This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft File: ERJUBMbdRy8QAe2f_fcmdirHcB0.mft (raw, json) Hash identifier: GDvuUGOAde8aNUW6SxRBjsRo3ZHBU23+tEgJRygNUus= Subject key identifier: E1:ED:76:D8:DA:70:C8:5A:84:63:C4:24:44:1A:34:EE:F5:10:DA:C9 Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d Certificate serial: 019BF6877B1F60335F5F23D216A94EA2D498 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft Manifest number: 0438 Signing time: Sun 25 Jan 2026 19:00:32 +0000 Manifest this update: Sun 25 Jan 2026 19:00:32 +0000 Manifest next update: Mon 26 Jan 2026 19:00:32 +0000 Files and hashes: 1: 4c4lZly6HHaIn3VNqVSoI3aAMWg.roa (hash: PBhbI3oOnr9sdruKclXaXP1waBkJYiKgXCoZi2kNPsg=) 2: B033U8I90D9nbSqVDxG_vYMVGDE.roa (hash: RVPeY+Z8B+B/KYBUq3T2NRT96vo4mWrRs3gtPw92Sfc=) 3: DESLe4b52-By8QEWuPrBB3D08fA.roa (hash: Z1TnS92MbXYaGPJmmAihKiNu6ivlSoreA5OQ5gkks8I=) 4: ERJUBMbdRy8QAe2f_fcmdirHcB0.crl (hash: G1WHCVchSmnTEDWhkeqadbedw4OONuxRkb92JQK2pyw=) 5: OgXQseKO3Ow7Mhh_xwXxqG0TMU8.roa (hash: GiPu825S6CpEgmzpgvr6bfnt5L9VQLAkTPxtvMZRAqk=) 6: gIV-PtLXLT4xOhl2M8ZDrRWJN2c.roa (hash: ez0j8r5ZrGXHsarz1DHJ3c6wCD32BsWkJMkUor30YR4=) 7: skB-Hezp9u6dMSW47ypzkcQMALM.roa (hash: 7DCWoB2xt0+UZjjo6BwRXpvUHyGYHyqHkNc8BdIa858=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:7b:1f:60:33:5f:5f:23:d2:16:a9:4e:a2:d4:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d Validity Not Before: Jan 25 19:00:32 2026 GMT Not After : Jan 26 19:00:32 2026 GMT Subject: CN=e1ed76d8da70c85a8463c424441a34eef510dac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:13:b7:36:ba:7b:d7:c4:59:a6:80:2d:41:ab: df:8e:c3:4c:07:ef:72:e5:a4:55:5a:47:c7:76:6b: b7:6e:c9:47:33:f4:51:96:c7:c0:1e:c8:c3:69:93: 8f:9b:da:44:ac:32:ee:48:b2:6a:45:51:23:1a:3a: fb:5d:ac:c2:d7:9e:e0:46:57:41:01:7d:91:1c:0e: 53:3c:dc:9c:74:36:f9:64:12:00:85:e6:a0:95:e1: c2:58:76:bb:38:27:29:21:a8:19:32:69:51:9e:ec: ec:bc:d5:db:2f:d0:6d:7f:98:24:77:d4:ca:c6:2f: 1c:72:a3:cc:4e:e8:19:d8:65:6f:1a:1a:5f:c3:f0: ce:22:03:22:d3:65:6e:82:50:e9:ed:40:24:6e:5f: e2:33:3d:e4:0c:6e:98:b3:6f:a2:c4:8d:e2:47:7d: fa:c2:8c:2d:0f:72:fe:2a:d2:b0:4a:cc:c6:ab:9a: ec:a5:3d:fd:21:29:3f:9d:17:7e:30:c8:8b:55:a3: c2:8c:21:5b:15:9c:21:e6:3a:bc:1c:24:2d:20:97: 6d:6d:80:89:2d:a3:a4:34:05:d5:ae:b5:e3:d9:e7: 90:18:0d:60:7c:c0:07:fa:c3:21:ea:9b:5a:13:b3: 02:fc:c5:76:ba:0a:a2:72:fe:97:3d:2e:7f:95:77: 8b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:ED:76:D8:DA:70:C8:5A:84:63:C4:24:44:1A:34:EE:F5:10:DA:C9 X509v3 Authority Key Identifier: keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:7f:26:be:09:49:48:32:c5:dd:4e:29:2e:3c:d0:e1:cf:7e: 6f:e5:4f:9f:51:21:33:51:8f:e0:f1:84:d3:51:c6:0c:7b:4c: 50:5a:dd:f3:bd:e9:09:ae:40:9d:26:f0:38:06:79:82:71:a2: b3:a9:10:0b:e5:3c:fc:5b:8f:3d:1f:65:13:e7:fe:5d:e3:1c: 60:db:91:aa:6b:c0:cb:1f:24:6e:3a:10:6d:3c:12:f9:5a:47: 42:a7:6c:b5:c6:17:29:f5:36:18:8a:f7:c7:22:80:e5:f9:d5: 2b:f3:91:29:d6:77:3b:fb:08:13:15:e1:f6:21:83:3e:69:ab: 3d:64:72:65:1f:6a:fe:b7:2b:5d:f8:a8:5c:ec:25:ab:8b:54: 0d:8b:d5:73:2b:a3:da:2d:61:65:2f:0f:f1:60:ae:f6:a5:2e: 73:e2:dd:65:a2:f9:96:58:0e:60:35:88:45:85:bc:de:fc:9b: a7:21:ee:40:3d:2e:07:6a:b7:cd:7a:2b:55:8b:8a:23:a0:9e: 8a:d6:38:fb:6e:c0:6f:f7:5d:b1:03:02:a9:23:ee:17:b8:c4: 27:cb:ba:50:dc:6f:2f:9f:3e:0c:26:18:1a:ec:8e:57:ae:ff: 62:6d:f8:9c:18:53:d4:09:bd:ab:6c:12:a9:4e:77:0a:e6:11: ad:49:43:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h3sfYDNfXyPSFqlOotSYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMTI1NDA0YzZkZDQ3MmYxMDAxZWQ5ZmZkZjcyNjc2MmFj NzcwMWQwHhcNMjYwMTI1MTkwMDMyWhcNMjYwMTI2MTkwMDMyWjAzMTEwLwYDVQQD EyhlMWVkNzZkOGRhNzBjODVhODQ2M2M0MjQ0NDFhMzRlZWY1MTBkYWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RO3Nrp718RZpoAtQavfjsNMB+9y 5aRVWkfHdmu3bslHM/RRlsfAHsjDaZOPm9pErDLuSLJqRVEjGjr7XazC157gRldB AX2RHA5TPNycdDb5ZBIAheagleHCWHa7OCcpIagZMmlRnuzsvNXbL9Btf5gkd9TK xi8ccqPMTugZ2GVvGhpfw/DOIgMi02VuglDp7UAkbl/iMz3kDG6Ys2+ixI3iR336 wowtD3L+KtKwSszGq5rspT39ISk/nRd+MMiLVaPCjCFbFZwh5jq8HCQtIJdtbYCJ LaOkNAXVrrXj2eeQGA1gfMAH+sMh6ptaE7MC/MV2ugqicv6XPS5/lXeLZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHtdtjacMhahGPEJEQaNO71ENrJMB8GA1UdIwQY MBaAFBESVATG3UcvEAHtn/33JnYqx3AdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYt NmRmZTBmN2Q1M2JkLzEvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYtNmRmZTBmN2Q1M2Jk LzEvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAn8mvglJ SDLF3U4pLjzQ4c9+b+VPn1EhM1GP4PGE01HGDHtMUFrd873pCa5AnSbwOAZ5gnGi s6kQC+U8/FuPPR9lE+f+XeMcYNuRqmvAyx8kbjoQbTwS+VpHQqdstcYXKfU2GIr3 xyKA5fnVK/ORKdZ3O/sIExXh9iGDPmmrPWRyZR9q/rcrXfioXOwlq4tUDYvVcyuj 2i1hZS8P8WCu9qUuc+LdZaL5llgOYDWIRYW83vybpyHuQD0uB2q3zXorVYuKI6Ce itY4+27Ab/ddsQMCqSPuF7jEJ8u6UNxvL58+DCYYGuyOV67/Ym34nBhT1Am9q2wS qU53CuYRrUlDIw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:19:46 2026 by rpki-client