This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft File: EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft (raw, json) Hash identifier: pAM3+7IO1rVETwe8HUdrEhrNsgpjKBrt49f9xzFg4mg= Subject key identifier: B9:FC:08:4F:5D:31:93:0A:02:43:63:B9:FB:C0:BE:98:3F:31:03:7C Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb Certificate serial: 019BF5ABBE8C0D896884C055A72CE57715AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft Manifest number: 17F2 Signing time: Sun 25 Jan 2026 15:00:31 +0000 Manifest this update: Sun 25 Jan 2026 15:00:31 +0000 Manifest next update: Mon 26 Jan 2026 15:00:31 +0000 Files and hashes: 1: 1-kqNcEC470FL-8tMUqoOnQYiF9M.roa (hash: EJlZOy6PuzNDvgY+mmcKZwX7cS9939GtFAUq2p+3aFQ=) 2: 9ZZwIsEn5-9xDQwcqsYYTjxbjJA.roa (hash: lZmCKQfLFLci+JYwAKSX3l63iYxIkiAA4w5SsSjJvUg=) 3: EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl (hash: F1xPjv85FZ6c531cl986FwM8x1N37ntDW0kzXdEcmPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:be:8c:0d:89:68:84:c0:55:a7:2c:e5:77:15:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb Validity Not Before: Jan 25 15:00:31 2026 GMT Not After : Jan 26 15:00:31 2026 GMT Subject: CN=b9fc084f5d31930a024363b9fbc0be983f31037c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9d:de:aa:be:2a:a3:7a:d0:37:b0:c3:e2:2d: e5:74:35:88:08:f8:30:98:e5:d7:66:ae:a1:69:5f: c4:31:e5:ef:07:18:60:a9:a8:80:89:8d:7d:49:a4: 69:f7:cd:47:6d:f6:56:1d:2c:2b:bc:d0:57:cc:e0: d6:ef:46:98:6c:7e:2b:d5:31:ee:fb:32:a4:03:c0: 37:2d:0c:5c:da:cc:aa:2d:77:33:ef:da:ad:fb:64: 2d:1e:45:87:10:93:60:a5:f6:bd:62:e7:70:78:a9: ad:80:2b:62:e5:24:74:ab:12:28:95:0d:a2:57:94: 74:cd:a1:67:97:11:26:17:d2:f2:81:30:d7:d5:34: f9:a4:1d:c7:a9:c4:fc:bf:20:32:27:36:7c:2b:eb: d0:51:50:e7:62:73:5c:db:6a:a0:34:47:d9:cc:79: d4:4b:08:eb:7e:b1:04:31:b6:72:9d:cc:7e:cf:a0: 7c:06:50:56:87:94:ee:b3:b8:db:1e:cf:91:52:e2: d2:a4:a9:ad:e6:25:9e:15:3e:0f:fd:27:bd:df:d8: 6b:1c:1b:37:1c:ed:2b:61:97:64:21:28:d4:9d:07: c0:34:2e:46:38:7c:31:57:24:bf:bc:53:08:58:d0: 51:9e:36:ff:2e:47:71:02:12:b0:3b:ac:e4:2d:65: da:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:FC:08:4F:5D:31:93:0A:02:43:63:B9:FB:C0:BE:98:3F:31:03:7C X509v3 Authority Key Identifier: keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:cb:16:9a:65:d8:00:18:b0:81:fa:20:f5:85:52:93:29:dd: 52:03:d2:4a:bb:3e:03:94:11:ca:62:43:91:a5:8b:c0:cf:3d: 37:a5:5d:55:7d:e5:d9:5c:76:44:ea:49:18:fa:4b:c2:2c:41: 48:ea:f7:55:67:0f:31:e0:c8:de:d1:c3:b5:5c:d1:33:72:65: fa:62:29:84:58:f8:c5:38:3f:99:e8:6d:06:b0:2d:9f:a4:2e: 96:1e:e1:50:11:7f:fe:55:21:3b:cc:ac:1f:b9:c5:08:c1:e9: 26:b7:23:bb:aa:be:1b:ef:4d:48:c5:7d:7c:12:86:57:5c:93: 0c:ea:66:a4:14:20:59:da:80:2d:b3:b5:d7:03:21:9d:5a:49: 9f:45:8e:8b:eb:5a:7f:9c:56:97:15:7a:94:d1:cc:bb:9b:45: 55:17:05:52:05:4a:68:84:a7:04:da:84:42:54:1a:65:b9:03: ad:0f:fc:10:be:fb:c6:03:49:aa:47:ca:c4:14:a7:16:ed:02: 3f:7f:11:fb:9c:25:ea:12:fd:e1:b4:5d:ab:3a:c4:44:1a:9a: b4:5f:14:22:bf:db:32:a4:84:59:b4:17:cc:00:c5:99:12:34: af:13:1c:8f:f3:98:94:71:c9:b3:be:92:58:a6:44:f0:08:b2: 91:8a:95:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q76MDYlohMBVpyzldxWuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZWVkYzMzYWE0NDI5MDcxODlmMGIzYzU2MzgzNjk1MWZi MTg1YmIwHhcNMjYwMTI1MTUwMDMxWhcNMjYwMTI2MTUwMDMxWjAzMTEwLwYDVQQD EyhiOWZjMDg0ZjVkMzE5MzBhMDI0MzYzYjlmYmMwYmU5ODNmMzEwMzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp3eqr4qo3rQN7DD4i3ldDWICPgw mOXXZq6haV/EMeXvBxhgqaiAiY19SaRp981HbfZWHSwrvNBXzODW70aYbH4r1THu +zKkA8A3LQxc2syqLXcz79qt+2QtHkWHEJNgpfa9YudweKmtgCti5SR0qxIolQ2i V5R0zaFnlxEmF9LygTDX1TT5pB3HqcT8vyAyJzZ8K+vQUVDnYnNc22qgNEfZzHnU SwjrfrEEMbZyncx+z6B8BlBWh5Tus7jbHs+RUuLSpKmt5iWeFT4P/Se939hrHBs3 HO0rYZdkISjUnQfANC5GOHwxVyS/vFMIWNBRnjb/LkdxAhKwO6zkLWXaFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLn8CE9dMZMKAkNjufvAvpg/MQN8MB8GA1UdIwQY MBaAFBDu3DOqRCkHGJ8LPFY4NpUfsYW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU83Y002cEVLUWNZbndzOFZqZzJsUi14aGJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy81NDZjN2UtZDg0MC00ZTU0LTkyMjMt NTM0ZWJlZWYzMzg5LzEvRU83Y002cEVLUWNZbndzOFZqZzJsUi14aGJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy81NDZjN2UtZDg0MC00ZTU0LTkyMjMtNTM0ZWJlZWYzMzg5 LzEvRU83Y002cEVLUWNZbndzOFZqZzJsUi14aGJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcsWmmXY ABiwgfog9YVSkyndUgPSSrs+A5QRymJDkaWLwM89N6VdVX3l2Vx2ROpJGPpLwixB SOr3VWcPMeDI3tHDtVzRM3Jl+mIphFj4xTg/mehtBrAtn6Qulh7hUBF//lUhO8ys H7nFCMHpJrcju6q+G+9NSMV9fBKGV1yTDOpmpBQgWdqALbO11wMhnVpJn0WOi+ta f5xWlxV6lNHMu5tFVRcFUgVKaISnBNqEQlQaZbkDrQ/8EL77xgNJqkfKxBSnFu0C P38R+5wl6hL94bRdqzrERBqatF8UIr/bMqSEWbQXzADFmRI0rxMcj/OYlHHJs76S WKZE8AiykYqVlQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:29 2026 by rpki-client