This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft File: E-xHMfECwwzBPi-1p_l1jOqWNFI.mft (raw, json) Hash identifier: jL15KSvYOKFdlI6Gxkf7S3Gmymr7HdBFWyIhSQ6d+m0= Subject key identifier: 79:B6:CD:4B:98:43:C9:F9:9B:7F:66:52:36:C0:8A:9F:EE:9C:8F:8A Authority key identifier: 13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52 Certificate issuer: /CN=13ec4731f102c30cc13e2fb5a7f9758cea963452 Certificate serial: 019BF98968E139ECF5F31E82743549E5B546 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft Manifest number: 1528 Signing time: Mon 26 Jan 2026 09:01:30 +0000 Manifest this update: Mon 26 Jan 2026 09:01:30 +0000 Manifest next update: Tue 27 Jan 2026 09:01:30 +0000 Files and hashes: 1: E-xHMfECwwzBPi-1p_l1jOqWNFI.crl (hash: 7QzoZACR4s4IlwMF7vOpygS0GIYh/nmLBpm2uVzmX+E=) 2: EytAFLfPtvcTOd1_vf7gG34nqnY.roa (hash: OUuDIN625yK+1wDnIM653C5qwt6RgJbVBXW0c2PFte4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:89:68:e1:39:ec:f5:f3:1e:82:74:35:49:e5:b5:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13ec4731f102c30cc13e2fb5a7f9758cea963452 Validity Not Before: Jan 26 09:01:30 2026 GMT Not After : Jan 27 09:01:30 2026 GMT Subject: CN=79b6cd4b9843c9f99b7f665236c08a9fee9c8f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:53:e1:31:02:70:e0:23:86:0f:86:8e:98:6c: 20:4d:75:e1:21:c0:48:5f:8d:ec:45:ed:7f:09:73: cf:11:13:fe:c5:04:0c:61:8b:44:dd:cd:ae:80:86: d6:d4:bd:97:15:5e:a3:0d:3f:6d:61:3d:df:94:44: 02:5d:a5:9e:04:12:49:8e:88:e8:44:5e:17:c3:29: 23:6f:b8:56:32:b2:f6:b7:51:cb:3b:2b:70:9b:6f: a4:a5:e7:f7:56:7e:12:0f:d0:0e:f1:3c:22:a6:7f: b8:76:96:cc:b0:6f:76:59:d4:44:96:54:9e:27:71: 04:bf:53:8f:e6:71:6c:23:a1:84:fd:33:a5:82:d6: ea:92:ab:1d:89:64:18:7c:b9:b3:0b:5b:20:ce:d8: 70:6f:06:07:24:af:62:09:4c:79:cb:ba:83:dc:b9: 23:6e:5f:f3:5e:47:04:e7:ee:c2:d1:c2:17:c8:dc: b6:b2:78:13:99:ae:9e:cb:82:e4:e3:9d:0c:20:4e: 7b:83:01:fe:2f:03:a9:91:c8:47:26:10:fa:7a:57: cd:3c:cc:35:5c:9d:09:0b:29:a6:04:24:2f:72:d9: 0c:2a:fc:e8:b8:7c:8c:2d:18:5a:1f:93:ba:db:40: 9f:37:81:23:66:19:fe:45:ec:f2:f4:95:c1:35:a8: 68:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B6:CD:4B:98:43:C9:F9:9B:7F:66:52:36:C0:8A:9F:EE:9C:8F:8A X509v3 Authority Key Identifier: keyid:13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:d4:9e:8e:95:aa:73:a8:42:62:cd:87:69:83:23:5f:4f:0d: 58:1a:ea:ad:fd:0a:26:d7:5a:56:75:69:7d:4b:de:74:f6:f7: 5a:a0:f0:2f:71:03:85:ba:6d:2a:68:14:a1:13:e0:cd:79:56: 17:e2:94:b3:b0:15:59:97:60:cc:5b:6a:ba:51:7c:df:c4:22: 90:f2:42:27:39:30:66:ca:f9:56:2d:04:21:6d:89:1e:51:ee: 32:41:b3:c0:aa:21:66:19:fe:c7:66:72:d7:9e:06:3f:c6:08: 69:8b:e3:81:5d:5b:6f:a8:82:7b:23:22:47:3a:b4:93:6d:af: 9f:c3:6d:2c:be:47:82:37:98:d0:d8:b1:db:4d:50:e0:41:fa: 76:1d:fa:20:c1:5b:1e:9a:de:4d:82:e3:f2:0d:ba:a1:fa:36: d7:ac:dd:5e:b1:05:80:63:b8:f3:9a:bb:9e:07:3d:b4:d8:4b: fd:1b:bd:3e:23:7b:9a:12:f9:34:86:c3:ca:fd:62:72:76:05: 7f:f8:51:5e:91:0a:37:7b:ad:7b:43:a2:c5:d7:bb:c5:d1:f6: b4:38:98:48:bd:d1:ee:40:ab:a0:c8:60:5a:04:71:51:ff:90: 8c:85:0b:f2:e2:98:1b:b5:9c:bb:99:9a:3d:a4:98:17:ca:34: de:45:82:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iWjhOez18x6CdDVJ5bVGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZWM0NzMxZjEwMmMzMGNjMTNlMmZiNWE3Zjk3NThjZWE5 NjM0NTIwHhcNMjYwMTI2MDkwMTMwWhcNMjYwMTI3MDkwMTMwWjAzMTEwLwYDVQQD Eyg3OWI2Y2Q0Yjk4NDNjOWY5OWI3ZjY2NTIzNmMwOGE5ZmVlOWM4ZjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VPhMQJw4COGD4aOmGwgTXXhIcBI X43sRe1/CXPPERP+xQQMYYtE3c2ugIbW1L2XFV6jDT9tYT3flEQCXaWeBBJJjojo RF4Xwykjb7hWMrL2t1HLOytwm2+kpef3Vn4SD9AO8Twipn+4dpbMsG92WdREllSe J3EEv1OP5nFsI6GE/TOlgtbqkqsdiWQYfLmzC1sgzthwbwYHJK9iCUx5y7qD3Lkj bl/zXkcE5+7C0cIXyNy2sngTma6ey4Lk450MIE57gwH+LwOpkchHJhD6elfNPMw1 XJ0JCymmBCQvctkMKvzouHyMLRhaH5O620CfN4EjZhn+Rezy9JXBNaho2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHm2zUuYQ8n5m39mUjbAip/unI+KMB8GA1UdIwQY MBaAFBPsRzHxAsMMwT4vtaf5dYzqljRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS14SE1mRUN3d3pCUGktMXBfbDFqT3FXTkZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85ODJmMWQtNDEyMS00NmI1LWFkZDAt ZDQxYmNjOTI4Mzc1LzEvRS14SE1mRUN3d3pCUGktMXBfbDFqT3FXTkZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi85ODJmMWQtNDEyMS00NmI1LWFkZDAtZDQxYmNjOTI4Mzc1 LzEvRS14SE1mRUN3d3pCUGktMXBfbDFqT3FXTkZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmdSejpWq c6hCYs2HaYMjX08NWBrqrf0KJtdaVnVpfUvedPb3WqDwL3EDhbptKmgUoRPgzXlW F+KUs7AVWZdgzFtqulF838QikPJCJzkwZsr5Vi0EIW2JHlHuMkGzwKohZhn+x2Zy 154GP8YIaYvjgV1bb6iCeyMiRzq0k22vn8NtLL5HgjeY0Nix201Q4EH6dh36IMFb HpreTYLj8g26ofo216zdXrEFgGO485q7ngc9tNhL/Ru9PiN7mhL5NIbDyv1icnYF f/hRXpEKN3ute0Oixde7xdH2tDiYSL3R7kCroMhgWgRxUf+QjIUL8uKYG7Wcu5ma PaSYF8o03kWCVQ== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:46 2026 by rpki-client