This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft File: eNY2xQXVavQqQUwWfVJAfTVrPQs.mft (raw, json) Hash identifier: 9B/Yiz3n+HjET85FxzF3uKXqTG7UGMkc3jLAAmHWsLU= Subject key identifier: 09:6F:DF:5C:65:65:07:C4:91:D6:35:C1:E8:62:DC:20:25:BC:8B:DC Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B Certificate issuer: /CN=78d636c505d56af42a414c167d52407d356b3d0b Certificate serial: 019BF575070E9726B4FB168AE578E12BA0F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 14:00:45 +0000 Manifest this update: Sun 25 Jan 2026 14:00:45 +0000 Manifest next update: Mon 26 Jan 2026 14:00:45 +0000 Files and hashes: 1: 91m9d-4rp7TRVtPcYvV9NGes_jg.roa (hash: I0D8Damt//4B0Kf8Q3SX0Wwm5LPekD0IgYEQxvGqNNI=) 2: eNY2xQXVavQqQUwWfVJAfTVrPQs.crl (hash: nw2g4YOYf7zrwkEUAfSYX+3LDEd5heD/agEqrnL7XYc=) 3: zHOXRdXkiM-RbCdgutluwx22gJ8.roa (hash: ddTQ3xyy/qh9SFlJgrOiIvTTzcQtTPf5+YJxupFgPas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:07:0e:97:26:b4:fb:16:8a:e5:78:e1:2b:a0:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b Validity Not Before: Jan 25 14:00:45 2026 GMT Not After : Jan 26 14:00:45 2026 GMT Subject: CN=096fdf5c656507c491d635c1e862dc2025bc8bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b8:6a:7a:bb:4a:e2:cd:43:95:1b:60:07:35: 23:66:8a:5a:e6:29:45:86:5e:29:fb:c8:aa:b0:b5: 6d:d1:17:b6:9d:db:1d:26:55:87:b4:f9:a3:17:4e: b9:46:ee:40:02:56:e0:f3:63:3d:7b:52:82:3d:fb: 0c:6d:1c:79:e1:36:6e:ea:19:ba:c6:51:35:67:52: 7d:47:4a:b5:71:bc:92:0c:df:1d:98:20:31:95:d4: 03:04:0d:b5:a1:16:86:45:21:ba:e3:88:96:58:4a: dc:7f:db:0f:48:4e:a3:13:8f:fb:b9:69:98:a5:23: 2e:6c:b7:e1:2c:35:2a:88:98:49:ed:78:36:93:77: da:6b:ee:36:bf:07:97:4a:7a:fa:2c:ed:76:3c:db: ca:56:46:f0:31:c3:52:35:86:62:21:31:17:2f:f2: ec:a6:d6:2d:74:10:e7:e2:86:c9:dc:bf:73:69:ce: be:d7:63:bf:f1:4b:da:40:b9:63:43:80:50:d6:45: 67:68:6c:8b:56:2f:f0:6f:55:a1:32:d1:8b:f9:0c: c1:a3:6d:a0:b7:05:d2:22:62:89:ab:8b:5b:56:d9: fd:6c:36:8b:1e:ca:7b:e1:70:9f:65:7b:16:56:ed: ec:3c:d6:75:26:02:b2:89:b3:37:97:42:a0:65:70: 78:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:6F:DF:5C:65:65:07:C4:91:D6:35:C1:E8:62:DC:20:25:BC:8B:DC X509v3 Authority Key Identifier: keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:bb:35:bc:4d:04:75:5f:4b:b6:4e:91:90:cf:78:a1:20:71: 46:0d:9b:13:61:da:cb:9f:c7:09:50:6f:b6:ea:97:e0:91:dd: 67:b6:55:d9:39:72:71:17:12:ce:75:4b:21:c0:8b:4c:14:9c: 71:fc:b8:a4:16:01:89:62:78:23:b7:15:da:7e:0b:de:72:2a: 06:91:50:24:97:aa:cc:24:53:4a:68:65:fb:e2:67:86:09:01: 77:7d:ba:53:92:c7:cb:62:0f:61:8e:7e:f5:8e:73:85:e3:8a: c2:99:33:32:9f:a2:88:16:b7:39:62:97:6b:23:65:d9:1e:9b: cd:b8:11:06:88:83:50:50:13:4d:28:d1:02:f7:3a:7f:37:d8: c7:2f:e7:86:f5:1c:f2:a5:52:fc:3d:e3:f7:0f:82:6b:23:e1: 4b:e7:47:e4:60:b5:06:51:26:b2:c3:a4:27:bb:7c:4b:22:cb: 68:38:79:29:e4:6c:c6:ca:71:5c:ac:3c:21:76:aa:c5:01:b3: 65:09:87:e9:5b:07:cc:47:65:49:b9:5d:b3:e0:bd:d6:62:67: 18:c5:fc:22:d7:25:4b:87:1f:15:ee:17:d7:8d:8a:a1:4e:af: f1:1d:57:14:33:91:75:51:b1:e3:49:2e:40:74:27:43:99:26: e4:ec:79:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dQcOlya0+xaK5XjhK6D0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZDYzNmM1MDVkNTZhZjQyYTQxNGMxNjdkNTI0MDdkMzU2 YjNkMGIwHhcNMjYwMTI1MTQwMDQ1WhcNMjYwMTI2MTQwMDQ1WjAzMTEwLwYDVQQD EygwOTZmZGY1YzY1NjUwN2M0OTFkNjM1YzFlODYyZGMyMDI1YmM4YmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bhqertK4s1DlRtgBzUjZopa5ilF hl4p+8iqsLVt0Re2ndsdJlWHtPmjF065Ru5AAlbg82M9e1KCPfsMbRx54TZu6hm6 xlE1Z1J9R0q1cbySDN8dmCAxldQDBA21oRaGRSG644iWWErcf9sPSE6jE4/7uWmY pSMubLfhLDUqiJhJ7Xg2k3faa+42vweXSnr6LO12PNvKVkbwMcNSNYZiITEXL/Ls ptYtdBDn4obJ3L9zac6+12O/8UvaQLljQ4BQ1kVnaGyLVi/wb1WhMtGL+QzBo22g twXSImKJq4tbVtn9bDaLHsp74XCfZXsWVu3sPNZ1JgKyibM3l0KgZXB4FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAlv31xlZQfEkdY1wehi3CAlvIvcMB8GA1UdIwQY MBaAFHjWNsUF1Wr0KkFMFn1SQH01az0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU5ZMnhRWFZhdlFxUVV3V2ZWSkFmVFZyUFFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xZmE5NDUtNTBlNy00NzlhLTlkOTIt ZGRjZDRkOTM1MDMwLzEvZU5ZMnhRWFZhdlFxUVV3V2ZWSkFmVFZyUFFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8xZmE5NDUtNTBlNy00NzlhLTlkOTItZGRjZDRkOTM1MDMw LzEvZU5ZMnhRWFZhdlFxUVV3V2ZWSkFmVFZyUFFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELs1vE0E dV9Ltk6RkM94oSBxRg2bE2Hay5/HCVBvtuqX4JHdZ7ZV2TlycRcSznVLIcCLTBSc cfy4pBYBiWJ4I7cV2n4L3nIqBpFQJJeqzCRTSmhl++JnhgkBd326U5LHy2IPYY5+ 9Y5zheOKwpkzMp+iiBa3OWKXayNl2R6bzbgRBoiDUFATTSjRAvc6fzfYxy/nhvUc 8qVS/D3j9w+CayPhS+dH5GC1BlEmssOkJ7t8SyLLaDh5KeRsxspxXKw8IXaqxQGz ZQmH6VsHzEdlSblds+C91mJnGMX8ItclS4cfFe4X142KoU6v8R1XFDORdVGx40ku QHQnQ5km5Ox5Tg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:32:01 2026 by rpki-client