This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft File: ejhiE08UE2XviHkC5gV8KLKCnJ0.mft (raw, json) Hash identifier: 20Lh3cA9JgxoHwj0h6fl8XxidUDhru+PMg/QdtY+9m0= Subject key identifier: B5:BB:52:58:6B:12:44:4B:7E:CA:05:10:FB:D0:A3:A9:ED:09:92:CA Authority key identifier: 7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D Certificate issuer: /CN=7a3862134f141365ef887902e6057c28b2829c9d Certificate serial: 019BF5E3A4276ADD601CF2BB1B62F89A16A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft Manifest number: 0EC9 Signing time: Sun 25 Jan 2026 16:01:34 +0000 Manifest this update: Sun 25 Jan 2026 16:01:34 +0000 Manifest next update: Mon 26 Jan 2026 16:01:34 +0000 Files and hashes: 1: ejhiE08UE2XviHkC5gV8KLKCnJ0.crl (hash: 6G0jaigi3224+ZjrPHTTBYrjxBMV4KeMBrU9xGlMaHM=) 2: msjxasNTYVip4ytkLcozKUIyuLU.roa (hash: 1GAdRVGxUWjL4m+DmlC3FGRQmDiMVBGwoIUZlJa2Xkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:a4:27:6a:dd:60:1c:f2:bb:1b:62:f8:9a:16:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a3862134f141365ef887902e6057c28b2829c9d Validity Not Before: Jan 25 16:01:34 2026 GMT Not After : Jan 26 16:01:34 2026 GMT Subject: CN=b5bb52586b12444b7eca0510fbd0a3a9ed0992ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:73:6f:4d:77:bc:0f:da:28:c1:6d:5f:89:dc: b7:ab:3d:9e:f0:f2:14:dc:63:77:53:de:35:33:0e: c3:06:a0:d2:3a:e4:99:f1:e8:d1:9f:6d:ad:26:40: 70:24:71:ba:59:84:0e:75:10:58:56:92:3a:a3:c1: bc:8a:15:05:4a:bd:81:6f:af:3d:07:95:9f:ad:88: 09:5b:24:24:f9:4c:ce:de:be:4b:35:2c:a4:82:7a: dd:bf:87:1c:b9:c2:a7:d7:71:af:26:b9:91:18:3d: 26:f9:83:1c:24:ca:6e:6a:b4:33:a7:ca:6c:cd:95: d3:30:8c:62:1d:1f:18:6d:25:01:e5:0f:00:eb:1e: 9d:4c:92:8b:24:82:b6:d5:11:dc:86:e8:b7:94:f1: 4c:b5:f5:95:b1:1a:fa:2a:b3:73:48:ea:2c:e1:89: 57:22:1a:eb:ce:7e:b5:d8:82:12:a3:c5:f0:22:b3: 36:07:c7:7f:36:f9:d0:99:cd:67:36:76:22:ed:2f: 56:af:86:35:f7:67:7d:47:70:ac:fd:cb:75:7f:b1: b7:4c:c0:67:7a:4a:ec:6c:5c:6e:28:f2:7e:91:6a: 79:a1:bb:75:90:74:ac:5f:4c:20:a1:68:cb:12:d9: 2b:c2:f9:d7:b7:7d:99:35:78:b6:64:f6:ab:09:a1: 99:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BB:52:58:6B:12:44:4B:7E:CA:05:10:FB:D0:A3:A9:ED:09:92:CA X509v3 Authority Key Identifier: keyid:7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:ac:a7:e2:81:f2:c2:1d:69:16:d0:63:d1:36:1d:d2:50:ce: 00:74:44:10:dd:9a:fd:dc:08:2b:04:fe:c2:f1:d0:3a:44:7d: a0:7d:57:43:ee:02:ae:47:28:f1:ea:20:66:43:3b:57:1f:d3: c7:06:86:02:4b:fa:4e:b2:ab:b6:d7:d4:07:cf:22:b9:fa:1f: bf:dc:0b:c8:38:27:56:91:c3:11:16:f3:00:dc:bb:dc:70:fb: bf:dd:61:a6:28:30:b2:25:24:54:eb:14:99:41:50:73:eb:49: af:7e:4e:3f:39:1e:3e:6f:25:a1:9f:ad:5b:67:59:16:24:df: 8b:7a:30:be:38:00:e6:1a:2c:0d:be:5e:7b:cb:4d:3f:6c:84: 51:c3:b3:e2:cc:89:75:16:c5:ae:77:c8:f7:c4:03:3e:32:b6: 4b:e5:39:f1:76:59:56:0c:8f:d6:94:41:36:79:58:f8:13:79: a0:1b:4b:23:48:cc:a7:c9:f1:e9:02:3e:36:a9:8b:a8:be:63: 17:c8:11:85:40:9b:e3:a8:5f:68:a8:42:32:05:cd:c4:f9:f4: db:a4:c9:ab:f8:c0:14:d7:16:6f:cc:5f:23:8b:ed:6d:43:b7: 9a:46:31:36:a9:1f:b5:f9:65:62:c4:db:f0:2e:93:0d:70:28: 69:e1:1c:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv146Qnat1gHPK7G2L4mhaoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMzg2MjEzNGYxNDEzNjVlZjg4NzkwMmU2MDU3YzI4YjI4 MjljOWQwHhcNMjYwMTI1MTYwMTM0WhcNMjYwMTI2MTYwMTM0WjAzMTEwLwYDVQQD EyhiNWJiNTI1ODZiMTI0NDRiN2VjYTA1MTBmYmQwYTNhOWVkMDk5MmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXNvTXe8D9oowW1fidy3qz2e8PIU 3GN3U941Mw7DBqDSOuSZ8ejRn22tJkBwJHG6WYQOdRBYVpI6o8G8ihUFSr2Bb689 B5WfrYgJWyQk+UzO3r5LNSykgnrdv4ccucKn13GvJrmRGD0m+YMcJMpuarQzp8ps zZXTMIxiHR8YbSUB5Q8A6x6dTJKLJIK21RHchui3lPFMtfWVsRr6KrNzSOos4YlX Ihrrzn612IISo8XwIrM2B8d/NvnQmc1nNnYi7S9Wr4Y192d9R3Cs/ct1f7G3TMBn ekrsbFxuKPJ+kWp5obt1kHSsX0wgoWjLEtkrwvnXt32ZNXi2ZParCaGZYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLW7UlhrEkRLfsoFEPvQo6ntCZLKMB8GA1UdIwQY MBaAFHo4YhNPFBNl74h5AuYFfCiygpydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWpoaUUwOFVFMlh2aUhrQzVnVjhLTEtDbkowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS80MzQxOTktZDI2ZS00MTJlLWEyYmIt ZGEwYTQwNjVlODI0LzEvZWpoaUUwOFVFMlh2aUhrQzVnVjhLTEtDbkowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS80MzQxOTktZDI2ZS00MTJlLWEyYmItZGEwYTQwNjVlODI0 LzEvZWpoaUUwOFVFMlh2aUhrQzVnVjhLTEtDbkowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKyn4oHy wh1pFtBj0TYd0lDOAHREEN2a/dwIKwT+wvHQOkR9oH1XQ+4Crkco8eogZkM7Vx/T xwaGAkv6TrKrttfUB88iufofv9wLyDgnVpHDERbzANy73HD7v91hpigwsiUkVOsU mUFQc+tJr35OPzkePm8loZ+tW2dZFiTfi3owvjgA5hosDb5ee8tNP2yEUcOz4syJ dRbFrnfI98QDPjK2S+U58XZZVgyP1pRBNnlY+BN5oBtLI0jMp8nx6QI+NqmLqL5j F8gRhUCb46hfaKhCMgXNxPn026TJq/jAFNcWb8xfI4vtbUO3mkYxNqkftfllYsTb 8C6TDXAoaeEcfA== -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:46 2026 by rpki-client