This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft File: E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft (raw, json) Hash identifier: aVsftRgC0Z9+KvsYE1Y4DBNon8O3Am4tqGHFBwg4OTk= Subject key identifier: D5:EA:C0:DF:0F:1D:2D:96:3A:3B:3B:6C:36:FA:B1:BD:2C:DB:93:BD Authority key identifier: 13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56 Certificate issuer: /CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256 Certificate serial: 019BF462D97179411F7245ACF4F6306C0BC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft Manifest number: 0ECF Signing time: Sun 25 Jan 2026 09:01:17 +0000 Manifest this update: Sun 25 Jan 2026 09:01:17 +0000 Manifest next update: Mon 26 Jan 2026 09:01:17 +0000 Files and hashes: 1: E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl (hash: b5u1hpiJcu2bmdudJHubZJuzvOCW/7v+2JD0Pkh+Eac=) 2: sjVifTsqCFnPEPjh_BafeqtcnzE.roa (hash: U+Qobqemfwl34W+0l2bHf3Kc8qUqCwokA6NOdvQQ/0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:d9:71:79:41:1f:72:45:ac:f4:f6:30:6c:0b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256 Validity Not Before: Jan 25 09:01:17 2026 GMT Not After : Jan 26 09:01:17 2026 GMT Subject: CN=d5eac0df0f1d2d963a3b3b6c36fab1bd2cdb93bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fe:5b:dd:37:b6:1a:a8:93:11:e3:e8:78:60: d9:f2:0b:db:67:98:22:6e:db:b7:f2:80:72:b6:94: 14:8c:1c:f8:60:5e:e4:a1:1f:49:87:fb:f1:9a:84: 88:5e:cb:98:07:b8:dd:94:e2:41:b4:6a:de:c3:0e: 2d:50:9e:36:1b:75:4b:18:5e:fc:1b:be:dd:d9:f2: 40:91:62:52:a2:dd:bd:d8:1e:fc:e7:16:42:ae:53: e3:02:6b:b1:f6:b1:7c:d5:a6:58:7e:ed:71:71:34: e8:c4:3e:ff:0e:28:23:86:80:0d:97:2e:6e:b3:9b: 5c:68:e5:a5:76:d7:a7:7f:35:44:e1:e9:1f:30:de: 03:ee:71:19:ca:2b:d4:d5:ab:6c:84:20:5c:bf:ef: ce:a4:60:0d:d7:cb:fc:f0:96:29:a7:18:4b:ab:07: 6b:af:a4:d5:b0:4c:37:fd:d8:a2:03:fa:af:2e:84: 75:c6:6f:8c:a9:9f:7d:5b:05:a8:9a:85:86:08:46: f1:6c:c9:93:76:99:86:a0:64:20:1d:bd:c7:60:e9: ff:39:ca:31:53:ef:d9:e2:1c:03:af:bf:af:01:95: 7c:6e:51:09:3d:23:1c:b8:89:fc:fd:a1:eb:2a:b3: 8b:c6:ab:8c:a2:96:89:11:30:01:c2:4e:1e:62:85: 13:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:EA:C0:DF:0F:1D:2D:96:3A:3B:3B:6C:36:FA:B1:BD:2C:DB:93:BD X509v3 Authority Key Identifier: keyid:13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:a1:5e:c6:f5:b0:d3:5d:4b:44:e6:bc:05:c7:3a:42:eb:a3: 71:a4:8b:1c:e7:94:60:e2:1f:dc:09:07:5e:59:9b:a7:2e:d9: 8d:41:a2:ad:58:46:96:1d:91:bf:1d:84:06:38:79:00:d1:98: f6:cf:39:a3:7b:86:5a:9e:33:de:9e:57:e6:a4:e3:9d:26:1b: fd:5a:b2:b5:40:06:8b:82:bc:c4:14:37:35:4d:5c:83:44:5e: a0:c2:7b:45:2f:d2:f2:5b:c1:2b:2e:2f:e0:45:ae:3d:1e:02: 77:64:ee:08:a4:3e:7c:51:93:22:c2:4d:82:ef:9b:da:90:12: 7a:09:1e:51:73:f7:c0:11:8d:cc:db:59:88:d4:a8:ac:5b:58: 6f:4b:d0:b7:23:ba:2c:9e:31:49:97:8d:66:c5:43:a8:4f:05: ad:b8:70:e7:65:72:10:80:74:91:06:54:0b:26:c0:88:b4:c0: 92:76:84:82:e9:59:c8:28:86:10:46:d1:3c:a9:4b:57:9b:99: af:2a:6d:48:64:28:38:44:f3:57:3b:1d:ff:d1:fd:b7:68:77: 6e:2e:1c:6e:d1:7d:59:f9:58:40:21:66:15:fb:fc:af:e8:43: 39:dd:ae:37:92:06:7b:1a:a4:bf:28:e4:3d:8e:1d:0b:a3:dc: 3c:82:81:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YtlxeUEfckWs9PYwbAvEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNDZlMzAyNzZlMGM2MDNkMGRlZTJmMmQ0MmZjZDlhNDQx NWUyNTYwHhcNMjYwMTI1MDkwMTE3WhcNMjYwMTI2MDkwMTE3WjAzMTEwLwYDVQQD EyhkNWVhYzBkZjBmMWQyZDk2M2EzYjNiNmMzNmZhYjFiZDJjZGI5M2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP5b3Te2GqiTEePoeGDZ8gvbZ5gi btu38oBytpQUjBz4YF7koR9Jh/vxmoSIXsuYB7jdlOJBtGreww4tUJ42G3VLGF78 G77d2fJAkWJSot292B785xZCrlPjAmux9rF81aZYfu1xcTToxD7/DigjhoANly5u s5tcaOWldtenfzVE4ekfMN4D7nEZyivU1atshCBcv+/OpGAN18v88JYppxhLqwdr r6TVsEw3/diiA/qvLoR1xm+MqZ99WwWomoWGCEbxbMmTdpmGoGQgHb3HYOn/Ocox U+/Z4hwDr7+vAZV8blEJPSMcuIn8/aHrKrOLxquMopaJETABwk4eYoUT3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXqwN8PHS2WOjs7bDb6sb0s25O9MB8GA1UdIwQY MBaAFBNG4wJ24MYD0N7i8tQvzZpEFeJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ZWU0NjMtZjBhOC00ZmRiLThjODYt YzQzNzYyNzNhMmRmLzEvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80ZWU0NjMtZjBhOC00ZmRiLThjODYtYzQzNzYyNzNhMmRm LzEvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtaFexvWw 011LROa8Bcc6QuujcaSLHOeUYOIf3AkHXlmbpy7ZjUGirVhGlh2Rvx2EBjh5ANGY 9s85o3uGWp4z3p5X5qTjnSYb/VqytUAGi4K8xBQ3NU1cg0ReoMJ7RS/S8lvBKy4v 4EWuPR4Cd2TuCKQ+fFGTIsJNgu+b2pASegkeUXP3wBGNzNtZiNSorFtYb0vQtyO6 LJ4xSZeNZsVDqE8Frbhw52VyEIB0kQZUCybAiLTAknaEgulZyCiGEEbRPKlLV5uZ ryptSGQoOETzVzsd/9H9t2h3bi4cbtF9WflYQCFmFfv8r+hDOd2uN5IGexqkvyjk PY4dC6PcPIKBaw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:52:32 2026 by rpki-client