This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft File: EbBIqvW7QvbE2dOHrSen6yGfOII.mft (raw, json) Hash identifier: s9rGAjeQvKiaRp8c6qqDiIFhbzXqv241A1uRvwJFnXE= Subject key identifier: CF:FF:ED:40:C3:30:0F:7D:16:46:B0:96:96:FB:71:FB:81:3A:AB:1B Authority key identifier: 11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82 Certificate issuer: /CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882 Certificate serial: 019BF3F4BD62ADE248EB24FC0BCEF78CBE12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft Manifest number: 0275 Signing time: Sun 25 Jan 2026 07:01:01 +0000 Manifest this update: Sun 25 Jan 2026 07:01:01 +0000 Manifest next update: Mon 26 Jan 2026 07:01:01 +0000 Files and hashes: 1: EbBIqvW7QvbE2dOHrSen6yGfOII.crl (hash: tHnZ5kaAnutcHRFcFzqSY73ynws+eB6h7CfIZlDYBJg=) 2: V6MbHQ4IlulkadnPNR4GjRCTQBc.roa (hash: n6NjwhnZOFT/xKrdDQmsqkf3f28sKCszOE0xexeKQjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f4:bd:62:ad:e2:48:eb:24:fc:0b:ce:f7:8c:be:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882 Validity Not Before: Jan 25 07:01:01 2026 GMT Not After : Jan 26 07:01:01 2026 GMT Subject: CN=cfffed40c3300f7d1646b09696fb71fb813aab1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7b:bd:97:e2:7f:aa:18:a7:41:f3:45:fa:43: fb:fa:01:e2:02:99:6f:ef:91:8c:50:bc:6f:f4:f6: db:c9:c7:d2:10:20:de:5a:1c:97:20:f0:45:d7:58: 64:4a:1a:50:50:f2:ab:a2:12:28:96:a4:cc:8b:e7: fe:92:a4:bf:97:a7:17:59:65:63:24:15:d6:41:8d: e6:1d:fd:15:73:28:8d:83:fa:9a:94:fd:85:cd:79: 88:aa:a1:7b:91:9f:06:7c:0c:41:a2:24:07:22:eb: 5b:c6:10:57:6d:a1:14:27:cb:30:18:9e:93:bb:dd: 9a:fb:2c:34:a5:0b:dd:0d:e8:4b:73:5a:8f:f6:f9: 28:06:3d:88:6b:f9:65:2f:d1:20:7e:2e:d7:aa:98: 74:67:71:77:98:4e:7d:f6:81:ca:f8:00:51:9e:c5: dd:b0:83:93:57:f5:9e:67:0f:c5:f1:4c:af:f4:e3: 20:a3:84:45:ed:26:9a:76:19:fc:59:b0:1d:4e:a9: 0f:22:8e:88:0f:54:f3:7f:99:45:04:a9:d5:a7:61: f7:82:1d:ba:bb:23:4f:91:98:3a:a9:37:54:e2:d9: f8:aa:56:f4:07:2b:c9:f0:ac:8b:e8:a0:62:41:04: c2:8c:0e:19:9f:02:e6:4c:39:00:ab:0b:83:20:0e: a0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FF:ED:40:C3:30:0F:7D:16:46:B0:96:96:FB:71:FB:81:3A:AB:1B X509v3 Authority Key Identifier: keyid:11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:b0:c8:dd:ea:3a:1a:4b:a8:2c:06:d6:66:f8:6f:88:37:22: bd:84:4e:a0:9d:73:3f:5a:1f:43:8e:5c:63:e8:a7:33:a1:7b: d8:f1:ca:09:6b:8c:9d:25:df:cc:f7:a5:75:fe:45:13:d1:e9: f7:6c:f3:6c:45:f1:fa:cd:f4:fd:a2:54:f7:90:4f:2c:11:ff: cd:dd:61:b1:69:b0:b0:4e:23:e5:37:28:9b:f1:0d:7a:8c:d1: 58:0b:ec:f6:76:43:f2:91:1f:7c:76:45:27:46:27:9b:49:e3: 4e:7c:e4:09:07:ce:e3:26:0f:01:ac:c2:d6:61:8f:85:7c:07: 0c:41:bc:ca:5d:a8:54:28:0f:65:37:75:95:d3:81:e7:83:d3: 89:f1:09:20:f5:fc:c4:3b:b0:e8:43:88:a2:d1:ae:0a:a0:67: c8:54:c0:1f:c9:73:88:76:20:39:17:4f:ce:98:7b:62:6b:37: 1d:0d:5d:21:3c:d1:0f:72:2d:7d:cb:1e:8e:e1:20:0a:53:1c: ee:4e:5e:c7:96:8e:46:de:87:b3:ca:81:50:2e:e8:54:87:d6: 11:b2:3e:2b:7f:3f:0c:c7:8d:9c:10:c1:77:a6:65:52:54:8e: b0:ba:f6:e9:e5:8f:9b:b3:7a:d7:fe:62:a5:56:f5:b3:42:9a: 42:b9:d6:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9L1ireJI6yT8C873jL4SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYjA0OGFhZjViYjQyZjZjNGQ5ZDM4N2FkMjdhN2ViMjE5 ZjM4ODIwHhcNMjYwMTI1MDcwMTAxWhcNMjYwMTI2MDcwMTAxWjAzMTEwLwYDVQQD EyhjZmZmZWQ0MGMzMzAwZjdkMTY0NmIwOTY5NmZiNzFmYjgxM2FhYjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03u9l+J/qhinQfNF+kP7+gHiAplv 75GMULxv9PbbycfSECDeWhyXIPBF11hkShpQUPKrohIolqTMi+f+kqS/l6cXWWVj JBXWQY3mHf0VcyiNg/qalP2FzXmIqqF7kZ8GfAxBoiQHIutbxhBXbaEUJ8swGJ6T u92a+yw0pQvdDehLc1qP9vkoBj2Ia/llL9Egfi7Xqph0Z3F3mE599oHK+ABRnsXd sIOTV/WeZw/F8Uyv9OMgo4RF7Saadhn8WbAdTqkPIo6ID1Tzf5lFBKnVp2H3gh26 uyNPkZg6qTdU4tn4qlb0ByvJ8KyL6KBiQQTCjA4ZnwLmTDkAqwuDIA6gMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM//7UDDMA99Fkawlpb7cfuBOqsbMB8GA1UdIwQY MBaAFBGwSKr1u0L2xNnTh60np+shnziCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWJCSXF2VzdRdmJFMmRPSHJTZW42eUdmT0lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS83YmU5YjItMmUxOS00ZmUwLWIxN2Et NWNmM2U3NmExZWJjLzEvRWJCSXF2VzdRdmJFMmRPSHJTZW42eUdmT0lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS83YmU5YjItMmUxOS00ZmUwLWIxN2EtNWNmM2U3NmExZWJj LzEvRWJCSXF2VzdRdmJFMmRPSHJTZW42eUdmT0lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbDI3eo6 GkuoLAbWZvhviDcivYROoJ1zP1ofQ45cY+inM6F72PHKCWuMnSXfzPeldf5FE9Hp 92zzbEXx+s30/aJU95BPLBH/zd1hsWmwsE4j5Tcom/ENeozRWAvs9nZD8pEffHZF J0Ynm0njTnzkCQfO4yYPAazC1mGPhXwHDEG8yl2oVCgPZTd1ldOB54PTifEJIPX8 xDuw6EOIotGuCqBnyFTAH8lziHYgORdPzph7Yms3HQ1dITzRD3ItfcsejuEgClMc 7k5ex5aORt6Hs8qBUC7oVIfWEbI+K38/DMeNnBDBd6ZlUlSOsLr26eWPm7N61/5i pVb1s0KaQrnWRA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:25:27 2026 by rpki-client