This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft File: ekv_XNLhHQT3U92itntNhy9shEE.mft (raw, json) Hash identifier: X1E6yUosKDYBCfxM+hMLdml7G4DighqS9RRuTCPVzJc= Subject key identifier: A7:F7:3B:FD:36:29:E7:4C:18:54:6F:70:37:B8:B7:D7:F8:85:60:15 Authority key identifier: 7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41 Certificate issuer: /CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441 Certificate serial: 019BF72D2AD72379F40B620AF61549BF35DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft Manifest number: 0267 Signing time: Sun 25 Jan 2026 22:01:30 +0000 Manifest this update: Sun 25 Jan 2026 22:01:30 +0000 Manifest next update: Mon 26 Jan 2026 22:01:30 +0000 Files and hashes: 1: VaU_FJNN0SPug5fmKDhZ2YZw5wQ.roa (hash: tXVOE7siNlB3oT+rp3t9G6RC5d1jo+/FpEUK7TJG8wU=) 2: ekv_XNLhHQT3U92itntNhy9shEE.crl (hash: 4rQx5JNXQs+Dz1DFlTZrVMma0cCUrFzw1/rxcfD0DE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:2a:d7:23:79:f4:0b:62:0a:f6:15:49:bf:35:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a4bff5cd2e11d04f753dda2b67b4d872f6c8441 Validity Not Before: Jan 25 22:01:30 2026 GMT Not After : Jan 26 22:01:30 2026 GMT Subject: CN=a7f73bfd3629e74c18546f7037b8b7d7f8856015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:83:aa:8f:89:ac:c6:39:43:22:01:2e:d5:19: 39:f3:fc:c8:30:b0:ee:0c:d8:09:95:42:50:5a:14: 30:dd:22:ba:13:a0:ed:3d:81:be:4d:cf:01:d8:e6: ba:64:4c:4d:cc:2b:44:79:26:92:28:3e:9c:5c:46: 75:50:70:71:95:a5:7a:44:a0:73:2f:12:b4:5f:8c: b5:fc:e5:03:26:c7:dc:db:8f:da:2a:09:ac:13:ae: 82:3b:1f:42:14:db:4f:28:44:41:78:32:2e:31:1d: d7:f1:4d:e5:0d:70:c8:00:a9:15:d0:45:83:5b:32: e9:e4:6b:88:1a:f5:cf:90:5e:17:d1:95:f8:74:ac: bb:6c:fa:ad:bf:03:e3:f6:5f:ac:aa:30:99:49:50: 12:a3:ac:e0:a2:15:5b:3f:f8:78:a3:75:af:e6:25: c1:e5:13:a4:59:be:b5:35:dc:d4:06:09:d0:1a:3e: a7:21:a0:69:1b:0d:a3:7e:51:d9:07:77:ae:e9:63: 13:68:c9:1a:49:82:96:b1:44:e1:15:4f:04:59:7e: a6:69:55:52:6d:f4:63:9a:5e:89:be:52:50:46:ea: 57:fa:49:4a:ac:7f:3f:5c:d9:37:d7:a5:52:8b:7a: 13:ed:d7:1a:53:bf:1e:cd:8d:61:ce:ce:39:e3:7a: ec:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F7:3B:FD:36:29:E7:4C:18:54:6F:70:37:B8:B7:D7:F8:85:60:15 X509v3 Authority Key Identifier: keyid:7A:4B:FF:5C:D2:E1:1D:04:F7:53:DD:A2:B6:7B:4D:87:2F:6C:84:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekv_XNLhHQT3U92itntNhy9shEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/00b764-a1b9-4066-a653-7041e9585deb/1/ekv_XNLhHQT3U92itntNhy9shEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:c4:69:c1:90:cf:8f:dc:1c:64:23:ae:27:ae:35:ab:50:f4: eb:b6:66:f7:7e:b6:ff:58:95:39:d2:6e:72:87:c4:23:42:08: 05:6d:24:56:c5:78:4f:bd:70:02:1b:a6:72:65:05:74:c5:9f: 4d:ed:08:cc:cf:a9:3f:4f:b0:2c:01:ef:4a:d8:ce:e7:a7:d0: 1e:40:39:5d:9d:11:46:82:15:5b:a1:95:b5:ab:87:7f:48:f5: a7:95:92:65:c7:45:4b:32:55:21:4b:2a:5a:b6:2e:3c:78:75: 8c:4f:a9:ea:f2:a8:32:39:aa:98:4c:c8:79:be:11:bc:2c:b2: 20:e2:76:a5:d7:fd:6a:0c:4d:92:af:f7:cf:84:8c:a4:64:11: ab:75:3d:30:24:41:eb:f6:0a:10:10:b1:ea:ac:81:4e:aa:13: 1a:0c:e1:67:06:69:dc:92:09:97:28:1b:14:c9:e4:29:f0:f6: 7c:c8:4d:20:c4:12:51:50:e2:66:79:c4:d8:44:3e:ab:bb:d5: c9:54:b4:b7:61:84:1b:e9:56:fa:92:8e:ea:8b:9a:d9:14:85: b9:f4:fa:88:90:b6:97:80:cd:0c:e1:a9:a7:95:1e:11:87:44: c1:e5:65:e3:18:16:ae:78:61:af:e9:58:a3:db:b5:ef:63:f2: bc:a7:b2:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LSrXI3n0C2IK9hVJvzXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNGJmZjVjZDJlMTFkMDRmNzUzZGRhMmI2N2I0ZDg3MmY2 Yzg0NDEwHhcNMjYwMTI1MjIwMTMwWhcNMjYwMTI2MjIwMTMwWjAzMTEwLwYDVQQD EyhhN2Y3M2JmZDM2MjllNzRjMTg1NDZmNzAzN2I4YjdkN2Y4ODU2MDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYOqj4msxjlDIgEu1Rk58/zIMLDu DNgJlUJQWhQw3SK6E6DtPYG+Tc8B2Oa6ZExNzCtEeSaSKD6cXEZ1UHBxlaV6RKBz LxK0X4y1/OUDJsfc24/aKgmsE66COx9CFNtPKERBeDIuMR3X8U3lDXDIAKkV0EWD WzLp5GuIGvXPkF4X0ZX4dKy7bPqtvwPj9l+sqjCZSVASo6zgohVbP/h4o3Wv5iXB 5ROkWb61NdzUBgnQGj6nIaBpGw2jflHZB3eu6WMTaMkaSYKWsUThFU8EWX6maVVS bfRjml6JvlJQRupX+klKrH8/XNk316VSi3oT7dcaU78ezY1hzs4543rscwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKf3O/02KedMGFRvcDe4t9f4hWAVMB8GA1UdIwQY MBaAFHpL/1zS4R0E91PdorZ7TYcvbIRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWt2X1hOTGhIUVQzVTkyaXRudE5oeTlzaEVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wMGI3NjQtYTFiOS00MDY2LWE2NTMt NzA0MWU5NTg1ZGViLzEvZWt2X1hOTGhIUVQzVTkyaXRudE5oeTlzaEVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8wMGI3NjQtYTFiOS00MDY2LWE2NTMtNzA0MWU5NTg1ZGVi LzEvZWt2X1hOTGhIUVQzVTkyaXRudE5oeTlzaEVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA08RpwZDP j9wcZCOuJ641q1D067Zm9362/1iVOdJucofEI0IIBW0kVsV4T71wAhumcmUFdMWf Te0IzM+pP0+wLAHvStjO56fQHkA5XZ0RRoIVW6GVtauHf0j1p5WSZcdFSzJVIUsq WrYuPHh1jE+p6vKoMjmqmEzIeb4RvCyyIOJ2pdf9agxNkq/3z4SMpGQRq3U9MCRB 6/YKEBCx6qyBTqoTGgzhZwZp3JIJlygbFMnkKfD2fMhNIMQSUVDiZnnE2EQ+q7vV yVS0t2GEG+lW+pKO6oua2RSFufT6iJC2l4DNDOGpp5UeEYdEweVl4xgWrnhhr+lY o9u172PyvKey4g== -----END CERTIFICATE-----Generated at Mon Jan 26 02:26:06 2026 by rpki-client