This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft File: EzSVRauL_SZSc-jUhDuYvwtBSPI.mft (raw, json) Hash identifier: FRD/1zEKOmoQ7C1bqh/ER/jpQtPLvojtq0SSAyg9qBk= Subject key identifier: 3C:62:0B:0D:62:23:3F:39:94:15:E6:21:83:AD:38:5A:01:34:2A:4E Authority key identifier: 13:34:95:45:AB:8B:FD:26:52:73:E8:D4:84:3B:98:BF:0B:41:48:F2 Certificate issuer: /CN=13349545ab8bfd265273e8d4843b98bf0b4148f2 Certificate serial: 019BF6F5BA9498BF8E98CD5CA91CD9C4CC00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzSVRauL_SZSc-jUhDuYvwtBSPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 21:00:57 +0000 Manifest this update: Sun 25 Jan 2026 21:00:57 +0000 Manifest next update: Mon 26 Jan 2026 21:00:57 +0000 Files and hashes: 1: EzSVRauL_SZSc-jUhDuYvwtBSPI.crl (hash: yBaZ9Dxr6zi01wj7NiuUFmOYlAcnSv9JrPW6MVdIdy0=) 2: uynZ3jgCdHPAcePQynfxjEPAeXY.roa (hash: rhvew1e/Vbfk2rGbsdSlPPP6ecsRbphOEm/BmlJmkO4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.crl rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft rsync://rpki.ripe.net/repository/DEFAULT/EzSVRauL_SZSc-jUhDuYvwtBSPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:ba:94:98:bf:8e:98:cd:5c:a9:1c:d9:c4:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13349545ab8bfd265273e8d4843b98bf0b4148f2 Validity Not Before: Jan 25 21:00:57 2026 GMT Not After : Jan 26 21:00:57 2026 GMT Subject: CN=3c620b0d62233f399415e62183ad385a01342a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:94:d1:08:15:ce:9a:a9:f1:35:ab:09:39:28: eb:9c:58:c9:ff:5a:61:b9:7c:00:a4:d2:9e:28:8c: 73:66:8f:fb:84:d1:f9:3d:23:47:bb:89:ca:f5:18: 88:4d:77:26:83:99:24:0f:5b:95:48:df:32:2e:6c: 9a:55:29:a4:a8:a8:de:4a:14:a9:1c:d2:46:94:ca: 07:c5:41:1d:da:90:b3:e1:da:53:2d:2d:74:38:2f: 47:91:c3:68:cf:5a:32:35:31:8d:a9:d5:56:7f:a7: e6:57:89:a6:5a:e8:30:d6:bc:32:14:19:bb:91:74: 84:61:5f:50:b0:25:ff:b5:33:aa:55:a9:c7:20:43: 3a:5e:6f:43:ba:d4:f7:19:7e:63:01:aa:8e:94:7f: 55:63:60:f2:21:19:d5:c3:66:46:49:a9:7e:1a:06: a3:d6:c1:34:35:5b:81:58:84:63:6b:f1:ca:29:95: 87:e9:a6:41:fd:2f:cd:cb:cc:31:c3:66:ee:2b:e4: 84:12:9d:4d:85:ef:f4:30:d2:56:e4:dc:bb:66:9e: 1c:8f:91:2f:da:67:a4:6b:a9:03:31:c3:07:fc:61: d6:a0:ed:d3:db:9e:f2:02:15:bd:6b:41:c2:49:bb: bd:15:71:be:1e:b6:23:fa:88:2c:1e:89:e8:34:3e: cf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:62:0B:0D:62:23:3F:39:94:15:E6:21:83:AD:38:5A:01:34:2A:4E X509v3 Authority Key Identifier: keyid:13:34:95:45:AB:8B:FD:26:52:73:E8:D4:84:3B:98:BF:0B:41:48:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzSVRauL_SZSc-jUhDuYvwtBSPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:9b:23:2b:e1:12:e6:f9:20:4d:0a:71:6b:90:63:0d:74:fa: e0:67:f5:1b:77:00:c3:32:a5:a6:67:3a:80:80:e4:25:68:da: 6f:d5:36:11:d5:cd:2f:1a:77:53:9f:a1:7d:43:38:c1:27:d7: 99:95:84:06:aa:a8:4c:63:df:91:26:aa:a7:12:27:e4:e4:33: b2:12:1f:06:ef:4f:5e:e2:6a:78:88:8c:19:0d:e7:ff:6f:1f: 60:3e:9f:e3:d3:2c:cc:00:f3:68:06:49:52:41:c0:98:7a:71: fb:bf:9a:bc:e5:5b:18:df:66:22:b8:1e:9d:5e:f8:ca:f5:95: cf:52:42:7a:bf:77:08:13:85:7d:a8:ed:f7:b1:c8:74:16:b8: af:8d:c2:b7:bd:fd:02:2e:ba:7d:18:df:ed:73:fc:bf:d1:1e: 67:00:23:da:0b:1c:54:6f:0d:ff:23:02:fe:27:aa:a4:fe:79: 45:cb:32:e0:fd:e9:9c:9f:29:69:07:0a:cb:bb:0d:62:4a:17: 9e:d2:8a:65:83:97:25:b9:46:87:48:08:7c:92:e5:52:8b:0a: 1c:f0:42:d1:12:b1:bb:55:99:87:98:8d:b0:02:25:22:07:48: aa:8b:c6:c3:a6:11:b0:a3:86:f5:39:41:c5:4a:d7:2a:a8:c0: 5b:41:5e:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29bqUmL+OmM1cqRzZxMwAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMzQ5NTQ1YWI4YmZkMjY1MjczZThkNDg0M2I5OGJmMGI0 MTQ4ZjIwHhcNMjYwMTI1MjEwMDU3WhcNMjYwMTI2MjEwMDU3WjAzMTEwLwYDVQQD EygzYzYyMGIwZDYyMjMzZjM5OTQxNWU2MjE4M2FkMzg1YTAxMzQyYTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJTRCBXOmqnxNasJOSjrnFjJ/1ph uXwApNKeKIxzZo/7hNH5PSNHu4nK9RiITXcmg5kkD1uVSN8yLmyaVSmkqKjeShSp HNJGlMoHxUEd2pCz4dpTLS10OC9HkcNoz1oyNTGNqdVWf6fmV4mmWugw1rwyFBm7 kXSEYV9QsCX/tTOqVanHIEM6Xm9DutT3GX5jAaqOlH9VY2DyIRnVw2ZGSal+Ggaj 1sE0NVuBWIRja/HKKZWH6aZB/S/Ny8wxw2buK+SEEp1Nhe/0MNJW5Ny7Zp4cj5Ev 2meka6kDMcMH/GHWoO3T257yAhW9a0HCSbu9FXG+HrYj+ogsHonoND7PHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxiCw1iIz85lBXmIYOtOFoBNCpOMB8GA1UdIwQY MBaAFBM0lUWri/0mUnPo1IQ7mL8LQUjyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXpTVlJhdUxfU1pTYy1qVWhEdVl2d3RCU1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8xNzUyNjAtOGY5YS00YjdmLWIwMTEt NGMyNjQ3YTU4OTY3LzEvRXpTVlJhdUxfU1pTYy1qVWhEdVl2d3RCU1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS8xNzUyNjAtOGY5YS00YjdmLWIwMTEtNGMyNjQ3YTU4OTY3 LzEvRXpTVlJhdUxfU1pTYy1qVWhEdVl2d3RCU1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZsjK+ES 5vkgTQpxa5BjDXT64Gf1G3cAwzKlpmc6gIDkJWjab9U2EdXNLxp3U5+hfUM4wSfX mZWEBqqoTGPfkSaqpxIn5OQzshIfBu9PXuJqeIiMGQ3n/28fYD6f49MszADzaAZJ UkHAmHpx+7+avOVbGN9mIrgenV74yvWVz1JCer93CBOFfajt97HIdBa4r43Ct739 Ai66fRjf7XP8v9EeZwAj2gscVG8N/yMC/ieqpP55Rcsy4P3pnJ8paQcKy7sNYkoX ntKKZYOXJblGh0gIfJLlUosKHPBC0RKxu1WZh5iNsAIlIgdIqovGw6YRsKOG9TlB xUrXKqjAW0FeWw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:19:18 2026 by rpki-client