This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft File: E3AevgZ5neCWmJkgUVDlMt7_57U.mft (raw, json) Hash identifier: fTQ1idKspb/JGm7lsMojZRsmu/RhcjbAqNcyfkYFQy0= Subject key identifier: A8:FC:38:E6:37:F9:E2:77:B1:F1:F7:69:8D:7B:6D:7C:4A:92:A1:14 Authority key identifier: 13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5 Certificate issuer: /CN=13701ebe06799de0969899205150e532deffe7b5 Certificate serial: 019BF8E3CFA4F07A3FDFD63BD3E90DFDF482 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft Manifest number: 0413 Signing time: Mon 26 Jan 2026 06:00:37 +0000 Manifest this update: Mon 26 Jan 2026 06:00:37 +0000 Manifest next update: Tue 27 Jan 2026 06:00:37 +0000 Files and hashes: 1: E3AevgZ5neCWmJkgUVDlMt7_57U.crl (hash: JvkodQZhGi6CspRsnFSUs22HBWuIk4KgTHYl9Zd3irI=) 2: TVdDTIsyLlfmbrYuR9urFia7Kl4.roa (hash: 4Fv8uKqQZhEYXbziIHF6wwJA7WCIhujnQrmtz+ccn6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e3:cf:a4:f0:7a:3f:df:d6:3b:d3:e9:0d:fd:f4:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13701ebe06799de0969899205150e532deffe7b5 Validity Not Before: Jan 26 06:00:37 2026 GMT Not After : Jan 27 06:00:37 2026 GMT Subject: CN=a8fc38e637f9e277b1f1f7698d7b6d7c4a92a114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2b:3e:5d:60:13:96:6f:78:ae:a9:05:6c:7d: ce:52:b1:24:3e:33:f7:e9:06:5f:16:98:e2:e8:1b: f0:65:fb:22:52:72:f9:73:0c:37:42:f6:58:c8:ec: 82:34:87:9d:1f:5b:61:cf:a2:41:45:23:5d:cf:7d: a0:d4:1a:62:1f:dc:eb:0e:f3:e9:fb:a0:a1:09:59: 1f:5a:f1:78:0c:63:c9:d3:58:9d:59:d8:e3:5e:a1: 44:e7:8f:3b:b2:06:e2:44:c4:72:5a:27:fc:57:0c: ad:52:85:8b:37:e3:48:5d:d6:14:95:c6:4c:e0:e4: 72:ec:29:02:8c:a0:e2:6b:4e:81:10:4d:7b:24:ab: 2c:41:17:f5:c9:57:e0:c4:0a:7a:0f:64:84:14:98: 29:89:3c:d9:db:c0:77:df:71:67:86:b6:c6:7e:58: cf:3c:26:80:27:bd:64:f9:ec:80:9d:0d:f0:82:fa: 47:2d:b0:ac:04:70:48:81:23:30:ac:c5:cd:7a:92: dd:bf:37:ff:c1:55:66:dd:d4:06:fb:f1:dc:9e:44: 17:84:f3:dd:12:c0:43:32:28:be:03:cd:58:4a:24: 6b:49:b7:b5:40:25:db:04:18:bc:e2:56:2c:f7:cb: 15:86:ed:6a:18:6a:ec:b4:4f:1e:22:42:26:ee:17: 9d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FC:38:E6:37:F9:E2:77:B1:F1:F7:69:8D:7B:6D:7C:4A:92:A1:14 X509v3 Authority Key Identifier: keyid:13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:8f:44:e1:a6:db:d6:7a:26:6c:1a:9e:77:fa:80:9e:2a:75: 92:38:75:3c:b4:41:b5:50:20:ca:c0:f4:54:89:39:39:c7:27: b9:18:c4:8e:54:ae:08:4f:0a:2e:89:05:1e:aa:31:0f:f5:0c: 7f:b8:d7:ad:64:b7:c6:c9:e4:fa:1e:54:f7:41:25:53:17:a8: 3e:12:bf:71:db:d4:56:10:92:4a:61:28:be:53:0b:30:80:9b: 9e:6c:93:dd:78:70:59:64:48:05:d6:ff:2c:35:5f:a7:b2:62: e9:e2:79:a5:19:98:f4:e0:11:30:55:ba:35:7d:fe:95:af:53: 73:95:c1:be:53:7c:ae:48:8d:70:94:50:d3:79:c6:fb:61:45: e1:45:d5:1e:01:62:6f:ac:ec:5d:1d:20:9d:5d:25:d0:7a:48: 40:a1:3f:f7:46:05:52:f1:ec:00:2f:1a:78:f8:03:d1:66:75: 83:53:56:2a:72:24:db:6b:c5:ae:f5:dc:c5:98:28:a8:2f:46: b8:33:77:90:8a:07:5e:b7:76:19:33:92:d8:32:91:fa:7f:80: f6:e8:38:ce:f0:5d:99:25:a1:b1:40:71:20:67:81:a3:94:a0: 07:75:cf:dd:25:7c:a6:82:0e:6a:65:f1:47:87:c6:c1:4c:47: 91:f0:fe:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv448+k8Ho/39Y70+kN/fSCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNzAxZWJlMDY3OTlkZTA5Njk4OTkyMDUxNTBlNTMyZGVm ZmU3YjUwHhcNMjYwMTI2MDYwMDM3WhcNMjYwMTI3MDYwMDM3WjAzMTEwLwYDVQQD EyhhOGZjMzhlNjM3ZjllMjc3YjFmMWY3Njk4ZDdiNmQ3YzRhOTJhMTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCs+XWATlm94rqkFbH3OUrEkPjP3 6QZfFpji6BvwZfsiUnL5cww3QvZYyOyCNIedH1thz6JBRSNdz32g1BpiH9zrDvPp +6ChCVkfWvF4DGPJ01idWdjjXqFE5487sgbiRMRyWif8VwytUoWLN+NIXdYUlcZM 4ORy7CkCjKDia06BEE17JKssQRf1yVfgxAp6D2SEFJgpiTzZ28B333FnhrbGfljP PCaAJ71k+eyAnQ3wgvpHLbCsBHBIgSMwrMXNepLdvzf/wVVm3dQG+/HcnkQXhPPd EsBDMii+A81YSiRrSbe1QCXbBBi84lYs98sVhu1qGGrstE8eIkIm7heddQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKj8OOY3+eJ3sfH3aY17bXxKkqEUMB8GA1UdIwQY MBaAFBNwHr4GeZ3glpiZIFFQ5TLe/+e1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTNBZXZnWjVuZUNXbUprZ1VWRGxNdDdfNTdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS84ZjQ0YzYtNzc5MS00MDU0LWE1ZTUt MWVmNzY0NDJmNDlhLzEvRTNBZXZnWjVuZUNXbUprZ1VWRGxNdDdfNTdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS84ZjQ0YzYtNzc5MS00MDU0LWE1ZTUtMWVmNzY0NDJmNDlh LzEvRTNBZXZnWjVuZUNXbUprZ1VWRGxNdDdfNTdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUI9E4abb 1nombBqed/qAnip1kjh1PLRBtVAgysD0VIk5OccnuRjEjlSuCE8KLokFHqoxD/UM f7jXrWS3xsnk+h5U90ElUxeoPhK/cdvUVhCSSmEovlMLMICbnmyT3XhwWWRIBdb/ LDVfp7Ji6eJ5pRmY9OARMFW6NX3+la9Tc5XBvlN8rkiNcJRQ03nG+2FF4UXVHgFi b6zsXR0gnV0l0HpIQKE/90YFUvHsAC8aePgD0WZ1g1NWKnIk22vFrvXcxZgoqC9G uDN3kIoHXrd2GTOS2DKR+n+A9ug4zvBdmSWhsUBxIGeBo5SgB3XP3SV8poIOamXx R4fGwUxHkfD+nA== -----END CERTIFICATE-----Generated at Mon Jan 26 13:12:53 2026 by rpki-client