This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft File: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft (raw, json) Hash identifier: WvgA1X6e84+wJbYcWlFzp9KoSbxSFueUIUfvfejvrEU= Subject key identifier: 44:10:72:E5:B2:C0:DB:78:8B:02:DA:46:2E:F5:55:BD:F5:73:C7:8C Authority key identifier: 12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04 Certificate issuer: /CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04 Certificate serial: 019BF6BEBBD86FE4F38410D173EFD2E7EB03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft Manifest number: 0E0F Signing time: Sun 25 Jan 2026 20:00:53 +0000 Manifest this update: Sun 25 Jan 2026 20:00:53 +0000 Manifest next update: Mon 26 Jan 2026 20:00:53 +0000 Files and hashes: 1: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl (hash: dWrng2bfHlBDkU+kbdoR5sxnYR/0fWpaVCpj+zN2kUg=) 2: td4dGRbuQXuKOfRIriO4IH6YFGY.roa (hash: h708rv3/l6vNPHP6e/EPvLnr8GERga9y5D+OKNGmAAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:bb:d8:6f:e4:f3:84:10:d1:73:ef:d2:e7:eb:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04 Validity Not Before: Jan 25 20:00:53 2026 GMT Not After : Jan 26 20:00:53 2026 GMT Subject: CN=441072e5b2c0db788b02da462ef555bdf573c78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8d:e6:19:5b:10:22:47:3b:0d:3f:45:d9:b7: 63:5b:c2:82:98:60:e3:8d:c0:2d:fd:49:83:22:2b: 4a:37:9c:a3:4d:64:3d:72:21:7a:42:a6:10:ce:48: e0:ce:64:7e:61:57:57:42:f2:48:a9:6a:35:1f:5e: c6:09:0c:f1:36:f3:1c:e0:c7:cd:1e:7b:9c:fe:72: 5a:5d:16:78:52:68:6f:8b:02:e7:15:4a:84:c6:68: 4b:2e:03:37:cd:2d:bc:a5:fd:d5:e0:f0:ee:73:fb: 44:b1:ae:48:dd:58:00:d1:eb:22:61:35:0e:1d:0c: 48:26:b8:8a:01:49:59:49:66:22:c5:29:1b:64:c6: 74:c1:1a:73:ff:97:bc:5a:63:39:4c:b5:80:a7:52: 7f:00:ac:50:39:8b:0e:4a:9c:e2:7f:0c:95:f3:94: 6d:1b:89:45:5a:11:08:63:61:57:27:8c:8f:e4:5d: 74:80:9a:fc:87:c6:c3:0d:0c:72:6c:c3:cd:18:91: 61:ee:66:05:2d:eb:aa:7b:52:4b:0b:2c:16:7a:cc: 45:f8:16:19:d7:7d:e5:99:c6:18:ff:f5:76:df:06: ca:a0:59:1a:10:0e:75:e6:e5:b4:71:4a:4c:8b:1e: bb:aa:17:45:e7:ee:c5:db:4a:ce:8a:59:c8:cc:98: c7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:10:72:E5:B2:C0:DB:78:8B:02:DA:46:2E:F5:55:BD:F5:73:C7:8C X509v3 Authority Key Identifier: keyid:12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f2:74:0c:ab:82:c5:4c:e2:95:4f:92:b6:f4:74:40:04:81: d7:0b:9c:42:39:19:20:e5:3e:12:27:31:07:aa:84:19:7e:3a: 44:ce:1c:41:49:55:cf:38:97:7a:2c:7c:57:52:a1:2b:6c:43: 8d:45:74:0e:8f:0c:8c:3a:0d:23:9a:a3:ee:ab:bf:f2:4b:59: db:60:ef:66:9f:d2:2d:15:07:8f:9e:8e:b4:de:3d:ab:02:cc: bf:1f:4c:8a:3c:5c:ff:c2:6c:44:5b:a0:59:fb:0d:c0:48:ae: 0a:02:c7:0c:a6:54:fb:9c:5b:71:da:75:34:64:07:18:5c:18: 02:71:82:c6:dd:47:be:33:e3:13:fd:e2:7b:4c:a1:2b:3b:be: f9:a4:8b:c1:d7:4c:16:c8:ae:6c:02:d4:b1:99:ec:35:63:1b: 63:76:32:ef:c7:9b:28:7c:14:23:4f:5a:07:ff:83:99:a3:db: 30:3c:da:70:b4:37:ab:ba:a7:55:d6:82:a5:72:5d:04:de:ce: b7:04:dc:d5:c8:0c:6f:df:01:d3:db:52:96:0f:74:4b:f3:e6: fd:78:2c:a6:5b:9b:56:f5:a6:3f:f4:ab:64:73:2b:c7:a6:f3: df:94:6e:98:94:cd:2a:f7:7c:19:7b:61:92:83:47:d6:bd:74: bb:cb:72:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vrvYb+TzhBDRc+/S5+sDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNzMxZjZkN2UzZTIwYWQ5YmYzMWI4YWNkNjA2ZjA4OTNi OWZlMDQwHhcNMjYwMTI1MjAwMDUzWhcNMjYwMTI2MjAwMDUzWjAzMTEwLwYDVQQD Eyg0NDEwNzJlNWIyYzBkYjc4OGIwMmRhNDYyZWY1NTViZGY1NzNjNzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY3mGVsQIkc7DT9F2bdjW8KCmGDj jcAt/UmDIitKN5yjTWQ9ciF6QqYQzkjgzmR+YVdXQvJIqWo1H17GCQzxNvMc4MfN Hnuc/nJaXRZ4UmhviwLnFUqExmhLLgM3zS28pf3V4PDuc/tEsa5I3VgA0esiYTUO HQxIJriKAUlZSWYixSkbZMZ0wRpz/5e8WmM5TLWAp1J/AKxQOYsOSpzifwyV85Rt G4lFWhEIY2FXJ4yP5F10gJr8h8bDDQxybMPNGJFh7mYFLeuqe1JLCywWesxF+BYZ 133lmcYY//V23wbKoFkaEA515uW0cUpMix67qhdF5+7F20rOilnIzJjHNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQQcuWywNt4iwLaRi71Vb31c8eMMB8GA1UdIwQY MBaAFBJzH21+PiCtm/Mbis1gbwiTuf4EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEt MWQ3NzJlMmU2NDM4LzEvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEtMWQ3NzJlMmU2NDM4 LzEvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfJ0DKuC xUzilU+StvR0QASB1wucQjkZIOU+EicxB6qEGX46RM4cQUlVzziXeix8V1KhK2xD jUV0Do8MjDoNI5qj7qu/8ktZ22DvZp/SLRUHj56OtN49qwLMvx9Mijxc/8JsRFug WfsNwEiuCgLHDKZU+5xbcdp1NGQHGFwYAnGCxt1HvjPjE/3ie0yhKzu++aSLwddM FsiubALUsZnsNWMbY3Yy78ebKHwUI09aB/+DmaPbMDzacLQ3q7qnVdaCpXJdBN7O twTc1cgMb98B09tSlg90S/Pm/XgsplubVvWmP/SrZHMrx6bz35RumJTNKvd8GXth koNH1r10u8tyZA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:54 2026 by rpki-client