This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft File: eC-fO7vgtR6p6bLpbGhodI-gePc.mft (raw, json) Hash identifier: s/ehLzvGv/9Yxje+milcWVdgOWSHKP+6iiKoLm3vyOM= Subject key identifier: 86:D9:11:E6:9D:4E:96:B9:13:33:49:C7:E0:C1:79:20:F6:F2:AC:E5 Authority key identifier: 78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7 Certificate issuer: /CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7 Certificate serial: 019BF61A2A5FB3C44B91A801AE248B3D276F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft Manifest number: 0A46 Signing time: Sun 25 Jan 2026 17:01:08 +0000 Manifest this update: Sun 25 Jan 2026 17:01:08 +0000 Manifest next update: Mon 26 Jan 2026 17:01:08 +0000 Files and hashes: 1: OqblUTqMRXsZt8pZ5pRXhex6Zkg.roa (hash: XCOdkvew4k3OnvrnXuLCOWZ3jOmwLtq3F1NbKBNNtwQ=) 2: eC-fO7vgtR6p6bLpbGhodI-gePc.crl (hash: wYm/6bpRb3HmpUmpbNgm42jG9xX3XJc4JMWYdlss0Xg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:2a:5f:b3:c4:4b:91:a8:01:ae:24:8b:3d:27:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7 Validity Not Before: Jan 25 17:01:08 2026 GMT Not After : Jan 26 17:01:08 2026 GMT Subject: CN=86d911e69d4e96b9133349c7e0c17920f6f2ace5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0b:97:fc:c0:73:37:2c:33:81:8f:8f:ab:78: 72:e1:c3:8b:de:ba:94:b9:dd:41:25:ae:92:6b:b8: cb:39:a3:75:d0:7d:88:50:f2:af:c5:d6:d8:3e:37: e6:7b:f0:f1:3a:17:1b:e9:36:ea:54:fe:2c:c3:31: 52:3a:64:52:ff:5e:9b:18:db:ac:03:c8:c4:dc:8f: 05:b9:9d:80:09:c4:93:92:eb:b9:c2:a0:58:7c:a9: da:a8:73:01:96:5e:ee:66:1d:37:b4:6c:ba:d6:15: 97:d4:12:d0:bf:5d:d3:05:f9:a4:8c:c9:1b:7f:fa: 04:7c:a8:77:f8:a5:a6:4f:21:87:cb:22:14:08:a6: a6:9f:97:97:21:9a:d9:a9:51:c9:92:9c:b9:49:63: df:49:e6:74:84:b3:fe:73:34:d2:ce:d6:3b:bf:b7: d3:14:35:b3:c6:a0:9b:37:f7:67:5f:a7:eb:bc:27: 6b:92:73:12:d9:18:c4:6c:b9:10:d9:30:64:5f:d3: 61:4b:9f:2c:ae:7b:06:d9:2e:a1:33:a6:a5:ce:48: d7:88:18:5f:ec:e9:af:f2:81:8e:6a:6e:1b:5e:ba: 19:b7:8f:e4:76:83:50:ca:68:ef:87:00:ac:4f:6a: ca:d2:12:c0:3e:cf:ad:17:b7:53:00:f8:0b:59:72: 3b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D9:11:E6:9D:4E:96:B9:13:33:49:C7:E0:C1:79:20:F6:F2:AC:E5 X509v3 Authority Key Identifier: keyid:78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:e6:d9:86:4a:3b:d3:32:20:db:ed:6a:7c:7a:1f:12:32:99: d2:8b:2e:c2:5e:61:7e:39:ad:a1:7e:19:99:f8:89:3d:86:df: 44:60:65:da:7e:31:e6:12:23:40:eb:0c:ae:4b:18:91:89:7e: 3e:67:80:15:bb:45:6a:81:03:a7:ba:c1:6a:80:19:59:c0:b9: b8:88:3d:25:91:af:23:32:4a:cb:30:a5:f2:18:11:24:20:a5: 97:55:86:93:5f:1c:d6:25:6c:fc:9f:fe:9e:f1:d8:69:3b:70: 2e:b5:a6:9b:ae:8e:91:74:4f:63:2e:5c:29:4d:a5:47:21:e7: 68:83:1c:b5:3f:17:ac:fc:5a:94:ef:2a:88:80:d7:19:07:79: 45:86:4f:4b:48:34:15:f6:35:6e:5c:a7:f4:e7:91:21:d9:dc: 51:a0:81:04:ed:98:7b:9f:55:f7:7e:37:de:bf:ac:6b:0e:fc: 89:ba:14:97:7f:d8:bb:73:ac:9b:90:e7:a9:76:30:e2:5b:3c: a5:06:de:0d:d1:02:0e:10:85:05:13:82:4e:79:90:0a:43:5b: 7f:fd:40:54:a6:32:0f:42:35:84:83:e9:29:77:08:23:fb:09: a5:c7:ea:cd:85:fd:2b:f9:ff:63:f3:2e:46:69:b4:01:40:05: ca:01:08:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Gipfs8RLkagBriSLPSdvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MmY5ZjNiYmJlMGI1MWVhOWU5YjJlOTZjNjg2ODc0OGZh MDc4ZjcwHhcNMjYwMTI1MTcwMTA4WhcNMjYwMTI2MTcwMTA4WjAzMTEwLwYDVQQD Eyg4NmQ5MTFlNjlkNGU5NmI5MTMzMzQ5YzdlMGMxNzkyMGY2ZjJhY2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQuX/MBzNywzgY+Pq3hy4cOL3rqU ud1BJa6Sa7jLOaN10H2IUPKvxdbYPjfme/DxOhcb6TbqVP4swzFSOmRS/16bGNus A8jE3I8FuZ2ACcSTkuu5wqBYfKnaqHMBll7uZh03tGy61hWX1BLQv13TBfmkjMkb f/oEfKh3+KWmTyGHyyIUCKamn5eXIZrZqVHJkpy5SWPfSeZ0hLP+czTSztY7v7fT FDWzxqCbN/dnX6frvCdrknMS2RjEbLkQ2TBkX9NhS58srnsG2S6hM6alzkjXiBhf 7Omv8oGOam4bXroZt4/kdoNQymjvhwCsT2rK0hLAPs+tF7dTAPgLWXI7nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbZEeadTpa5EzNJx+DBeSD28qzlMB8GA1UdIwQY MBaAFHgvnzu74LUeqemy6WxoaHSPoHj3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUMtZk83dmd0UjZwNmJMcGJHaG9kSS1nZVBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lN2YzMjItMzliNS00MzdhLTk5ZmQt NzQzYzMwODAxZmYxLzEvZUMtZk83dmd0UjZwNmJMcGJHaG9kSS1nZVBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9lN2YzMjItMzliNS00MzdhLTk5ZmQtNzQzYzMwODAxZmYx LzEvZUMtZk83dmd0UjZwNmJMcGJHaG9kSS1nZVBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArebZhko7 0zIg2+1qfHofEjKZ0osuwl5hfjmtoX4ZmfiJPYbfRGBl2n4x5hIjQOsMrksYkYl+ PmeAFbtFaoEDp7rBaoAZWcC5uIg9JZGvIzJKyzCl8hgRJCCll1WGk18c1iVs/J/+ nvHYaTtwLrWmm66OkXRPYy5cKU2lRyHnaIMctT8XrPxalO8qiIDXGQd5RYZPS0g0 FfY1blyn9OeRIdncUaCBBO2Ye59V93433r+saw78iboUl3/Yu3Osm5DnqXYw4ls8 pQbeDdECDhCFBROCTnmQCkNbf/1AVKYyD0I1hIPpKXcII/sJpcfqzYX9K/n/Y/Mu Rmm0AUAFygEI1A== -----END CERTIFICATE-----Generated at Sun Jan 25 19:44:43 2026 by rpki-client