This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft File: EwbHh497P12gkB3sdHOqIpFVbnI.mft (raw, json) Hash identifier: KxcSl0lmUnWlVF/xUtCH/IqTIOOSdwo783Cds2Ar8qo= Subject key identifier: 15:5F:51:AC:56:45:FB:8E:8C:40:5C:11:3A:C1:CB:39:00:B6:35:E2 Authority key identifier: 13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72 Certificate issuer: /CN=1306c7878f7b3f5da0901dec7473aa2291556e72 Certificate serial: 019BF61A3D6A6CF36F4E7B823537EF5EF9FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft Manifest number: 1779 Signing time: Sun 25 Jan 2026 17:01:13 +0000 Manifest this update: Sun 25 Jan 2026 17:01:13 +0000 Manifest next update: Mon 26 Jan 2026 17:01:13 +0000 Files and hashes: 1: EwbHh497P12gkB3sdHOqIpFVbnI.crl (hash: ruZj2UoFsSKdroONRdjx9rqo4TU42U0WBmaukyAYqrs=) 2: puAauCowFLGfgpH2sTlBVHLWBTc.roa (hash: 0G+aE9T8CvclKyxOZpNXpaee8LqEvJEggHfWPPQiT5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 17:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:3d:6a:6c:f3:6f:4e:7b:82:35:37:ef:5e:f9:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1306c7878f7b3f5da0901dec7473aa2291556e72 Validity Not Before: Jan 25 17:01:13 2026 GMT Not After : Jan 26 17:01:13 2026 GMT Subject: CN=155f51ac5645fb8e8c405c113ac1cb3900b635e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d9:4b:cc:3a:cb:92:cb:3e:6e:aa:d5:bc:fa: 7d:a6:2b:67:a1:a3:9b:ed:e0:25:33:dd:31:6b:af: 8f:f8:52:3f:33:8c:f7:de:b7:87:a2:66:36:dc:c0: c7:c6:03:b0:bb:fe:6b:90:fd:1a:49:60:b0:b4:6e: d0:61:41:2d:2e:69:c9:9a:3a:0c:dc:c8:88:72:dd: ee:b4:66:e8:2e:6a:16:53:78:be:84:d3:db:7c:3c: e9:06:bf:14:84:62:71:ea:8d:ff:2e:03:f5:b7:84: 4d:d4:0d:3f:41:9b:22:f4:5c:de:22:61:01:eb:16: 56:52:11:6c:74:94:3a:36:2d:c9:64:cd:6a:81:f0: a3:69:59:20:f1:c6:78:44:7b:bf:49:c3:b2:eb:53: cb:1d:15:33:68:d9:b8:7f:54:68:48:e4:11:18:a4: 5b:5a:33:b7:4f:73:a2:b4:e0:9d:55:4d:09:da:26: 20:7d:41:b2:d6:51:a9:c1:47:e1:3e:56:7c:4a:df: b4:ef:3c:cb:ed:11:6f:c9:fc:6f:7b:38:c4:49:22: e7:3e:78:4d:8e:00:c5:6c:9f:57:19:da:f5:04:14: 6a:4b:e4:ca:c6:32:fe:a4:7e:5e:fa:38:2a:e4:91: 04:24:ec:41:24:f8:81:a8:23:89:b7:5c:a1:42:ec: 7a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5F:51:AC:56:45:FB:8E:8C:40:5C:11:3A:C1:CB:39:00:B6:35:E2 X509v3 Authority Key Identifier: keyid:13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:de:72:f3:e6:12:a3:c9:af:26:8b:e2:0b:43:e0:f5:9e:98: 06:02:83:70:cc:5f:c1:00:ae:d9:6e:df:ef:44:59:fd:7b:cd: 9d:7d:0e:8c:e3:88:e5:36:06:e2:36:b4:05:24:92:ad:f6:97: 9e:e7:8e:89:66:3a:b2:6b:f6:81:80:7b:85:a9:70:40:b1:b4: ac:f3:8e:d2:5a:d4:e3:a8:b1:f9:39:99:e0:f4:37:13:fc:5e: ae:8f:cf:4f:eb:be:a7:41:74:94:dd:59:f4:cc:db:9a:0f:3c: 52:12:6f:11:e1:90:7e:1f:3e:a6:0c:dd:e3:e1:00:d1:c7:c8: 33:66:c9:c9:72:f8:dd:c9:b4:4a:1e:77:d2:29:dd:c9:00:1e: c5:b6:7f:d4:ce:37:eb:90:af:ae:16:38:13:0c:51:b2:2a:f2: 05:e2:6d:a2:73:ae:4e:88:ac:f5:3e:32:69:9b:3c:9b:27:d2: 1b:32:cd:36:71:48:ee:c9:79:3d:f8:9f:d7:66:92:e3:d9:48: 15:ab:bb:87:58:a7:c5:45:81:af:12:01:d8:53:c2:61:b9:6e: c2:1e:ef:47:18:1f:02:07:7d:2f:be:ad:5f:72:d6:fa:71:e8: 59:ec:6f:4f:7d:d0:a1:14:5b:2c:eb:e6:51:66:4c:db:19:3d: a0:23:dd:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Gj1qbPNvTnuCNTfvXvn/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMDZjNzg3OGY3YjNmNWRhMDkwMWRlYzc0NzNhYTIyOTE1 NTZlNzIwHhcNMjYwMTI1MTcwMTEzWhcNMjYwMTI2MTcwMTEzWjAzMTEwLwYDVQQD EygxNTVmNTFhYzU2NDVmYjhlOGM0MDVjMTEzYWMxY2IzOTAwYjYzNWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdlLzDrLkss+bqrVvPp9pitnoaOb 7eAlM90xa6+P+FI/M4z33reHomY23MDHxgOwu/5rkP0aSWCwtG7QYUEtLmnJmjoM 3MiIct3utGboLmoWU3i+hNPbfDzpBr8UhGJx6o3/LgP1t4RN1A0/QZsi9FzeImEB 6xZWUhFsdJQ6Ni3JZM1qgfCjaVkg8cZ4RHu/ScOy61PLHRUzaNm4f1RoSOQRGKRb WjO3T3OitOCdVU0J2iYgfUGy1lGpwUfhPlZ8St+07zzL7RFvyfxvezjESSLnPnhN jgDFbJ9XGdr1BBRqS+TKxjL+pH5e+jgq5JEEJOxBJPiBqCOJt1yhQux6xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVfUaxWRfuOjEBcETrByzkAtjXiMB8GA1UdIwQY MBaAFBMGx4ePez9doJAd7HRzqiKRVW5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXdiSGg0OTdQMTJna0Izc2RIT3FJcEZWYm5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jMWQ0MjUtZGUwMy00ZWJlLWI2NTIt ZGEzNGZjYjdiOTQyLzEvRXdiSGg0OTdQMTJna0Izc2RIT3FJcEZWYm5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9jMWQ0MjUtZGUwMy00ZWJlLWI2NTItZGEzNGZjYjdiOTQy LzEvRXdiSGg0OTdQMTJna0Izc2RIT3FJcEZWYm5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA095y8+YS o8mvJoviC0Pg9Z6YBgKDcMxfwQCu2W7f70RZ/XvNnX0OjOOI5TYG4ja0BSSSrfaX nueOiWY6smv2gYB7halwQLG0rPOO0lrU46ix+TmZ4PQ3E/xero/PT+u+p0F0lN1Z 9Mzbmg88UhJvEeGQfh8+pgzd4+EA0cfIM2bJyXL43cm0Sh530indyQAexbZ/1M43 65CvrhY4EwxRsiryBeJtonOuTois9T4yaZs8myfSGzLNNnFI7sl5Pfif12aS49lI Fau7h1inxUWBrxIB2FPCYbluwh7vRxgfAgd9L76tX3LW+nHoWexvT33QoRRbLOvm UWZM2xk9oCPdqw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:50 2026 by rpki-client