This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft File: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft (raw, json) Hash identifier: h1Q0cvfACFKVkskaFDXU/ecfuTKXHss0ntfnGV3yZ4U= Subject key identifier: 94:C8:DB:04:5D:C8:E5:26:5F:38:C0:76:44:CB:51:DA:98:C0:D2:24 Authority key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4 Certificate issuer: /CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4 Certificate serial: 019BF3F59874EDE9F9A7490CC4F51BB9F198 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 07:01:57 +0000 Manifest this update: Sun 25 Jan 2026 07:01:57 +0000 Manifest next update: Mon 26 Jan 2026 07:01:57 +0000 Files and hashes: 1: 1-871CmDX8fagFE4cCLtEOvFlaJk.roa (hash: XbD+Hd0tYqjM6KWUuuQ0xXPJOZgVOM/iQcoQQ4UP8I0=) 2: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl (hash: /66GFEnfvLIplJ/E4sGnszMg+bnWndr/wyhVz0iAIgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f5:98:74:ed:e9:f9:a7:49:0c:c4:f5:1b:b9:f1:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4 Validity Not Before: Jan 25 07:01:57 2026 GMT Not After : Jan 26 07:01:57 2026 GMT Subject: CN=94c8db045dc8e5265f38c07644cb51da98c0d224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:39:4d:cc:84:6a:c6:58:af:03:20:bd:fa:a2: 44:5d:53:42:4d:50:83:45:b9:4d:c8:4d:d2:2c:27: f8:36:6a:64:44:7b:3a:8a:45:a2:81:26:f1:c4:39: f6:95:7d:54:ef:57:c0:82:a5:07:07:83:cb:c0:02: 69:3b:fe:49:97:22:14:a1:47:6d:0f:8a:4a:a7:be: 76:fc:c2:ed:e7:60:39:0d:90:19:1d:da:b4:50:0f: 61:bf:48:a7:aa:f8:2b:ec:fd:9d:55:17:e3:4b:fa: 28:42:9c:2b:69:8b:95:32:7e:34:da:8a:c0:f3:8b: fa:f7:19:20:1b:e6:34:48:b7:b5:24:fd:5d:ca:6f: 5d:05:49:35:1b:10:11:36:5e:8d:41:85:a2:04:a6: 43:5c:56:ed:5b:58:74:43:8b:61:0d:31:7e:a4:26: 22:a2:8b:3d:5e:3f:59:04:bc:ef:35:cd:b3:a3:71: 9f:16:bf:87:c7:3e:57:e3:e5:b4:ac:62:ce:27:42: 83:4f:48:53:f2:8d:fd:90:52:af:7d:01:af:fd:2e: 2f:69:e5:b5:1d:06:59:44:2f:c9:cd:7d:69:17:f2: 85:e1:34:5d:2d:4f:01:ae:be:55:cf:c4:08:aa:74: a2:54:ce:12:26:0a:ca:a1:f0:7f:a7:4b:7c:87:3d: ef:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C8:DB:04:5D:C8:E5:26:5F:38:C0:76:44:CB:51:DA:98:C0:D2:24 X509v3 Authority Key Identifier: keyid:12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:24:e3:04:31:a1:b6:bf:d5:20:17:1a:77:21:9e:63:d9:c3: 49:69:8b:4b:7e:9e:f3:a8:78:59:b2:26:9f:a3:76:e8:a5:fa: 02:88:e3:f6:ba:66:09:e9:03:64:b6:9b:91:12:eb:73:94:32: 25:ee:99:e8:b5:b3:bc:67:9f:8a:c0:64:7e:13:72:5b:a7:73: 3a:cf:b0:af:6f:41:12:9c:e7:1c:22:ae:3c:cb:a3:b0:0d:45: e9:5e:a4:ed:aa:2d:a2:aa:ff:f5:99:04:31:8e:78:7f:6e:15: d4:55:27:64:70:1b:ab:82:c8:38:60:c3:95:62:c0:90:0f:5b: bd:86:8b:fe:0c:9f:e8:bc:f3:68:56:af:1b:dd:2d:f0:73:b3: 69:1b:14:eb:e7:5e:6b:74:ca:6c:4b:28:3c:51:73:92:30:87: c5:07:7b:0d:44:07:dc:e3:f9:fd:ca:e5:45:96:89:27:8d:98: b9:23:05:ac:14:2d:64:f2:e4:d9:15:7d:1f:b6:f7:b4:e3:45: 83:d9:e7:94:1d:a8:df:b4:62:25:70:2f:f1:4d:5d:b2:a8:16: cc:b7:5d:fb:27:44:fd:2a:6a:11:d5:4a:8b:3a:af:e1:d2:3c: 41:67:80:37:c4:4f:ce:34:19:56:af:1d:23:80:51:02:53:18: 1b:6e:50:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9Zh07en5p0kMxPUbufGYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyOGZkZTJiZmM2M2VmZTNkMTMyZGRhYzc4MzdlMTVjN2Y0 YjQ5ZjQwHhcNMjYwMTI1MDcwMTU3WhcNMjYwMTI2MDcwMTU3WjAzMTEwLwYDVQQD Eyg5NGM4ZGIwNDVkYzhlNTI2NWYzOGMwNzY0NGNiNTFkYTk4YzBkMjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jlNzIRqxlivAyC9+qJEXVNCTVCD RblNyE3SLCf4NmpkRHs6ikWigSbxxDn2lX1U71fAgqUHB4PLwAJpO/5JlyIUoUdt D4pKp752/MLt52A5DZAZHdq0UA9hv0inqvgr7P2dVRfjS/ooQpwraYuVMn402orA 84v69xkgG+Y0SLe1JP1dym9dBUk1GxARNl6NQYWiBKZDXFbtW1h0Q4thDTF+pCYi oos9Xj9ZBLzvNc2zo3GfFr+Hxz5X4+W0rGLOJ0KDT0hT8o39kFKvfQGv/S4vaeW1 HQZZRC/JzX1pF/KF4TRdLU8Brr5Vz8QIqnSiVM4SJgrKofB/p0t8hz3vCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTI2wRdyOUmXzjAdkTLUdqYwNIkMB8GA1UdIwQY MBaAFBKP3iv8Y+/j0TLdrHg34Vx/S0n0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW9fZUtfeGo3LVBSTXQyc2VEZmhYSDlMU2ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hOWY4MWUtNzliMi00YzJlLTlmM2Ut N2MyNGVmMDI1OWRiLzEvRW9fZUtfeGo3LVBSTXQyc2VEZmhYSDlMU2ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9hOWY4MWUtNzliMi00YzJlLTlmM2UtN2MyNGVmMDI1OWRi LzEvRW9fZUtfeGo3LVBSTXQyc2VEZmhYSDlMU2ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSTjBDGh tr/VIBcadyGeY9nDSWmLS36e86h4WbImn6N26KX6Aojj9rpmCekDZLabkRLrc5Qy Je6Z6LWzvGefisBkfhNyW6dzOs+wr29BEpznHCKuPMujsA1F6V6k7aotoqr/9ZkE MY54f24V1FUnZHAbq4LIOGDDlWLAkA9bvYaL/gyf6LzzaFavG90t8HOzaRsU6+de a3TKbEsoPFFzkjCHxQd7DUQH3OP5/crlRZaJJ42YuSMFrBQtZPLk2RV9H7b3tONF g9nnlB2o37RiJXAv8U1dsqgWzLdd+ydE/SpqEdVKizqv4dI8QWeAN8RPzjQZVq8d I4BRAlMYG25QCA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:49 2026 by rpki-client