This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft File: eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft (raw, json) Hash identifier: nkSC+FitIFfzDFqJ5jOvB4a+J6tpOjEg391z2TZ8S7E= Subject key identifier: 0E:BB:A0:0D:7F:F3:D4:9F:EB:F2:06:5E:85:12:11:4E:DF:F4:0E:9F Authority key identifier: 78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B Certificate issuer: /CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b Certificate serial: 019BF8AD6A8B2A4A2EE4A1A796CE5E98A2FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft Manifest number: 1155 Signing time: Mon 26 Jan 2026 05:01:13 +0000 Manifest this update: Mon 26 Jan 2026 05:01:13 +0000 Manifest next update: Tue 27 Jan 2026 05:01:13 +0000 Files and hashes: 1: W6r1Xf359EvERdszO03c0jG6MG4.roa (hash: +gys/EXvyZnuR65b/K3TLTZ+N9R8n7uQdreEwOqoV6Q=) 2: eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl (hash: TEgxzge32Om7gXsuYIWhENFjJHfdZcoj9Yyn8Vm2Vac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:6a:8b:2a:4a:2e:e4:a1:a7:96:ce:5e:98:a2:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b Validity Not Before: Jan 26 05:01:13 2026 GMT Not After : Jan 27 05:01:13 2026 GMT Subject: CN=0ebba00d7ff3d49febf2065e8512114edff40e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b6:1f:65:a5:a4:2d:1a:45:ef:a3:61:b9:64: 16:f1:41:93:8a:0b:6b:87:45:77:64:49:67:f6:2c: cc:be:b4:0e:95:41:ba:58:99:11:6c:38:84:0d:76: 06:5d:3c:e1:31:32:7f:73:da:a7:d7:47:20:1a:b6: 7d:a6:a3:3d:f7:a1:f1:b1:33:56:df:76:86:0f:04: bc:c0:09:e4:20:10:1d:74:42:55:22:5c:b6:d1:75: e0:4c:e5:68:97:32:79:63:28:40:72:74:79:62:a4: 69:4f:2c:8b:18:95:5e:a4:ed:85:eb:09:d9:de:af: a1:e4:d4:4b:1d:d8:8d:24:0f:ec:4c:2b:a9:e0:46: a1:99:53:4b:48:f9:87:4f:0b:79:15:14:bb:d0:cb: ac:43:18:bb:7b:13:db:14:4e:20:dd:ae:33:88:37: 52:94:ed:ef:3d:be:cd:77:75:c9:32:62:fe:5b:c6: 03:ce:1b:ae:2d:08:7e:cb:18:54:cd:57:3b:51:94: 93:cd:26:f2:09:1e:10:e2:b8:ad:4c:ed:cc:3f:80: 3e:42:1c:73:bd:d0:97:1a:33:ce:c8:3d:cb:f1:03: fc:ee:6e:c3:b9:95:7c:5c:77:97:11:b5:4d:61:78: 37:c1:51:0d:ce:58:65:83:b0:0e:54:73:b2:f7:ab: 34:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BB:A0:0D:7F:F3:D4:9F:EB:F2:06:5E:85:12:11:4E:DF:F4:0E:9F X509v3 Authority Key Identifier: keyid:78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:5b:a9:f4:a1:3b:e1:7c:28:74:92:88:53:ca:71:e4:eb:1b: a1:0f:d3:1f:47:23:53:59:74:15:23:3f:32:1c:5c:c8:0f:71: 9c:2f:58:1c:de:db:9c:e1:8b:29:6e:04:1e:f0:f0:58:88:57: b3:f6:89:8c:18:ce:22:3b:b4:b9:98:18:f6:ae:92:5d:b5:71: 89:53:e0:4c:ae:8e:e8:c0:d2:93:7c:82:73:6d:50:69:39:ce: 3e:85:c4:a6:5f:e4:55:6d:34:49:b1:09:13:50:f1:c3:22:05: 08:9a:d5:fd:19:3d:60:f7:32:88:b8:6e:ed:c9:65:ee:d4:8e: ef:e3:d4:39:93:61:2f:81:46:f3:15:04:4c:e7:e1:6c:a2:c3: f0:4c:e6:17:cd:34:63:ec:dc:b7:1d:56:1e:b5:ec:4b:04:d2: 15:08:c2:0f:c6:ca:0b:fc:5c:34:e9:a2:f1:e9:87:f7:5f:32: c6:2a:ac:e8:40:b0:8a:e2:1d:66:9b:0f:3f:3a:cb:ac:b4:e5: 87:05:9a:38:c4:72:80:f3:6a:60:a9:df:cc:a1:c6:3a:4d:a8: 61:23:c8:31:1c:28:33:ac:b0:91:88:97:2a:28:5c:76:78:99: 8c:5c:b5:c9:9b:17:19:d2:a0:b9:c8:8a:69:02:a9:9d:f6:c6: 99:56:2d:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rWqLKkou5KGnls5emKL7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZmY4N2UyNjMzYmIyMzI4Njc1NGVjYTExZDgzYTYzYjhj M2RjMGIwHhcNMjYwMTI2MDUwMTEzWhcNMjYwMTI3MDUwMTEzWjAzMTEwLwYDVQQD EygwZWJiYTAwZDdmZjNkNDlmZWJmMjA2NWU4NTEyMTE0ZWRmZjQwZTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7YfZaWkLRpF76NhuWQW8UGTigtr h0V3ZEln9izMvrQOlUG6WJkRbDiEDXYGXTzhMTJ/c9qn10cgGrZ9pqM996HxsTNW 33aGDwS8wAnkIBAddEJVIly20XXgTOVolzJ5YyhAcnR5YqRpTyyLGJVepO2F6wnZ 3q+h5NRLHdiNJA/sTCup4EahmVNLSPmHTwt5FRS70MusQxi7exPbFE4g3a4ziDdS lO3vPb7Nd3XJMmL+W8YDzhuuLQh+yxhUzVc7UZSTzSbyCR4Q4ritTO3MP4A+Qhxz vdCXGjPOyD3L8QP87m7DuZV8XHeXEbVNYXg3wVENzlhlg7AOVHOy96s08wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA67oA1/89Sf6/IGXoUSEU7f9A6fMB8GA1UdIwQY MBaAFHj/h+JjO7IyhnVOyhHYOmO4w9wLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVAtSDRtTTdzaktHZFU3S0VkZzZZN2pEM0FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xMjkzZDEtZmM3Yi00YjA4LThjOWIt M2JiYWM0ZjVkOTM1LzEvZVAtSDRtTTdzaktHZFU3S0VkZzZZN2pEM0FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8xMjkzZDEtZmM3Yi00YjA4LThjOWItM2JiYWM0ZjVkOTM1 LzEvZVAtSDRtTTdzaktHZFU3S0VkZzZZN2pEM0FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFup9KE7 4XwodJKIU8px5OsboQ/TH0cjU1l0FSM/MhxcyA9xnC9YHN7bnOGLKW4EHvDwWIhX s/aJjBjOIju0uZgY9q6SXbVxiVPgTK6O6MDSk3yCc21QaTnOPoXEpl/kVW00SbEJ E1DxwyIFCJrV/Rk9YPcyiLhu7cll7tSO7+PUOZNhL4FG8xUETOfhbKLD8EzmF800 Y+zctx1WHrXsSwTSFQjCD8bKC/xcNOmi8emH918yxiqs6ECwiuIdZpsPPzrLrLTl hwWaOMRygPNqYKnfzKHGOk2oYSPIMRwoM6ywkYiXKihcdniZjFy1yZsXGdKguciK aQKpnfbGmVYtdw== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:23 2026 by rpki-client