This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft File: ErFnS78NEY8lVPgMr9PvGznYrj8.mft (raw, json) Hash identifier: wAX4VtOpVoXKP1Mhv4bNksbE8LVGTTivBZWwca66AGc= Subject key identifier: 79:37:00:9C:8E:C4:32:7D:3F:49:78:3A:00:EB:DB:1D:ED:78:88:2B Authority key identifier: 12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F Certificate issuer: /CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f Certificate serial: 019BF87698B1B23583E1AAA7B0F281C34E6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft Manifest number: 086E Signing time: Mon 26 Jan 2026 04:01:20 +0000 Manifest this update: Mon 26 Jan 2026 04:01:20 +0000 Manifest next update: Tue 27 Jan 2026 04:01:20 +0000 Files and hashes: 1: 1-GMAx4cV6wCGu8QajPhkplgNOC0.roa (hash: dbmm9AGKkzXlCXgFEXZSu4+kBmd2ptn2wiUgb1Ww9ds=) 2: ErFnS78NEY8lVPgMr9PvGznYrj8.crl (hash: 3YISABDTPFWSx+7bb2s23CyiHV4zABl0u8Q0B76Pc18=) 3: T_9Nupq1QtdGed_iwoc4AH5rQ3A.roa (hash: u8SWNWsR1YqwiTS51c4B27JGvI8Gi01uv4oyKJW5qZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:98:b1:b2:35:83:e1:aa:a7:b0:f2:81:c3:4e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b1674bbf0d118f2554f80cafd3ef1b39d8ae3f Validity Not Before: Jan 26 04:01:20 2026 GMT Not After : Jan 27 04:01:20 2026 GMT Subject: CN=7937009c8ec4327d3f49783a00ebdb1ded78882b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0e:d4:e9:e3:52:b9:40:ce:55:e9:71:e5:17: 3b:ca:c1:6f:47:df:30:6c:fc:6b:d9:f1:62:72:74: 71:0b:99:5c:50:50:19:48:4b:d6:13:28:4f:be:1e: cb:3f:61:83:cd:11:8a:d9:6b:2c:06:a4:5f:d5:58: 88:94:46:2b:89:4f:73:70:56:fb:08:92:bc:e8:fe: 5e:82:f9:f2:e0:3c:3c:a4:ea:47:61:25:c9:a6:bb: ef:c6:51:69:ef:3a:db:89:56:3a:64:e1:04:65:48: d6:49:80:10:63:33:97:9a:9d:e7:b2:9c:77:7a:d1: 34:5c:f7:ef:61:ad:dc:aa:3d:c7:1b:a1:16:be:a6: 61:78:a2:da:85:71:17:0e:7f:6a:dd:9f:78:f8:b6: 44:33:1a:1a:bd:db:e8:c8:d6:6e:cf:6f:c2:92:2c: 0e:00:8c:d2:c0:d0:64:0c:eb:c1:c1:9e:11:7a:6b: 45:ad:05:7e:8b:53:a6:68:b2:fa:7a:35:43:e4:cc: f9:60:2d:56:44:ad:38:e9:48:e1:65:b5:65:9e:34: 13:70:53:22:2d:63:1a:1f:71:47:4d:11:23:92:af: 91:92:ad:27:61:36:5c:cc:3b:84:68:ff:9b:26:66: f0:65:a9:83:0d:4a:36:07:2a:5b:7e:9b:02:bb:26: 00:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:37:00:9C:8E:C4:32:7D:3F:49:78:3A:00:EB:DB:1D:ED:78:88:2B X509v3 Authority Key Identifier: keyid:12:B1:67:4B:BF:0D:11:8F:25:54:F8:0C:AF:D3:EF:1B:39:D8:AE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErFnS78NEY8lVPgMr9PvGznYrj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2399d2-8e24-48f2-be88-f371f98a753b/1/ErFnS78NEY8lVPgMr9PvGznYrj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:ca:de:b6:0e:c5:d1:d2:1f:89:35:7e:14:10:e2:df:63:b8: 03:1a:f7:31:85:20:60:c4:d1:67:3c:46:75:10:c1:0e:36:ab: 0b:90:f6:f5:62:b1:38:1b:63:03:ff:af:24:9f:49:3f:76:12: 80:26:ec:66:3c:b8:6c:b6:97:61:b0:ef:04:a7:a5:bc:ee:c3: da:6f:37:01:3b:d4:a9:c3:e0:e5:1f:e5:54:7c:1a:5b:9b:02: bc:4c:41:38:8d:bf:17:6c:7a:30:68:8c:1f:20:16:cf:e1:15: 6d:7f:3c:21:ba:b9:f2:53:f8:46:59:35:87:74:c0:5e:88:f6: 01:68:7e:9f:31:a3:22:61:2e:aa:6d:c5:b1:1d:61:3e:e7:f6: 82:fc:9e:f0:aa:f9:e1:31:36:34:96:90:98:a5:ce:16:75:26: c1:c7:68:27:36:52:35:57:c5:52:26:5e:26:87:d3:b9:53:06: 93:fb:c7:8f:d2:fb:59:3e:fd:b6:1e:c5:fa:88:03:89:cb:26: 41:06:40:17:af:79:58:98:13:ba:4a:56:3f:75:98:e8:cc:fb: 4d:b4:7b:72:9d:11:32:ba:18:65:f7:38:0b:ad:bd:79:4b:20: 86:3f:34:a4:8e:69:67:bd:1c:bf:c7:58:07:20:d7:d2:0a:ba: 73:f8:09:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dpixsjWD4aqnsPKBw05sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYjE2NzRiYmYwZDExOGYyNTU0ZjgwY2FmZDNlZjFiMzlk OGFlM2YwHhcNMjYwMTI2MDQwMTIwWhcNMjYwMTI3MDQwMTIwWjAzMTEwLwYDVQQD Eyg3OTM3MDA5YzhlYzQzMjdkM2Y0OTc4M2EwMGViZGIxZGVkNzg4ODJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ7U6eNSuUDOVelx5Rc7ysFvR98w bPxr2fFicnRxC5lcUFAZSEvWEyhPvh7LP2GDzRGK2WssBqRf1ViIlEYriU9zcFb7 CJK86P5egvny4Dw8pOpHYSXJprvvxlFp7zrbiVY6ZOEEZUjWSYAQYzOXmp3nspx3 etE0XPfvYa3cqj3HG6EWvqZheKLahXEXDn9q3Z94+LZEMxoavdvoyNZuz2/CkiwO AIzSwNBkDOvBwZ4RemtFrQV+i1OmaLL6ejVD5Mz5YC1WRK046UjhZbVlnjQTcFMi LWMaH3FHTREjkq+Rkq0nYTZczDuEaP+bJmbwZamDDUo2BypbfpsCuyYA2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHk3AJyOxDJ9P0l4OgDr2x3teIgrMB8GA1UdIwQY MBaAFBKxZ0u/DRGPJVT4DK/T7xs52K4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yMzk5ZDItOGUyNC00OGYyLWJlODgt ZjM3MWY5OGE3NTNiLzEvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8yMzk5ZDItOGUyNC00OGYyLWJlODgtZjM3MWY5OGE3NTNi LzEvRXJGblM3OE5FWThsVlBnTXI5UHZHem5Zcmo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApMretg7F 0dIfiTV+FBDi32O4Axr3MYUgYMTRZzxGdRDBDjarC5D29WKxOBtjA/+vJJ9JP3YS gCbsZjy4bLaXYbDvBKelvO7D2m83ATvUqcPg5R/lVHwaW5sCvExBOI2/F2x6MGiM HyAWz+EVbX88Ibq58lP4Rlk1h3TAXoj2AWh+nzGjImEuqm3FsR1hPuf2gvye8Kr5 4TE2NJaQmKXOFnUmwcdoJzZSNVfFUiZeJofTuVMGk/vHj9L7WT79th7F+ogDicsm QQZAF695WJgTukpWP3WY6Mz7TbR7cp0RMroYZfc4C629eUsghj80pI5pZ70cv8dY ByDX0gq6c/gJ2g== -----END CERTIFICATE-----Generated at Mon Jan 26 13:06:17 2026 by rpki-client