This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft File: eHl3C__BTZzftXTshmyq8TVy9Fw.mft (raw, json) Hash identifier: o+f3tzO0uSBip+8dE5ZLlsukOcwq8wRpal4kXhockCE= Subject key identifier: 6C:AA:62:B8:DC:62:AD:36:F4:BB:E4:F2:5A:4E:E4:F6:CB:3E:FC:5B Authority key identifier: 78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C Certificate issuer: /CN=7879770bffc14d9cdfb574ec866caaf13572f45c Certificate serial: 019BF6F611FF7E376CB0308069653EA5A59E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft Manifest number: 14A9 Signing time: Sun 25 Jan 2026 21:01:20 +0000 Manifest this update: Sun 25 Jan 2026 21:01:20 +0000 Manifest next update: Mon 26 Jan 2026 21:01:20 +0000 Files and hashes: 1: eHl3C__BTZzftXTshmyq8TVy9Fw.crl (hash: TOYOKzIyqBiOm71R0Zdyoo7p0vjf0ffWp7aXHXOld7Y=) 2: haFw3q9tFoad6JUgiF-KPVOV4eM.roa (hash: e1I2SrRGxtbgkFSgcz9jLZjRjE847NKvzw0g1roFc00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f6:11:ff:7e:37:6c:b0:30:80:69:65:3e:a5:a5:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7879770bffc14d9cdfb574ec866caaf13572f45c Validity Not Before: Jan 25 21:01:20 2026 GMT Not After : Jan 26 21:01:20 2026 GMT Subject: CN=6caa62b8dc62ad36f4bbe4f25a4ee4f6cb3efc5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:89:c0:16:f1:64:1f:d6:dd:44:67:d7:0f:2f: 96:38:db:d9:f5:da:ea:b1:90:a2:4e:12:e3:c9:fc: 11:46:a8:cd:ed:85:ce:38:b6:c3:55:88:26:e1:78: 46:a1:68:e7:ce:1b:38:51:57:6e:94:ee:65:ab:d4: 78:a0:e8:30:12:59:52:17:24:64:83:5a:09:00:4a: 5b:9e:f0:e3:83:36:5c:c6:8a:b6:b7:97:77:dd:4a: 4e:9b:74:7a:14:66:cf:90:5e:04:b7:31:69:eb:8f: e2:fe:c7:b1:1d:55:0c:c7:e1:15:b7:aa:8f:fe:b7: 8d:2b:a2:b6:51:a6:f0:e6:f7:d8:a6:8a:3e:ed:61: 57:b1:76:98:6c:27:48:45:df:97:37:7c:79:dd:ae: 5c:7b:0d:0b:ae:69:35:bb:d9:2d:25:3d:43:30:ab: 40:3a:a4:d7:16:17:aa:ed:28:5e:b3:aa:76:3c:4c: b2:2d:f8:ef:2d:d1:c0:44:da:a4:e2:8a:5c:52:b4: ab:6f:ab:c8:d5:c2:07:30:38:60:03:92:9c:f0:13: 90:af:d0:61:bf:91:64:41:93:a6:38:4b:e3:9d:b6: 1e:6e:30:2a:e0:9f:7d:b6:45:6c:fc:27:e3:03:b4: 28:05:e8:97:38:07:a6:e4:b6:90:ad:98:f2:45:c9: 9e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AA:62:B8:DC:62:AD:36:F4:BB:E4:F2:5A:4E:E4:F6:CB:3E:FC:5B X509v3 Authority Key Identifier: keyid:78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:27:84:43:b9:cb:32:a0:c0:7e:78:f1:7e:f0:32:aa:76:80: d4:7b:2a:58:e7:64:8b:6f:7f:b2:34:94:6b:ed:79:1d:32:e9: 18:4b:7e:51:9e:e9:f4:a5:a5:fb:5c:87:b7:65:db:c7:30:ef: 78:62:3e:c4:f8:89:40:00:3c:b7:52:ce:af:1a:ba:40:5f:43: 14:e8:78:4c:bf:c9:1b:59:24:72:56:d3:aa:3f:0a:ed:b0:fd: b9:dd:84:17:67:cf:af:46:be:a5:a5:fe:08:f5:44:7d:ca:ee: 4c:a3:90:23:69:01:ae:32:03:dc:9c:80:f9:47:3d:25:6e:00: ab:97:33:ff:8d:a2:d4:32:d2:97:cb:aa:a0:d8:49:42:14:a9: a3:6f:55:67:52:ec:52:db:22:1c:92:0d:39:ba:87:27:3a:e4: 23:ea:5d:ef:e1:27:8f:03:8c:55:f9:c0:33:f3:0b:d1:04:4b: 5b:2e:96:c9:53:ff:a9:aa:0d:ef:3f:2a:8b:48:25:39:08:4f: 6f:88:60:ce:41:cb:4d:81:bf:af:c0:1a:78:f1:79:29:37:81: 01:dc:42:b6:b2:14:aa:6e:f5:7a:23:e8:5a:89:0e:b4:02:72: 1d:5d:29:94:bf:4f:ee:66:64:a9:5e:cc:0a:4a:c0:ea:6d:d3: 1e:c7:09:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29hH/fjdssDCAaWU+paWeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4Nzk3NzBiZmZjMTRkOWNkZmI1NzRlYzg2NmNhYWYxMzU3 MmY0NWMwHhcNMjYwMTI1MjEwMTIwWhcNMjYwMTI2MjEwMTIwWjAzMTEwLwYDVQQD Eyg2Y2FhNjJiOGRjNjJhZDM2ZjRiYmU0ZjI1YTRlZTRmNmNiM2VmYzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4nAFvFkH9bdRGfXDy+WONvZ9drq sZCiThLjyfwRRqjN7YXOOLbDVYgm4XhGoWjnzhs4UVdulO5lq9R4oOgwEllSFyRk g1oJAEpbnvDjgzZcxoq2t5d33UpOm3R6FGbPkF4EtzFp64/i/sexHVUMx+EVt6qP /reNK6K2Uabw5vfYpoo+7WFXsXaYbCdIRd+XN3x53a5cew0Lrmk1u9ktJT1DMKtA OqTXFheq7Shes6p2PEyyLfjvLdHARNqk4opcUrSrb6vI1cIHMDhgA5Kc8BOQr9Bh v5FkQZOmOEvjnbYebjAq4J99tkVs/CfjA7QoBeiXOAem5LaQrZjyRcme5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGyqYrjcYq029Lvk8lpO5PbLPvxbMB8GA1UdIwQY MBaAFHh5dwv/wU2c37V07IZsqvE1cvRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zN2UyNmYtNTdiOC00MDgwLWI4MzIt ZWU3MzEzNzE2NDk4LzEvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zN2UyNmYtNTdiOC00MDgwLWI4MzItZWU3MzEzNzE2NDk4 LzEvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyeEQ7nL MqDAfnjxfvAyqnaA1HsqWOdki29/sjSUa+15HTLpGEt+UZ7p9KWl+1yHt2XbxzDv eGI+xPiJQAA8t1LOrxq6QF9DFOh4TL/JG1kkclbTqj8K7bD9ud2EF2fPr0a+paX+ CPVEfcruTKOQI2kBrjID3JyA+Uc9JW4Aq5cz/42i1DLSl8uqoNhJQhSpo29VZ1Ls UtsiHJINObqHJzrkI+pd7+EnjwOMVfnAM/ML0QRLWy6WyVP/qaoN7z8qi0glOQhP b4hgzkHLTYG/r8AaePF5KTeBAdxCtrIUqm71eiPoWokOtAJyHV0plL9P7mZkqV7M CkrA6m3THscJjA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:13:52 2026 by rpki-client