This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft File: _EjmUG7G1TxZFdyPKWREhd-S_Ok.mft (raw, json) Hash identifier: O7u+VGsIvHW3j6YX9AfIM8Yv7co5p34tfhOujiJTDFY= Subject key identifier: 04:D9:79:4A:86:BB:74:2D:46:27:BB:67:7B:C3:B8:D2:B2:7C:67:87 Authority key identifier: FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9 Certificate issuer: /CN=fc48e6506ec6d53c5915dc8f29644485df92fce9 Certificate serial: 019BF79A541A7C8197147154554A9CBEF9D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft Manifest number: 1499 Signing time: Mon 26 Jan 2026 00:00:44 +0000 Manifest this update: Mon 26 Jan 2026 00:00:44 +0000 Manifest next update: Tue 27 Jan 2026 00:00:44 +0000 Files and hashes: 1: _EjmUG7G1TxZFdyPKWREhd-S_Ok.crl (hash: 6t2gGyp/KF0auRCGDSiTj/E+MIMQAkABm24z2sZSeXc=) 2: s10iu-qYEl97SkdPFFc91UCyTP8.roa (hash: mY1Xwqy7Z6NydVJ4ZdfvfAq3+ajlgxpmGG9kYDrwGTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:54:1a:7c:81:97:14:71:54:55:4a:9c:be:f9:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc48e6506ec6d53c5915dc8f29644485df92fce9 Validity Not Before: Jan 26 00:00:44 2026 GMT Not After : Jan 27 00:00:44 2026 GMT Subject: CN=04d9794a86bb742d4627bb677bc3b8d2b27c6787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:68:c7:b1:98:c3:2d:1a:38:a4:06:44:09:65: cf:44:f2:ce:00:43:cd:1c:8a:76:fd:58:eb:19:77: 86:1b:e6:2e:9b:d5:f8:a0:86:08:33:7a:e4:e0:1a: d2:bc:27:f2:a1:35:60:51:68:4f:f2:91:d7:31:f2: 7e:a7:6b:cb:d5:56:9e:c1:6e:e9:68:69:57:8f:01: bf:dd:eb:23:01:47:d2:84:65:5a:65:4d:da:c2:67: 94:8a:de:b5:1a:f2:46:04:db:1d:32:93:71:63:96: bd:e0:6c:83:10:11:20:18:89:2a:42:ea:32:db:cd: 43:46:0d:82:c1:3f:8c:63:29:21:12:c0:f9:fb:5b: ab:3c:21:31:cf:31:ed:80:dc:4b:a4:69:11:64:09: 78:3a:e6:ab:22:fc:ba:3f:fe:a1:8d:37:92:de:9a: d1:93:ee:b0:d0:d4:2f:9a:b4:94:ea:2d:bc:f5:79: a3:63:02:92:f6:db:07:bc:fb:11:10:0f:6b:81:90: 71:4a:63:78:e6:d1:32:01:c6:df:89:6d:36:5d:e6: 14:2c:3b:0a:11:96:f5:03:d5:e1:d9:c1:2d:92:97: ca:94:31:a8:13:9f:ed:0f:8c:3d:91:e0:68:a1:30: 78:12:1c:28:08:88:dc:29:65:79:c8:45:02:2d:39: 9c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D9:79:4A:86:BB:74:2D:46:27:BB:67:7B:C3:B8:D2:B2:7C:67:87 X509v3 Authority Key Identifier: keyid:FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c4:3f:5f:0c:b6:0f:1a:b8:c9:32:70:cd:56:65:4b:5f:dc: 17:56:78:94:49:51:11:54:22:3c:1f:2f:2c:48:d8:13:17:33: 78:d9:6a:01:6d:d1:ed:0d:88:6a:0b:19:1d:77:8e:2b:52:44: ad:6e:13:e6:82:fd:c3:81:f0:e1:eb:46:3f:15:c3:c4:29:e0: 6b:ba:aa:f2:ef:5e:e1:c0:f4:91:f0:8d:1f:f7:fd:62:19:df: 15:1e:dc:51:f5:d6:23:f2:1b:ff:8e:c4:c3:77:6c:58:e8:ee: c3:cc:2f:17:5c:3a:d6:0e:d7:18:20:f1:73:c0:9a:d9:a5:af: bf:2f:aa:26:a7:7a:9f:18:e4:7a:a9:c9:30:ec:5e:2f:6c:a0: f1:a7:75:5e:e3:88:76:07:fb:28:93:b9:b9:59:dd:e3:be:3d: ca:11:85:ca:e6:fb:9a:15:29:66:60:33:06:17:80:f5:5e:66: 1e:de:63:46:9e:d4:ef:3e:f0:d2:44:24:9d:5d:ae:17:67:2a: 99:38:1e:d6:b4:d1:9b:3f:ac:e8:87:9b:a0:03:56:28:5d:a5: 3d:98:71:9b:0b:f4:4d:4e:1c:65:20:43:62:44:87:3d:7b:60: 55:b6:51:19:6f:cd:02:00:40:65:5c:d3:5e:d6:f4:43:4e:c0: f3:f9:8e:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mlQafIGXFHFUVUqcvvnTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDhlNjUwNmVjNmQ1M2M1OTE1ZGM4ZjI5NjQ0NDg1ZGY5 MmZjZTkwHhcNMjYwMTI2MDAwMDQ0WhcNMjYwMTI3MDAwMDQ0WjAzMTEwLwYDVQQD EygwNGQ5Nzk0YTg2YmI3NDJkNDYyN2JiNjc3YmMzYjhkMmIyN2M2Nzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWjHsZjDLRo4pAZECWXPRPLOAEPN HIp2/VjrGXeGG+Yum9X4oIYIM3rk4BrSvCfyoTVgUWhP8pHXMfJ+p2vL1VaewW7p aGlXjwG/3esjAUfShGVaZU3awmeUit61GvJGBNsdMpNxY5a94GyDEBEgGIkqQuoy 281DRg2CwT+MYykhEsD5+1urPCExzzHtgNxLpGkRZAl4OuarIvy6P/6hjTeS3prR k+6w0NQvmrSU6i289XmjYwKS9tsHvPsREA9rgZBxSmN45tEyAcbfiW02XeYULDsK EZb1A9Xh2cEtkpfKlDGoE5/tD4w9keBooTB4EhwoCIjcKWV5yEUCLTmctwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATZeUqGu3QtRie7Z3vDuNKyfGeHMB8GA1UdIwQY MBaAFPxI5lBuxtU8WRXcjylkRIXfkvzpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zYWI2Y2YtOTljZC00YWM0LTkwMTMt ZjViZWUxNmVkM2E3LzEvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8zYWI2Y2YtOTljZC00YWM0LTkwMTMtZjViZWUxNmVkM2E3 LzEvX0VqbVVHN0cxVHhaRmR5UEtXUkVoZC1TX09rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsQ/Xwy2 Dxq4yTJwzVZlS1/cF1Z4lElREVQiPB8vLEjYExczeNlqAW3R7Q2IagsZHXeOK1JE rW4T5oL9w4Hw4etGPxXDxCnga7qq8u9e4cD0kfCNH/f9YhnfFR7cUfXWI/Ib/47E w3dsWOjuw8wvF1w61g7XGCDxc8Ca2aWvvy+qJqd6nxjkeqnJMOxeL2yg8ad1XuOI dgf7KJO5uVnd4749yhGFyub7mhUpZmAzBheA9V5mHt5jRp7U7z7w0kQknV2uF2cq mTge1rTRmz+s6IeboANWKF2lPZhxmwv0TU4cZSBDYkSHPXtgVbZRGW/NAgBAZVzT Xtb0Q07A8/mOKw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:02 2026 by rpki-client