This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft File: eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft (raw, json) Hash identifier: fos/spXUMX/ihE2w/UMAGYxwnnk7nAZr2x0FIvKz6+k= Subject key identifier: 87:4B:53:02:EB:DA:A7:C1:7B:65:11:F8:D5:C8:53:19:91:0E:0C:0B Authority key identifier: 79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A Certificate issuer: /CN=794f253abffa3214cda8dc99599e5e7c664abf4a Certificate serial: 019BF3BD6899ABC7D50C30DE99716F9A4B29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft Manifest number: 0433 Signing time: Sun 25 Jan 2026 06:00:35 +0000 Manifest this update: Sun 25 Jan 2026 06:00:35 +0000 Manifest next update: Mon 26 Jan 2026 06:00:35 +0000 Files and hashes: 1: Taq-VnAV0GtRFkkJ8jADCy9IBA4.roa (hash: YbxVfzZLxN4dbnEpk9Qnj+ot0+OX2VpkljxxR5pMXWk=) 2: eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl (hash: YJuhB8fo0q82OPxfP8/Zqi/L+ViGi9SjL2qDXiLIKFg=) 3: odXhA_xZijYQgRVHy6_dtJpV9S4.roa (hash: phjPAghGyg2dhEtydU7dRYb/McKqEnDMEOpSwT4IJtY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:68:99:ab:c7:d5:0c:30:de:99:71:6f:9a:4b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=794f253abffa3214cda8dc99599e5e7c664abf4a Validity Not Before: Jan 25 06:00:35 2026 GMT Not After : Jan 26 06:00:35 2026 GMT Subject: CN=874b5302ebdaa7c17b6511f8d5c85319910e0c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:27:d6:59:7f:e4:4f:ce:5d:bc:da:d4:d2:22: c8:13:08:fa:f6:d9:af:6a:bf:46:93:50:92:f5:64: bd:e0:0d:f9:1e:c4:f6:38:14:ee:0b:1a:00:98:71: 71:46:21:e2:b5:df:de:0b:d3:e7:6d:0a:5e:03:d2: 49:65:28:61:35:21:f8:12:6a:f0:ef:08:00:8a:1a: 44:3b:5c:17:f7:db:a7:bf:e2:04:97:63:00:dd:30: 13:3a:1a:41:87:0d:10:0e:d9:01:ba:08:1b:1b:e5: 99:40:ba:86:b6:ba:4f:a5:b7:64:fa:90:5c:dd:ec: 46:58:41:0a:6e:74:05:94:43:5b:31:b3:02:0f:06: d4:7a:c9:7b:fe:42:21:5c:b8:ab:e6:4e:60:f9:e0: 6d:ac:db:14:e4:be:3e:61:3f:f3:6e:d1:93:de:94: 10:9d:f6:e9:29:a5:69:93:38:26:e8:ef:9d:89:6d: 1e:0b:ac:d9:d4:05:9b:30:14:e7:5e:5b:54:95:0f: 08:ec:05:a1:7f:d1:6b:ea:f2:55:57:b8:2c:86:67: 1f:79:7d:4f:33:75:4e:df:55:3d:46:1b:fb:78:05: 43:9a:f6:de:e6:85:59:d4:72:f8:d0:38:48:15:1e: b6:50:1b:e6:22:b2:72:18:c0:91:37:53:83:a5:fd: ed:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4B:53:02:EB:DA:A7:C1:7B:65:11:F8:D5:C8:53:19:91:0E:0C:0B X509v3 Authority Key Identifier: keyid:79:4F:25:3A:BF:FA:32:14:CD:A8:DC:99:59:9E:5E:7C:66:4A:BF:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU8lOr_6MhTNqNyZWZ5efGZKv0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b523db-842d-4267-be87-e6df8edabfb8/1/eU8lOr_6MhTNqNyZWZ5efGZKv0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:67:58:82:68:bc:fe:8e:7a:ee:b3:37:96:3f:fa:a1:f7:65: 16:eb:c5:32:6c:d4:92:5f:0d:ab:c1:f4:57:f2:22:ad:28:45: b3:c4:c0:d6:d5:2a:78:40:4d:8e:54:5b:70:be:98:40:aa:1d: b1:42:f3:62:ed:bc:31:99:67:b9:9b:63:6b:a6:33:87:98:61: ea:e8:43:74:13:13:60:6d:cc:28:58:17:d9:7d:18:f7:61:95: 72:a9:02:9c:84:06:5f:25:d1:40:1f:41:e0:34:2e:a0:ff:d3: 23:72:63:9f:5a:83:01:65:51:89:10:52:d2:69:95:54:b9:dc: 16:c3:48:ec:e8:71:be:ad:6a:0a:b9:b3:5c:7a:93:6f:5f:6e: ef:55:05:1d:2d:40:41:d7:31:1d:8b:69:49:41:a2:18:a8:cd: 62:5b:36:b7:d8:29:48:7e:3a:9b:d3:2a:c3:35:8c:ff:1b:e4: 35:6c:db:33:b6:c8:35:86:fe:08:ce:4a:2f:de:1c:db:cd:e1: 2c:99:62:01:01:6c:0c:1c:81:b3:71:d1:ff:4e:9e:ab:e4:d8: 54:29:19:d9:62:67:81:0c:09:f9:91:9d:b9:04:82:a5:38:78: 76:0a:59:21:e5:d4:08:50:96:60:cc:df:d8:23:04:3b:4a:55: d6:58:97:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvWiZq8fVDDDemXFvmkspMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NGYyNTNhYmZmYTMyMTRjZGE4ZGM5OTU5OWU1ZTdjNjY0 YWJmNGEwHhcNMjYwMTI1MDYwMDM1WhcNMjYwMTI2MDYwMDM1WjAzMTEwLwYDVQQD Eyg4NzRiNTMwMmViZGFhN2MxN2I2NTExZjhkNWM4NTMxOTkxMGUwYzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SfWWX/kT85dvNrU0iLIEwj69tmv ar9Gk1CS9WS94A35HsT2OBTuCxoAmHFxRiHitd/eC9PnbQpeA9JJZShhNSH4Emrw 7wgAihpEO1wX99unv+IEl2MA3TATOhpBhw0QDtkBuggbG+WZQLqGtrpPpbdk+pBc 3exGWEEKbnQFlENbMbMCDwbUesl7/kIhXLir5k5g+eBtrNsU5L4+YT/zbtGT3pQQ nfbpKaVpkzgm6O+diW0eC6zZ1AWbMBTnXltUlQ8I7AWhf9Fr6vJVV7gshmcfeX1P M3VO31U9Rhv7eAVDmvbe5oVZ1HL40DhIFR62UBvmIrJyGMCRN1ODpf3tvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdLUwLr2qfBe2UR+NXIUxmRDgwLMB8GA1UdIwQY MBaAFHlPJTq/+jIUzajcmVmeXnxmSr9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVU4bE9yXzZNaFROcU55WldaNWVmR1pLdjBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iNTIzZGItODQyZC00MjY3LWJlODct ZTZkZjhlZGFiZmI4LzEvZVU4bE9yXzZNaFROcU55WldaNWVmR1pLdjBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iNTIzZGItODQyZC00MjY3LWJlODctZTZkZjhlZGFiZmI4 LzEvZVU4bE9yXzZNaFROcU55WldaNWVmR1pLdjBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiGdYgmi8 /o567rM3lj/6ofdlFuvFMmzUkl8Nq8H0V/IirShFs8TA1tUqeEBNjlRbcL6YQKod sULzYu28MZlnuZtja6Yzh5hh6uhDdBMTYG3MKFgX2X0Y92GVcqkCnIQGXyXRQB9B 4DQuoP/TI3Jjn1qDAWVRiRBS0mmVVLncFsNI7Ohxvq1qCrmzXHqTb19u71UFHS1A QdcxHYtpSUGiGKjNYls2t9gpSH46m9MqwzWM/xvkNWzbM7bINYb+CM5KL94c283h LJliAQFsDByBs3HR/06eq+TYVCkZ2WJngQwJ+ZGduQSCpTh4dgpZIeXUCFCWYMzf 2CMEO0pV1liXDg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:23:41 2026 by rpki-client