This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json) Hash identifier: 5iVCj5pV3b7Y6aOZDUO0ZWgm0/BoHCbsyH1dop+F+qo= Subject key identifier: 4E:91:66:A4:15:B5:27:E1:5D:0B:2B:B8:4F:08:1D:36:5F:18:19:F5 Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c Certificate serial: 019BF651886771FE7A292F9FAFE12A5EC4D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 18:01:36 +0000 Manifest this update: Sun 25 Jan 2026 18:01:36 +0000 Manifest next update: Mon 26 Jan 2026 18:01:36 +0000 Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: 9QpyxGxxiYl6OuAtzBNFAf7Vm2yBe2x7WR7RnsHqOAs=) 2: m22Y1De-nkPO9R3DafQN5L9RCOU.roa (hash: CsiGy9UFamAf9ICsV6hbl4LryS8JIVMr9rlKyNfLKBQ=) 3: vdBF4D6B4y0Ni8JRFy3wrlKFdow.roa (hash: V5Qj+2qVfjThhkfwRXhTo9kpUUm1HojCtg/JdAzbU9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:88:67:71:fe:7a:29:2f:9f:af:e1:2a:5e:c4:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c Validity Not Before: Jan 25 18:01:36 2026 GMT Not After : Jan 26 18:01:36 2026 GMT Subject: CN=4e9166a415b527e15d0b2bb84f081d365f1819f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:be:0c:92:68:31:29:38:19:45:2d:9b:55:77: 17:e9:82:51:a1:cb:eb:3a:6a:57:92:5f:f5:66:07: 5c:6e:c7:0c:ec:f2:b0:34:4c:69:93:cb:d0:f6:a9: 46:2c:b5:ff:67:72:e1:1a:ba:c3:c3:e1:65:be:83: 87:02:07:1c:61:80:f0:2b:49:14:f2:10:d8:36:61: 14:00:99:fc:80:09:90:e9:4d:4d:84:c0:e5:cb:83: 33:52:df:91:5d:f1:67:88:7c:76:09:99:f4:df:59: 3c:74:0b:f5:9b:50:43:b3:72:1a:58:a9:59:b0:fd: 0c:69:6b:f1:91:8e:cb:6b:72:85:9e:5d:e6:24:72: 7e:15:44:58:df:84:79:dd:81:f3:85:37:64:56:d8: 1f:55:c6:9b:1b:20:28:a9:01:c1:b7:ff:b9:1c:a0: 5c:eb:77:cd:11:d3:37:42:b7:ec:d9:33:b5:0d:3a: f0:2d:e3:3a:ba:97:40:28:c5:d5:d9:77:53:78:e7: 6a:0a:42:7a:c6:61:48:86:6a:b3:d0:be:41:10:20: 18:d8:9d:cb:7d:6d:86:d2:5b:ec:8e:26:2c:7a:4a: b1:2d:76:fb:52:5b:95:a0:b7:bb:cc:b0:08:3c:3e: 5b:8b:63:43:7c:7b:bc:d4:f3:d5:eb:af:53:ea:3f: 44:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:91:66:A4:15:B5:27:E1:5D:0B:2B:B8:4F:08:1D:36:5F:18:19:F5 X509v3 Authority Key Identifier: keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:bb:43:5b:b1:3a:c0:fa:b9:6d:f2:98:29:50:3d:99:c3:4f: 96:75:c7:0f:1b:a0:f2:86:63:f7:85:ce:c9:cd:a3:56:66:57: f1:d6:38:d9:e6:73:a9:b8:dd:f3:88:55:db:65:17:57:6b:7e: cf:4f:73:58:ef:10:97:8f:f4:ca:dd:62:aa:7a:c4:6e:a4:62: 65:5a:fd:26:17:a5:c5:a5:5f:b7:17:47:e6:8a:c3:ac:11:3d: 3b:2b:0f:ba:f4:5e:7b:80:94:60:95:e8:7d:5c:fd:50:44:e6: 07:9a:2c:3f:5f:f2:1c:1c:d8:3b:3c:40:de:eb:7b:4b:d1:d9: 1a:14:e7:94:89:7e:e3:ea:b1:3a:a5:e1:9d:14:f5:90:23:c1: ed:78:1a:ff:b7:98:c1:11:d7:00:96:38:16:55:b9:f9:63:f7: 99:1c:d2:bc:db:e3:88:9e:f5:85:3a:6d:d0:18:e1:a6:eb:22: 17:d7:10:5c:c7:68:4d:f4:29:0e:1e:f6:28:15:26:f5:21:1e: c4:a3:f3:6f:3f:22:b5:27:52:fa:ec:fd:15:e1:6f:fb:d6:f4: ee:ba:65:f0:1f:2a:4f:93:9f:19:42:71:0d:60:70:ef:72:82: c5:56:7f:b3:9a:e1:11:e4:22:b5:4e:37:5d:7d:59:9a:d3:5e: 5a:a6:b1:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UYhncf56KS+fr+EqXsTSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhY2UxNzZhNjljY2M5Yzk5NmUxNjEwOTI1YzBiNmJkZjc2 YjIwN2MwHhcNMjYwMTI1MTgwMTM2WhcNMjYwMTI2MTgwMTM2WjAzMTEwLwYDVQQD Eyg0ZTkxNjZhNDE1YjUyN2UxNWQwYjJiYjg0ZjA4MWQzNjVmMTgxOWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL4MkmgxKTgZRS2bVXcX6YJRocvr OmpXkl/1ZgdcbscM7PKwNExpk8vQ9qlGLLX/Z3LhGrrDw+FlvoOHAgccYYDwK0kU 8hDYNmEUAJn8gAmQ6U1NhMDly4MzUt+RXfFniHx2CZn031k8dAv1m1BDs3IaWKlZ sP0MaWvxkY7La3KFnl3mJHJ+FURY34R53YHzhTdkVtgfVcabGyAoqQHBt/+5HKBc 63fNEdM3Qrfs2TO1DTrwLeM6updAKMXV2XdTeOdqCkJ6xmFIhmqz0L5BECAY2J3L fW2G0lvsjiYsekqxLXb7UluVoLe7zLAIPD5bi2NDfHu81PPV669T6j9EMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6RZqQVtSfhXQsruE8IHTZfGBn1MB8GA1UdIwQY MBaAFHrOF2ppzMnJluFhCSXAtr33ayB8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXM0WGFtbk15Y21XNFdFSkpjQzJ2ZmRySUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82YWZjYmUtNmRmMC00Zjc3LWFmMzQt YzYxODAzYzM0NjU3LzEvZXM0WGFtbk15Y21XNFdFSkpjQzJ2ZmRySUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82YWZjYmUtNmRmMC00Zjc3LWFmMzQtYzYxODAzYzM0NjU3 LzEvZXM0WGFtbk15Y21XNFdFSkpjQzJ2ZmRySUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabtDW7E6 wPq5bfKYKVA9mcNPlnXHDxug8oZj94XOyc2jVmZX8dY42eZzqbjd84hV22UXV2t+ z09zWO8Ql4/0yt1iqnrEbqRiZVr9JhelxaVftxdH5orDrBE9OysPuvRee4CUYJXo fVz9UETmB5osP1/yHBzYOzxA3ut7S9HZGhTnlIl+4+qxOqXhnRT1kCPB7Xga/7eY wRHXAJY4FlW5+WP3mRzSvNvjiJ71hTpt0BjhpusiF9cQXMdoTfQpDh72KBUm9SEe xKPzbz8itSdS+uz9FeFv+9b07rpl8B8qT5OfGUJxDWBw73KCxVZ/s5rhEeQitU43 XX1ZmtNeWqaxCg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:09:43 2026 by rpki-client