This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft File: 67wNYL06kL1eMVCd6t9EcHaweNg.mft (raw, json) Hash identifier: 4S9Lc+KKohEu/R6VNdqI48dz7YcjyrfGOfIk5bsapnw= Subject key identifier: A9:EE:91:00:69:16:B6:99:AA:15:53:C0:EA:66:BA:55:CC:AD:D3:75 Authority key identifier: EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8 Certificate issuer: /CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8 Certificate serial: 019BF42BE7B5E3D97EFB639A4B8829092D67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 08:01:16 +0000 Manifest this update: Sun 25 Jan 2026 08:01:16 +0000 Manifest next update: Mon 26 Jan 2026 08:01:16 +0000 Files and hashes: 1: 4Ozn4Unrsy8Tgxp91WwiFZKytkU.roa (hash: Rohs1aSjVXWL0rCfUlHjGhKgh4NddWQEmfzTXXTVjxE=) 2: 67wNYL06kL1eMVCd6t9EcHaweNg.crl (hash: gfulcGZWGjgTnhiCkYy6MreDeT1nuj0lUv3ZGezBHNY=) 3: Lni0Hg51K4L3QNDzyIIc5yODXjI.roa (hash: gv0qHBnJC/7TrslaRP9zYprmaic9WMI2dM0X709uqrI=) 4: WoQboQGGusiNaqyn8jRMBDu3Vvs.roa (hash: spWQsiuCrGGqTTUZBAQNl/ggbHw2wL+q6jT+X13QEFg=) 5: rdfW53cfGFv_YgxwDty6e7ihnuY.roa (hash: h3oTAKzXhami9yqYo4w2QzINnY33lJyuys0rpltxvDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:e7:b5:e3:d9:7e:fb:63:9a:4b:88:29:09:2d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8 Validity Not Before: Jan 25 08:01:16 2026 GMT Not After : Jan 26 08:01:16 2026 GMT Subject: CN=a9ee91006916b699aa1553c0ea66ba55ccadd375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b1:d0:c6:39:5c:08:70:06:98:e8:33:1e:8d: 00:87:08:42:8d:c0:a8:98:26:be:9c:f9:44:17:c7: fa:a0:dc:99:e4:4e:37:6f:d3:e8:49:7d:1e:6a:2d: ca:6a:1d:a0:49:13:29:2f:9e:21:43:b0:63:40:a6: a3:3d:01:5b:31:29:83:b3:60:3d:29:b0:40:70:23: ab:bd:d7:f5:c2:6f:01:fc:8f:67:72:96:ee:4a:b6: 13:0d:78:1c:e9:aa:31:54:41:0b:30:ef:1f:cd:5d: 78:21:0d:35:aa:b9:f4:40:56:55:59:af:96:cc:c5: 1a:f7:d4:3c:4d:84:be:82:7e:17:35:3f:d1:7f:c2: ec:43:3c:47:96:e1:a4:8d:2b:53:bd:bc:c4:a0:69: 80:fa:63:2d:da:4d:e7:49:cc:bc:74:59:d7:f3:2d: d1:10:38:a2:4d:f1:d8:15:16:05:d5:f3:6b:b6:25: 1e:eb:87:17:6b:b5:da:bb:8c:d8:59:04:a1:6a:16: f8:6a:9b:39:05:ca:ac:56:3d:36:9c:ac:61:4f:93: c1:26:da:52:0e:8c:a5:c5:ef:18:75:69:49:7b:28: d0:7c:0c:87:53:c6:e8:cd:21:fa:95:fc:c3:cb:b9: ba:84:f3:fc:84:c8:40:ff:1d:e8:cb:fc:5b:84:96: 2e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EE:91:00:69:16:B6:99:AA:15:53:C0:EA:66:BA:55:CC:AD:D3:75 X509v3 Authority Key Identifier: keyid:EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:20:c2:31:a5:45:6f:2a:ac:7b:64:d1:d1:4b:63:a1:df:8d: 16:34:d4:fe:b8:41:fb:b8:c2:19:d3:97:44:77:c9:50:5d:4a: 4b:ad:92:0b:50:3f:b0:83:ff:74:da:2c:c1:7e:d0:e4:47:dd: c1:90:38:f7:6d:80:bb:ec:6d:f6:4d:a8:fe:5c:2d:db:88:13: c7:80:df:24:a2:18:47:1f:b1:0a:33:81:b0:65:cd:16:8b:5b: fb:42:f1:c6:67:a3:3a:3a:f1:e9:37:1c:f7:f7:e5:12:8a:5f: d9:89:a4:7c:cb:83:03:00:65:d0:5d:30:e1:f4:01:54:c4:52: b8:5f:8f:f3:ec:fa:03:e8:78:cf:9a:2c:fe:b3:22:01:b0:5b: ce:fc:a4:29:cd:b2:46:98:02:b9:91:5c:2f:1e:84:5f:d9:a9: 45:58:c4:7e:d8:98:ea:38:96:e2:1c:cb:c8:d6:69:91:b9:5d: 86:cc:c1:45:3e:08:51:ab:4e:dd:b5:e2:04:2d:34:14:d1:ed: 2d:11:ee:ab:30:e2:f9:f0:5e:54:55:62:b9:01:0f:b7:f2:c0: 7c:83:b5:70:4e:69:40:7e:d8:60:2d:7f:d1:69:ac:55:96:61: 2a:02:42:ec:eb:e2:8f:85:ce:4f:6e:25:80:ca:20:f0:ab:f0: 3a:a0:df:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K+e149l++2OaS4gpCS1nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYmMwZDYwYmQzYTkwYmQ1ZTMxNTA5ZGVhZGY0NDcwNzZi MDc4ZDgwHhcNMjYwMTI1MDgwMTE2WhcNMjYwMTI2MDgwMTE2WjAzMTEwLwYDVQQD EyhhOWVlOTEwMDY5MTZiNjk5YWExNTUzYzBlYTY2YmE1NWNjYWRkMzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rHQxjlcCHAGmOgzHo0AhwhCjcCo mCa+nPlEF8f6oNyZ5E43b9PoSX0eai3Kah2gSRMpL54hQ7BjQKajPQFbMSmDs2A9 KbBAcCOrvdf1wm8B/I9ncpbuSrYTDXgc6aoxVEELMO8fzV14IQ01qrn0QFZVWa+W zMUa99Q8TYS+gn4XNT/Rf8LsQzxHluGkjStTvbzEoGmA+mMt2k3nScy8dFnX8y3R EDiiTfHYFRYF1fNrtiUe64cXa7Xau4zYWQShahb4aps5BcqsVj02nKxhT5PBJtpS Doylxe8YdWlJeyjQfAyHU8bozSH6lfzDy7m6hPP8hMhA/x3oy/xbhJYu5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnukQBpFraZqhVTwOpmulXMrdN1MB8GA1UdIwQY MBaAFOu8DWC9OpC9XjFQnerfRHB2sHjYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjd3TllMMDZrTDFlTVZDZDZ0OUVjSGF3ZU5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wODBhZjYtOGRjNC00OGU2LTljNjMt YTZiOTU5OTFjZDJjLzEvNjd3TllMMDZrTDFlTVZDZDZ0OUVjSGF3ZU5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8wODBhZjYtOGRjNC00OGU2LTljNjMtYTZiOTU5OTFjZDJj LzEvNjd3TllMMDZrTDFlTVZDZDZ0OUVjSGF3ZU5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAniDCMaVF byqse2TR0Utjod+NFjTU/rhB+7jCGdOXRHfJUF1KS62SC1A/sIP/dNoswX7Q5Efd wZA4922Au+xt9k2o/lwt24gTx4DfJKIYRx+xCjOBsGXNFotb+0LxxmejOjrx6Tcc 9/flEopf2YmkfMuDAwBl0F0w4fQBVMRSuF+P8+z6A+h4z5os/rMiAbBbzvykKc2y RpgCuZFcLx6EX9mpRVjEftiY6jiW4hzLyNZpkbldhszBRT4IUatO3bXiBC00FNHt LRHuqzDi+fBeVFViuQEPt/LAfIO1cE5pQH7YYC1/0WmsVZZhKgJC7Ovij4XOT24l gMog8KvwOqDfTQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:46 2026 by rpki-client