This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft File: egbjCszbF6JVRzu2wiTx_BVFjos.mft (raw, json) Hash identifier: 4EHFdwvn+qn1sHJXNnmZv/OuOqtRJTHpsCf1Jq03n80= Subject key identifier: 9A:EF:69:85:A0:6F:DF:9D:F3:79:E4:1D:49:2D:BE:F5:EA:93:2C:DE Authority key identifier: 7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B Certificate issuer: /CN=7a06e30accdb17a255473bb6c224f1fc15458e8b Certificate serial: 019BF574CEDABB90317CCC091420B57E8B64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft Manifest number: 1300 Signing time: Sun 25 Jan 2026 14:00:31 +0000 Manifest this update: Sun 25 Jan 2026 14:00:31 +0000 Manifest next update: Mon 26 Jan 2026 14:00:31 +0000 Files and hashes: 1: egbjCszbF6JVRzu2wiTx_BVFjos.crl (hash: Qmh+7tY3nO0Vp8HYB/4KbtcokytZZEYHi6ov/NZvdfw=) 2: zZWMiOPu0l0-QTvM4wjEdvA-aoo.roa (hash: Q6wVapDbvRerj+SvzLlvvzSsU2lv+SpfGrd8Ly/8NlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:ce:da:bb:90:31:7c:cc:09:14:20:b5:7e:8b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a06e30accdb17a255473bb6c224f1fc15458e8b Validity Not Before: Jan 25 14:00:31 2026 GMT Not After : Jan 26 14:00:31 2026 GMT Subject: CN=9aef6985a06fdf9df379e41d492dbef5ea932cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:eb:58:81:f3:3e:03:1d:6e:e2:6d:00:83:7e: c2:05:8b:81:75:e0:2c:a2:ea:c1:34:37:5a:6f:8e: 25:0d:e1:4e:8b:4e:07:89:07:3d:9c:2c:94:a2:b8: 53:dd:07:bd:32:78:33:85:85:70:12:50:84:d3:53: bb:ae:82:0c:9c:e9:13:37:6e:00:3e:cb:b4:a3:f2: c3:8e:10:44:59:eb:52:a9:bb:b4:7a:28:4f:a0:1b: 7b:1c:7e:ce:03:b8:8f:d7:a7:63:c9:66:25:68:be: d7:0b:0b:e3:cb:4c:1d:ad:07:10:4a:78:98:71:77: ff:1e:b1:58:7d:64:f0:48:17:ba:d7:4c:65:ee:d6: 62:a8:ea:46:2f:fa:6d:b1:27:81:92:91:4f:48:0d: f0:e7:cd:e3:55:26:1f:79:c1:fd:11:1a:f4:25:64: 46:b8:79:62:5f:60:ba:92:9f:0a:75:5d:a5:0d:bb: d2:55:6b:29:b0:17:19:1d:c1:ed:60:7e:d8:56:10: a1:6b:c5:ce:fc:3c:28:4b:c0:99:dc:5d:27:ed:27: 69:c0:91:8b:32:ec:96:85:62:e4:bf:63:c2:7a:b8: df:3d:eb:ac:20:8d:2b:b6:5a:d5:5a:fb:38:cd:ca: 74:71:52:0f:92:e4:09:33:3f:42:9c:99:ef:d6:c5: 29:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EF:69:85:A0:6F:DF:9D:F3:79:E4:1D:49:2D:BE:F5:EA:93:2C:DE X509v3 Authority Key Identifier: keyid:7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:41:3e:0c:cd:27:30:1e:a1:89:50:ef:a6:67:e7:98:38:0d: 06:f1:cc:37:01:6a:3c:42:09:4e:9e:ed:f4:a2:41:ff:a3:88: 11:1b:38:08:81:21:6a:d5:77:90:c7:92:49:5b:be:4d:f9:a1: e8:22:ea:ad:50:76:2a:e4:64:fa:f1:c3:09:ea:23:e6:0d:fb: 32:04:bd:e2:18:0b:fd:4e:57:26:8e:9b:d0:62:a6:88:35:79: 24:c4:f9:b3:7b:9f:c7:8b:aa:00:7a:04:c6:9c:d9:c6:84:94: b3:37:d9:cf:0e:93:fa:3a:1b:ff:cc:5c:f7:1c:dc:25:11:67: 80:8b:d3:c0:60:96:47:83:c9:d9:8e:1d:10:71:69:c7:38:7c: e5:1b:5e:a4:fd:2c:e7:0c:f1:f5:55:53:8c:7d:6f:a4:12:a4: 72:26:cc:dc:11:e4:d3:ee:ce:3e:51:41:7a:43:a4:e0:33:1d: 1a:86:86:ce:10:23:f8:41:2d:9c:0b:b0:c9:e1:80:70:47:d3: c7:88:88:ac:8d:6a:e8:8f:81:18:e6:79:a7:08:e1:4e:ab:52: 22:91:37:b6:cc:80:20:58:88:25:db:60:b7:30:db:d8:88:0f: 53:5e:0d:f3:ff:05:99:fa:67:02:59:6e:ed:b5:e7:f8:2e:e7: c2:8f:7f:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dM7au5AxfMwJFCC1fotkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMDZlMzBhY2NkYjE3YTI1NTQ3M2JiNmMyMjRmMWZjMTU0 NThlOGIwHhcNMjYwMTI1MTQwMDMxWhcNMjYwMTI2MTQwMDMxWjAzMTEwLwYDVQQD Eyg5YWVmNjk4NWEwNmZkZjlkZjM3OWU0MWQ0OTJkYmVmNWVhOTMyY2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+tYgfM+Ax1u4m0Ag37CBYuBdeAs ourBNDdab44lDeFOi04HiQc9nCyUorhT3Qe9MngzhYVwElCE01O7roIMnOkTN24A Psu0o/LDjhBEWetSqbu0eihPoBt7HH7OA7iP16djyWYlaL7XCwvjy0wdrQcQSniY cXf/HrFYfWTwSBe610xl7tZiqOpGL/ptsSeBkpFPSA3w583jVSYfecH9ERr0JWRG uHliX2C6kp8KdV2lDbvSVWspsBcZHcHtYH7YVhCha8XO/DwoS8CZ3F0n7SdpwJGL MuyWhWLkv2PCerjfPeusII0rtlrVWvs4zcp0cVIPkuQJMz9CnJnv1sUpNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrvaYWgb9+d83nkHUktvvXqkyzeMB8GA1UdIwQY MBaAFHoG4wrM2xeiVUc7tsIk8fwVRY6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWdiakNzemJGNkpWUnp1MndpVHhfQlZGam9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wNDJhNWQtYWUwZC00MWMwLWEyZTgt ZjdjMGMyZjhhM2MxLzEvZWdiakNzemJGNkpWUnp1MndpVHhfQlZGam9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wNDJhNWQtYWUwZC00MWMwLWEyZTgtZjdjMGMyZjhhM2Mx LzEvZWdiakNzemJGNkpWUnp1MndpVHhfQlZGam9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkE+DM0n MB6hiVDvpmfnmDgNBvHMNwFqPEIJTp7t9KJB/6OIERs4CIEhatV3kMeSSVu+Tfmh 6CLqrVB2KuRk+vHDCeoj5g37MgS94hgL/U5XJo6b0GKmiDV5JMT5s3ufx4uqAHoE xpzZxoSUszfZzw6T+job/8xc9xzcJRFngIvTwGCWR4PJ2Y4dEHFpxzh85RtepP0s 5wzx9VVTjH1vpBKkcibM3BHk0+7OPlFBekOk4DMdGoaGzhAj+EEtnAuwyeGAcEfT x4iIrI1q6I+BGOZ5pwjhTqtSIpE3tsyAIFiIJdtgtzDb2IgPU14N8/8FmfpnAllu 7bXn+C7nwo9/IQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:40 2026 by rpki-client