This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft File: eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json) Hash identifier: /dDG7ZbX+4s9QgGhnhHfIoztGtVY91fpykDIwKrWFpQ= Subject key identifier: 17:A2:70:F2:96:D3:A0:A1:77:74:59:64:77:7F:17:57:EB:5E:33:0A Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9 Certificate issuer: /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9 Certificate serial: 019BF95240866A53D2B4CAEC5E2366093FC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft Manifest number: 0DC6 Signing time: Mon 26 Jan 2026 08:01:15 +0000 Manifest this update: Mon 26 Jan 2026 08:01:15 +0000 Manifest next update: Tue 27 Jan 2026 08:01:15 +0000 Files and hashes: 1: 0YhVfBsZbIu7A5iYA94enjAmzkk.roa (hash: HsOjFTzanM+rOeHfu6ck2x7MS7PSUK04NQ5MvXhA+ZA=) 2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: mtxKqEMB8Cqe8CSBoOLdFW7QmUFqNP62Ir580JXK2t4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:52:40:86:6a:53:d2:b4:ca:ec:5e:23:66:09:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9 Validity Not Before: Jan 26 08:01:15 2026 GMT Not After : Jan 27 08:01:15 2026 GMT Subject: CN=17a270f296d3a0a177745964777f1757eb5e330a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4d:0c:d7:58:71:bf:6c:17:8c:41:d3:a9:95: 08:37:80:2d:94:10:77:5e:be:a9:f2:31:ca:4c:9c: 91:ab:37:d4:a2:21:a4:09:b9:fd:ff:0c:d7:95:ae: f6:5e:07:46:e9:42:9d:da:5c:98:27:70:bb:59:f4: bd:a4:2b:33:30:40:64:c4:6f:4e:c7:c8:87:06:63: 08:91:20:ca:32:fc:24:37:b7:af:5f:2b:27:71:d0: 73:c8:4f:36:27:98:b8:1a:2d:f8:3b:a0:f4:59:64: e4:91:fb:80:b2:c1:15:5c:d1:14:dc:3e:ee:2e:76: 93:52:e0:3a:62:01:0f:c4:c8:05:5b:8b:b9:41:4a: 83:00:90:e6:94:cc:56:15:34:ba:23:46:99:65:4e: 02:aa:6e:bd:7f:20:51:32:f2:cb:89:aa:c2:f2:bd: ad:a8:ed:45:ba:18:ed:be:b7:55:75:47:2c:83:ca: d9:0b:eb:74:51:35:71:f2:cd:68:be:1c:5b:0a:2e: 78:c1:77:f2:29:23:1b:1d:e4:01:de:c8:11:17:15: e0:81:47:34:9c:dd:bd:f4:bb:62:1a:4e:32:5a:06: 1b:29:de:4e:3c:1d:b3:d1:19:51:68:ad:11:15:bd: 0c:48:e9:bc:ab:29:32:fb:e7:56:fc:6a:5b:3e:79: 72:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A2:70:F2:96:D3:A0:A1:77:74:59:64:77:7F:17:57:EB:5E:33:0A X509v3 Authority Key Identifier: keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b7:a5:e6:73:20:47:16:ca:8e:f3:f3:1f:74:6d:99:eb:09: f1:e7:a7:f4:03:b0:ca:f1:6c:26:4c:d6:5f:02:3f:5c:0b:d1: 95:7d:7d:7f:87:bf:66:a5:96:b7:dc:98:3a:e3:b0:16:43:2e: a0:91:ac:ec:98:87:8a:b6:5d:7d:a3:3a:40:07:3f:03:e7:06: 56:46:08:72:4f:5f:c4:6a:21:63:9b:3c:d4:cb:2a:8c:69:4d: 71:fc:84:88:b8:ee:54:4f:e7:8d:b3:9d:e6:81:65:97:4b:c5: 4f:32:af:b1:2d:7e:19:64:20:74:a1:46:15:ad:09:02:a6:02: e8:4d:21:0f:02:7d:39:e0:d5:fb:59:04:d5:66:68:63:d7:fc: 16:e0:35:07:c2:b1:51:a9:bf:76:0e:2a:db:f5:69:18:ce:f6: 44:a1:38:c2:44:69:70:50:fb:12:c6:8b:53:6c:02:c2:c2:fd: db:d6:19:1d:6d:2a:a1:26:87:f9:fb:c2:ad:e7:87:c0:29:d5: 58:15:37:40:49:e0:c1:12:26:a8:b1:6f:07:3a:5d:a1:6d:30: ba:b9:1c:51:b4:e5:d5:48:08:7e:16:f1:df:ac:2d:8f:c2:5b: 9e:4b:6d:ab:ca:58:85:96:a2:35:fb:51:bd:b7:ba:ff:63:c1: 8e:e6:25:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UkCGalPStMrsXiNmCT/AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZmY5YTMzMGQ1M2Q2MjEyMzRhNmQxNDk4Y2U1YTQzMzAz ZTllZjkwHhcNMjYwMTI2MDgwMTE1WhcNMjYwMTI3MDgwMTE1WjAzMTEwLwYDVQQD EygxN2EyNzBmMjk2ZDNhMGExNzc3NDU5NjQ3NzdmMTc1N2ViNWUzMzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs00M11hxv2wXjEHTqZUIN4AtlBB3 Xr6p8jHKTJyRqzfUoiGkCbn9/wzXla72XgdG6UKd2lyYJ3C7WfS9pCszMEBkxG9O x8iHBmMIkSDKMvwkN7evXysncdBzyE82J5i4Gi34O6D0WWTkkfuAssEVXNEU3D7u LnaTUuA6YgEPxMgFW4u5QUqDAJDmlMxWFTS6I0aZZU4Cqm69fyBRMvLLiarC8r2t qO1FuhjtvrdVdUcsg8rZC+t0UTVx8s1ovhxbCi54wXfyKSMbHeQB3sgRFxXggUc0 nN299LtiGk4yWgYbKd5OPB2z0RlRaK0RFb0MSOm8qyky++dW/GpbPnlyawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBeicPKW06Chd3RZZHd/F1frXjMKMB8GA1UdIwQY MBaAFHj/mjMNU9YhI0ptFJjOWkMwPp75MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVAtYU13MVQxaUVqU20wVW1NNWFRekEtbnZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82N2RkOWEtMzdlMS00Mjg1LTk1ZGEt ZjI4OGQyMDk3YTMwLzEvZVAtYU13MVQxaUVqU20wVW1NNWFRekEtbnZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS82N2RkOWEtMzdlMS00Mjg1LTk1ZGEtZjI4OGQyMDk3YTMw LzEvZVAtYU13MVQxaUVqU20wVW1NNWFRekEtbnZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7el5nMg RxbKjvPzH3RtmesJ8een9AOwyvFsJkzWXwI/XAvRlX19f4e/ZqWWt9yYOuOwFkMu oJGs7JiHirZdfaM6QAc/A+cGVkYIck9fxGohY5s81MsqjGlNcfyEiLjuVE/njbOd 5oFll0vFTzKvsS1+GWQgdKFGFa0JAqYC6E0hDwJ9OeDV+1kE1WZoY9f8FuA1B8Kx Uam/dg4q2/VpGM72RKE4wkRpcFD7EsaLU2wCwsL929YZHW0qoSaH+fvCreeHwCnV WBU3QEngwRImqLFvBzpdoW0wurkcUbTl1UgIfhbx36wtj8Jbnkttq8pYhZaiNftR vbe6/2PBjuYlHA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:58:13 2026 by rpki-client