This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft File: nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json) Hash identifier: henORXA3OL88EHMaImvlmP3kV3mibqEiingdmknfpNM= Subject key identifier: 5B:25:B7:B2:C6:E0:AE:C2:A8:07:D6:B5:07:D0:8B:2D:BF:F3:03:DD Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d Certificate serial: 019BF42BD1C372C3C2CE04989B827F933089 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft Manifest number: 15C2 Signing time: Sun 25 Jan 2026 08:01:11 +0000 Manifest this update: Sun 25 Jan 2026 08:01:11 +0000 Manifest next update: Mon 26 Jan 2026 08:01:11 +0000 Files and hashes: 1: H2f81tAnClNQA7oxSnrk0RN1378.roa (hash: ztDbogPZdL+kyDbQ7D06edmucI3GWmYZufxKMT/XxH4=) 2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: MRAqFjhSPw1JRaALu9LWzPUBEMh+IX+bnCa55l+ASqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:d1:c3:72:c3:c2:ce:04:98:9b:82:7f:93:30:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d Validity Not Before: Jan 25 08:01:11 2026 GMT Not After : Jan 26 08:01:11 2026 GMT Subject: CN=5b25b7b2c6e0aec2a807d6b507d08b2dbff303dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:20:7d:02:5a:14:f4:74:b3:43:e3:e6:f8:46: 46:36:17:bf:58:3c:00:51:e4:4e:74:96:62:e4:d0: f4:0d:a4:79:8c:06:c3:c9:0c:d2:30:08:5c:5f:c2: 1d:f3:01:0c:83:c4:ba:a5:02:2d:f4:77:a0:24:1f: 80:af:19:6b:3b:a7:39:5a:61:de:aa:e0:e1:36:25: 1e:a8:3b:80:63:bb:70:a8:40:f9:e9:03:81:a7:f5: 2d:6e:7c:2a:f3:67:a1:e3:d0:8c:50:90:60:5e:bf: 70:b2:ba:aa:cf:71:1b:b6:32:e9:1a:68:01:82:d8: 44:ec:b1:78:8e:73:7c:1b:e8:1c:02:ca:59:40:c4: f0:89:fa:34:17:95:41:01:d2:91:79:03:ff:fe:29: ae:41:0a:50:5b:8e:3f:e3:53:f0:85:50:b7:02:31: e6:36:49:eb:11:bd:67:a4:23:31:c6:d9:34:4a:4c: 99:9d:50:ba:76:84:97:0b:f0:79:0d:8c:96:d0:de: 57:81:0e:13:76:80:ff:b0:52:f2:18:ca:ec:8d:ad: 9f:7c:8e:39:f6:75:9e:d5:ac:45:77:bb:6d:66:c2: 6f:e4:31:fb:d1:35:5d:b0:67:f7:0b:53:8c:f8:c5: 57:22:ce:32:3d:1e:22:79:c1:c6:71:b0:e3:4c:c5: ac:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:25:B7:B2:C6:E0:AE:C2:A8:07:D6:B5:07:D0:8B:2D:BF:F3:03:DD X509v3 Authority Key Identifier: keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:56:09:cd:93:a8:b9:48:f8:ed:20:cf:2f:bc:e6:62:24:e5: 1a:7b:4f:2d:6d:3b:f0:d2:5b:a3:96:58:b7:b3:7d:db:60:ee: 30:04:e6:7a:7b:33:81:f2:83:49:60:9c:fe:69:01:2f:da:ca: 3b:b4:4c:8b:05:d6:82:d7:65:35:c5:d2:79:dd:ab:9b:03:72: de:78:76:ad:99:e2:98:c2:62:9b:17:7d:a5:c1:04:bc:40:78: 70:23:33:99:1a:cf:63:fe:47:24:e1:d8:f4:58:2f:2d:5d:d4: 87:ed:da:40:d6:d2:50:74:77:d1:b5:ae:62:7f:32:79:06:b8: 7c:e9:bc:b6:db:76:6f:b1:2e:e4:65:bd:d8:33:78:b2:b6:e4: 6a:5a:90:5e:e8:e8:89:fe:c6:72:6d:67:15:35:9e:7f:b3:8e: 57:84:d5:7b:22:fe:eb:f2:a0:09:00:fd:85:ef:8c:36:03:b9: 35:27:0b:fa:8c:78:bf:31:2e:f0:57:05:df:49:4a:48:c0:30: ba:af:35:02:a7:54:7a:b2:87:e8:2b:1f:67:63:46:1e:53:01: 16:f6:43:f7:e1:10:54:ad:90:17:84:79:37:21:6e:e0:d3:fe: 6b:5b:68:b3:0e:58:a9:b8:02:43:44:1b:51:73:72:dd:45:81: b9:3d:ee:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K9HDcsPCzgSYm4J/kzCJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNDBlMzA3ZDEyY2UwNTY4YzI5OWUxN2NkNjVhNjZiMjZj ZGIwNGQwHhcNMjYwMTI1MDgwMTExWhcNMjYwMTI2MDgwMTExWjAzMTEwLwYDVQQD Eyg1YjI1YjdiMmM2ZTBhZWMyYTgwN2Q2YjUwN2QwOGIyZGJmZjMwM2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiB9AloU9HSzQ+Pm+EZGNhe/WDwA UeROdJZi5ND0DaR5jAbDyQzSMAhcX8Id8wEMg8S6pQIt9HegJB+ArxlrO6c5WmHe quDhNiUeqDuAY7twqED56QOBp/Utbnwq82eh49CMUJBgXr9wsrqqz3EbtjLpGmgB gthE7LF4jnN8G+gcAspZQMTwifo0F5VBAdKReQP//imuQQpQW44/41PwhVC3AjHm NknrEb1npCMxxtk0SkyZnVC6doSXC/B5DYyW0N5XgQ4TdoD/sFLyGMrsja2ffI45 9nWe1axFd7ttZsJv5DH70TVdsGf3C1OM+MVXIs4yPR4iecHGcbDjTMWsuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFslt7LG4K7CqAfWtQfQiy2/8wPdMB8GA1UdIwQY MBaAFJxA4wfRLOBWjCmeF81lpmsmzbBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mYWYyYWUtNmE4My00NDViLTk3NGIt OGZiMzc3OWI4NzA0LzEvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9mYWYyYWUtNmE4My00NDViLTk3NGItOGZiMzc3OWI4NzA0 LzEvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVYJzZOo uUj47SDPL7zmYiTlGntPLW078NJbo5ZYt7N922DuMATmenszgfKDSWCc/mkBL9rK O7RMiwXWgtdlNcXSed2rmwNy3nh2rZnimMJimxd9pcEEvEB4cCMzmRrPY/5HJOHY 9FgvLV3Uh+3aQNbSUHR30bWuYn8yeQa4fOm8ttt2b7Eu5GW92DN4srbkalqQXujo if7Gcm1nFTWef7OOV4TVeyL+6/KgCQD9he+MNgO5NScL+ox4vzEu8FcF30lKSMAw uq81AqdUerKH6CsfZ2NGHlMBFvZD9+EQVK2QF4R5NyFu4NP+a1tosw5YqbgCQ0Qb UXNy3UWBuT3umA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:29:58 2026 by rpki-client