This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft File: Emcb67isPjC118PSU3NXo7JUbVs.mft (raw, json) Hash identifier: ZN3Y7A5ZHKysR8r83kgqy5sivOtW+hb6eFUZeROuhcM= Subject key identifier: C9:F5:4F:5D:D9:89:D6:D8:6D:FA:02:25:58:15:E0:69:42:E3:CA:16 Authority key identifier: 12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B Certificate issuer: /CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b Certificate serial: 019BF6884928B69F62805DB9B16ADC15BE70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft Manifest number: 0724 Signing time: Sun 25 Jan 2026 19:01:25 +0000 Manifest this update: Sun 25 Jan 2026 19:01:25 +0000 Manifest next update: Mon 26 Jan 2026 19:01:25 +0000 Files and hashes: 1: Emcb67isPjC118PSU3NXo7JUbVs.crl (hash: ohwzeIxbpboQRvfg4TXMcbXfKzkwO4PvEXUBwCA5PUA=) 2: IbMGTXyTOTdiq2NpG4tVLW4bQtQ.roa (hash: j1uMtZdT3V+8GANHlpcXgXLtn7udaUVnpZ9J8VG0PMs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:49:28:b6:9f:62:80:5d:b9:b1:6a:dc:15:be:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b Validity Not Before: Jan 25 19:01:25 2026 GMT Not After : Jan 26 19:01:25 2026 GMT Subject: CN=c9f54f5dd989d6d86dfa02255815e06942e3ca16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e6:3b:d2:eb:e3:f9:10:54:80:28:6a:86:72: 36:a1:51:d1:13:a2:43:cc:24:91:be:ed:21:60:d3: 49:44:24:2f:09:8b:ab:ad:5b:ed:2c:96:12:88:06: 1f:9d:54:43:41:68:9f:10:38:64:40:80:0e:d1:46: ec:e3:00:68:c5:e1:bc:7b:51:42:4a:b0:5c:83:a9: 0e:f0:41:aa:14:ed:90:d7:25:d7:3f:d1:42:57:99: 73:f9:5a:18:90:1d:a4:6f:99:9e:ef:27:16:d8:b2: dd:d0:6f:66:e2:d8:6f:ca:ad:59:68:1c:ed:7c:3b: ff:e4:ee:d3:5b:91:a8:5d:4f:b1:56:09:59:8c:4f: 2e:ff:9a:b3:31:b6:40:91:51:d8:60:19:ce:b2:b1: 49:fb:a7:de:d4:23:b8:6c:17:23:70:a5:5b:04:42: 7e:73:af:f1:77:e2:60:1b:4d:2c:a7:4a:4d:38:ac: 04:10:9c:11:bb:77:5f:ee:91:36:74:4d:96:38:0d: 2f:5d:a3:af:12:2c:16:38:8c:bc:75:24:74:00:c2: 39:5c:df:f7:0a:97:60:cc:bd:a9:9d:25:88:b0:ce: 90:13:0f:5f:32:a0:ce:e6:15:73:14:36:09:b7:dc: 90:82:17:a5:cf:49:9d:b3:2a:d2:15:c7:53:df:b4: e2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F5:4F:5D:D9:89:D6:D8:6D:FA:02:25:58:15:E0:69:42:E3:CA:16 X509v3 Authority Key Identifier: keyid:12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:e0:01:99:78:c5:ae:7b:d0:ce:93:52:ea:f2:e5:31:27:d1: 4c:62:d9:0a:d4:40:50:97:89:3d:29:72:89:a5:7c:f4:56:4e: 05:de:1f:da:c1:a1:06:95:43:54:99:e5:6b:32:7c:3a:e7:18: 35:59:29:5f:e0:42:37:0c:bc:2f:0d:75:11:e6:68:c6:2f:fb: e5:57:48:49:82:fd:47:9c:5c:fc:bc:61:d4:51:09:a0:24:4d: f8:f2:29:6d:85:3d:79:d1:f9:dd:d0:79:93:a3:46:47:3c:15: 9e:7e:3e:a5:1a:76:24:82:fe:e7:2e:4b:2e:2a:5e:63:f8:6d: 0a:41:51:47:da:a8:d0:a6:fb:9b:58:51:b8:69:03:29:fc:32: 28:f4:25:64:3f:0d:1c:92:47:0a:55:aa:f6:01:45:77:30:88: ee:a0:b9:64:43:33:19:00:53:60:53:ec:42:82:8f:a0:06:a6: 8f:24:5d:03:1f:67:2a:63:e3:40:55:97:26:7e:ba:ef:7c:1c: 96:2d:5f:f7:c3:09:c6:6f:f8:76:f1:b3:02:3c:57:17:47:80: 86:43:df:00:bb:be:0d:f6:73:94:9b:5b:27:a4:6b:3a:12:8f: e3:c4:15:23:0b:99:be:ca:7e:54:64:26:f8:3c:3e:fc:55:65: c4:da:3d:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iEkotp9igF25sWrcFb5wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNjcxYmViYjhhYzNlMzBiNWQ3YzNkMjUzNzM1N2EzYjI1 NDZkNWIwHhcNMjYwMTI1MTkwMTI1WhcNMjYwMTI2MTkwMTI1WjAzMTEwLwYDVQQD EyhjOWY1NGY1ZGQ5ODlkNmQ4NmRmYTAyMjU1ODE1ZTA2OTQyZTNjYTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuY70uvj+RBUgChqhnI2oVHRE6JD zCSRvu0hYNNJRCQvCYurrVvtLJYSiAYfnVRDQWifEDhkQIAO0Ubs4wBoxeG8e1FC SrBcg6kO8EGqFO2Q1yXXP9FCV5lz+VoYkB2kb5me7ycW2LLd0G9m4thvyq1ZaBzt fDv/5O7TW5GoXU+xVglZjE8u/5qzMbZAkVHYYBnOsrFJ+6fe1CO4bBcjcKVbBEJ+ c6/xd+JgG00sp0pNOKwEEJwRu3df7pE2dE2WOA0vXaOvEiwWOIy8dSR0AMI5XN/3 CpdgzL2pnSWIsM6QEw9fMqDO5hVzFDYJt9yQghelz0mdsyrSFcdT37TiRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMn1T13ZidbYbfoCJVgV4GlC48oWMB8GA1UdIwQY MBaAFBJnG+u4rD4wtdfD0lNzV6OyVG1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNmE0NjctYmM5NS00MDVjLTg0ZWMt ZDQyODY5NzhhODBhLzEvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9iNmE0NjctYmM5NS00MDVjLTg0ZWMtZDQyODY5NzhhODBh LzEvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+ABmXjF rnvQzpNS6vLlMSfRTGLZCtRAUJeJPSlyiaV89FZOBd4f2sGhBpVDVJnlazJ8OucY NVkpX+BCNwy8Lw11EeZoxi/75VdISYL9R5xc/Lxh1FEJoCRN+PIpbYU9edH53dB5 k6NGRzwVnn4+pRp2JIL+5y5LLipeY/htCkFRR9qo0Kb7m1hRuGkDKfwyKPQlZD8N HJJHClWq9gFFdzCI7qC5ZEMzGQBTYFPsQoKPoAamjyRdAx9nKmPjQFWXJn6673wc li1f98MJxm/4dvGzAjxXF0eAhkPfALu+DfZzlJtbJ6RrOhKP48QVIwuZvsp+VGQm +Dw+/FVlxNo9lg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:52:30 2026 by rpki-client