This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft File: ESCgzgE-LVKm_zVKJwiUu5mORUc.mft (raw, json) Hash identifier: Rr+6I278xS12nDdHuTChRjcAYdjLuz9gLKv0jb4lgJo= Subject key identifier: 73:EC:D0:6B:1F:93:5A:18:F6:B4:2C:FA:81:08:43:24:E9:50:F5:4E Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47 Certificate issuer: /CN=1120a0ce013e2d52a6ff354a270894bb998e4547 Certificate serial: 019BF46268C34FBE8BED21B2ACD7A8602896 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 09:00:48 +0000 Manifest this update: Sun 25 Jan 2026 09:00:48 +0000 Manifest next update: Mon 26 Jan 2026 09:00:48 +0000 Files and hashes: 1: ESCgzgE-LVKm_zVKJwiUu5mORUc.crl (hash: jRCpLOpNBJy9/Vmis+PJDT934ibRPxP//0qNyxscwoI=) 2: Nj-fcrd8btYTmooIT07USGH4uhc.roa (hash: NGae1BAct6VWVRLG8OfFbqQcDMzJnoL00dhPvysFzMY=) 3: dV-H29alZEFLImGmyiY7hQJaEAY.roa (hash: Li61GxGOSJxUgraJk65DXVq0NLMB+4WQGr7Nxv/T31Q=) 4: e-tZ1DdZl0dxPJy0N9Yn-0Al0M8.roa (hash: QAdbievfGnFmg15O+j0D44UXxw3G9rYuADuFC3J6DdQ=) 5: kNeO88W6WiZjVCqS0huGRYDNIkU.roa (hash: lTC2ffNYxbrVzusWfHz2XumlwYx6P/xuLd8Z8WVhDpk=) 6: tqA8MnPED0zVZqFPU0EtU7Uh-p8.roa (hash: nbXmQvCUG27Q3g4mguFw6ecZllhpCxpa9WaI9lGnt70=) 7: uMoLLTIIp3goMEn7y4z_relYCj0.roa (hash: OkL4CzvIc+/+beHGUC2g9z5v1OG6NY0LtX6M7jVvI9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:68:c3:4f:be:8b:ed:21:b2:ac:d7:a8:60:28:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547 Validity Not Before: Jan 25 09:00:48 2026 GMT Not After : Jan 26 09:00:48 2026 GMT Subject: CN=73ecd06b1f935a18f6b42cfa81084324e950f54e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b4:48:1b:5c:0d:22:3c:cc:75:56:0b:48:92: 80:d3:04:59:a9:a2:df:f4:5b:ec:d5:d8:fd:6f:68: 57:9f:cc:e0:c0:0a:6e:8e:fa:31:11:c7:95:a2:1e: 8e:2c:09:37:bc:55:ca:53:1c:65:3b:0a:6a:b1:a9: 5f:a1:47:c1:ff:81:50:aa:16:cd:f3:46:7b:33:b3: f6:d9:6c:fb:92:a5:1c:50:1a:d5:df:02:0d:29:78: ff:6f:1a:07:e5:fc:93:9a:97:39:d6:b0:3e:b9:7b: bf:0a:60:72:51:e4:50:c5:5c:6a:0b:9b:32:c1:ed: 7d:e2:d9:42:19:89:33:db:fc:66:e0:15:26:2a:af: 1a:8a:57:6c:71:9a:50:44:3a:a2:11:fb:f3:25:e0: 3f:36:98:01:db:76:9f:e8:04:af:f4:01:4a:c1:11: fb:44:6e:63:d4:7c:3c:07:0f:04:bc:d6:72:60:4b: 63:61:a4:a9:4b:c7:d3:b9:6d:18:6b:30:1c:34:df: db:38:0f:55:b8:f9:2d:fc:ac:d4:99:08:d0:af:c5: fc:18:00:b3:7e:e2:4d:98:2b:a2:f0:22:75:3d:b7: 8d:c7:5b:a7:3f:31:28:77:63:27:5a:7f:1f:5d:c4: a7:1e:31:da:9f:b2:09:de:98:8d:a0:d2:e6:de:66: bc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EC:D0:6B:1F:93:5A:18:F6:B4:2C:FA:81:08:43:24:E9:50:F5:4E X509v3 Authority Key Identifier: keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:71:8b:e2:6b:96:b7:55:3a:96:f2:70:14:b7:2c:e7:bb:e0: 01:e8:98:7b:ea:e4:00:f2:e4:04:f3:9c:93:e2:b9:be:69:44: 01:72:84:4c:05:8b:98:e1:5b:ce:a2:3e:97:74:81:b5:7f:43: b9:cb:ac:1a:e9:95:09:a5:6f:b9:be:b7:49:6a:ba:19:14:c3: 0c:e5:20:52:f0:60:7a:1f:93:16:8c:72:25:5b:85:a0:f8:eb: 5d:ef:5f:fc:35:1c:e1:f0:6a:02:49:f5:f1:43:24:98:1c:b7: 7c:01:2e:29:2e:3a:6f:2f:3e:dc:54:e9:35:8a:5b:65:c4:c4: da:38:e9:ca:c4:c2:dc:85:fa:e6:73:39:05:96:4e:2a:38:f5: 11:94:4e:28:dd:00:4b:c8:14:27:7b:0c:d0:a2:dc:a8:c8:c8: 46:6b:75:81:0e:ef:09:01:ce:5f:03:fa:7f:81:6f:bc:89:78: e0:5f:d3:92:6c:d5:ea:01:e3:ff:b3:fa:a3:92:77:e3:c5:57: bf:61:d8:c3:36:f8:21:1d:73:dc:61:12:7b:78:3b:c0:eb:d6: 45:de:48:b4:5a:e8:12:5d:41:2d:1d:7b:7c:6f:df:0b:70:53: b3:2f:0c:1b:72:76:11:39:92:25:95:a0:a1:91:0f:2c:10:51: 8d:2b:44:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YmjDT76L7SGyrNeoYCiWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMjBhMGNlMDEzZTJkNTJhNmZmMzU0YTI3MDg5NGJiOTk4 ZTQ1NDcwHhcNMjYwMTI1MDkwMDQ4WhcNMjYwMTI2MDkwMDQ4WjAzMTEwLwYDVQQD Eyg3M2VjZDA2YjFmOTM1YTE4ZjZiNDJjZmE4MTA4NDMyNGU5NTBmNTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLRIG1wNIjzMdVYLSJKA0wRZqaLf 9Fvs1dj9b2hXn8zgwApujvoxEceVoh6OLAk3vFXKUxxlOwpqsalfoUfB/4FQqhbN 80Z7M7P22Wz7kqUcUBrV3wINKXj/bxoH5fyTmpc51rA+uXu/CmByUeRQxVxqC5sy we194tlCGYkz2/xm4BUmKq8aildscZpQRDqiEfvzJeA/NpgB23af6ASv9AFKwRH7 RG5j1Hw8Bw8EvNZyYEtjYaSpS8fTuW0YazAcNN/bOA9VuPkt/KzUmQjQr8X8GACz fuJNmCui8CJ1PbeNx1unPzEod2MnWn8fXcSnHjHan7IJ3piNoNLm3ma8rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPs0Gsfk1oY9rQs+oEIQyTpUPVOMB8GA1UdIwQY MBaAFBEgoM4BPi1Spv81SicIlLuZjkVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVNDZ3pnRS1MVkttX3pWS0p3aVV1NW1PUlVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MjE0OTgtMjhkMy00Mzc2LWI2MjUt MzFhZjNlMjk0NjcxLzEvRVNDZ3pnRS1MVkttX3pWS0p3aVV1NW1PUlVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MjE0OTgtMjhkMy00Mzc2LWI2MjUtMzFhZjNlMjk0Njcx LzEvRVNDZ3pnRS1MVkttX3pWS0p3aVV1NW1PUlVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3GL4muW t1U6lvJwFLcs57vgAeiYe+rkAPLkBPOck+K5vmlEAXKETAWLmOFbzqI+l3SBtX9D ucusGumVCaVvub63SWq6GRTDDOUgUvBgeh+TFoxyJVuFoPjrXe9f/DUc4fBqAkn1 8UMkmBy3fAEuKS46by8+3FTpNYpbZcTE2jjpysTC3IX65nM5BZZOKjj1EZROKN0A S8gUJ3sM0KLcqMjIRmt1gQ7vCQHOXwP6f4FvvIl44F/TkmzV6gHj/7P6o5J348VX v2HYwzb4IR1z3GESe3g7wOvWRd5ItFroEl1BLR17fG/fC3BTsy8MG3J2ETmSJZWg oZEPLBBRjStEQg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:45:02 2026 by rpki-client