This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft File: ewjhaHh0S4i4QgPu_i13qH2rkLE.mft (raw, json) Hash identifier: wQUMmk0F8K9QPrcJCrZF+2jy89neAk4ZsJHIpAO61Vc= Subject key identifier: EA:AD:79:CF:87:24:53:A6:39:D3:B5:C1:9A:D4:BB:1E:B8:26:10:88 Authority key identifier: 7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1 Certificate issuer: /CN=7b08e16878744b88b84203eefe2d77a87dab90b1 Certificate serial: 019BF6F5FA0859AFBC02471ED93DA3FB2AB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft Manifest number: 0F9F Signing time: Sun 25 Jan 2026 21:01:13 +0000 Manifest this update: Sun 25 Jan 2026 21:01:13 +0000 Manifest next update: Mon 26 Jan 2026 21:01:13 +0000 Files and hashes: 1: PZe_l2zeRWyfLBRsfc3_oZqnkBU.roa (hash: 4btrLU4Yp51Rk7dJr+hkTDUzW5uwF4yGfkuoF/u5R5U=) 2: ewjhaHh0S4i4QgPu_i13qH2rkLE.crl (hash: 9GRqaoWhcLyFubXGd1b/x7884Tcp4sqhyzgaXu2knU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:fa:08:59:af:bc:02:47:1e:d9:3d:a3:fb:2a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b08e16878744b88b84203eefe2d77a87dab90b1 Validity Not Before: Jan 25 21:01:13 2026 GMT Not After : Jan 26 21:01:13 2026 GMT Subject: CN=eaad79cf872453a639d3b5c19ad4bb1eb8261088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:31:72:1e:3e:c1:6e:c5:de:5c:d0:5a:a8:c5: 60:bb:13:5b:a1:47:0c:a8:67:ee:ec:f9:b0:ea:42: e9:3f:57:b8:e5:a6:e5:26:b5:af:71:02:8c:83:5d: e2:b3:59:fb:af:47:90:81:ba:29:1f:02:c6:3a:8b: b5:06:6e:00:2d:8c:15:bf:07:ac:e8:81:34:3e:8a: 22:c9:96:92:73:b7:b3:e8:13:46:bb:01:33:4e:34: 06:b0:79:83:ea:b5:f0:ff:59:5d:f2:55:6c:55:b1: 9e:b9:0e:4e:b0:df:5c:c7:c1:4a:95:46:51:28:82: 46:f4:c0:ea:4e:e9:28:82:d4:2c:fe:1f:b9:6b:e3: b6:d8:73:54:d3:35:2e:6e:f0:6d:3e:e9:b6:99:41: 60:08:c7:1f:aa:17:8d:4f:e7:05:ed:9d:98:c1:90: 7f:fe:3c:7e:f1:08:d7:77:62:4c:df:ef:7c:12:ad: b3:9c:e9:8b:a8:5f:9f:24:ef:99:b7:83:1f:32:16: cd:04:af:b1:b2:0f:4e:72:d9:a2:b1:ae:dd:61:9a: 44:f5:5b:8d:58:75:eb:dc:d0:1f:0b:6d:2f:ed:fb: 2b:57:2a:73:26:97:8b:b0:b2:d5:af:32:21:95:dc: f8:ad:7e:61:e4:c5:c7:9a:41:a6:70:34:e6:0c:2d: 30:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AD:79:CF:87:24:53:A6:39:D3:B5:C1:9A:D4:BB:1E:B8:26:10:88 X509v3 Authority Key Identifier: keyid:7B:08:E1:68:78:74:4B:88:B8:42:03:EE:FE:2D:77:A8:7D:AB:90:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewjhaHh0S4i4QgPu_i13qH2rkLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5ec794-1bb3-4c65-ac42-a18c06ec52e8/1/ewjhaHh0S4i4QgPu_i13qH2rkLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:56:4f:ac:fc:a4:d7:7f:9e:c4:10:f7:f8:7b:96:1b:8f:6d: e5:aa:09:b2:63:4b:c1:02:4b:ff:14:29:9e:97:04:d5:17:88: 93:6d:b6:08:48:bc:c6:65:74:cd:32:78:77:e8:3f:37:7c:82: 31:b4:96:5c:01:b4:9b:ad:32:d8:76:33:6c:f9:6e:e5:c6:e0: ad:74:fd:1d:c1:57:cb:21:e5:c5:6a:06:6e:97:93:9a:b3:cd: a9:62:63:f6:bc:a2:be:ed:85:4a:87:2c:f4:d1:3b:bf:6e:92: 53:66:91:17:23:0f:c4:67:f5:3a:6a:dc:49:74:2e:f8:f3:7a: 5e:0d:a3:ec:b5:5b:fc:53:b0:0a:e9:18:d9:f6:4f:25:05:dd: 07:30:31:86:b7:1b:de:79:6b:b3:a2:66:4e:0b:a5:9a:c3:5a: 71:32:d6:38:2d:97:d4:22:21:ad:b0:68:b3:01:05:17:18:c6: f6:18:27:8b:c1:c6:6d:d5:46:30:11:31:1c:72:0b:e1:f2:2f: c0:eb:45:b3:a3:97:f9:46:99:e2:69:88:27:dc:71:f2:0a:49: 2b:81:22:64:be:44:da:60:ce:60:8f:70:7e:0e:d8:67:b8:93: eb:3f:41:be:c0:78:e4:70:78:54:9f:68:85:d7:8f:40:74:7e: c7:81:e9:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29foIWa+8Akce2T2j+yqwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMDhlMTY4Nzg3NDRiODhiODQyMDNlZWZlMmQ3N2E4N2Rh YjkwYjEwHhcNMjYwMTI1MjEwMTEzWhcNMjYwMTI2MjEwMTEzWjAzMTEwLwYDVQQD EyhlYWFkNzljZjg3MjQ1M2E2MzlkM2I1YzE5YWQ0YmIxZWI4MjYxMDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDFyHj7BbsXeXNBaqMVguxNboUcM qGfu7Pmw6kLpP1e45ablJrWvcQKMg13is1n7r0eQgbopHwLGOou1Bm4ALYwVvwes 6IE0PooiyZaSc7ez6BNGuwEzTjQGsHmD6rXw/1ld8lVsVbGeuQ5OsN9cx8FKlUZR KIJG9MDqTukogtQs/h+5a+O22HNU0zUubvBtPum2mUFgCMcfqheNT+cF7Z2YwZB/ /jx+8QjXd2JM3+98Eq2znOmLqF+fJO+Zt4MfMhbNBK+xsg9Octmisa7dYZpE9VuN WHXr3NAfC20v7fsrVypzJpeLsLLVrzIhldz4rX5h5MXHmkGmcDTmDC0wmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqtec+HJFOmOdO1wZrUux64JhCIMB8GA1UdIwQY MBaAFHsI4Wh4dEuIuEID7v4td6h9q5CxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC81ZWM3OTQtMWJiMy00YzY1LWFjNDIt YTE4YzA2ZWM1MmU4LzEvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC81ZWM3OTQtMWJiMy00YzY1LWFjNDItYTE4YzA2ZWM1MmU4 LzEvZXdqaGFIaDBTNGk0UWdQdV9pMTNxSDJya0xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlZPrPyk 13+exBD3+HuWG49t5aoJsmNLwQJL/xQpnpcE1ReIk222CEi8xmV0zTJ4d+g/N3yC MbSWXAG0m60y2HYzbPlu5cbgrXT9HcFXyyHlxWoGbpeTmrPNqWJj9ryivu2FSocs 9NE7v26SU2aRFyMPxGf1OmrcSXQu+PN6Xg2j7LVb/FOwCukY2fZPJQXdBzAxhrcb 3nlrs6JmTgulmsNacTLWOC2X1CIhrbBoswEFFxjG9hgni8HGbdVGMBExHHIL4fIv wOtFs6OX+UaZ4mmIJ9xx8gpJK4EiZL5E2mDOYI9wfg7YZ7iT6z9BvsB45HB4VJ9o hdePQHR+x4HpHA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:46 2026 by rpki-client