This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft File: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft (raw, json) Hash identifier: u9Txp8Fjmnwz4/YDOc1PaW4YLA/sNt81iIBfvxL/c+g= Subject key identifier: C6:50:51:CA:30:03:EB:9F:8C:BC:24:0C:5E:AA:3C:D5:9B:C3:97:0E Authority key identifier: 12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64 Certificate issuer: /CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64 Certificate serial: 019BF9F6FAABD5B406CDFEC4F86F14091771 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft Manifest number: 08EB Signing time: Mon 26 Jan 2026 11:01:11 +0000 Manifest this update: Mon 26 Jan 2026 11:01:11 +0000 Manifest next update: Tue 27 Jan 2026 11:01:11 +0000 Files and hashes: 1: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl (hash: x7ZYrGalliUxofjgRl9GnZ5wWpsPAK6C0HVs0gZ7t9U=) 2: zY6-TSsM-n0cGeuR4MC7O4QKpZU.roa (hash: pDF4f+98qM6dWbtI9D665+bMv7kt2epaA+MQQ2O8Qdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:fa:ab:d5:b4:06:cd:fe:c4:f8:6f:14:09:17:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64 Validity Not Before: Jan 26 11:01:11 2026 GMT Not After : Jan 27 11:01:11 2026 GMT Subject: CN=c65051ca3003eb9f8cbc240c5eaa3cd59bc3970e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ca:76:c9:31:4b:03:b2:04:38:a4:08:67:43: ac:65:9a:71:a9:db:ec:e2:9e:99:1c:de:a5:93:68: cb:00:f8:b3:cd:ea:11:80:5b:c3:c4:e6:96:f5:6b: fc:ae:33:1b:03:28:46:71:19:82:93:f1:e7:de:c7: 9d:e5:11:bd:0f:91:93:0f:c9:10:db:94:2c:59:de: 97:4d:70:95:ed:ff:ff:57:b0:ef:d3:31:63:dd:30: 53:fc:14:bf:2b:28:73:87:fc:37:fd:05:64:84:f0: c4:15:53:8e:7b:9f:86:c7:40:f6:67:72:97:23:f9: bf:0b:e5:71:8c:c2:2c:54:60:27:f3:6a:bc:2b:a6: 16:fe:e8:41:36:f8:3d:d3:8e:a5:c3:34:7f:a7:15: 26:58:b7:f2:69:2e:b9:6c:55:02:fe:1a:20:f1:86: 29:e2:87:37:80:40:a5:06:21:91:98:b9:56:24:2a: fe:95:42:25:fd:dc:a3:7a:5f:15:14:ee:43:da:dc: 86:4a:cc:4d:35:8a:66:d0:b8:db:58:c8:d9:d3:d4: b3:3a:6f:97:ef:ff:53:67:d0:2e:b2:d6:ad:b5:ce: 69:c8:61:44:80:5d:d8:d8:b1:66:56:58:81:2f:bd: 76:69:e0:1c:31:79:a0:93:35:59:31:ef:c4:aa:d7: 77:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:50:51:CA:30:03:EB:9F:8C:BC:24:0C:5E:AA:3C:D5:9B:C3:97:0E X509v3 Authority Key Identifier: keyid:12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b1:86:38:cc:cd:c0:53:47:8e:c8:4d:2e:72:65:6f:81:19: f9:77:9a:24:c4:5e:93:df:8f:90:52:3d:2f:f3:39:b4:59:d5: 30:c5:62:d4:6d:bd:b0:45:26:be:b6:41:3e:0b:22:c1:7c:8a: 5f:7a:71:e8:b2:82:15:b0:8f:18:7a:47:80:84:e6:14:4b:a5: ee:5c:cc:a3:d2:42:76:82:b1:15:0a:a4:fa:6d:42:cd:b2:c3: 35:26:a0:01:63:ce:3c:36:c9:db:13:ca:91:ff:d1:a9:a0:88: d6:96:8d:57:4f:85:f9:b2:b6:cb:25:3c:dd:5f:63:5f:68:13: 6c:6b:82:36:71:81:b7:09:8c:70:d1:13:c8:3e:7e:76:04:ef: 99:5a:94:ee:01:45:2a:2d:16:2c:66:0b:52:6b:b5:b2:ca:ea: 84:52:34:2b:27:2e:62:47:f6:53:08:39:9c:b6:7c:46:eb:8f: a3:60:99:02:ef:05:af:94:1d:4d:a5:ae:01:d5:8f:d9:6f:09: c3:27:25:fd:4a:f8:41:bf:dd:5c:6a:8f:37:64:b1:76:eb:5c: 7b:aa:c7:7e:7f:fc:ad:8d:e1:ac:b0:03:8b:5c:c4:b2:f1:81: c1:09:e1:ce:c0:2a:0d:6b:1a:50:46:98:f2:d3:76:3e:30:26: 96:43:92:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59vqr1bQGzf7E+G8UCRdxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTMzYTY1MjNlMmVkMGEwYzlhMzZlYThhN2M2ZjBlNzJh NWRkNjQwHhcNMjYwMTI2MTEwMTExWhcNMjYwMTI3MTEwMTExWjAzMTEwLwYDVQQD EyhjNjUwNTFjYTMwMDNlYjlmOGNiYzI0MGM1ZWFhM2NkNTliYzM5NzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sp2yTFLA7IEOKQIZ0OsZZpxqdvs 4p6ZHN6lk2jLAPizzeoRgFvDxOaW9Wv8rjMbAyhGcRmCk/Hn3sed5RG9D5GTD8kQ 25QsWd6XTXCV7f//V7Dv0zFj3TBT/BS/Kyhzh/w3/QVkhPDEFVOOe5+Gx0D2Z3KX I/m/C+VxjMIsVGAn82q8K6YW/uhBNvg9046lwzR/pxUmWLfyaS65bFUC/hog8YYp 4oc3gEClBiGRmLlWJCr+lUIl/dyjel8VFO5D2tyGSsxNNYpm0LjbWMjZ09SzOm+X 7/9TZ9Austattc5pyGFEgF3Y2LFmVliBL712aeAcMXmgkzVZMe/Eqtd33wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZQUcowA+ufjLwkDF6qPNWbw5cOMB8GA1UdIwQY MBaAFBITOmUj4u0KDJo26op8bw5ypd1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85MzRlYzMtYjc2YS00MGQwLThhM2Et ODI0NzI5YWI0YjlhLzEvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85MzRlYzMtYjc2YS00MGQwLThhM2EtODI0NzI5YWI0Yjlh LzEvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7GGOMzN wFNHjshNLnJlb4EZ+XeaJMRek9+PkFI9L/M5tFnVMMVi1G29sEUmvrZBPgsiwXyK X3px6LKCFbCPGHpHgITmFEul7lzMo9JCdoKxFQqk+m1CzbLDNSagAWPOPDbJ2xPK kf/RqaCI1paNV0+F+bK2yyU83V9jX2gTbGuCNnGBtwmMcNETyD5+dgTvmVqU7gFF Ki0WLGYLUmu1ssrqhFI0KycuYkf2Uwg5nLZ8RuuPo2CZAu8Fr5QdTaWuAdWP2W8J wycl/Ur4Qb/dXGqPN2Sxdutce6rHfn/8rY3hrLADi1zEsvGBwQnhzsAqDWsaUEaY 8tN2PjAmlkOSpw== -----END CERTIFICATE-----Generated at Mon Jan 26 15:40:03 2026 by rpki-client