This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft File: ERhPtlA6dgZX-QJw4naj_LULjo8.mft (raw, json) Hash identifier: BoXvrb3JHt47IE/LjiORBzWE6VkyZw3zTu3mdg7kXsA= Subject key identifier: AE:84:70:D8:A5:BA:5D:81:95:0A:15:F3:C8:05:57:86:9D:46:E2:6E Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F Certificate issuer: /CN=11184fb6503a760657f90270e276a3fcb50b8e8f Certificate serial: 019BF6BF54DF88CBA4F74613DB2F8979032A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 20:01:32 +0000 Manifest this update: Sun 25 Jan 2026 20:01:32 +0000 Manifest next update: Mon 26 Jan 2026 20:01:32 +0000 Files and hashes: 1: ERhPtlA6dgZX-QJw4naj_LULjo8.crl (hash: BRIRncS8czpcMsgbr3lqz4lh5JPNUCllHOH6ie6if88=) 2: I9hNFsiUppOM9VZIcAfH4qbXw_k.roa (hash: W4bc2pkEjBkLLPhivhIIPW+Vl4uMQLKBx8OjNwjL98A=) 3: lypKNyumbp3Rx5Ca8OfilFGC6co.roa (hash: 1pqIQQrSkAL4LQAupUembuigh5NslsCnzhntmGy1wNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:54:df:88:cb:a4:f7:46:13:db:2f:89:79:03:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f Validity Not Before: Jan 25 20:01:32 2026 GMT Not After : Jan 26 20:01:32 2026 GMT Subject: CN=ae8470d8a5ba5d81950a15f3c80557869d46e26e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8e:83:a5:ad:4b:d1:18:24:be:14:7f:e1:18: 05:69:0c:96:a3:b9:70:08:0c:f2:7b:95:73:6f:7c: bd:86:97:62:c4:8e:ca:cc:52:36:ce:7a:12:b0:62: 28:ec:bb:ee:4c:af:8b:ae:8e:ef:de:e3:ad:0a:4b: 8d:ee:e4:1c:c6:12:50:1d:2d:c8:35:c9:11:3a:d8: cf:65:53:dd:f0:7a:f3:bf:d1:8b:e8:d1:e9:ff:53: 65:c0:14:d9:5d:a0:58:6a:2c:02:28:ca:72:16:ff: 0f:2c:ba:98:a0:cc:3d:a0:5f:a6:04:6e:54:36:32: c8:56:0c:f7:ac:54:30:e1:64:2b:c5:f2:15:13:9e: 7b:d3:27:8c:fe:85:62:ba:4c:ea:8e:60:54:43:04: d5:33:da:2e:cb:c5:eb:07:df:be:bf:c1:03:ae:1e: a8:8c:5a:86:98:58:68:7a:f6:5b:8d:d6:8c:b2:98: 28:5e:e8:ff:5a:b8:55:20:54:51:98:b2:3b:12:26: 98:08:6c:eb:54:64:3e:f7:34:71:b6:cd:a0:ea:59: 54:6c:1e:8a:61:d8:eb:f8:5d:7c:41:49:c4:14:f5: 4a:90:9f:be:2f:2a:c2:8b:17:f5:24:cd:4c:c6:fa: 50:82:86:ca:2e:14:e5:9a:c1:f6:3e:af:96:93:e8: 55:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:84:70:D8:A5:BA:5D:81:95:0A:15:F3:C8:05:57:86:9D:46:E2:6E X509v3 Authority Key Identifier: keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ed:6f:5d:c0:9d:28:70:62:28:d8:ff:63:f1:b9:56:4f:8b: d0:f5:f7:ed:ac:17:d2:b3:ac:88:b4:96:ed:6d:1c:e7:2f:1b: f9:07:8f:ed:88:3e:38:ac:de:bc:56:09:06:00:93:42:fe:91: 9e:1e:a9:9a:35:bd:e1:78:db:e0:5b:40:be:af:47:6d:d4:00: dd:04:cb:4f:bc:9f:7d:83:b6:ab:a2:4d:03:36:20:9b:ed:d4: ee:7f:ca:e8:94:8d:73:07:f3:b2:94:15:e3:08:3f:60:c9:28: d9:59:c5:c7:ef:6e:f5:cc:ff:49:5a:1b:a4:d7:f1:ff:5c:0e: 0a:ef:02:85:f2:6a:ab:20:30:c9:e6:47:74:85:4b:ab:44:fa: 9e:fc:29:26:3f:ce:9c:5a:69:ac:0d:bb:1e:44:17:94:5a:b5: 0a:dd:f4:36:38:53:dd:d6:fd:7e:53:70:11:02:02:84:f0:12: dc:79:47:85:da:c9:98:15:25:85:bf:c1:8b:76:50:88:cc:d7: f2:63:b3:40:87:6d:2b:47:44:34:c1:e8:ca:04:40:75:e4:c6: d3:ce:da:68:f1:93:4c:ea:a2:95:b1:b9:05:6f:3a:00:52:fc: ab:37:46:bd:01:44:21:b1:82:e5:1c:e3:5e:d6:1f:d6:2b:b2: d1:14:15:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v1TfiMuk90YT2y+JeQMqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMTg0ZmI2NTAzYTc2MDY1N2Y5MDI3MGUyNzZhM2ZjYjUw YjhlOGYwHhcNMjYwMTI1MjAwMTMyWhcNMjYwMTI2MjAwMTMyWjAzMTEwLwYDVQQD EyhhZTg0NzBkOGE1YmE1ZDgxOTUwYTE1ZjNjODA1NTc4NjlkNDZlMjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY6Dpa1L0RgkvhR/4RgFaQyWo7lw CAzye5Vzb3y9hpdixI7KzFI2znoSsGIo7LvuTK+Lro7v3uOtCkuN7uQcxhJQHS3I NckROtjPZVPd8Hrzv9GL6NHp/1NlwBTZXaBYaiwCKMpyFv8PLLqYoMw9oF+mBG5U NjLIVgz3rFQw4WQrxfIVE5570yeM/oViukzqjmBUQwTVM9ouy8XrB9++v8EDrh6o jFqGmFhoevZbjdaMspgoXuj/WrhVIFRRmLI7EiaYCGzrVGQ+9zRxts2g6llUbB6K Ydjr+F18QUnEFPVKkJ++LyrCixf1JM1MxvpQgobKLhTlmsH2Pq+Wk+hVRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6EcNilul2BlQoV88gFV4adRuJuMB8GA1UdIwQY MBaAFBEYT7ZQOnYGV/kCcOJ2o/y1C46PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJoUHRsQTZkZ1pYLVFKdzRuYWpfTFVMam84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zM2E3MzMtZWYwNS00YWYwLTg1MzUt MTk2ZDY2NmQyYjJiLzEvRVJoUHRsQTZkZ1pYLVFKdzRuYWpfTFVMam84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8zM2E3MzMtZWYwNS00YWYwLTg1MzUtMTk2ZDY2NmQyYjJi LzEvRVJoUHRsQTZkZ1pYLVFKdzRuYWpfTFVMam84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhe1vXcCd KHBiKNj/Y/G5Vk+L0PX37awX0rOsiLSW7W0c5y8b+QeP7Yg+OKzevFYJBgCTQv6R nh6pmjW94Xjb4FtAvq9HbdQA3QTLT7yffYO2q6JNAzYgm+3U7n/K6JSNcwfzspQV 4wg/YMko2VnFx+9u9cz/SVobpNfx/1wOCu8ChfJqqyAwyeZHdIVLq0T6nvwpJj/O nFpprA27HkQXlFq1Ct30NjhT3db9flNwEQIChPAS3HlHhdrJmBUlhb/Bi3ZQiMzX 8mOzQIdtK0dENMHoygRAdeTG087aaPGTTOqilbG5BW86AFL8qzdGvQFEIbGC5Rzj XtYf1iuy0RQVWg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:40 2026 by rpki-client