This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft File: Em_8AJbGk7vEIO64zO80vHtTh0M.mft (raw, json) Hash identifier: YpBH+40yWtiQri3xtZkHSmm8qM6hODoT2IjVHUE0134= Subject key identifier: 6E:E5:28:97:48:E2:E7:A2:58:46:FB:E4:6E:B8:BB:BE:DE:11:BB:E9 Authority key identifier: 12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43 Certificate issuer: /CN=126ffc0096c693bbc420eeb8ccef34bc7b538743 Certificate serial: 019BF72DA7F755541D7743ACF32706389272 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft Manifest number: 117F Signing time: Sun 25 Jan 2026 22:02:02 +0000 Manifest this update: Sun 25 Jan 2026 22:02:02 +0000 Manifest next update: Mon 26 Jan 2026 22:02:02 +0000 Files and hashes: 1: Em_8AJbGk7vEIO64zO80vHtTh0M.crl (hash: 82iKJg35yv0lNcGtgjsT+HW97SeuAP18HmXL0chPZFM=) 2: oPW1SGwP91H4COCpUVzVXa2p0W0.roa (hash: sJ80Hmwvt2BZ4Ckn8z2EQlXDh6xgPaM8/fsDXZd71pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:a7:f7:55:54:1d:77:43:ac:f3:27:06:38:92:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126ffc0096c693bbc420eeb8ccef34bc7b538743 Validity Not Before: Jan 25 22:02:02 2026 GMT Not After : Jan 26 22:02:02 2026 GMT Subject: CN=6ee5289748e2e7a25846fbe46eb8bbbede11bbe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:49:16:38:2a:96:40:d3:6f:52:3b:b2:bd: ed:1d:9b:b4:a9:f1:ac:e4:ce:40:27:92:d9:cc:80: ba:a3:eb:97:fb:a7:92:c7:c8:1c:72:b9:ef:eb:48: 58:e0:8b:6f:8a:62:2d:ef:fe:da:2d:90:04:d1:f7: 29:b5:89:69:e7:4a:7a:27:52:07:6b:90:b7:e1:73: 75:5f:e8:3b:72:ee:58:6e:9f:4c:be:85:06:ed:7d: c2:61:1e:3f:c2:a0:70:cc:76:5b:94:0e:60:9c:59: d9:cf:5e:9a:98:7f:4d:f2:56:3a:25:7e:d6:07:92: 04:8d:22:9d:98:1e:ca:81:59:a0:03:88:5b:00:0c: 65:1f:4f:7e:20:08:64:c2:b0:2b:3e:bf:f9:4f:aa: c9:19:02:1f:c9:12:d8:d4:30:46:62:32:4e:e4:90: c5:c2:83:67:d4:58:60:e3:df:17:65:ab:c6:59:f8: bf:11:f6:8a:45:4b:12:24:ee:88:69:93:49:31:85: 1b:e1:94:d1:ec:b1:b7:ef:70:7a:a7:be:a4:69:ba: 6e:db:ce:66:e1:e1:20:88:5c:26:69:4b:ca:46:ef: 54:f3:28:a1:68:b2:cd:6c:70:2a:dc:be:3a:88:aa: 91:64:f9:29:78:db:b6:01:02:5e:67:b1:01:b9:35: 22:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E5:28:97:48:E2:E7:A2:58:46:FB:E4:6E:B8:BB:BE:DE:11:BB:E9 X509v3 Authority Key Identifier: keyid:12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:52:15:9f:68:70:0e:95:43:c4:c4:94:79:44:3e:d3:47:c2: 27:58:e5:12:27:3a:c4:93:9b:c6:42:ad:58:71:09:53:36:97: 1c:41:01:a9:f1:56:b1:7d:1b:04:72:00:cc:b4:b8:99:8a:70: 38:f2:3c:ad:ee:bb:5d:b5:67:61:17:23:7d:2f:bd:60:98:ff: 2d:fb:21:21:1f:b6:5f:72:fd:ec:26:79:b7:3c:39:1d:2d:8c: 49:48:28:87:95:f5:92:e4:7f:f4:6a:ab:2b:7f:90:07:30:5f: 02:54:bb:7e:d4:24:4f:40:4f:f3:cc:65:19:38:25:25:c7:d3: b5:a9:de:d0:c5:18:92:bf:05:1a:2f:96:22:cb:5f:b2:1c:91: 5e:60:d6:5a:9e:73:40:07:b6:d9:f4:39:c8:07:27:3a:a0:1c: 54:36:f1:26:79:85:27:04:2d:0e:37:b2:c7:94:45:a9:35:c0: 3d:75:b3:30:2e:7e:56:f1:48:8a:0c:3e:72:30:ce:b7:30:cf: 36:62:db:85:d5:35:6b:4f:c2:54:3b:d5:5b:46:72:7d:94:55: b6:64:fc:df:32:79:44:25:d1:4a:32:05:bf:07:ff:b3:95:01: 9b:4d:d3:a2:50:23:55:3c:fe:f9:c6:4f:31:8a:c0:9e:4d:a1: a5:24:c0:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Laf3VVQdd0Os8ycGOJJyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmZmYzAwOTZjNjkzYmJjNDIwZWViOGNjZWYzNGJjN2I1 Mzg3NDMwHhcNMjYwMTI1MjIwMjAyWhcNMjYwMTI2MjIwMjAyWjAzMTEwLwYDVQQD Eyg2ZWU1Mjg5NzQ4ZTJlN2EyNTg0NmZiZTQ2ZWI4YmJiZWRlMTFiYmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7NJFjgqlkDTb1I7sr3tHZu0qfGs 5M5AJ5LZzIC6o+uX+6eSx8gccrnv60hY4ItvimIt7/7aLZAE0fcptYlp50p6J1IH a5C34XN1X+g7cu5Ybp9MvoUG7X3CYR4/wqBwzHZblA5gnFnZz16amH9N8lY6JX7W B5IEjSKdmB7KgVmgA4hbAAxlH09+IAhkwrArPr/5T6rJGQIfyRLY1DBGYjJO5JDF woNn1Fhg498XZavGWfi/EfaKRUsSJO6IaZNJMYUb4ZTR7LG373B6p76kabpu285m 4eEgiFwmaUvKRu9U8yihaLLNbHAq3L46iKqRZPkpeNu2AQJeZ7EBuTUiUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7lKJdI4ueiWEb75G64u77eEbvpMB8GA1UdIwQY MBaAFBJv/ACWxpO7xCDuuMzvNLx7U4dDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW1fOEFKYkdrN3ZFSU82NHpPODB2SHRUaDBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS82MTY4N2MtMTE4Mi00YjA4LTk0OGUt MWM4NmM1N2UyZTlmLzEvRW1fOEFKYkdrN3ZFSU82NHpPODB2SHRUaDBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS82MTY4N2MtMTE4Mi00YjA4LTk0OGUtMWM4NmM1N2UyZTlm LzEvRW1fOEFKYkdrN3ZFSU82NHpPODB2SHRUaDBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVIVn2hw DpVDxMSUeUQ+00fCJ1jlEic6xJObxkKtWHEJUzaXHEEBqfFWsX0bBHIAzLS4mYpw OPI8re67XbVnYRcjfS+9YJj/LfshIR+2X3L97CZ5tzw5HS2MSUgoh5X1kuR/9Gqr K3+QBzBfAlS7ftQkT0BP88xlGTglJcfTtane0MUYkr8FGi+WIstfshyRXmDWWp5z QAe22fQ5yAcnOqAcVDbxJnmFJwQtDjeyx5RFqTXAPXWzMC5+VvFIigw+cjDOtzDP NmLbhdU1a0/CVDvVW0ZyfZRVtmT83zJ5RCXRSjIFvwf/s5UBm03TolAjVTz++cZP MYrAnk2hpSTAvw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:54 2026 by rpki-client