This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft File: eHl3C__BTZzftXTshmyq8TVy9Fw.mft (raw, json) Hash identifier: fWZUFoLcrPdp+RYo0zUIsmlCR/aN8+JN8EXQaE3E1JQ= Subject key identifier: 1F:D4:D4:17:0C:71:92:8F:91:CC:B8:DF:A5:6B:2C:58:10:EC:7D:33 Authority key identifier: 78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C Certificate issuer: /CN=7879770bffc14d9cdfb574ec866caaf13572f45c Certificate serial: 019BF50749818A9CE1774FB4AB98E68DFAE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft Manifest number: 14A8 Signing time: Sun 25 Jan 2026 12:00:53 +0000 Manifest this update: Sun 25 Jan 2026 12:00:53 +0000 Manifest next update: Mon 26 Jan 2026 12:00:53 +0000 Files and hashes: 1: eHl3C__BTZzftXTshmyq8TVy9Fw.crl (hash: r/tUXHAt7LPpeRUT98rJReRWP++SIlB9/yVeVcc3SZ0=) 2: haFw3q9tFoad6JUgiF-KPVOV4eM.roa (hash: e1I2SrRGxtbgkFSgcz9jLZjRjE847NKvzw0g1roFc00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:49:81:8a:9c:e1:77:4f:b4:ab:98:e6:8d:fa:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7879770bffc14d9cdfb574ec866caaf13572f45c Validity Not Before: Jan 25 12:00:53 2026 GMT Not After : Jan 26 12:00:53 2026 GMT Subject: CN=1fd4d4170c71928f91ccb8dfa56b2c5810ec7d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:de:6d:26:0e:1e:cb:94:24:26:ca:c4:e9:27: ab:2b:0e:26:23:ab:94:fc:74:8c:b9:49:1e:29:67: ac:82:94:6e:fa:5f:b6:1b:3d:1d:8a:9e:34:21:85: 4e:77:3a:85:95:ab:42:bc:c2:ca:ae:6d:2b:fd:b3: 99:9b:65:9a:d9:55:eb:c1:9c:7c:91:a9:49:07:d1: 57:71:30:75:d6:26:e8:b7:49:be:42:46:b6:9a:82: 59:8e:b0:e8:cd:06:38:5d:4e:df:ef:86:b8:89:6d: 84:2e:9e:a8:af:03:67:6e:c8:b2:c8:48:a9:7a:d9: d6:e2:32:70:95:22:3d:e7:bf:9b:d8:f7:0d:1a:ae: f0:69:60:e0:30:71:e8:b0:90:67:da:f7:e1:78:45: 79:20:41:aa:f3:14:5d:38:c0:69:f2:0c:9d:38:21: c6:19:80:1e:52:ab:55:32:0f:e6:e8:fc:95:eb:80: 0c:eb:59:7d:c1:ff:f0:b4:ad:40:67:63:1a:a1:97: 1a:6b:63:8d:5b:7c:15:a3:57:a7:ab:c1:aa:66:c4: 88:35:d1:b9:87:37:d6:69:da:ad:f3:f3:86:d7:5a: 76:f7:0f:ed:a0:72:94:8e:4c:25:eb:a3:87:05:f5: 46:9f:80:a5:59:ad:c8:da:b7:3e:06:e7:65:68:ce: c6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D4:D4:17:0C:71:92:8F:91:CC:B8:DF:A5:6B:2C:58:10:EC:7D:33 X509v3 Authority Key Identifier: keyid:78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:5d:49:8d:82:04:0d:e5:d5:62:bd:47:6b:7a:bb:8a:4b:eb: 5f:d0:b8:a5:84:ac:7d:87:e1:55:78:4e:c7:88:c6:0a:b9:6b: ad:ad:e7:a3:25:a5:33:8b:44:6e:00:d4:e0:6c:af:59:fb:81: 8e:f1:fb:8f:93:57:cc:bc:df:d8:98:f9:cc:ab:1b:5e:cb:f7: 98:0b:0d:b0:69:cb:4b:bb:cb:b7:d4:2f:64:bb:9f:c0:65:c9: f5:ef:3a:88:70:a3:c4:98:8c:da:ee:ad:66:b7:0f:4e:9b:61: d4:16:9d:f1:5d:b2:bb:72:60:6f:7b:6d:69:5f:c4:3c:78:8e: 8f:c4:2d:34:ad:31:85:dd:30:8f:41:78:fe:7b:95:11:71:b9: af:95:44:a0:75:44:f2:a5:18:45:68:b4:fa:74:32:a1:81:7c: 5e:5c:3c:98:89:d2:e1:52:86:17:e3:89:61:6f:af:38:3f:43: 0d:c6:f5:57:d9:71:35:5f:41:28:1f:ed:4e:11:3a:72:1c:f0: 1c:0a:37:c8:ed:81:dc:3a:0d:0b:87:12:f4:79:2e:19:89:b5: a3:0e:c8:34:8a:83:64:4c:1e:47:a4:08:ce:9a:21:95:52:e5: 35:90:90:2c:2b:cd:78:73:e9:7f:3b:e1:f2:f3:30:14:87:54: a7:19:ca:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B0mBipzhd0+0q5jmjfrpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4Nzk3NzBiZmZjMTRkOWNkZmI1NzRlYzg2NmNhYWYxMzU3 MmY0NWMwHhcNMjYwMTI1MTIwMDUzWhcNMjYwMTI2MTIwMDUzWjAzMTEwLwYDVQQD EygxZmQ0ZDQxNzBjNzE5MjhmOTFjY2I4ZGZhNTZiMmM1ODEwZWM3ZDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt5tJg4ey5QkJsrE6SerKw4mI6uU /HSMuUkeKWesgpRu+l+2Gz0dip40IYVOdzqFlatCvMLKrm0r/bOZm2Wa2VXrwZx8 kalJB9FXcTB11ibot0m+Qka2moJZjrDozQY4XU7f74a4iW2ELp6orwNnbsiyyEip etnW4jJwlSI957+b2PcNGq7waWDgMHHosJBn2vfheEV5IEGq8xRdOMBp8gydOCHG GYAeUqtVMg/m6PyV64AM61l9wf/wtK1AZ2MaoZcaa2ONW3wVo1enq8GqZsSINdG5 hzfWadqt8/OG11p29w/toHKUjkwl66OHBfVGn4ClWa3I2rc+BudlaM7GBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/U1BcMcZKPkcy436VrLFgQ7H0zMB8GA1UdIwQY MBaAFHh5dwv/wU2c37V07IZsqvE1cvRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zN2UyNmYtNTdiOC00MDgwLWI4MzIt ZWU3MzEzNzE2NDk4LzEvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zN2UyNmYtNTdiOC00MDgwLWI4MzItZWU3MzEzNzE2NDk4 LzEvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEF1JjYIE DeXVYr1Ha3q7ikvrX9C4pYSsfYfhVXhOx4jGCrlrra3noyWlM4tEbgDU4GyvWfuB jvH7j5NXzLzf2Jj5zKsbXsv3mAsNsGnLS7vLt9QvZLufwGXJ9e86iHCjxJiM2u6t ZrcPTpth1Bad8V2yu3Jgb3ttaV/EPHiOj8QtNK0xhd0wj0F4/nuVEXG5r5VEoHVE 8qUYRWi0+nQyoYF8Xlw8mInS4VKGF+OJYW+vOD9DDcb1V9lxNV9BKB/tThE6chzw HAo3yO2B3DoNC4cS9HkuGYm1ow7INIqDZEweR6QIzpohlVLlNZCQLCvNeHPpfzvh 8vMwFIdUpxnKJA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:37:41 2026 by rpki-client