb:9f:c7:b2:3a:af:a8:ea:f9:4a:c4:b0: 0c:5a:5b:71:c8:0d:db:72:51:9d:5f:0c:23:39:fd:31:86:34: 7a:f4:63:1f:19:3e:d1:17:02:65:c7:9d:65:97:12:0d:a9:c3: df:d4:b2:87:f6:be:50:77:aa:2d:83:2c:01:fb:b3:30:83:59: e5:93:33:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1BzuFIQmpSZnsYRL3c8e/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZDcyNzE4ZDE1NWFjMGU3ZDMyN2Y2Mzg0YTJlNGM5NTQx NmQ3NjAwHhcNMjYwMTI1MTIwMDUwWhcNMjYwMTI2MTIwMDUwWjAzMTEwLwYDVQQD Eyg3MjYzYWE3MGEwZjRhMzI3MGM3ODQyODE3ODJlMDBiZmIxZTg2MWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8nOLddl/6bzQKDJ0PDetN+HPaYdt HNiRjiCw4tCOqiG89+QtsuhbJ/LirSYkQ2LN1fp5syn3J+tmUDH42t/R23u/Zsj5 n8PzNCTmkmdqhGy2MJF22+chHdGHR2jhoBHxMlmVZnZw0gXh6GUYJwmE8mftwvfN CXVsvXApSfBuowMIbhfvV68o93a8QQGNs7g/SGjywFFxkUmjdb+vHvLvFjUUN5QZ 36Sb0SSXHyZY/dT2UvqLNhBoKI2dYqQ6oQ6NqQjmZuAmDeG2JUU/UYuUfQECdiYy UcWLVznmt9aGOSpLBLGrpzPE+9uGudH3Aw0SMAqNimiFbxue62D+n2fYhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJjqnCg9KMnDHhCgXguAL+x6GH5MB8GA1UdIwQY MBaAFBLXJxjRVawOfTJ/Y4Si5MlUFtdgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXRjbkdORlZyQTU5TW45amhLTGt5VlFXMTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS83NGY1YjItYzdlMi00YTdlLWI2YzQt NTg3NjVmMTkzZmVjLzEvRXRjbkdORlZyQTU5TW45amhLTGt5VlFXMTJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS83NGY1YjItYzdlMi00YTdlLWI2YzQtNTg3NjVmMTkzZmVj LzEvRXRjbkdORlZyQTU5TW45amhLTGt5VlFXMTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQXMB2/x xwZd6O9PxUVxn29krrNjDzWH/Fbp/NQimSw/9JjuI1yUZ0Q3EZ7fk7PXYnDUOG3g EGNy0kvadlYD6Pk7vSjtbyM377SrNSmWS0p27Y1cWtLaeTJPxAZk04bAeQ41Tz8N ULo+6TSGXJ9vejjR+QNHDsxtM6g6txoLL75R04vpx39c5pwq2V/xPsG19lMWlxqm Z9dk1/jUiyJRYjGQeupw1dS0LZMZUtHgkL9mzlHvf2fVpVu3u5/HsjqvqOr5SsSw DFpbccgN23JRnV8MIzn9MYY0evRjHxk+0RcCZcedZZcSDanD39Syh/a+UHeqLYMs AfuzMINZ5ZMz4g== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:58 2026 by rpki-client