This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft File: EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json) Hash identifier: adHb2lIRPQW9058FKEjFQSxkmUlD9CdvnwcEruJ+jQU= Subject key identifier: DF:C2:22:15:86:14:78:7C:5D:86:41:87:65:19:1E:E2:A5:D7:AE:9D Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Certificate serial: 019BF3501C5C25D8E9CC0F765AC97DC5CCAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft Manifest number: 0303 Signing time: Sun 25 Jan 2026 04:01:12 +0000 Manifest this update: Sun 25 Jan 2026 04:01:12 +0000 Manifest next update: Mon 26 Jan 2026 04:01:12 +0000 Files and hashes: 1: 9V3S7FKC66AOlqD78_S81truyog.roa (hash: zjtnM6n3Uet2Hry92cMihIwePJR9odotoqz4FTgtQpQ=) 2: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: 3zFmQ59//9SuBalkCma7aoQP6QZpF6fiUd2Ey7RxUB8=) 3: Q89cC5EdEYVsTAR7wEMR5rmM-FA.roa (hash: IpAEUAQrDRw1Avy4gtoYvc+jdCy+th+rhrs9OezDlo8=) 4: R6vEKMp8XV0nRsp07cf4y7I04qo.roa (hash: nWBD/KxL+ZqMUbvdWaWo1r7/2jynLrCSHLN52H6UCwM=) 5: XGUIHnWF_LunuxvNcMmR57_WKzo.roa (hash: Gg+yICFewOrJllU9keGQjZ8+O9tNzguLLKLqMVLJpjs=) 6: b1NnfX82WWUKnDzO-T_p9BDnjPM.roa (hash: uuhxZnIOVP3yGkI2POwoZpysQSXnT6B0qJNkc7bJXFw=) 7: fYJN56gNpyjk6FeN9g2u8kda_Ck.roa (hash: 0Bz6iRQD5arZ6ysTUfpQvVjP86yHCsoWY8uCR19q2k4=) 8: iTrKyBgs_fihjw2gMNeMi35dTSA.roa (hash: zNTMLDdPTDqmLO0jhMMrsQBD6z1cOUxn49L1ph7eXpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:1c:5c:25:d8:e9:cc:0f:76:5a:c9:7d:c5:cc:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Validity Not Before: Jan 25 04:01:12 2026 GMT Not After : Jan 26 04:01:12 2026 GMT Subject: CN=dfc222158614787c5d86418765191ee2a5d7ae9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:ae:28:dd:4d:61:da:b0:9c:cc:f6:48:32: 7c:d7:a5:bd:29:47:19:b0:ce:e9:7a:bc:ab:28:1f: da:ce:23:60:93:41:45:b8:b4:b9:e9:bb:71:24:91: 81:71:cd:f5:a7:7d:77:1c:c6:d8:6f:91:50:b8:70: 6d:04:7a:d2:74:61:c7:52:9a:bc:02:19:b9:05:98: b6:a2:c0:e9:de:c8:7f:ac:5f:b3:db:88:d4:de:3f: c2:aa:fc:26:eb:76:44:a8:ec:01:83:1b:b1:e8:bb: 83:9e:75:86:c4:2b:c9:ab:e6:29:28:fd:b4:31:ab: 5a:f0:dc:f2:c4:d3:03:6d:53:45:d6:b1:0c:bf:00: b3:5c:a3:63:18:c8:d0:35:62:4b:75:89:3d:56:47: 05:4d:7e:57:df:43:57:1e:42:93:c6:18:ac:1d:25: cd:22:62:da:40:f8:2d:df:62:69:3d:49:5c:8a:6d: 36:00:25:14:af:d4:1b:6d:84:d8:b5:7c:8f:b9:b8: 22:83:9d:c9:b1:26:84:79:20:ca:b6:3a:d8:4f:08: 22:62:96:17:b0:c7:07:07:66:81:b2:53:32:45:b5: 3d:d9:02:d6:b3:3c:85:06:27:01:26:04:2a:87:0a: 72:d2:9a:86:58:d8:b7:4e:73:f3:97:6f:79:d3:ca: df:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C2:22:15:86:14:78:7C:5D:86:41:87:65:19:1E:E2:A5:D7:AE:9D X509v3 Authority Key Identifier: keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:86:b1:1b:40:fe:4d:88:df:87:22:2a:1b:09:49:95:7b:57: 03:8d:57:48:7a:b3:c2:dd:68:3f:8d:d9:a1:1e:00:45:5b:fb: 8c:c3:7a:77:1b:da:8b:55:12:b1:ea:59:ec:af:6c:d0:65:c0: 0e:dc:b3:58:05:61:1a:49:21:76:dc:ce:78:26:21:dd:52:5d: 50:55:30:7d:32:68:1c:86:32:39:f5:de:a0:2b:8e:61:bc:43: 73:99:b6:a2:b9:95:a4:2f:03:71:41:19:f4:ee:65:40:0e:1e: 92:40:f4:dc:56:8c:61:6b:1e:d1:e7:12:6f:81:8b:84:02:80: 14:2e:48:52:82:a5:3f:46:ca:72:00:1d:83:be:a8:bc:5d:be: b4:bd:be:a2:0f:68:d8:8d:69:8c:f7:92:97:a5:d6:0b:ca:89: a1:c4:1a:1d:64:78:dd:51:95:f8:c5:5c:27:3a:32:60:fa:1b: af:71:b5:99:98:ee:0f:59:c6:45:8b:c6:33:49:60:17:b0:ad: 35:bc:0d:4e:a4:ed:4b:e3:bc:22:83:e3:6a:19:b5:68:ce:dd: 83:9a:63:62:5f:b7:55:f9:27:fa:07:92:8e:e6:fc:f4:8d:bd: 90:e4:ea:6e:99:35:c7:5d:2b:cd:d9:05:36:1a:63:bc:4b:9f: cb:bd:ff:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUBxcJdjpzA92Wsl9xcyrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTZhYmNjNDRjOWE5NTU0MGNkZjViMWRjNTQyZWM3ZDEx ZmUwN2EwHhcNMjYwMTI1MDQwMTEyWhcNMjYwMTI2MDQwMTEyWjAzMTEwLwYDVQQD EyhkZmMyMjIxNTg2MTQ3ODdjNWQ4NjQxODc2NTE5MWVlMmE1ZDdhZTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ+uKN1NYdqwnMz2SDJ816W9KUcZ sM7peryrKB/aziNgk0FFuLS56btxJJGBcc31p313HMbYb5FQuHBtBHrSdGHHUpq8 Ahm5BZi2osDp3sh/rF+z24jU3j/Cqvwm63ZEqOwBgxux6LuDnnWGxCvJq+YpKP20 Mata8NzyxNMDbVNF1rEMvwCzXKNjGMjQNWJLdYk9VkcFTX5X30NXHkKTxhisHSXN ImLaQPgt32JpPUlcim02ACUUr9QbbYTYtXyPubgig53JsSaEeSDKtjrYTwgiYpYX sMcHB2aBslMyRbU92QLWszyFBicBJgQqhwpy0pqGWNi3TnPzl29508rfEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/CIhWGFHh8XYZBh2UZHuKl166dMB8GA1UdIwQY MBaAFBIWq8xEyalVQM31sdxULsfRH+B6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEt YTA5NjJkOTk4ZTYwLzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEtYTA5NjJkOTk4ZTYw LzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsIaxG0D+ TYjfhyIqGwlJlXtXA41XSHqzwt1oP43ZoR4ARVv7jMN6dxvai1USsepZ7K9s0GXA DtyzWAVhGkkhdtzOeCYh3VJdUFUwfTJoHIYyOfXeoCuOYbxDc5m2ormVpC8DcUEZ 9O5lQA4ekkD03FaMYWse0ecSb4GLhAKAFC5IUoKlP0bKcgAdg76ovF2+tL2+og9o 2I1pjPeSl6XWC8qJocQaHWR43VGV+MVcJzoyYPobr3G1mZjuD1nGRYvGM0lgF7Ct NbwNTqTtS+O8IoPjahm1aM7dg5pjYl+3Vfkn+geSjub89I29kOTqbpk1x10rzdkF NhpjvEufy73/Xg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:18:26 2026 by rpki-client