This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft File: ehuEnDQHAlATY6H5J-xCQJm5RyY.mft (raw, json) Hash identifier: yWQTEyqsnzB61nNx0z20CR2KRXJH2aChnVGva3wC6Ck= Subject key identifier: 17:C1:88:F4:B1:A1:9F:72:31:DD:0E:3B:EE:49:7A:D6:52:D7:1D:C3 Authority key identifier: 7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26 Certificate issuer: /CN=7a1b849c340702501363a1f927ec424099b94726 Certificate serial: 019BF6BEC8190F025638EDFEB167516BF107 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 20:00:56 +0000 Manifest this update: Sun 25 Jan 2026 20:00:56 +0000 Manifest next update: Mon 26 Jan 2026 20:00:56 +0000 Files and hashes: 1: 7UaBbCaDn-KSS5fLxt56x8jizZs.roa (hash: GSd2jVlV8OoeGmAQ8ge5d6QxeXQZs/RSCSQ5Bh6rcq8=) 2: ehuEnDQHAlATY6H5J-xCQJm5RyY.crl (hash: fxX1llNmAAfmfBAThX4NquczTbvVt6pXMwZjm9YIPPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:c8:19:0f:02:56:38:ed:fe:b1:67:51:6b:f1:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1b849c340702501363a1f927ec424099b94726 Validity Not Before: Jan 25 20:00:56 2026 GMT Not After : Jan 26 20:00:56 2026 GMT Subject: CN=17c188f4b1a19f7231dd0e3bee497ad652d71dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d6:ae:59:ab:99:dc:54:f1:7a:f2:50:43:15: 48:3b:46:e8:c2:0c:5a:fe:4a:d0:32:ba:ff:67:80: 28:ac:ce:e1:40:81:fd:94:07:fe:a0:e5:76:cb:39: 39:48:45:70:0a:6b:af:25:36:63:81:40:bb:80:de: 01:0a:a7:b0:42:e8:ce:fe:1d:6f:53:de:c6:aa:2d: d9:80:7f:c8:05:7c:2e:f8:cb:b0:dc:56:3d:b3:0b: 00:51:d9:31:30:c2:47:7f:d7:83:27:69:89:1b:3e: 0c:7d:59:8a:23:63:ea:6e:66:6e:cb:af:b1:3c:e2: c7:c5:6e:72:f3:b2:de:be:1b:87:eb:e7:8b:22:ad: 58:4c:a9:ef:ef:02:cf:1a:ec:04:8b:1b:c0:f3:36: d2:e8:cd:82:42:ce:ce:07:a3:f1:4d:d8:bd:c5:e2: 12:d8:f8:09:b8:4f:5e:72:a4:e2:47:af:4a:59:a8: ae:37:8e:35:c2:f5:2f:dc:3f:85:ae:21:aa:fd:ea: 72:9a:19:24:71:14:2e:ea:35:c4:c3:b6:2b:e4:27: 40:67:7f:d0:79:ef:05:53:8b:05:8b:e6:90:85:c5: 55:ad:c8:f3:6f:f8:da:01:ce:93:db:5d:6c:77:01: 0a:d0:dd:90:ab:1f:0b:23:16:b1:55:32:55:b4:06: c8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C1:88:F4:B1:A1:9F:72:31:DD:0E:3B:EE:49:7A:D6:52:D7:1D:C3 X509v3 Authority Key Identifier: keyid:7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:44:cb:64:a4:b4:6d:25:42:d4:f7:84:ea:c2:e9:8c:a6:45: af:4e:ee:0f:14:2f:43:dd:ef:f8:90:64:5c:98:16:5c:a5:aa: 6a:fe:cc:04:fc:a7:d2:36:1c:66:46:ea:b3:4b:c8:81:bd:e8: 25:b5:4c:bf:c6:e0:f2:32:00:1a:bc:3f:32:e7:01:f1:9a:d7: a0:26:1a:4d:1e:92:9e:d6:04:ce:b8:d2:9e:58:8e:ff:5b:58: d0:e6:86:5b:ab:1c:51:0e:cd:b6:93:cc:a4:67:9b:73:f8:91: e2:0c:db:d7:93:e8:48:15:24:d3:60:03:b2:93:7a:d6:9a:ef: fd:26:af:6e:41:2c:bb:1b:d4:d1:90:30:46:81:0b:20:3d:73: ab:b4:12:26:f8:8a:4e:86:4b:79:63:e1:4d:ed:bf:41:77:3f: b9:c8:2a:ca:05:2e:ac:90:fe:c3:a2:f8:37:78:85:99:32:12: a3:f6:ad:8f:ef:db:86:1b:37:e8:1b:3f:83:5b:43:87:96:e0: 5f:a0:94:bf:c0:5a:da:81:c7:af:70:22:aa:6b:f2:08:2d:ec: 89:14:f3:52:40:47:79:cb:48:83:7f:7d:88:f2:ec:e4:19:5b: bf:c5:6d:01:3b:03:52:75:7a:b3:29:3f:7f:ca:0f:4a:a8:e6: 97:05:4c:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vsgZDwJWOO3+sWdRa/EHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMWI4NDljMzQwNzAyNTAxMzYzYTFmOTI3ZWM0MjQwOTli OTQ3MjYwHhcNMjYwMTI1MjAwMDU2WhcNMjYwMTI2MjAwMDU2WjAzMTEwLwYDVQQD EygxN2MxODhmNGIxYTE5ZjcyMzFkZDBlM2JlZTQ5N2FkNjUyZDcxZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstauWauZ3FTxevJQQxVIO0bowgxa /krQMrr/Z4AorM7hQIH9lAf+oOV2yzk5SEVwCmuvJTZjgUC7gN4BCqewQujO/h1v U97Gqi3ZgH/IBXwu+Muw3FY9swsAUdkxMMJHf9eDJ2mJGz4MfVmKI2PqbmZuy6+x POLHxW5y87LevhuH6+eLIq1YTKnv7wLPGuwEixvA8zbS6M2CQs7OB6PxTdi9xeIS 2PgJuE9ecqTiR69KWaiuN441wvUv3D+FriGq/epymhkkcRQu6jXEw7Yr5CdAZ3/Q ee8FU4sFi+aQhcVVrcjzb/jaAc6T211sdwEK0N2Qqx8LIxaxVTJVtAbI3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfBiPSxoZ9yMd0OO+5JetZS1x3DMB8GA1UdIwQY MBaAFHobhJw0BwJQE2Oh+SfsQkCZuUcmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWh1RW5EUUhBbEFUWTZINUoteENRSm01UnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yNzczMzMtZTFmMy00MmVjLWE4YWMt YjFmNTZhNDU0ZDgyLzEvZWh1RW5EUUhBbEFUWTZINUoteENRSm01UnlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8yNzczMzMtZTFmMy00MmVjLWE4YWMtYjFmNTZhNDU0ZDgy LzEvZWh1RW5EUUhBbEFUWTZINUoteENRSm01UnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkTLZKS0 bSVC1PeE6sLpjKZFr07uDxQvQ93v+JBkXJgWXKWqav7MBPyn0jYcZkbqs0vIgb3o JbVMv8bg8jIAGrw/MucB8ZrXoCYaTR6SntYEzrjSnliO/1tY0OaGW6scUQ7NtpPM pGebc/iR4gzb15PoSBUk02ADspN61prv/SavbkEsuxvU0ZAwRoELID1zq7QSJviK ToZLeWPhTe2/QXc/ucgqygUurJD+w6L4N3iFmTISo/atj+/bhhs36Bs/g1tDh5bg X6CUv8Ba2oHHr3AiqmvyCC3siRTzUkBHectIg399iPLs5Blbv8VtATsDUnV6syk/ f8oPSqjmlwVMEQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:34 2026 by rpki-client