This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft File: EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft (raw, json) Hash identifier: w9DbOJ0gEKuw8UxDIAqs7uUUQGNyO2yNghCNHVLNovw= Subject key identifier: 14:D4:BC:F5:79:4E:34:C1:1A:69:D1:1C:B9:D8:A4:F0:CF:EF:1B:8B Authority key identifier: 11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4 Certificate issuer: /CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4 Certificate serial: 019BF763704EBEC8086705406549F6615F5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft Manifest number: 0A91 Signing time: Sun 25 Jan 2026 23:00:47 +0000 Manifest this update: Sun 25 Jan 2026 23:00:47 +0000 Manifest next update: Mon 26 Jan 2026 23:00:47 +0000 Files and hashes: 1: EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl (hash: sy6NAnd0ABYqgjUYnWb5GCjt9vVVteZvRwgFvBj2nCk=) 2: EZyVvJ5bgJq-P7qECfwi4jRgjOI.roa (hash: aArOh7D2m0R/tR8bRjsgJKmh1qSOBK7Sx7lK9wOrfn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:70:4e:be:c8:08:67:05:40:65:49:f6:61:5f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4 Validity Not Before: Jan 25 23:00:47 2026 GMT Not After : Jan 26 23:00:47 2026 GMT Subject: CN=14d4bcf5794e34c11a69d11cb9d8a4f0cfef1b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1f:7a:ee:5d:66:fd:5e:ff:31:95:96:9d:e2: f2:24:6e:98:8e:db:44:c2:71:e6:1b:35:78:e5:9d: c6:a4:54:37:12:4c:4f:d5:f3:77:62:b3:f7:a3:29: b3:84:15:fa:68:44:b7:4a:e7:c0:02:98:6a:cf:07: c9:f8:33:1c:32:ef:8f:78:41:72:ab:0c:3e:9e:9d: c1:96:dc:af:81:8d:c4:76:29:b9:21:8f:73:3a:b0: 19:77:43:f4:6b:74:a0:61:63:e3:9e:b3:82:e2:47: 7c:88:0e:89:8f:0d:68:3a:67:df:d5:25:96:96:3d: 26:c0:7b:63:92:be:6b:05:b9:7c:83:17:7d:c2:84: 5b:47:c9:79:6e:a5:7b:ec:37:f3:d3:a7:b9:46:e9: bd:c1:67:d1:32:39:8e:79:3e:8a:65:a6:14:ec:9e: 53:d0:bc:12:e0:97:66:ed:07:fe:b2:9e:93:97:99: bd:46:8a:4e:f5:a8:fe:72:57:51:d9:c4:49:b6:90: 7d:13:03:62:74:66:e7:e5:64:f2:d8:5c:18:e2:db: ab:43:7c:6f:42:24:8f:4d:28:37:05:4b:36:f8:d6: cf:04:47:9a:a5:5a:ac:7a:75:c7:85:37:79:90:42: 0c:f2:6a:b3:75:23:91:1a:20:ef:ae:82:1d:66:4b: 9b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D4:BC:F5:79:4E:34:C1:1A:69:D1:1C:B9:D8:A4:F0:CF:EF:1B:8B X509v3 Authority Key Identifier: keyid:11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:ea:70:d8:17:7a:eb:34:85:be:52:12:ff:57:54:37:0f:53: 9c:f2:3f:d4:4e:45:bc:e9:0a:70:70:24:54:ec:29:5a:3d:c1: a2:00:aa:ce:7d:61:a7:48:93:40:47:48:04:f8:1c:4f:a6:ac: b1:30:35:0e:7c:b0:74:fd:50:fd:c3:85:21:af:9a:c5:f3:ba: 3c:88:04:be:68:77:d8:4d:8b:77:7c:6c:5e:14:9a:8f:8b:aa: 00:89:d3:1c:e3:62:0f:3f:89:fa:ec:8b:8d:83:c5:39:36:87: 1b:d5:72:af:a7:80:52:c0:58:79:68:1e:7f:09:ac:40:e1:9d: b1:38:38:76:4f:86:a1:45:45:9d:7b:c6:28:04:d5:59:0d:50: 19:d0:e5:33:40:df:cf:cb:47:e9:cc:cd:e8:91:f7:b6:61:ed: 9c:72:10:e4:6e:75:48:75:78:31:db:0c:eb:20:06:af:a2:10: 79:91:1c:f9:34:29:45:67:aa:68:b1:7d:f2:1b:f4:af:a9:f4: 55:96:64:65:c6:f5:0d:b4:2b:04:fe:5b:d3:53:59:5c:c8:5d: 6e:94:38:14:2f:c9:19:9b:98:04:2a:c3:db:58:1c:68:21:77: ac:b1:0a:40:fd:e1:96:f7:58:1e:ea:fe:58:4a:77:09:4f:c1: c0:f5:2c:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y3BOvsgIZwVAZUn2YV9dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExODM2Y2NjMTkzNWFlYjk3ZDY3Y2I0NmJkZDBjNjEwN2Y4 NjEwZTQwHhcNMjYwMTI1MjMwMDQ3WhcNMjYwMTI2MjMwMDQ3WjAzMTEwLwYDVQQD EygxNGQ0YmNmNTc5NGUzNGMxMWE2OWQxMWNiOWQ4YTRmMGNmZWYxYjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR967l1m/V7/MZWWneLyJG6YjttE wnHmGzV45Z3GpFQ3EkxP1fN3YrP3oymzhBX6aES3SufAAphqzwfJ+DMcMu+PeEFy qww+np3BltyvgY3Edim5IY9zOrAZd0P0a3SgYWPjnrOC4kd8iA6Jjw1oOmff1SWW lj0mwHtjkr5rBbl8gxd9woRbR8l5bqV77Dfz06e5Rum9wWfRMjmOeT6KZaYU7J5T 0LwS4Jdm7Qf+sp6Tl5m9RopO9aj+cldR2cRJtpB9EwNidGbn5WTy2FwY4turQ3xv QiSPTSg3BUs2+NbPBEeapVqsenXHhTd5kEIM8mqzdSORGiDvroIdZkub0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTUvPV5TjTBGmnRHLnYpPDP7xuLMB8GA1UdIwQY MBaAFBGDbMwZNa65fWfLRr3QxhB/hhDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVlOc3pCazFycmw5Wjh0R3ZkREdFSC1HRU9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85NDBkODQtYTZiYS00MjE5LWFlMTEt NzQyN2Y1NDFiM2RmLzEvRVlOc3pCazFycmw5Wjh0R3ZkREdFSC1HRU9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85NDBkODQtYTZiYS00MjE5LWFlMTEtNzQyN2Y1NDFiM2Rm LzEvRVlOc3pCazFycmw5Wjh0R3ZkREdFSC1HRU9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1upw2Bd6 6zSFvlIS/1dUNw9TnPI/1E5FvOkKcHAkVOwpWj3BogCqzn1hp0iTQEdIBPgcT6as sTA1DnywdP1Q/cOFIa+axfO6PIgEvmh32E2Ld3xsXhSaj4uqAInTHONiDz+J+uyL jYPFOTaHG9Vyr6eAUsBYeWgefwmsQOGdsTg4dk+GoUVFnXvGKATVWQ1QGdDlM0Df z8tH6czN6JH3tmHtnHIQ5G51SHV4MdsM6yAGr6IQeZEc+TQpRWeqaLF98hv0r6n0 VZZkZcb1DbQrBP5b01NZXMhdbpQ4FC/JGZuYBCrD21gcaCF3rLEKQP3hlvdYHur+ WEp3CU/BwPUsyA== -----END CERTIFICATE-----Generated at Mon Jan 26 02:31:05 2026 by rpki-client