This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft File: eSMEzs5_tlUdYh4ld0N1PX0-fro.mft (raw, json) Hash identifier: Tvbfk7PkZ1m+t1N6PNA6twAgNwMnhSRi9gaZ3B6+fh8= Subject key identifier: 32:33:20:E0:4B:DD:1A:C9:43:78:76:64:15:25:26:B9:32:6C:96:03 Authority key identifier: 79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA Certificate issuer: /CN=792304cece7fb6551d621e257743753d7d3e7eba Certificate serial: 019BF8E4679389DE427C17988A1C3A2FCE5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft Manifest number: 152F Signing time: Mon 26 Jan 2026 06:01:16 +0000 Manifest this update: Mon 26 Jan 2026 06:01:16 +0000 Manifest next update: Tue 27 Jan 2026 06:01:16 +0000 Files and hashes: 1: Gk0VdZH80LfuSionJyzH6apHdMk.roa (hash: v8qmy5Rl4qBq/+q1ZOoFGDMALQWTll59ihxVCNxLx/c=) 2: eSMEzs5_tlUdYh4ld0N1PX0-fro.crl (hash: /QWowNMRZ8hfePZSR1+oXuWL4/z4D0Bx+6fQjolq/Ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:67:93:89:de:42:7c:17:98:8a:1c:3a:2f:ce:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=792304cece7fb6551d621e257743753d7d3e7eba Validity Not Before: Jan 26 06:01:16 2026 GMT Not After : Jan 27 06:01:16 2026 GMT Subject: CN=323320e04bdd1ac943787664152526b9326c9603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:47:d4:fb:6d:3b:59:27:34:48:63:56:bb:cd: f0:1f:a9:09:09:a1:44:5c:db:2a:7f:0c:a7:ca:af: 47:7c:99:2b:91:ff:63:28:b4:f8:24:45:d7:db:fd: e4:d8:23:59:e9:bb:af:ce:d7:d5:0e:52:21:e9:bc: 36:b5:32:0f:40:d4:2c:a0:8c:93:43:c3:d8:ca:7d: 3c:ae:5e:74:24:18:44:f3:4a:dc:5e:8f:09:02:7c: 0f:15:aa:2b:e9:66:f2:97:a4:89:61:fe:94:c6:d9: 3f:a9:08:49:7f:fa:c0:8c:0a:35:51:46:12:37:ae: 7a:16:43:48:c9:9e:ff:3a:8a:47:28:66:46:11:92: 70:08:62:a5:ef:84:6a:98:f6:8b:51:cb:b1:f3:44: 4f:04:d0:37:a1:27:ee:bb:74:b5:08:08:07:0e:bd: b3:39:dd:aa:13:2d:48:e3:44:f8:14:57:2f:45:39: 1f:91:f9:9b:ab:56:fb:3c:d0:b7:42:bd:ea:23:c1: 00:f2:f8:1d:35:55:ec:08:6b:ad:b1:b8:f6:06:4d: 9b:8b:97:a7:e3:e6:b0:14:31:1c:c9:51:9a:8b:15: 5a:0f:1f:2b:6d:aa:e8:98:c2:e7:cd:02:e2:fe:bc: 3c:36:f0:6b:6a:a0:12:f2:10:03:e1:49:a2:05:55: 14:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:33:20:E0:4B:DD:1A:C9:43:78:76:64:15:25:26:B9:32:6C:96:03 X509v3 Authority Key Identifier: keyid:79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:58:ae:4d:b5:e4:37:a6:e9:f3:d6:28:31:08:e6:33:68:eb: 83:57:a2:58:6a:60:75:be:5a:83:e4:4a:e1:b0:f9:07:a1:13: e1:29:8b:d4:b2:b7:c5:ff:f5:08:ea:30:f8:60:6e:d9:02:69: a5:39:f1:d3:62:0b:47:0a:41:0e:d4:85:25:d7:e0:04:47:c9: 0f:88:c3:85:d3:cb:ae:4c:f6:d2:d8:a4:7e:c8:24:72:ba:b2: 1b:52:f9:57:be:7f:b5:03:94:06:8a:d5:32:f3:a8:f3:6a:5c: 0e:a4:e3:4c:0d:50:20:eb:22:ef:89:15:84:5e:20:82:0d:ff: 9d:b2:48:d0:78:49:cd:6d:a4:97:4c:83:8d:f1:a8:d8:b0:90: 76:9b:74:57:37:55:7d:f7:ac:86:85:4a:43:97:6d:06:21:57: 61:b8:9a:5c:d8:84:9b:dd:5f:c4:fc:9d:e3:26:65:0e:ff:50: d9:68:50:39:5a:48:d4:2d:ba:5d:88:7c:7a:54:82:d1:84:e3: 38:1f:84:93:6b:80:30:e0:5e:6a:48:4f:6f:93:3e:0f:8d:02: d2:2b:38:48:2b:21:ad:70:5a:ef:07:aa:d0:0c:50:84:8a:58: d2:5b:35:dc:dd:c6:76:40:48:e7:e2:0b:8d:14:dc:56:92:1b: d5:e2:d7:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45GeTid5CfBeYihw6L85aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MjMwNGNlY2U3ZmI2NTUxZDYyMWUyNTc3NDM3NTNkN2Qz ZTdlYmEwHhcNMjYwMTI2MDYwMTE2WhcNMjYwMTI3MDYwMTE2WjAzMTEwLwYDVQQD EygzMjMzMjBlMDRiZGQxYWM5NDM3ODc2NjQxNTI1MjZiOTMyNmM5NjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0fU+207WSc0SGNWu83wH6kJCaFE XNsqfwynyq9HfJkrkf9jKLT4JEXX2/3k2CNZ6buvztfVDlIh6bw2tTIPQNQsoIyT Q8PYyn08rl50JBhE80rcXo8JAnwPFaor6Wbyl6SJYf6Uxtk/qQhJf/rAjAo1UUYS N656FkNIyZ7/OopHKGZGEZJwCGKl74RqmPaLUcux80RPBNA3oSfuu3S1CAgHDr2z Od2qEy1I40T4FFcvRTkfkfmbq1b7PNC3Qr3qI8EA8vgdNVXsCGutsbj2Bk2bi5en 4+awFDEcyVGaixVaDx8rbaromMLnzQLi/rw8NvBraqAS8hAD4UmiBVUUVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIzIOBL3RrJQ3h2ZBUlJrkybJYDMB8GA1UdIwQY MBaAFHkjBM7Of7ZVHWIeJXdDdT19Pn66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVNNRXpzNV90bFVkWWg0bGQwTjFQWDAtZnJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9lODRiNWQtMzUxMS00NGU5LTkyNjEt ZWQ4MmFlN2RiZDU5LzEvZVNNRXpzNV90bFVkWWg0bGQwTjFQWDAtZnJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9lODRiNWQtMzUxMS00NGU5LTkyNjEtZWQ4MmFlN2RiZDU5 LzEvZVNNRXpzNV90bFVkWWg0bGQwTjFQWDAtZnJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1iuTbXk N6bp89YoMQjmM2jrg1eiWGpgdb5ag+RK4bD5B6ET4SmL1LK3xf/1COow+GBu2QJp pTnx02ILRwpBDtSFJdfgBEfJD4jDhdPLrkz20tikfsgkcrqyG1L5V75/tQOUBorV MvOo82pcDqTjTA1QIOsi74kVhF4ggg3/nbJI0HhJzW2kl0yDjfGo2LCQdpt0VzdV ffeshoVKQ5dtBiFXYbiaXNiEm91fxPyd4yZlDv9Q2WhQOVpI1C26XYh8elSC0YTj OB+Ek2uAMOBeakhPb5M+D40C0is4SCshrXBa7weq0AxQhIpY0ls13N3GdkBI5+IL jRTcVpIb1eLXiQ== -----END CERTIFICATE-----Generated at Mon Jan 26 13:03:03 2026 by rpki-client