This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft File: 13EApGzEauiWvcLg4HTjBVq4hns.mft (raw, json) Hash identifier: EGHF3D+8nyjYG/YgJlMzlcu00cxjgu/go19Fe/8QO/U= Subject key identifier: 70:AA:E1:53:F3:75:F0:2C:ED:46:AD:71:C0:35:B8:EB:3A:D2:1A:4D Authority key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B Certificate issuer: /CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b Certificate serial: 019BF4D111C424EDA763DE5311DF45A8484D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft Manifest number: 0CA3 Signing time: Sun 25 Jan 2026 11:01:40 +0000 Manifest this update: Sun 25 Jan 2026 11:01:40 +0000 Manifest next update: Mon 26 Jan 2026 11:01:40 +0000 Files and hashes: 1: 13EApGzEauiWvcLg4HTjBVq4hns.crl (hash: //NiL4qlaBPsfU3i0PeDTZgtVPBwS4qxgvD9VfkPGvc=) 2: lAjUh0yd7DRPhi-W3SSvqev0w_E.roa (hash: YCOHiUTXUD1rmQesFlzNj90jbAUp9KL2LXtb7YGRhtY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d1:11:c4:24:ed:a7:63:de:53:11:df:45:a8:48:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b Validity Not Before: Jan 25 11:01:40 2026 GMT Not After : Jan 26 11:01:40 2026 GMT Subject: CN=70aae153f375f02ced46ad71c035b8eb3ad21a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3c:c1:65:de:52:7a:b4:c1:f3:d0:97:42:ee: 2d:16:c8:68:ce:d4:61:c2:13:77:00:f8:4c:e4:9b: d3:15:0c:f8:00:86:10:56:00:da:15:aa:07:cb:91: 02:1f:2a:d9:4d:b2:20:fc:fb:c1:13:18:4c:9c:80: f6:b0:07:04:01:17:f3:b7:9a:20:2d:fe:eb:54:80: 2e:85:1d:d2:95:5d:1d:13:79:f5:8d:94:98:78:52: 68:53:5b:2b:fe:e9:b2:79:98:12:e1:b9:be:08:23: 15:1a:61:f6:0b:7a:15:8d:df:69:7b:f4:ce:53:09: 01:46:17:87:fe:c0:f6:a5:a0:84:dd:b0:ab:ed:12: 1c:47:7f:75:ef:f6:dc:fa:23:56:c4:13:cd:a4:9e: a1:b5:28:e2:aa:99:3a:55:c8:35:db:d2:8c:47:f0: 82:19:5d:6b:90:4f:32:6e:19:d0:7b:a6:54:75:c9: 1c:58:da:6f:4e:3a:b3:5c:d0:20:91:d7:ce:51:b6: 3a:96:0e:76:8f:59:b3:23:d7:ae:28:90:d3:e1:f6: 3b:3e:ed:33:e4:b6:ce:5e:16:56:9a:0f:65:77:fc: bc:00:e7:dc:a1:af:00:3d:9b:2b:d0:3b:0d:e5:3d: 7f:b3:de:ad:c6:b3:85:8f:16:6e:f6:47:da:4f:08: 54:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AA:E1:53:F3:75:F0:2C:ED:46:AD:71:C0:35:B8:EB:3A:D2:1A:4D X509v3 Authority Key Identifier: keyid:D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:95:ad:de:c2:4a:1f:08:91:96:36:a2:6c:36:f7:81:f5:37: 10:78:05:3b:a2:86:44:2f:0b:7d:af:5a:78:37:f2:9f:a8:13: d4:ba:3e:3f:21:19:7b:51:fd:fe:ac:ce:3a:06:1a:59:37:aa: 93:c6:73:f5:50:be:dc:40:4d:ae:03:95:14:93:30:3d:e7:e7: 51:63:47:b8:cf:43:a3:33:15:b9:8f:98:5f:10:c8:4f:33:a0: bd:62:08:bf:ff:ae:37:97:ef:8d:c6:e5:6c:bd:8d:98:41:71: 2e:7b:58:ad:2d:96:31:a4:00:fb:95:df:5b:c8:ee:c5:29:bd: 64:69:11:24:cc:26:2d:2f:58:a0:10:d2:f2:6b:37:ff:0e:c6: 88:4c:04:cd:d4:8f:02:c0:18:01:e5:8a:5e:a9:a5:e7:f1:bd: 7e:d1:50:e2:f4:2a:2f:83:96:7a:a4:18:a0:da:9f:7f:e8:13: 2c:54:a5:bf:c1:42:fc:02:40:8f:3d:db:9a:4d:4a:b2:b6:f2: 57:61:3e:3e:e8:8c:d3:fa:be:bd:a0:fa:fc:38:39:90:4b:42: 63:b1:4e:5c:0e:b9:df:1b:80:09:96:b7:e5:5f:b7:e7:55:b6: 39:63:c0:fe:d1:17:db:71:b6:a2:72:aa:84:4f:55:cf:5c:dd: 51:c7:b1:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00RHEJO2nY95TEd9FqEhNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NzEwMGE0NmNjNDZhZTg5NmJkYzJlMGUwNzRlMzA1NWFi ODg2N2IwHhcNMjYwMTI1MTEwMTQwWhcNMjYwMTI2MTEwMTQwWjAzMTEwLwYDVQQD Eyg3MGFhZTE1M2YzNzVmMDJjZWQ0NmFkNzFjMDM1YjhlYjNhZDIxYTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTzBZd5SerTB89CXQu4tFshoztRh whN3APhM5JvTFQz4AIYQVgDaFaoHy5ECHyrZTbIg/PvBExhMnID2sAcEARfzt5og Lf7rVIAuhR3SlV0dE3n1jZSYeFJoU1sr/umyeZgS4bm+CCMVGmH2C3oVjd9pe/TO UwkBRheH/sD2paCE3bCr7RIcR3917/bc+iNWxBPNpJ6htSjiqpk6Vcg129KMR/CC GV1rkE8ybhnQe6ZUdckcWNpvTjqzXNAgkdfOUbY6lg52j1mzI9euKJDT4fY7Pu0z 5LbOXhZWmg9ld/y8AOfcoa8APZsr0DsN5T1/s96txrOFjxZu9kfaTwhUGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCq4VPzdfAs7UatccA1uOs60hpNMB8GA1UdIwQY MBaAFNdxAKRsxGrolr3C4OB04wVauIZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjIt ZGQ1MGJlMDY3NDAxLzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjItZGQ1MGJlMDY3NDAx LzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZWt3sJK HwiRljaibDb3gfU3EHgFO6KGRC8Lfa9aeDfyn6gT1Lo+PyEZe1H9/qzOOgYaWTeq k8Zz9VC+3EBNrgOVFJMwPefnUWNHuM9DozMVuY+YXxDITzOgvWIIv/+uN5fvjcbl bL2NmEFxLntYrS2WMaQA+5XfW8juxSm9ZGkRJMwmLS9YoBDS8ms3/w7GiEwEzdSP AsAYAeWKXqml5/G9ftFQ4vQqL4OWeqQYoNqff+gTLFSlv8FC/AJAjz3bmk1Ksrby V2E+PuiM0/q+vaD6/Dg5kEtCY7FOXA653xuACZa35V+351W2OWPA/tEX23G2onKq hE9Vz1zdUcexlQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:52:47 2026 by rpki-client