This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft File: ehuEnDQHAlATY6H5J-xCQJm5RyY.mft (raw, json) Hash identifier: 0aGG3HlLtfStvgDJu6TMoGsK0vVIRAc6bF9aOd+pbMA= Subject key identifier: 8A:1C:5F:C4:2E:01:AA:2E:1A:2F:D0:65:84:02:F4:F0:92:9E:7E:8B Authority key identifier: 7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26 Certificate issuer: /CN=7a1b849c340702501363a1f927ec424099b94726 Certificate serial: 019BF4D0FEA8E9E0F239A4526AE1F07B1351 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 11:01:35 +0000 Manifest this update: Sun 25 Jan 2026 11:01:35 +0000 Manifest next update: Mon 26 Jan 2026 11:01:35 +0000 Files and hashes: 1: 7UaBbCaDn-KSS5fLxt56x8jizZs.roa (hash: GSd2jVlV8OoeGmAQ8ge5d6QxeXQZs/RSCSQ5Bh6rcq8=) 2: ehuEnDQHAlATY6H5J-xCQJm5RyY.crl (hash: mk1MdDQ/fvXq4BWlD3AlMVujxhyM0pBsh3xnBwTkpw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:fe:a8:e9:e0:f2:39:a4:52:6a:e1:f0:7b:13:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1b849c340702501363a1f927ec424099b94726 Validity Not Before: Jan 25 11:01:35 2026 GMT Not After : Jan 26 11:01:35 2026 GMT Subject: CN=8a1c5fc42e01aa2e1a2fd0658402f4f0929e7e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:35:03:4d:07:7b:3f:c4:c5:82:48:3b:99:b9: 11:52:b1:0f:9b:12:38:fa:e2:92:9a:10:a7:4d:c4: 9a:b1:f9:23:0e:d9:b1:af:7b:b4:0a:7c:8b:bd:6b: 92:8e:56:a9:94:eb:5b:4f:9a:48:f2:28:9d:9e:1e: 26:1c:fe:ee:58:f4:41:88:7f:a9:86:7c:52:54:87: f1:3e:69:80:88:d2:f6:53:7a:64:67:9f:cb:e8:a5: 02:bf:39:5d:28:6d:6f:81:b1:29:9b:e4:59:f9:38: 9f:90:6a:bf:83:9c:8a:78:cf:6a:22:4d:8d:81:5a: eb:ac:f8:33:84:ee:78:ff:56:5a:bd:19:a8:e3:0f: 83:59:3a:62:55:21:b1:d5:c0:52:76:e8:f1:cb:c4: 09:dc:14:1e:45:4d:71:84:48:58:c3:d8:7c:be:3d: 11:b8:2b:1d:ae:51:89:ac:50:48:78:d6:6c:99:7c: f9:2b:2a:39:58:63:f3:d8:0a:3f:0a:2f:36:59:5d: c3:3e:a7:83:7b:74:02:55:c2:3e:df:82:32:16:94: 9a:6a:c3:c0:6a:af:72:5b:55:51:46:17:f2:70:b2: 30:3d:65:d6:fc:f8:6b:39:e2:51:59:d4:8f:65:4a: e7:43:04:ce:f8:dd:45:cd:63:c5:31:b7:af:91:f2: 83:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1C:5F:C4:2E:01:AA:2E:1A:2F:D0:65:84:02:F4:F0:92:9E:7E:8B X509v3 Authority Key Identifier: keyid:7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:8b:fc:52:45:75:96:61:56:d5:68:02:4d:13:1a:9b:5a:87: ff:47:e7:94:55:b8:21:b5:1e:41:56:9e:4d:d8:5c:dd:0d:0a: be:90:fc:b3:8c:43:c4:7e:e1:3e:37:eb:e0:4e:38:74:94:57: db:99:d3:30:ec:07:c0:1b:4c:b7:48:f5:41:d4:c2:6b:c3:52: d9:1d:09:73:3a:f0:6e:98:51:8e:aa:ed:a3:98:7b:75:6c:b5: 40:a6:e3:fc:60:15:13:6b:28:97:89:a3:3c:94:70:4c:cd:38: a8:9b:56:d9:af:ac:40:7e:bd:af:d7:15:a3:4f:ec:11:3d:67: cd:4e:f7:11:01:ad:c0:83:c7:37:61:7c:c5:fd:0d:5b:46:28: fa:81:e6:1e:7b:e3:01:d0:6a:3e:bd:c8:8f:2d:47:57:77:ba: c7:85:64:3a:dd:28:8e:24:71:68:51:ef:54:42:ca:69:36:a4: 2c:45:b2:cc:b6:8a:3a:d5:c0:ca:7c:1f:d2:48:45:14:1c:7c: e1:1f:4c:a1:97:a2:bc:d0:5e:fe:db:c7:df:6f:8d:27:2c:3b: 07:ce:c5:50:d7:ab:08:ac:16:9f:4b:00:03:25:40:a7:e1:eb: 80:ad:82:97:74:50:8d:34:a7:ef:4d:d0:76:79:38:66:68:dd: 31:8f:99:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00P6o6eDyOaRSauHwexNRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMWI4NDljMzQwNzAyNTAxMzYzYTFmOTI3ZWM0MjQwOTli OTQ3MjYwHhcNMjYwMTI1MTEwMTM1WhcNMjYwMTI2MTEwMTM1WjAzMTEwLwYDVQQD Eyg4YTFjNWZjNDJlMDFhYTJlMWEyZmQwNjU4NDAyZjRmMDkyOWU3ZThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTUDTQd7P8TFgkg7mbkRUrEPmxI4 +uKSmhCnTcSasfkjDtmxr3u0CnyLvWuSjlaplOtbT5pI8iidnh4mHP7uWPRBiH+p hnxSVIfxPmmAiNL2U3pkZ5/L6KUCvzldKG1vgbEpm+RZ+TifkGq/g5yKeM9qIk2N gVrrrPgzhO54/1ZavRmo4w+DWTpiVSGx1cBSdujxy8QJ3BQeRU1xhEhYw9h8vj0R uCsdrlGJrFBIeNZsmXz5Kyo5WGPz2Ao/Ci82WV3DPqeDe3QCVcI+34IyFpSaasPA aq9yW1VRRhfycLIwPWXW/PhrOeJRWdSPZUrnQwTO+N1FzWPFMbevkfKD4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIocX8QuAaouGi/QZYQC9PCSnn6LMB8GA1UdIwQY MBaAFHobhJw0BwJQE2Oh+SfsQkCZuUcmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWh1RW5EUUhBbEFUWTZINUoteENRSm01UnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yNzczMzMtZTFmMy00MmVjLWE4YWMt YjFmNTZhNDU0ZDgyLzEvZWh1RW5EUUhBbEFUWTZINUoteENRSm01UnlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8yNzczMzMtZTFmMy00MmVjLWE4YWMtYjFmNTZhNDU0ZDgy LzEvZWh1RW5EUUhBbEFUWTZINUoteENRSm01UnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4v8UkV1 lmFW1WgCTRMam1qH/0fnlFW4IbUeQVaeTdhc3Q0KvpD8s4xDxH7hPjfr4E44dJRX 25nTMOwHwBtMt0j1QdTCa8NS2R0JczrwbphRjqrto5h7dWy1QKbj/GAVE2sol4mj PJRwTM04qJtW2a+sQH69r9cVo0/sET1nzU73EQGtwIPHN2F8xf0NW0Yo+oHmHnvj AdBqPr3Ijy1HV3e6x4VkOt0ojiRxaFHvVELKaTakLEWyzLaKOtXAynwf0khFFBx8 4R9MoZeivNBe/tvH32+NJyw7B87FUNerCKwWn0sAAyVAp+HrgK2Cl3RQjTSn703Q dnk4ZmjdMY+Z2g== -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:32 2026 by rpki-client