This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft File: EHQA5PCchADaMYvWywP9XFSqqfE.mft (raw, json) Hash identifier: WCKGUe+lHZ/lTkn52RiM/qTRVBqHgGvhhGhx+MX+jSM= Subject key identifier: 10:9D:77:0C:36:C9:A5:D7:62:47:26:96:7F:A2:C0:6D:2F:EC:70:99 Authority key identifier: 10:74:00:E4:F0:9C:84:00:DA:31:8B:D6:CB:03:FD:5C:54:AA:A9:F1 Certificate issuer: /CN=107400e4f09c8400da318bd6cb03fd5c54aaa9f1 Certificate serial: 019BF574EBA5EF5A2F02A5E56C578DFBA875 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft Manifest number: 47 Signing time: Sun 25 Jan 2026 14:00:38 +0000 Manifest this update: Sun 25 Jan 2026 14:00:38 +0000 Manifest next update: Mon 26 Jan 2026 14:00:38 +0000 Files and hashes: 1: EHQA5PCchADaMYvWywP9XFSqqfE.crl (hash: aFUxn+PqlxRSKmK3XIp/A/EgJYoJ+W5Vr9HqlMybPYU=) 2: msGNeRKY4hek2w_pSa5AbdvnMq8.asa (hash: PIe6d7l8SXdZZ/I+p6eU+FbcvFslTUziAAD/2pokhqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:eb:a5:ef:5a:2f:02:a5:e5:6c:57:8d:fb:a8:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=107400e4f09c8400da318bd6cb03fd5c54aaa9f1 Validity Not Before: Jan 25 14:00:38 2026 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=109d770c36c9a5d7624726967fa2c06d2fec7099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8f:05:c8:90:93:53:8f:44:81:19:d3:a3:8f: 12:8d:33:b7:67:6e:83:55:61:09:26:48:31:fe:d8: 99:ab:93:fa:93:42:e4:c6:32:dd:6d:92:17:f4:1c: 29:e0:b2:95:0d:7f:f6:da:9b:22:1e:e7:63:dc:bb: 6c:ef:2c:03:3e:49:e6:e7:52:a8:6f:e2:32:0c:bb: cc:bb:42:bc:15:65:d2:5d:3f:07:51:bc:b8:c8:c9: 4a:c0:d2:5c:6a:3c:b4:17:69:59:d1:10:60:82:71: ce:2f:90:b8:3b:24:9c:f6:f5:0a:45:5a:fd:8b:e5: 87:76:cc:97:b5:20:ac:ab:9b:bb:9f:72:ea:60:9b: 27:b6:4c:4c:65:d1:da:e2:85:c7:a6:ad:dc:2e:5a: 92:47:75:3a:e8:66:a4:fa:71:92:32:ba:75:3b:8d: ed:51:29:bc:ab:3d:c1:e2:7f:80:05:24:dc:30:b3: 4d:d5:99:5f:12:80:67:cd:80:3b:e5:45:0a:1b:12: 10:a5:95:b9:4a:65:9a:95:90:00:69:e5:58:6d:7e: c4:3e:47:aa:fc:30:1c:ff:3e:4e:38:ef:b3:be:7d: b9:6d:36:6d:ea:fd:f0:5c:29:c0:a0:4f:06:71:04: d1:55:ba:a4:92:20:1a:86:e0:5e:7b:57:93:6d:8a: 9e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9D:77:0C:36:C9:A5:D7:62:47:26:96:7F:A2:C0:6D:2F:EC:70:99 X509v3 Authority Key Identifier: keyid:10:74:00:E4:F0:9C:84:00:DA:31:8B:D6:CB:03:FD:5C:54:AA:A9:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:4c:81:a4:14:86:8a:6a:ad:cd:83:89:a6:87:37:c2:de:94: db:cf:2a:91:a3:e9:e5:2e:65:7f:9a:f2:d8:82:b3:67:89:a2: 1c:27:2f:b9:fb:b2:6e:b5:3d:22:81:a0:c7:6c:74:91:39:0f: 01:62:de:13:70:fc:21:a9:e4:7b:c1:cf:3f:9b:d7:a3:2b:2a: 82:49:b6:06:3b:dd:e7:1b:6d:87:70:fc:00:d0:dd:5f:93:50: 30:e7:39:2a:97:b5:ef:d7:3d:47:5c:79:a4:a5:83:56:01:28: 71:60:b7:f7:4c:c5:f6:8c:4c:d6:8f:5c:7b:a5:ca:d5:97:d3: 88:64:20:c6:1d:27:b9:88:7c:a7:2c:3c:5b:86:39:1d:36:6e: 61:61:10:f0:b4:8b:ef:8a:16:a0:68:c8:b3:06:2a:85:dd:4c: e6:9e:b6:42:8c:88:fc:3f:4c:a2:e8:24:b8:c6:5b:29:19:c6: f7:68:22:80:a9:1c:c3:e1:e3:1a:fa:e3:5c:a9:be:13:6e:72: a3:a2:51:de:79:0b:e8:bf:7b:7b:75:7a:3e:e1:aa:31:79:e6: 9c:f0:a1:5d:4d:14:60:d8:29:bb:e3:5c:26:b2:bd:e8:ae:c6: f4:09:b9:56:ee:34:d8:d6:f8:e8:c3:7a:6d:8c:e7:cb:0a:2d: bb:69:0a:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dOul71ovAqXlbFeN+6h1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzQwMGU0ZjA5Yzg0MDBkYTMxOGJkNmNiMDNmZDVjNTRh YWE5ZjEwHhcNMjYwMTI1MTQwMDM4WhcNMjYwMTI2MTQwMDM4WjAzMTEwLwYDVQQD EygxMDlkNzcwYzM2YzlhNWQ3NjI0NzI2OTY3ZmEyYzA2ZDJmZWM3MDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0o8FyJCTU49EgRnTo48SjTO3Z26D VWEJJkgx/tiZq5P6k0LkxjLdbZIX9Bwp4LKVDX/22psiHudj3Lts7ywDPknm51Ko b+IyDLvMu0K8FWXSXT8HUby4yMlKwNJcajy0F2lZ0RBggnHOL5C4OySc9vUKRVr9 i+WHdsyXtSCsq5u7n3LqYJsntkxMZdHa4oXHpq3cLlqSR3U66Gak+nGSMrp1O43t USm8qz3B4n+ABSTcMLNN1ZlfEoBnzYA75UUKGxIQpZW5SmWalZAAaeVYbX7EPkeq /DAc/z5OOO+zvn25bTZt6v3wXCnAoE8GcQTRVbqkkiAahuBee1eTbYqeMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCddww2yaXXYkcmln+iwG0v7HCZMB8GA1UdIwQY MBaAFBB0AOTwnIQA2jGL1ssD/VxUqqnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhRQTVQQ2NoQURhTVl2V3l3UDlYRlNxcWZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9mMWVmYTktZDdlYS00YzI5LWJjZWYt MDM1NjM5ZTllYmI1LzEvRUhRQTVQQ2NoQURhTVl2V3l3UDlYRlNxcWZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9mMWVmYTktZDdlYS00YzI5LWJjZWYtMDM1NjM5ZTllYmI1 LzEvRUhRQTVQQ2NoQURhTVl2V3l3UDlYRlNxcWZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEyBpBSG imqtzYOJpoc3wt6U288qkaPp5S5lf5ry2IKzZ4miHCcvufuybrU9IoGgx2x0kTkP AWLeE3D8Ianke8HPP5vXoysqgkm2Bjvd5xtth3D8ANDdX5NQMOc5Kpe179c9R1x5 pKWDVgEocWC390zF9oxM1o9ce6XK1ZfTiGQgxh0nuYh8pyw8W4Y5HTZuYWEQ8LSL 74oWoGjIswYqhd1M5p62QoyI/D9MougkuMZbKRnG92gigKkcw+HjGvrjXKm+E25y o6JR3nkL6L97e3V6PuGqMXnmnPChXU0UYNgpu+NcJrK96K7G9Am5Vu402Nb46MN6 bYznywotu2kKrg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:06:32 2026 by rpki-client