This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft File: _EjmUG7G1TxZFdyPKWREhd-S_Ok.mft (raw, json) Hash identifier: qpc+l1MR8RbaOxKOFlw7rA/LqRkj/FmyjWX7Px3jh+o= Subject key identifier: AC:4A:AC:CD:EE:AF:ED:BA:49:45:D8:C7:22:A5:7B:97:A0:75:B9:E4 Authority key identifier: FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9 Certificate issuer: /CN=fc48e6506ec6d53c5915dc8f29644485df92fce9 Certificate serial: 019BF5AC5D47FD034226117BAD0810C0511E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft Manifest number: 1498 Signing time: Sun 25 Jan 2026 15:01:12 +0000 Manifest this update: Sun 25 Jan 2026 15:01:12 +0000 Manifest next update: Mon 26 Jan 2026 15:01:12 +0000 Files and hashes: 1: _EjmUG7G1TxZFdyPKWREhd-S_Ok.crl (hash: YhfzRgM/4ZNEDQAlWzc6tmIyK+U1YKry9JBjsa29vJ8=) 2: s10iu-qYEl97SkdPFFc91UCyTP8.roa (hash: mY1Xwqy7Z6NydVJ4ZdfvfAq3+ajlgxpmGG9kYDrwGTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:5d:47:fd:03:42:26:11:7b:ad:08:10:c0:51:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc48e6506ec6d53c5915dc8f29644485df92fce9 Validity Not Before: Jan 25 15:01:12 2026 GMT Not After : Jan 26 15:01:12 2026 GMT Subject: CN=ac4aaccdeeafedba4945d8c722a57b97a075b9e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c4:66:da:a1:78:64:0a:30:e4:f4:0c:dd:d3: e4:35:92:35:98:15:3b:bf:4c:5b:c9:94:6f:15:ff: be:38:0f:dc:c8:65:9b:ec:12:bb:da:31:82:52:4f: 04:4f:37:c0:db:11:77:12:7c:70:b2:be:68:0f:a1: 20:36:bf:00:a1:7c:fd:71:8c:c8:6d:0f:6a:f3:ef: 14:06:a8:0d:13:78:6f:90:8a:96:36:a8:67:e8:2c: bf:5e:c4:91:70:21:d6:d2:cf:64:6f:0e:1d:38:b9: e6:ea:7a:63:12:15:20:93:e5:43:97:84:61:1a:02: ab:79:2e:0c:16:69:3f:d5:b0:66:70:f5:c7:26:87: fd:62:3f:03:45:02:94:0d:43:36:98:cb:eb:ca:d1: 44:01:58:2c:e7:a5:9d:2d:f6:d6:a2:68:d0:eb:a8: 98:08:e8:97:d9:2b:4c:be:d5:41:d3:ee:88:e6:f9: f0:f9:ef:d9:7f:09:8f:12:fa:3d:f1:c4:ae:6f:b8: a5:39:4a:89:72:41:5c:2a:3b:65:8a:e9:41:d2:31: 07:73:b4:16:a1:d0:7f:b2:e4:89:54:18:69:9a:dd: 4d:c3:64:b5:66:21:bc:24:a5:18:cb:83:e8:28:6f: 3f:fa:c9:61:a8:15:a7:fa:89:73:ad:9f:19:cc:1c: b3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4A:AC:CD:EE:AF:ED:BA:49:45:D8:C7:22:A5:7B:97:A0:75:B9:E4 X509v3 Authority Key Identifier: keyid:FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:4b:47:2a:e5:e5:be:be:a3:09:9f:26:ff:06:d7:03:58:db: e3:08:25:3a:01:72:33:80:16:24:78:0e:a1:4b:3f:05:47:46: 8f:2e:fa:a5:aa:1e:96:c7:74:81:2d:78:44:58:87:29:0f:95: 7b:ab:35:f2:00:28:48:5e:5f:fb:d7:36:8d:da:0e:c4:da:4b: da:25:27:44:d1:65:56:5d:fd:d8:d9:7e:e8:61:5d:74:e5:b1: 34:fb:ed:b1:d0:da:e4:3f:ac:a3:c1:dc:76:a5:4f:a4:a8:bb: 9a:0e:9f:72:a7:e7:c6:62:ef:5c:e5:6b:0c:f2:a0:20:f1:2b: ba:46:77:72:91:86:65:27:db:1a:ec:ec:1f:43:4c:60:07:43: c5:86:eb:81:ec:d2:29:e5:c0:a6:3e:dd:28:41:dc:f4:f7:68: 53:da:7d:a1:06:9a:25:5a:fb:19:85:58:cc:7e:93:d0:43:ea: 6b:6a:55:7d:4d:20:5c:a9:aa:23:7c:5c:fd:6a:8c:53:45:ac: b5:32:ca:eb:f8:a3:3b:3b:bd:d0:57:c1:e9:ff:6c:f9:9c:56: 15:e1:47:51:ab:d1:d5:47:f5:b8:f5:ee:f1:9b:b4:13:21:c8: 38:f2:50:7f:be:c8:62:79:30:a8:b4:1a:bf:e0:8d:c8:ad:3e: 18:2a:34:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rF1H/QNCJhF7rQgQwFEeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDhlNjUwNmVjNmQ1M2M1OTE1ZGM4ZjI5NjQ0NDg1ZGY5 MmZjZTkwHhcNMjYwMTI1MTUwMTEyWhcNMjYwMTI2MTUwMTEyWjAzMTEwLwYDVQQD EyhhYzRhYWNjZGVlYWZlZGJhNDk0NWQ4YzcyMmE1N2I5N2EwNzViOWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8Rm2qF4ZAow5PQM3dPkNZI1mBU7 v0xbyZRvFf++OA/cyGWb7BK72jGCUk8ETzfA2xF3Enxwsr5oD6EgNr8AoXz9cYzI bQ9q8+8UBqgNE3hvkIqWNqhn6Cy/XsSRcCHW0s9kbw4dOLnm6npjEhUgk+VDl4Rh GgKreS4MFmk/1bBmcPXHJof9Yj8DRQKUDUM2mMvrytFEAVgs56WdLfbWomjQ66iY COiX2StMvtVB0+6I5vnw+e/ZfwmPEvo98cSub7ilOUqJckFcKjtliulB0jEHc7QW odB/suSJVBhpmt1Nw2S1ZiG8JKUYy4PoKG8/+slhqBWn+olzrZ8ZzByzdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxKrM3ur+26SUXYxyKle5egdbnkMB8GA1UdIwQY MBaAFPxI5lBuxtU8WRXcjylkRIXfkvzpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zYWI2Y2YtOTljZC00YWM0LTkwMTMt ZjViZWUxNmVkM2E3LzEvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8zYWI2Y2YtOTljZC00YWM0LTkwMTMtZjViZWUxNmVkM2E3 LzEvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbEtHKuXl vr6jCZ8m/wbXA1jb4wglOgFyM4AWJHgOoUs/BUdGjy76paoelsd0gS14RFiHKQ+V e6s18gAoSF5f+9c2jdoOxNpL2iUnRNFlVl392Nl+6GFddOWxNPvtsdDa5D+so8Hc dqVPpKi7mg6fcqfnxmLvXOVrDPKgIPErukZ3cpGGZSfbGuzsH0NMYAdDxYbrgezS KeXApj7dKEHc9PdoU9p9oQaaJVr7GYVYzH6T0EPqa2pVfU0gXKmqI3xc/WqMU0Ws tTLK6/ijOzu90FfB6f9s+ZxWFeFHUavR1Uf1uPXu8Zu0EyHIOPJQf77IYnkwqLQa v+CNyK0+GCo0NQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:28 2026 by rpki-client