This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft File: EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json) Hash identifier: 3ys+9cU1zExQehlNPR3A7GStUc2b8tvq0KXRPuFjk8I= Subject key identifier: E1:F2:5A:5F:70:E3:18:EF:4F:9B:67:AE:17:BA:E1:33:56:EA:A8:3E Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Certificate serial: 019BF53EECB1E29B8C7A63B578201F237130 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft Manifest number: 0304 Signing time: Sun 25 Jan 2026 13:01:40 +0000 Manifest this update: Sun 25 Jan 2026 13:01:40 +0000 Manifest next update: Mon 26 Jan 2026 13:01:40 +0000 Files and hashes: 1: 9V3S7FKC66AOlqD78_S81truyog.roa (hash: zjtnM6n3Uet2Hry92cMihIwePJR9odotoqz4FTgtQpQ=) 2: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: NKqPTrb+nZXtCJRtq4ztCXK8ZtjrjbEbh/ncmV4GjjA=) 3: Q89cC5EdEYVsTAR7wEMR5rmM-FA.roa (hash: IpAEUAQrDRw1Avy4gtoYvc+jdCy+th+rhrs9OezDlo8=) 4: R6vEKMp8XV0nRsp07cf4y7I04qo.roa (hash: nWBD/KxL+ZqMUbvdWaWo1r7/2jynLrCSHLN52H6UCwM=) 5: XGUIHnWF_LunuxvNcMmR57_WKzo.roa (hash: Gg+yICFewOrJllU9keGQjZ8+O9tNzguLLKLqMVLJpjs=) 6: b1NnfX82WWUKnDzO-T_p9BDnjPM.roa (hash: uuhxZnIOVP3yGkI2POwoZpysQSXnT6B0qJNkc7bJXFw=) 7: fYJN56gNpyjk6FeN9g2u8kda_Ck.roa (hash: 0Bz6iRQD5arZ6ysTUfpQvVjP86yHCsoWY8uCR19q2k4=) 8: iTrKyBgs_fihjw2gMNeMi35dTSA.roa (hash: zNTMLDdPTDqmLO0jhMMrsQBD6z1cOUxn49L1ph7eXpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:ec:b1:e2:9b:8c:7a:63:b5:78:20:1f:23:71:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Validity Not Before: Jan 25 13:01:40 2026 GMT Not After : Jan 26 13:01:40 2026 GMT Subject: CN=e1f25a5f70e318ef4f9b67ae17bae13356eaa83e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b6:ea:b8:f1:a4:e9:31:f6:82:7b:9e:b4:9e: c3:b1:35:6b:74:26:ba:d5:0a:c2:db:cd:d2:cd:4a: a9:ec:54:55:55:b0:dd:2e:bf:9d:cb:91:1b:fe:ec: 1c:b0:5f:13:50:62:90:86:19:32:b5:ea:de:1f:ad: ea:f6:de:68:d8:5b:79:22:5f:ca:09:6f:2a:b0:ee: b0:c5:43:47:05:c3:a0:71:8e:0f:e6:dc:ae:c4:5f: 72:90:da:79:11:54:db:2c:8b:93:78:e0:f5:5b:b5: fa:36:77:42:5c:70:5e:07:3d:29:f5:8a:64:63:21: 6a:e0:0a:a7:94:c7:71:48:7e:89:6a:34:57:8c:9f: f8:14:8d:da:50:58:17:8f:39:b2:e8:75:8a:be:80: 0c:8b:53:03:c7:01:e0:cc:15:b2:26:a8:6d:6b:f7: a9:1b:8c:e1:56:7d:88:8a:0f:46:99:c2:dd:41:51: 8c:06:23:0d:39:c8:3f:6c:5e:2a:7e:82:98:76:d9: 4b:9c:c7:af:5f:31:2f:f6:36:f7:a6:b6:70:e6:28: e0:e9:1c:4e:2f:17:60:be:de:05:7e:1d:f3:2c:c3: 40:73:79:f2:b8:07:d8:d2:08:87:f3:ed:e4:0c:ab: 92:a8:1d:b7:a4:ac:61:7a:d8:1c:be:09:35:fa:87: cd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F2:5A:5F:70:E3:18:EF:4F:9B:67:AE:17:BA:E1:33:56:EA:A8:3E X509v3 Authority Key Identifier: keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:c0:4f:c9:40:96:d9:bd:bf:14:53:82:80:2d:a7:ad:07:18: fb:b3:f3:ee:57:ad:2f:00:58:e9:bd:92:ef:d5:25:17:f6:36: bb:c4:0d:ae:2c:5f:da:dc:e7:48:97:32:23:c4:b2:e3:f6:c6: e6:2d:22:6b:5e:54:05:6a:0e:2f:0b:fc:23:6d:26:fb:8f:12: b8:54:fc:f9:51:d7:e0:41:6f:19:93:36:db:ba:4a:ff:70:77: 54:3e:c8:27:63:0c:80:d5:4c:d1:6f:5b:4f:03:24:9d:64:96: 3a:e3:e2:f2:93:49:cd:80:cb:cb:59:0a:e3:19:ec:10:a6:93: d1:af:4b:0f:36:3c:c4:a2:49:ae:55:fe:93:ca:54:87:a3:71: fd:2e:e3:11:87:86:5e:86:75:10:55:82:61:9f:cf:bd:03:dd: 88:30:64:4d:f1:51:a5:f0:e0:d2:3b:92:b6:52:77:a6:a7:7a: 10:51:3f:30:30:7f:43:07:8a:7f:b6:f0:e8:b7:96:a7:3f:05: 36:bd:e0:24:b4:d6:8c:17:39:af:2d:11:2a:e3:05:59:27:c0: 68:16:fe:a2:95:13:b1:25:07:4e:e6:be:b6:c6:14:a3:4d:1c: aa:aa:e7:d9:8b:c8:a1:43:3a:c6:0f:ff:63:96:f5:4e:9d:72: 52:9d:15:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Puyx4puMemO1eCAfI3EwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTZhYmNjNDRjOWE5NTU0MGNkZjViMWRjNTQyZWM3ZDEx ZmUwN2EwHhcNMjYwMTI1MTMwMTQwWhcNMjYwMTI2MTMwMTQwWjAzMTEwLwYDVQQD EyhlMWYyNWE1ZjcwZTMxOGVmNGY5YjY3YWUxN2JhZTEzMzU2ZWFhODNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrbquPGk6TH2gnuetJ7DsTVrdCa6 1QrC283SzUqp7FRVVbDdLr+dy5Eb/uwcsF8TUGKQhhkytereH63q9t5o2Ft5Il/K CW8qsO6wxUNHBcOgcY4P5tyuxF9ykNp5EVTbLIuTeOD1W7X6NndCXHBeBz0p9Ypk YyFq4AqnlMdxSH6JajRXjJ/4FI3aUFgXjzmy6HWKvoAMi1MDxwHgzBWyJqhta/ep G4zhVn2Iig9GmcLdQVGMBiMNOcg/bF4qfoKYdtlLnMevXzEv9jb3prZw5ijg6RxO Lxdgvt4Ffh3zLMNAc3nyuAfY0giH8+3kDKuSqB23pKxhetgcvgk1+ofNmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHyWl9w4xjvT5tnrhe64TNW6qg+MB8GA1UdIwQY MBaAFBIWq8xEyalVQM31sdxULsfRH+B6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEt YTA5NjJkOTk4ZTYwLzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEtYTA5NjJkOTk4ZTYw LzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZsBPyUCW 2b2/FFOCgC2nrQcY+7Pz7letLwBY6b2S79UlF/Y2u8QNrixf2tznSJcyI8Sy4/bG 5i0ia15UBWoOLwv8I20m+48SuFT8+VHX4EFvGZM227pK/3B3VD7IJ2MMgNVM0W9b TwMknWSWOuPi8pNJzYDLy1kK4xnsEKaT0a9LDzY8xKJJrlX+k8pUh6Nx/S7jEYeG XoZ1EFWCYZ/PvQPdiDBkTfFRpfDg0juStlJ3pqd6EFE/MDB/QweKf7bw6LeWpz8F Nr3gJLTWjBc5ry0RKuMFWSfAaBb+opUTsSUHTua+tsYUo00cqqrn2YvIoUM6xg// Y5b1Tp1yUp0VPA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:53:11 2026 by rpki-client