This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft File: 73imvMheyK3m7M6IDuBz1jdweWU.mft (raw, json) Hash identifier: nRkDoav23sxNLAPv7MrHqEJarHeJqFs2RE2iPzbVH7o= Subject key identifier: 93:0E:16:42:35:9B:6E:9B:1E:55:8D:B2:1B:7B:5B:29:34:BE:CE:E2 Authority key identifier: EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65 Certificate issuer: /CN=ef78a6bcc85ec8ade6ecce880ee073d637707965 Certificate serial: 019BF876AE28D82ADF6C3B3E31593354DF84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 04:01:25 +0000 Manifest this update: Mon 26 Jan 2026 04:01:25 +0000 Manifest next update: Tue 27 Jan 2026 04:01:25 +0000 Files and hashes: 1: 73imvMheyK3m7M6IDuBz1jdweWU.crl (hash: 78z/4+jGtOuCzJBy5O9WZwMRwgQq0ZMPYiF23knaE9k=) 2: s3XOS3QA_OLCEJgqKQs1DGSZPSE.roa (hash: zm1kL82qrnuSElGfAwXwitkc6LPDrRud9bFF8MtyuyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:ae:28:d8:2a:df:6c:3b:3e:31:59:33:54:df:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef78a6bcc85ec8ade6ecce880ee073d637707965 Validity Not Before: Jan 26 04:01:25 2026 GMT Not After : Jan 27 04:01:25 2026 GMT Subject: CN=930e1642359b6e9b1e558db21b7b5b2934becee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:15:c5:84:67:89:43:5f:93:4e:5a:d4:dc:05: 7b:b5:93:4a:b7:97:d3:f1:66:82:84:5a:61:d3:63: cc:14:f0:a9:90:6f:47:1d:57:f6:99:b5:43:3f:d9: 58:62:99:eb:02:39:ae:49:c7:c8:81:d9:39:ee:e1: 51:82:24:84:ab:94:65:09:b1:ac:a0:c3:4b:56:5f: 2d:a1:27:26:5f:30:79:a1:04:5b:76:78:90:45:53: 65:1f:cf:75:b2:b2:91:66:3e:c8:0d:37:73:fe:b4: b9:38:0a:5d:c5:b1:f2:1a:2d:f0:aa:15:ee:4c:b4: 99:51:a3:68:50:2e:df:77:35:c3:26:1c:16:99:6e: bb:0f:da:36:d9:a5:d7:c3:c5:2a:d1:24:f8:6f:47: ad:e4:97:9a:51:89:51:98:b1:5a:e5:b4:ea:d3:14: 6b:ef:a8:f4:36:5f:e6:d8:b8:59:79:81:da:8b:d3: 45:2c:59:11:1a:78:d4:8d:4f:67:50:65:63:c5:bf: c9:bb:1d:fd:4f:f5:79:bb:f5:3b:1a:b4:03:7e:13: f4:95:9e:e4:b1:9f:f5:8b:e9:80:e4:fe:24:b0:9c: fd:82:2d:e0:c1:9e:94:55:4d:b7:95:2c:d2:1d:b8: 54:fc:15:83:45:8e:61:6a:75:8b:34:f1:db:7c:e3: bd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0E:16:42:35:9B:6E:9B:1E:55:8D:B2:1B:7B:5B:29:34:BE:CE:E2 X509v3 Authority Key Identifier: keyid:EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:8a:f8:32:81:c1:c9:16:99:84:d2:60:8e:79:db:18:cf:21: 1e:db:bf:c3:0f:31:ad:ef:59:81:51:4d:f4:5f:cd:43:64:60: 40:27:71:6f:bb:1d:47:a1:91:e2:0f:7a:3d:03:1f:6b:25:0a: 86:50:b6:1c:7b:aa:b4:c9:31:32:fd:ca:a1:be:9d:a8:cc:58: c4:57:0b:f1:4f:41:c8:3a:26:9d:0e:4b:f6:cb:8e:0d:d9:04: ff:39:f3:69:e7:7f:39:6a:86:b5:c6:34:ca:21:f4:49:bb:3c: fc:fe:27:ae:7f:e9:ed:c1:2b:22:31:4d:0e:5a:cf:59:c0:d8: f7:f9:2e:e7:ac:fc:7a:b7:2a:47:11:ef:66:d2:4a:dd:da:48: b8:38:8f:ef:1b:48:aa:c8:2f:71:14:57:c1:62:10:9b:f8:ed: f5:f3:7b:21:36:42:5d:5c:1e:90:32:ac:54:5d:b3:51:2d:b3: 06:84:48:07:b3:61:d3:85:06:fe:ae:9d:21:64:c7:fc:dd:dc: 90:8e:1d:d4:47:f2:7c:80:09:80:59:42:1c:e5:c3:a4:2d:79: e8:81:92:69:9f:20:22:25:97:35:36:32:d3:56:fe:b3:07:d0: 63:c8:18:78:65:05:b9:db:bf:e3:b8:ad:ca:10:a7:85:22:4d: a7:9e:15:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dq4o2CrfbDs+MVkzVN+EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNzhhNmJjYzg1ZWM4YWRlNmVjY2U4ODBlZTA3M2Q2Mzc3 MDc5NjUwHhcNMjYwMTI2MDQwMTI1WhcNMjYwMTI3MDQwMTI1WjAzMTEwLwYDVQQD Eyg5MzBlMTY0MjM1OWI2ZTliMWU1NThkYjIxYjdiNWIyOTM0YmVjZWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBXFhGeJQ1+TTlrU3AV7tZNKt5fT 8WaChFph02PMFPCpkG9HHVf2mbVDP9lYYpnrAjmuScfIgdk57uFRgiSEq5RlCbGs oMNLVl8toScmXzB5oQRbdniQRVNlH891srKRZj7IDTdz/rS5OApdxbHyGi3wqhXu TLSZUaNoUC7fdzXDJhwWmW67D9o22aXXw8Uq0ST4b0et5JeaUYlRmLFa5bTq0xRr 76j0Nl/m2LhZeYHai9NFLFkRGnjUjU9nUGVjxb/Jux39T/V5u/U7GrQDfhP0lZ7k sZ/1i+mA5P4ksJz9gi3gwZ6UVU23lSzSHbhU/BWDRY5hanWLNPHbfOO9xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMOFkI1m26bHlWNsht7Wyk0vs7iMB8GA1UdIwQY MBaAFO94przIXsit5uzOiA7gc9Y3cHllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzNpbXZNaGV5SzNtN002SUR1QnoxamR3ZVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80OWFiYTQtZTYzZC00ZTA2LThhMTIt OTZmMjE2ODkzZGVjLzEvNzNpbXZNaGV5SzNtN002SUR1QnoxamR3ZVdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80OWFiYTQtZTYzZC00ZTA2LThhMTItOTZmMjE2ODkzZGVj LzEvNzNpbXZNaGV5SzNtN002SUR1QnoxamR3ZVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYr4MoHB yRaZhNJgjnnbGM8hHtu/ww8xre9ZgVFN9F/NQ2RgQCdxb7sdR6GR4g96PQMfayUK hlC2HHuqtMkxMv3Kob6dqMxYxFcL8U9ByDomnQ5L9suODdkE/znzaed/OWqGtcY0 yiH0Sbs8/P4nrn/p7cErIjFNDlrPWcDY9/ku56z8ercqRxHvZtJK3dpIuDiP7xtI qsgvcRRXwWIQm/jt9fN7ITZCXVwekDKsVF2zUS2zBoRIB7Nh04UG/q6dIWTH/N3c kI4d1EfyfIAJgFlCHOXDpC156IGSaZ8gIiWXNTYy01b+swfQY8gYeGUFudu/47it yhCnhSJNp54VCg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:37 2026 by rpki-client