This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft File: EiDdK5LaKExjzsRvb2pBwBOpyIE.mft (raw, json) Hash identifier: s2kPG9rD0PkBoR6SELwI/8XYPEFBsP54brqDC2FygLA= Subject key identifier: 3F:D7:D1:67:BB:9C:02:49:94:83:EA:61:2E:6B:81:89:77:F6:12:E9 Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81 Certificate issuer: /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881 Certificate serial: 019BF4D0696A2945A1F63DA469134ECDCB76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft Manifest number: 10DE Signing time: Sun 25 Jan 2026 11:00:57 +0000 Manifest this update: Sun 25 Jan 2026 11:00:57 +0000 Manifest next update: Mon 26 Jan 2026 11:00:57 +0000 Files and hashes: 1: EiDdK5LaKExjzsRvb2pBwBOpyIE.crl (hash: B2B4UTcWErE49pfdQQOApgmf0dAMfjd7Kq2wsmoQAy4=) 2: M1xpquK399A5wByDEtKHq_wqClk.roa (hash: zVgRyEKABrkhckv/3fAzW08qm0hqJsbaTBszAR7kayA=) 3: kkk3yXE8XoIEDRsGs9EdkpoqcD8.roa (hash: k6wchoXLvZ9SOEunorfauAloLI47oJBy9bourGp1I0s=) 4: muPGRcmARPddaHREVLuAaLLzFEM.roa (hash: 8DfdChKzrQe9Wu4l2fprWgGRtA6D3e1jiM5zqPRZkgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:69:6a:29:45:a1:f6:3d:a4:69:13:4e:cd:cb:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881 Validity Not Before: Jan 25 11:00:57 2026 GMT Not After : Jan 26 11:00:57 2026 GMT Subject: CN=3fd7d167bb9c02499483ea612e6b818977f612e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f4:ff:ff:e2:4e:5a:42:7d:78:2d:1c:52:a5: 1e:d7:0b:19:df:e1:f2:7b:57:c1:80:d8:39:11:db: 1a:71:b5:f2:00:88:c2:20:49:8a:5e:06:5c:fb:82: d1:c4:4b:51:07:d6:09:0c:2c:71:ee:09:96:8f:06: 1e:e4:e4:86:ad:d0:bc:a0:65:16:4f:9b:bb:ec:cf: fd:80:63:99:89:af:bf:1d:fb:e5:51:a1:06:72:3d: d5:2a:12:bd:a3:e9:d9:be:a0:8c:51:93:46:44:c0: 55:2d:30:04:1b:5d:e4:fd:8e:c8:1a:4b:dd:dd:c9: 8d:8e:57:28:99:aa:b5:90:a5:73:63:65:c8:9f:72: 98:63:ae:88:d5:2d:a1:9a:b4:8e:f0:2a:47:32:7f: 59:ad:55:55:86:97:ba:ad:ff:a1:1c:9b:69:be:0c: a8:02:74:35:94:d7:3f:1c:6b:2d:3d:26:ec:08:6c: 6c:fe:e4:fb:d5:07:35:0b:a7:10:1d:4d:7c:e0:e7: fc:23:8d:44:3d:18:81:21:e7:ce:20:c3:35:c1:5e: 29:89:45:04:70:87:c5:e5:45:70:57:80:6a:a6:34: 54:a6:94:1a:5a:60:4a:da:0d:1f:87:7b:17:3d:20: 5e:37:14:0c:c7:31:a8:41:6b:70:7e:0a:88:45:e8: fb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D7:D1:67:BB:9C:02:49:94:83:EA:61:2E:6B:81:89:77:F6:12:E9 X509v3 Authority Key Identifier: keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:9f:91:0e:66:9a:e3:e6:d0:5e:f7:8c:69:af:27:3d:75:f3: dc:58:d2:f5:3a:e9:05:2f:53:b8:84:2a:0a:a5:26:90:4a:02: 55:45:0c:84:2c:61:e9:9f:be:1f:38:ca:18:4b:18:87:b9:76: c7:da:c2:d3:ef:99:23:7e:83:68:95:59:ba:3d:46:a7:d5:2d: f5:f2:c4:02:24:e2:44:52:07:e7:3f:6c:24:99:6d:9e:47:9d: 95:bb:52:37:b7:e5:6f:0b:bb:17:48:f4:ac:df:f8:2c:51:c9: 12:28:98:04:93:39:e5:9a:2c:dd:c7:72:3c:f8:c8:23:0e:30: 09:a1:6e:3b:3c:91:c4:21:51:79:b1:85:e6:bf:37:6d:4f:9e: 9f:b2:f5:15:c5:fc:c3:e0:7a:23:0b:b9:88:28:aa:bd:e6:d3: 28:73:09:8e:86:a7:66:ed:d7:92:91:92:09:79:c3:9e:d5:51: f9:e3:69:12:66:50:46:42:33:8a:50:58:ae:98:c4:c9:19:cc: f2:5f:9b:c8:0d:74:1e:6f:e2:ba:3f:19:38:02:63:aa:46:2e: c5:0d:7c:9d:e5:59:d0:33:c9:de:a2:54:d2:40:5d:f5:0f:7f: 26:b8:37:a1:67:af:aa:68:3c:ff:d1:7a:7f:4d:74:9d:39:84: ab:96:0b:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00GlqKUWh9j2kaRNOzct2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMjBkZDJiOTJkYTI4NGM2M2NlYzQ2ZjZmNmE0MWMwMTNh OWM4ODEwHhcNMjYwMTI1MTEwMDU3WhcNMjYwMTI2MTEwMDU3WjAzMTEwLwYDVQQD EygzZmQ3ZDE2N2JiOWMwMjQ5OTQ4M2VhNjEyZTZiODE4OTc3ZjYxMmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/T//+JOWkJ9eC0cUqUe1wsZ3+Hy e1fBgNg5EdsacbXyAIjCIEmKXgZc+4LRxEtRB9YJDCxx7gmWjwYe5OSGrdC8oGUW T5u77M/9gGOZia+/HfvlUaEGcj3VKhK9o+nZvqCMUZNGRMBVLTAEG13k/Y7IGkvd 3cmNjlcomaq1kKVzY2XIn3KYY66I1S2hmrSO8CpHMn9ZrVVVhpe6rf+hHJtpvgyo AnQ1lNc/HGstPSbsCGxs/uT71Qc1C6cQHU184Of8I41EPRiBIefOIMM1wV4piUUE cIfF5UVwV4BqpjRUppQaWmBK2g0fh3sXPSBeNxQMxzGoQWtwfgqIRej7wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/X0We7nAJJlIPqYS5rgYl39hLpMB8GA1UdIwQY MBaAFBIg3SuS2ihMY87Eb29qQcATqciBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWlEZEs1TGFLRXhqenNSdmIycEJ3Qk9weUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8zYjhmM2ItZWJmMC00Y2I3LWE0OWIt YTg1ODU4NDliZTE0LzEvRWlEZEs1TGFLRXhqenNSdmIycEJ3Qk9weUlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8zYjhmM2ItZWJmMC00Y2I3LWE0OWItYTg1ODU4NDliZTE0 LzEvRWlEZEs1TGFLRXhqenNSdmIycEJ3Qk9weUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJ+RDmaa 4+bQXveMaa8nPXXz3FjS9TrpBS9TuIQqCqUmkEoCVUUMhCxh6Z++HzjKGEsYh7l2 x9rC0++ZI36DaJVZuj1Gp9Ut9fLEAiTiRFIH5z9sJJltnkedlbtSN7flbwu7F0j0 rN/4LFHJEiiYBJM55Zos3cdyPPjIIw4wCaFuOzyRxCFRebGF5r83bU+en7L1FcX8 w+B6Iwu5iCiqvebTKHMJjoanZu3XkpGSCXnDntVR+eNpEmZQRkIzilBYrpjEyRnM 8l+byA10Hm/iuj8ZOAJjqkYuxQ18neVZ0DPJ3qJU0kBd9Q9/Jrg3oWevqmg8/9F6 f010nTmEq5YLAQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:25:04 2026 by rpki-client