This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft File: eXpIzBPiAOLT84r4MxjRvK9vYzE.mft (raw, json) Hash identifier: mYJpvzNIp2l9XztJgqq1LIeypAHEPHZbQHmeZk5tarA= Subject key identifier: 12:42:93:D9:D1:8A:7F:44:E4:19:18:24:45:E4:D1:92:EE:A6:3B:AF Authority key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31 Certificate issuer: /CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331 Certificate serial: 019BF5ABF5CDA9555F44A61748E59E2BC1BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 15:00:46 +0000 Manifest this update: Sun 25 Jan 2026 15:00:46 +0000 Manifest next update: Mon 26 Jan 2026 15:00:46 +0000 Files and hashes: 1: 1CoDti7UyWuABXfzaLp-v2yW2HA.roa (hash: E0ry/JWuGn8+ExPO+znV4eEnxCmGw1JlXLAD1xMsn3M=) 2: CM5wA7_Mj4XNK2JxKM8h4YQ6N-c.roa (hash: vqRJimrGP27MPdv4zjttCm0+Djwer+Zrgp7ip8OhqNI=) 3: eXpIzBPiAOLT84r4MxjRvK9vYzE.crl (hash: SGXizclOiluScdNPcIsniuSWyyro9mKiynUpg6/3aPE=) 4: vrHxDQdDvD5FkJJ9HXKxIeXSD6g.roa (hash: 6/LxhvXlOR/ty2sj2ZAK5GVcT8Qr18RlIGwO+dZwois=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:f5:cd:a9:55:5f:44:a6:17:48:e5:9e:2b:c1:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331 Validity Not Before: Jan 25 15:00:46 2026 GMT Not After : Jan 26 15:00:46 2026 GMT Subject: CN=124293d9d18a7f44e419182445e4d192eea63baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:45:11:a6:9e:0e:a7:a0:83:d3:c6:01:ed:8b: b3:6a:dc:63:6e:19:66:3b:54:76:4b:f1:c9:c4:08: 78:3b:54:ae:25:f9:18:32:88:c5:99:55:2d:82:da: 8e:6f:7c:a3:03:2d:3b:64:ac:c5:a1:5d:32:75:c1: 4b:fd:de:0f:e8:13:31:22:a5:ce:3b:33:81:99:21: db:33:73:79:04:10:9e:5a:0b:c1:4d:d7:42:fa:c5: 84:d4:44:79:fa:03:7c:59:ec:e0:76:61:b2:68:97: b0:05:18:64:c9:ca:13:36:8a:4d:47:61:b2:ad:e2: bb:66:cf:b2:1e:d6:ff:26:73:35:66:90:bc:0c:e6: d1:c4:a8:ce:19:e2:e0:c8:16:ad:b6:a4:9d:eb:6e: d2:74:53:1b:02:f3:48:b9:39:bb:ce:cb:bc:70:39: 41:f8:08:6a:fb:1f:1a:bc:1b:22:25:af:5b:dc:bd: c8:de:2a:ea:77:75:48:d2:c7:16:1f:ce:98:06:a1: 3c:8c:45:93:22:cb:49:d6:d3:43:86:61:96:84:8c: 9a:da:cf:ff:93:71:b4:7f:af:95:bd:e0:43:d9:4d: 99:6e:51:ec:c0:49:97:bd:ef:6d:cc:7a:d7:79:e6: e0:b9:65:94:8d:d2:4f:16:4f:97:0b:41:8a:35:be: e1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:42:93:D9:D1:8A:7F:44:E4:19:18:24:45:E4:D1:92:EE:A6:3B:AF X509v3 Authority Key Identifier: keyid:79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:eb:f3:dc:33:e3:50:cc:1c:a6:cc:23:2f:cf:b0:49:f6:ad: 25:d1:7c:79:32:23:79:7d:b7:0a:91:2a:46:45:a0:77:a1:5b: c8:a9:af:27:a6:ad:30:3d:64:94:1a:a8:7d:6f:ba:b8:eb:30: 2b:42:c0:4e:d0:74:89:39:25:af:a9:38:65:2b:79:7d:90:b7: 7e:4e:87:f1:2a:db:fe:a0:ad:30:9a:32:ec:35:6a:03:13:ae: 50:bd:59:67:37:e9:58:03:ad:34:28:4c:dd:03:3f:f4:7d:e1: 37:d7:79:4d:4b:1a:02:af:0a:d5:ef:4c:a9:27:da:79:94:1a: 08:a1:c9:02:e3:42:1a:0e:a0:29:61:1e:7d:bb:2c:1a:1d:d8: 45:6a:c4:be:e8:3c:76:f7:66:e8:13:37:3f:ca:ba:94:fc:04: 95:94:1c:ac:3f:0f:10:1e:2d:c6:2e:c9:02:7d:4d:d3:3f:32: 6e:09:33:fd:5e:77:e7:80:5a:90:11:0b:0a:81:31:c3:0d:ba: a6:aa:76:d0:92:0d:54:75:78:20:a4:2e:62:b8:11:d8:83:b5: f2:28:ab:53:3c:fa:b8:b0:94:33:f3:f3:1a:58:f7:93:7b:90: ac:82:07:99:53:6e:40:8e:dd:45:37:6c:30:f0:b8:21:2c:e6: 5d:07:b5:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q/XNqVVfRKYXSOWeK8G/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5N2E0OGNjMTNlMjAwZTJkM2YzOGFmODMzMThkMWJjYWY2 ZjYzMzEwHhcNMjYwMTI1MTUwMDQ2WhcNMjYwMTI2MTUwMDQ2WjAzMTEwLwYDVQQD EygxMjQyOTNkOWQxOGE3ZjQ0ZTQxOTE4MjQ0NWU0ZDE5MmVlYTYzYmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0URpp4Op6CD08YB7Yuzatxjbhlm O1R2S/HJxAh4O1SuJfkYMojFmVUtgtqOb3yjAy07ZKzFoV0ydcFL/d4P6BMxIqXO OzOBmSHbM3N5BBCeWgvBTddC+sWE1ER5+gN8WezgdmGyaJewBRhkycoTNopNR2Gy reK7Zs+yHtb/JnM1ZpC8DObRxKjOGeLgyBattqSd627SdFMbAvNIuTm7zsu8cDlB +Ahq+x8avBsiJa9b3L3I3irqd3VI0scWH86YBqE8jEWTIstJ1tNDhmGWhIya2s// k3G0f6+VveBD2U2ZblHswEmXve9tzHrXeebguWWUjdJPFk+XC0GKNb7hxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJCk9nRin9E5BkYJEXk0ZLupjuvMB8GA1UdIwQY MBaAFHl6SMwT4gDi0/OK+DMY0byvb2MxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhwSXpCUGlBT0xUODRyNE14alJ2Szl2WXpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iOWNlYTAtNjkyOC00NTg0LWIzMjEt N2Q3ZjRiNjM0ODQ5LzEvZVhwSXpCUGlBT0xUODRyNE14alJ2Szl2WXpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9iOWNlYTAtNjkyOC00NTg0LWIzMjEtN2Q3ZjRiNjM0ODQ5 LzEvZVhwSXpCUGlBT0xUODRyNE14alJ2Szl2WXpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOvz3DPj UMwcpswjL8+wSfatJdF8eTIjeX23CpEqRkWgd6FbyKmvJ6atMD1klBqofW+6uOsw K0LATtB0iTklr6k4ZSt5fZC3fk6H8Srb/qCtMJoy7DVqAxOuUL1ZZzfpWAOtNChM 3QM/9H3hN9d5TUsaAq8K1e9MqSfaeZQaCKHJAuNCGg6gKWEefbssGh3YRWrEvug8 dvdm6BM3P8q6lPwElZQcrD8PEB4txi7JAn1N0z8ybgkz/V5354BakBELCoExww26 pqp20JINVHV4IKQuYrgR2IO18iirUzz6uLCUM/PzGlj3k3uQrIIHmVNuQI7dRTds MPC4ISzmXQe1wA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:01 2026 by rpki-client