This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft File: E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft (raw, json) Hash identifier: U6nryiJho2zMvAeNuQS9btPpm3Db6L0iMyJG6BXYzH4= Subject key identifier: CA:55:5D:98:5F:8E:AB:E7:0A:F0:AD:D3:D3:82:B6:17:91:42:2E:CB Authority key identifier: 13:ED:FB:91:0F:FF:E4:7D:51:AD:9D:0F:88:3B:1B:64:96:69:E1:35 Certificate issuer: /CN=13edfb910fffe47d51ad9d0f883b1b649669e135 Certificate serial: 019BF507A08934DF932D502B0C5998F890FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft Manifest number: 097E Signing time: Sun 25 Jan 2026 12:01:16 +0000 Manifest this update: Sun 25 Jan 2026 12:01:16 +0000 Manifest next update: Mon 26 Jan 2026 12:01:16 +0000 Files and hashes: 1: E-37kQ__5H1RrZ0PiDsbZJZp4TU.crl (hash: DZvmPlOnQ13JC53GzLQgg5Tnmw6oKADZEzl6K4yiOR8=) 2: ab_dcmnUNV-XBfTtK_tKTbZqwjI.roa (hash: xavsN1HJdLi+aPkdFObLI236THGttyRtSD4R0FVRKWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:a0:89:34:df:93:2d:50:2b:0c:59:98:f8:90:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13edfb910fffe47d51ad9d0f883b1b649669e135 Validity Not Before: Jan 25 12:01:16 2026 GMT Not After : Jan 26 12:01:16 2026 GMT Subject: CN=ca555d985f8eabe70af0add3d382b61791422ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2a:3a:0c:0c:46:75:f8:b0:38:6b:c8:00:f0: 75:d8:f1:38:28:67:42:61:c3:48:96:ab:f6:35:a0: ba:e9:d4:04:85:3e:ed:9e:27:18:67:6d:7e:53:1c: d0:26:f6:d1:db:fb:cf:fc:4e:b9:5b:8d:8b:14:99: 05:5c:16:7d:27:ff:59:b0:d7:61:26:e6:d0:1d:1a: 9c:29:ea:e5:78:89:83:5b:0c:83:05:be:4c:b3:ab: a2:eb:e6:9a:0f:c6:04:4a:2a:2b:ff:73:fc:a7:13: 8e:2b:2d:ab:e9:49:ff:11:78:31:c3:01:0f:11:cc: 11:b1:db:28:77:d1:a6:08:76:79:10:8f:9c:91:58: b3:99:85:df:43:9c:54:07:b6:9f:37:f2:78:28:21: 09:62:b8:c1:62:1b:f2:fb:c7:f5:c3:ce:ac:14:99: e4:a0:e4:23:3b:11:2d:58:05:cd:b9:65:52:85:24: b8:6d:ac:ce:87:a3:c9:21:6e:4d:75:82:ff:88:d8: e1:95:9b:53:c2:ae:ce:95:0f:5c:18:45:1d:06:1e: f5:c7:3d:d4:8b:62:f0:9c:2d:ff:a5:c1:08:6f:5c: 5e:46:56:3a:58:3a:52:e3:c5:c5:bd:f7:26:04:4c: ba:fe:0c:d3:82:5b:8e:b5:aa:6c:af:ba:89:7b:2b: 54:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:55:5D:98:5F:8E:AB:E7:0A:F0:AD:D3:D3:82:B6:17:91:42:2E:CB X509v3 Authority Key Identifier: keyid:13:ED:FB:91:0F:FF:E4:7D:51:AD:9D:0F:88:3B:1B:64:96:69:E1:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-37kQ__5H1RrZ0PiDsbZJZp4TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143b5c-c5ab-4d98-ae4b-d141a8692039/1/E-37kQ__5H1RrZ0PiDsbZJZp4TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:d2:da:75:ce:ba:dc:f5:a5:36:ca:60:80:ba:f8:c9:fb:22: 99:c1:60:b3:d9:df:2f:d0:fa:dd:aa:23:ea:89:07:58:21:51: 65:af:5e:5c:6c:7e:de:6c:6f:0b:09:bb:58:fc:96:00:c7:58: 0d:ff:5e:0a:52:ca:88:f2:54:f2:fe:53:d2:e1:62:1f:bd:63: 13:26:89:c0:fe:39:ff:bd:71:96:39:34:58:a2:91:83:32:3a: 07:85:54:b0:48:22:16:61:99:15:1d:07:f9:10:8e:6b:26:d5: b3:84:04:c2:57:d6:1b:e9:c1:ab:15:6d:11:33:ed:fa:88:98: 78:57:c3:f4:71:ab:62:4c:50:b3:56:96:e1:4c:39:3a:28:2f: 16:ac:5e:bd:99:ff:83:48:61:0d:1a:46:d9:63:6f:cb:76:e5: fe:cf:40:83:32:1d:95:77:ec:db:9c:e3:39:7e:40:23:bf:a8: 31:bb:9f:9c:40:75:41:59:c2:9b:12:f6:9a:ea:81:2c:67:4d: 40:fa:64:2f:79:7c:4c:e9:e9:6a:23:97:7a:a4:69:18:de:ab: 65:28:c2:9a:46:c2:33:02:5c:72:a2:0b:6b:b7:33:c3:14:17: 13:05:7f:2b:f8:24:4f:88:0d:18:de:21:11:cc:f6:af:c5:fd: 14:88:22:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B6CJNN+TLVArDFmY+JD6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZWRmYjkxMGZmZmU0N2Q1MWFkOWQwZjg4M2IxYjY0OTY2 OWUxMzUwHhcNMjYwMTI1MTIwMTE2WhcNMjYwMTI2MTIwMTE2WjAzMTEwLwYDVQQD EyhjYTU1NWQ5ODVmOGVhYmU3MGFmMGFkZDNkMzgyYjYxNzkxNDIyZWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyo6DAxGdfiwOGvIAPB12PE4KGdC YcNIlqv2NaC66dQEhT7tnicYZ21+UxzQJvbR2/vP/E65W42LFJkFXBZ9J/9ZsNdh JubQHRqcKerleImDWwyDBb5Ms6ui6+aaD8YESior/3P8pxOOKy2r6Un/EXgxwwEP EcwRsdsod9GmCHZ5EI+ckVizmYXfQ5xUB7afN/J4KCEJYrjBYhvy+8f1w86sFJnk oOQjOxEtWAXNuWVShSS4bazOh6PJIW5NdYL/iNjhlZtTwq7OlQ9cGEUdBh71xz3U i2LwnC3/pcEIb1xeRlY6WDpS48XFvfcmBEy6/gzTgluOtapsr7qJeytUAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpVXZhfjqvnCvCt09OCtheRQi7LMB8GA1UdIwQY MBaAFBPt+5EP/+R9Ua2dD4g7G2SWaeE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS0zN2tRX181SDFSclowUGlEc2JaSlpwNFRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xNDNiNWMtYzVhYi00ZDk4LWFlNGIt ZDE0MWE4NjkyMDM5LzEvRS0zN2tRX181SDFSclowUGlEc2JaSlpwNFRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xNDNiNWMtYzVhYi00ZDk4LWFlNGItZDE0MWE4NjkyMDM5 LzEvRS0zN2tRX181SDFSclowUGlEc2JaSlpwNFRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASNLadc66 3PWlNspggLr4yfsimcFgs9nfL9D63aoj6okHWCFRZa9eXGx+3mxvCwm7WPyWAMdY Df9eClLKiPJU8v5T0uFiH71jEyaJwP45/71xljk0WKKRgzI6B4VUsEgiFmGZFR0H +RCOaybVs4QEwlfWG+nBqxVtETPt+oiYeFfD9HGrYkxQs1aW4Uw5OigvFqxevZn/ g0hhDRpG2WNvy3bl/s9AgzIdlXfs25zjOX5AI7+oMbufnEB1QVnCmxL2muqBLGdN QPpkL3l8TOnpaiOXeqRpGN6rZSjCmkbCMwJccqILa7czwxQXEwV/K/gkT4gNGN4h Ecz2r8X9FIgi5A== -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:22 2026 by rpki-client