This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft File: EVwEDsl1QyAjbNymTjk5C93jYmo.mft (raw, json) Hash identifier: /r6gCD2SHZU+Mb/8MPN3kHuSC8VgG0MiYXTQPFTlKnU= Subject key identifier: 36:C8:DF:B9:51:17:31:38:58:21:61:C6:CD:D2:53:A9:F3:70:6A:4A Authority key identifier: 11:5C:04:0E:C9:75:43:20:23:6C:DC:A6:4E:39:39:0B:DD:E3:62:6A Certificate issuer: /CN=115c040ec9754320236cdca64e39390bdde3626a Certificate serial: 019BFB40A71C24DDAF704EC61DE051641D78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft Manifest number: 0CCC Signing time: Mon 26 Jan 2026 17:01:16 +0000 Manifest this update: Mon 26 Jan 2026 17:01:16 +0000 Manifest next update: Tue 27 Jan 2026 17:01:16 +0000 Files and hashes: 1: EVwEDsl1QyAjbNymTjk5C93jYmo.crl (hash: sjWgKUZt8rLS7l6b71LH6f22c7zgZjQkvlpSH+u2KgY=) 2: T5FYecDL9dYudSF4znOqL3xO-3I.roa (hash: tGYqIZRK3jsFGjXl9JsU630t/v5iPjAOq7gYJouPhLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.crl rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:a7:1c:24:dd:af:70:4e:c6:1d:e0:51:64:1d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115c040ec9754320236cdca64e39390bdde3626a Validity Not Before: Jan 26 17:01:16 2026 GMT Not After : Jan 27 17:01:16 2026 GMT Subject: CN=36c8dfb951173138582161c6cdd253a9f3706a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1f:c8:d5:64:07:fe:ba:11:34:bc:8b:31:b3: e8:3a:76:18:d2:be:d9:41:b1:9e:a2:29:be:63:ae: a1:6c:75:74:9d:3b:bc:56:6f:ea:bc:f0:a8:f9:7a: 69:58:6d:7f:79:21:23:0c:64:00:fe:c9:fe:35:54: d6:ce:eb:5f:37:02:09:e3:6c:52:6b:67:78:96:4f: b3:5f:27:f1:6d:64:7b:1c:19:09:fc:f7:e1:61:31: c5:c0:2a:6c:4d:21:01:d9:36:18:81:00:3c:c7:95: 2d:af:06:cf:c8:fb:04:d8:60:b4:68:b0:52:e6:38: c4:f9:32:08:52:44:19:48:a6:c1:25:97:ae:70:41: 1f:48:ba:53:e1:af:67:2e:3a:3d:df:8e:2b:19:b2: 08:e6:1a:e3:4c:99:c5:14:95:41:70:d3:f1:64:dd: 07:01:12:8a:91:7b:aa:dc:dc:f9:fb:a9:f5:b8:34: f2:14:bf:c9:4f:60:2b:50:52:8e:c3:a0:c2:5b:f4: 40:66:b7:59:20:87:6c:a7:06:7a:e6:95:22:64:5f: 7f:11:56:17:af:ab:c6:5d:d0:2e:64:9c:4f:38:34: 0f:04:0c:b9:16:6d:02:49:ef:40:25:c8:8a:ba:81: 93:72:53:41:f9:43:20:37:48:cd:94:d6:cf:60:d2: 76:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C8:DF:B9:51:17:31:38:58:21:61:C6:CD:D2:53:A9:F3:70:6A:4A X509v3 Authority Key Identifier: keyid:11:5C:04:0E:C9:75:43:20:23:6C:DC:A6:4E:39:39:0B:DD:E3:62:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:fb:1f:48:59:6d:dd:c1:0a:35:a3:a9:cc:d9:2a:54:b8:de: 36:2b:0b:97:67:53:d0:96:77:24:8f:31:89:8b:4c:60:bb:6d: 52:1f:81:40:90:19:c0:66:d6:e5:93:e4:6f:9a:fe:45:40:72: 57:7b:5b:39:cd:bf:85:85:a5:3a:8e:ab:8e:b3:24:d9:77:89: 6f:f7:72:40:8d:60:25:db:02:19:bb:c0:bc:56:b6:c7:08:0e: b2:5a:0b:8c:c0:c8:f3:bc:91:c8:24:0e:ff:21:f1:5c:2b:4e: be:d0:f5:7a:00:37:36:fb:21:2e:cc:a2:7e:07:f0:cb:50:82: b1:9b:57:dd:16:e1:09:dd:1a:12:7b:e8:32:ec:48:58:3e:f1: 16:23:ad:44:26:8b:f7:59:12:12:69:7d:85:33:74:84:22:a4: 46:9b:2e:ee:cf:52:85:ff:19:85:a3:44:17:a0:24:20:a9:c3: 6d:0a:e7:70:f9:63:e6:ac:23:9c:0e:55:06:e3:33:c8:df:2e: 22:8c:97:c2:9d:75:0b:4a:30:79:87:5f:ff:30:0e:ba:09:b0: ea:b0:65:79:cc:f2:2e:6a:3e:7f:41:2b:c3:67:34:98:b2:e0: 01:1c:f7:bc:ff:76:14:e9:5d:94:f4:a1:37:a2:7a:e1:26:f8: a8:6b:f2:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QKccJN2vcE7GHeBRZB14MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWMwNDBlYzk3NTQzMjAyMzZjZGNhNjRlMzkzOTBiZGRl MzYyNmEwHhcNMjYwMTI2MTcwMTE2WhcNMjYwMTI3MTcwMTE2WjAzMTEwLwYDVQQD EygzNmM4ZGZiOTUxMTczMTM4NTgyMTYxYzZjZGQyNTNhOWYzNzA2YTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6R/I1WQH/roRNLyLMbPoOnYY0r7Z QbGeoim+Y66hbHV0nTu8Vm/qvPCo+XppWG1/eSEjDGQA/sn+NVTWzutfNwIJ42xS a2d4lk+zXyfxbWR7HBkJ/PfhYTHFwCpsTSEB2TYYgQA8x5UtrwbPyPsE2GC0aLBS 5jjE+TIIUkQZSKbBJZeucEEfSLpT4a9nLjo9344rGbII5hrjTJnFFJVBcNPxZN0H ARKKkXuq3Nz5+6n1uDTyFL/JT2ArUFKOw6DCW/RAZrdZIIdspwZ65pUiZF9/EVYX r6vGXdAuZJxPODQPBAy5Fm0CSe9AJciKuoGTclNB+UMgN0jNlNbPYNJ23QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbI37lRFzE4WCFhxs3SU6nzcGpKMB8GA1UdIwQY MBaAFBFcBA7JdUMgI2zcpk45OQvd42JqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVZ3RURzbDFReUFqYk55bVRqazVDOTNqWW1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lNjUxNTItMzlmYi00OTc2LThjZGEt NzBlN2QwNTdmZjJkLzEvRVZ3RURzbDFReUFqYk55bVRqazVDOTNqWW1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9lNjUxNTItMzlmYi00OTc2LThjZGEtNzBlN2QwNTdmZjJk LzEvRVZ3RURzbDFReUFqYk55bVRqazVDOTNqWW1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/sfSFlt 3cEKNaOpzNkqVLjeNisLl2dT0JZ3JI8xiYtMYLttUh+BQJAZwGbW5ZPkb5r+RUBy V3tbOc2/hYWlOo6rjrMk2XeJb/dyQI1gJdsCGbvAvFa2xwgOsloLjMDI87yRyCQO /yHxXCtOvtD1egA3NvshLsyifgfwy1CCsZtX3RbhCd0aEnvoMuxIWD7xFiOtRCaL 91kSEml9hTN0hCKkRpsu7s9Shf8ZhaNEF6AkIKnDbQrncPlj5qwjnA5VBuMzyN8u IoyXwp11C0oweYdf/zAOugmw6rBleczyLmo+f0Erw2c0mLLgARz3vP92FOldlPSh N6J64Sb4qGvymg== -----END CERTIFICATE-----Generated at Mon Jan 26 20:18:31 2026 by rpki-client