This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft File: EgHMNDB0EC76fwww8pSZ4a1W4p8.mft (raw, json) Hash identifier: YWQ/ZweveyXpNdD5FkGwKwbxsvdLyqX22PthvV9hhI4= Subject key identifier: 5B:B0:6A:3A:F6:8C:F4:21:B2:2A:F7:DB:C8:0F:49:0A:2C:17:99:8E Authority key identifier: 12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F Certificate issuer: /CN=1201cc343074102efa7f0c30f29499e1ad56e29f Certificate serial: 019BF8E3BC952C55E5A902F661FC0160803D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 06:00:32 +0000 Manifest this update: Mon 26 Jan 2026 06:00:32 +0000 Manifest next update: Tue 27 Jan 2026 06:00:32 +0000 Files and hashes: 1: EgHMNDB0EC76fwww8pSZ4a1W4p8.crl (hash: puJLs+NNDp4jKzehu6KEScxd62A68captjRkJqf4Dnk=) 2: oWBB0iYZJX-W5I_Wzx5Yono3IMw.roa (hash: 9H05WgwG0IKa6fefs9ah5b21BWk+H446mxJWL3/+bmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e3:bc:95:2c:55:e5:a9:02:f6:61:fc:01:60:80:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1201cc343074102efa7f0c30f29499e1ad56e29f Validity Not Before: Jan 26 06:00:32 2026 GMT Not After : Jan 27 06:00:32 2026 GMT Subject: CN=5bb06a3af68cf421b22af7dbc80f490a2c17998e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f1:71:60:a8:26:e1:28:ae:f3:db:53:71:bc: 2c:f4:36:90:73:1d:33:00:c5:fb:11:17:0c:12:1c: 94:a9:93:a9:65:b6:cc:1b:a3:41:48:f0:58:44:80: dc:80:1e:25:c8:34:e7:a1:d6:36:e6:ec:9b:b7:bc: 1c:f6:a1:14:06:57:b1:4a:8c:f3:68:0b:fe:c7:b4: 76:84:34:e5:04:9e:fe:85:d1:16:64:69:e9:4d:47: 16:06:37:34:92:3a:64:34:4d:b3:3e:f9:2e:09:e4: 62:f0:6d:56:fe:c1:be:33:47:bf:cb:74:bb:11:cd: 5a:ea:f5:f7:82:f8:7f:5b:40:64:f2:d7:46:8a:30: 1f:be:e9:38:65:f3:46:06:17:18:50:7a:d2:56:56: 64:cd:b7:0b:49:1f:92:e6:1f:4c:3d:bb:a3:6c:82: aa:fa:56:f2:11:1f:41:1f:35:e2:b2:b4:01:2b:95: 9c:7d:37:f1:ab:c1:f8:04:eb:be:7c:dc:e0:1c:be: c8:ec:a5:5a:68:ea:13:68:54:fe:d2:42:56:15:aa: fd:e4:66:98:d5:69:17:68:d4:36:c0:b8:0f:d5:88: ee:ea:d3:65:52:5e:ac:c7:3d:81:14:b3:20:2d:e1: 42:80:4d:ff:61:3f:44:6c:df:19:29:32:2c:79:0a: 69:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B0:6A:3A:F6:8C:F4:21:B2:2A:F7:DB:C8:0F:49:0A:2C:17:99:8E X509v3 Authority Key Identifier: keyid:12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9b:8c:fe:1e:85:15:1f:f0:55:a9:94:3c:83:51:66:de:d2: c0:ea:a5:ba:b2:4d:80:32:43:7a:f7:87:6e:a6:e3:cb:0b:67: 7d:76:ee:05:c6:cd:2d:f6:10:d9:21:c4:0a:fc:b3:6d:24:70: b7:2f:10:85:ec:f2:0f:59:6e:a5:d1:25:a4:e9:13:32:e1:4d: 3f:57:cf:4f:30:73:94:96:d8:b3:c2:20:05:03:95:6e:d3:64: cc:76:5e:9d:b5:a5:03:c9:66:1b:d7:97:69:b2:cf:23:56:b2: bf:61:00:6d:85:4c:42:a1:51:f3:96:fe:cf:f3:23:5b:f7:78: 59:05:37:20:08:ae:ae:bb:ec:e9:6a:d6:af:c9:e1:95:3d:66: 16:b4:9a:91:a8:2b:bd:35:93:b6:eb:95:30:48:c0:33:07:e8: ef:29:5b:4c:64:87:78:73:25:c4:52:b3:7b:e5:f1:30:c2:79: ae:75:28:9c:c1:d9:cd:bf:ad:ce:e6:1d:7a:59:2f:31:ca:c5: 65:4a:6f:39:e9:01:ed:72:66:30:2b:83:69:f4:aa:d7:07:2f: 82:44:2f:1b:90:15:4f:65:e7:8d:04:26:70:9f:55:f4:ba:3c: 1a:80:ae:bf:ab:0b:cb:52:cb:73:d7:70:c4:4e:bc:7e:c1:6e: d1:91:dd:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv447yVLFXlqQL2YfwBYIA9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMDFjYzM0MzA3NDEwMmVmYTdmMGMzMGYyOTQ5OWUxYWQ1 NmUyOWYwHhcNMjYwMTI2MDYwMDMyWhcNMjYwMTI3MDYwMDMyWjAzMTEwLwYDVQQD Eyg1YmIwNmEzYWY2OGNmNDIxYjIyYWY3ZGJjODBmNDkwYTJjMTc5OThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvFxYKgm4Siu89tTcbws9DaQcx0z AMX7ERcMEhyUqZOpZbbMG6NBSPBYRIDcgB4lyDTnodY25uybt7wc9qEUBlexSozz aAv+x7R2hDTlBJ7+hdEWZGnpTUcWBjc0kjpkNE2zPvkuCeRi8G1W/sG+M0e/y3S7 Ec1a6vX3gvh/W0Bk8tdGijAfvuk4ZfNGBhcYUHrSVlZkzbcLSR+S5h9MPbujbIKq +lbyER9BHzXisrQBK5WcfTfxq8H4BOu+fNzgHL7I7KVaaOoTaFT+0kJWFar95GaY 1WkXaNQ2wLgP1Yju6tNlUl6sxz2BFLMgLeFCgE3/YT9EbN8ZKTIseQppMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFuwajr2jPQhsir328gPSQosF5mOMB8GA1UdIwQY MBaAFBIBzDQwdBAu+n8MMPKUmeGtVuKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWdITU5EQjBFQzc2Znd3dzhwU1o0YTFXNHA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kMTYyOGEtMzNjOC00ZTQ3LWJmZWQt OTllZDY3MzBmODRhLzEvRWdITU5EQjBFQzc2Znd3dzhwU1o0YTFXNHA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9kMTYyOGEtMzNjOC00ZTQ3LWJmZWQtOTllZDY3MzBmODRh LzEvRWdITU5EQjBFQzc2Znd3dzhwU1o0YTFXNHA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpuM/h6F FR/wVamUPINRZt7SwOqlurJNgDJDeveHbqbjywtnfXbuBcbNLfYQ2SHECvyzbSRw ty8QhezyD1lupdElpOkTMuFNP1fPTzBzlJbYs8IgBQOVbtNkzHZenbWlA8lmG9eX abLPI1ayv2EAbYVMQqFR85b+z/MjW/d4WQU3IAiurrvs6WrWr8nhlT1mFrSakagr vTWTtuuVMEjAMwfo7ylbTGSHeHMlxFKze+XxMMJ5rnUonMHZzb+tzuYdelkvMcrF ZUpvOekB7XJmMCuDafSq1wcvgkQvG5AVT2XnjQQmcJ9V9Lo8GoCuv6sLy1LLc9dw xE68fsFu0ZHdQw== -----END CERTIFICATE-----Generated at Mon Jan 26 14:25:37 2026 by rpki-client