This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft File: EsRb041L3Gjj153gJE3wbS7LZgk.mft (raw, json) Hash identifier: Ud2ahu4BjsZ4udqQqZwjKMr6YH4Kuce3P5umVL3jllo= Subject key identifier: 63:21:11:EF:70:87:04:00:E3:1A:32:B2:A8:37:0E:85:90:90:67:A2 Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09 Certificate issuer: /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609 Certificate serial: 019BF8AD6BB5319A14DB4B6A63DE06937F21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft Manifest number: 1350 Signing time: Mon 26 Jan 2026 05:01:13 +0000 Manifest this update: Mon 26 Jan 2026 05:01:13 +0000 Manifest next update: Tue 27 Jan 2026 05:01:13 +0000 Files and hashes: 1: EsRb041L3Gjj153gJE3wbS7LZgk.crl (hash: n3pjVzyNvRaGg01HxZnTGPV6VsnVzJlVc1FcK2uax2k=) 2: _1gDjO3zyeb5ku_j0UHNCnoUFl4.roa (hash: rM83OC0RM5ILeCqPDY5cHlMlGdSPagD0ddTyBgkH61k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:6b:b5:31:9a:14:db:4b:6a:63:de:06:93:7f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609 Validity Not Before: Jan 26 05:01:13 2026 GMT Not After : Jan 27 05:01:13 2026 GMT Subject: CN=632111ef70870400e31a32b2a8370e85909067a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dc:a0:89:ef:08:58:96:f2:5d:a8:c8:b6:da: f5:ca:f5:95:c6:95:d4:65:41:0f:41:1e:3f:6c:1e: 2a:32:6d:a4:d5:54:97:49:75:6a:b9:96:25:80:9c: 3c:d6:3f:f5:4a:2c:74:95:2c:b1:69:6d:34:fd:73: 29:72:33:24:de:b7:a4:3f:89:d1:e9:18:71:c0:49: 31:bc:56:d5:21:1b:21:7b:10:b4:7c:43:3c:84:6a: 16:0a:f5:4a:3b:6c:a9:03:72:65:9d:f4:82:a0:7f: e4:31:ec:fa:8d:96:28:1d:b2:8f:e9:ad:b0:23:e4: 0a:12:09:4f:ae:4b:0f:66:e9:38:43:f8:f8:25:97: 4f:7d:91:bb:cc:4b:3f:b2:77:c3:fc:f2:7f:38:05: 29:28:f7:51:fd:68:03:ae:3e:cd:10:64:2a:92:63: 01:eb:75:ba:40:8c:d3:37:b6:2f:d6:ae:ee:bf:f6: e3:02:78:e2:5e:c3:43:b9:d6:37:a9:1b:f9:29:5f: 70:67:41:bf:25:3a:11:8e:28:93:c0:11:ed:f5:6f: 0d:0e:e4:d1:29:ed:12:b4:45:40:5f:1c:e8:ee:12: 88:6d:a1:71:f8:38:0a:e3:6f:c1:30:00:20:35:f8: 36:01:72:1a:04:28:4c:da:1f:6d:9e:31:27:92:3f: fd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:21:11:EF:70:87:04:00:E3:1A:32:B2:A8:37:0E:85:90:90:67:A2 X509v3 Authority Key Identifier: keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:38:b5:7e:03:2b:81:8e:5b:04:4e:70:69:4b:7f:6f:58:4a: 02:eb:6f:46:97:c0:74:61:29:ad:dd:ed:af:74:59:d1:39:82: 1c:33:66:63:26:93:53:ef:f8:da:b5:eb:de:b7:54:ed:4a:41: 83:7b:a7:b5:d8:b5:7c:18:8e:b5:37:51:2c:d6:0d:37:f3:5e: ce:e0:6d:88:5d:b4:e7:86:0d:0d:b7:ea:18:83:42:0d:d0:af: db:b4:5c:9a:51:0a:77:e8:08:e4:ae:fc:2a:2a:8a:32:56:a8: ea:c9:40:e4:40:ee:e5:02:84:22:ed:b3:85:bf:e1:54:0e:63: f7:39:09:66:79:ca:ef:d7:28:65:21:4a:56:28:66:30:c1:51: d5:af:64:4d:5f:f9:06:fe:3b:73:45:22:05:ef:39:2f:0e:c4: a6:ab:07:45:c6:57:a3:58:92:50:73:cc:23:20:5e:20:bc:9d: ae:85:d0:e8:54:97:90:f8:85:02:77:c3:06:e3:a7:cd:a3:75: 4c:ae:13:28:29:d1:43:c9:8c:35:c5:a7:c0:80:9a:dd:ba:71: ff:cd:19:f3:2d:9e:c7:29:47:bd:70:88:14:59:cf:83:f1:03: ad:c1:7f:0c:d0:20:fd:a3:7d:b7:33:0e:84:54:ee:18:46:de: 8a:05:02:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rWu1MZoU20tqY94Gk38hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYzQ1YmQzOGQ0YmRjNjhlM2Q3OWRlMDI0NGRmMDZkMmVj YjY2MDkwHhcNMjYwMTI2MDUwMTEzWhcNMjYwMTI3MDUwMTEzWjAzMTEwLwYDVQQD Eyg2MzIxMTFlZjcwODcwNDAwZTMxYTMyYjJhODM3MGU4NTkwOTA2N2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNygie8IWJbyXajIttr1yvWVxpXU ZUEPQR4/bB4qMm2k1VSXSXVquZYlgJw81j/1Six0lSyxaW00/XMpcjMk3rekP4nR 6RhxwEkxvFbVIRshexC0fEM8hGoWCvVKO2ypA3JlnfSCoH/kMez6jZYoHbKP6a2w I+QKEglPrksPZuk4Q/j4JZdPfZG7zEs/snfD/PJ/OAUpKPdR/WgDrj7NEGQqkmMB 63W6QIzTN7Yv1q7uv/bjAnjiXsNDudY3qRv5KV9wZ0G/JToRjiiTwBHt9W8NDuTR Ke0StEVAXxzo7hKIbaFx+DgK42/BMAAgNfg2AXIaBChM2h9tnjEnkj/9vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMhEe9whwQA4xoysqg3DoWQkGeiMB8GA1UdIwQY MBaAFBLEW9ONS9xo49ed4CRN8G0uy2YJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNSYjA0MUwzR2pqMTUzZ0pFM3diUzdMWmdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81Y2I1NDQtNTA0Zi00OGJmLWIxMDUt MjIwMjhhNzg2ZjYwLzEvRXNSYjA0MUwzR2pqMTUzZ0pFM3diUzdMWmdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS81Y2I1NDQtNTA0Zi00OGJmLWIxMDUtMjIwMjhhNzg2ZjYw LzEvRXNSYjA0MUwzR2pqMTUzZ0pFM3diUzdMWmdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTi1fgMr gY5bBE5waUt/b1hKAutvRpfAdGEprd3tr3RZ0TmCHDNmYyaTU+/42rXr3rdU7UpB g3untdi1fBiOtTdRLNYNN/NezuBtiF2054YNDbfqGINCDdCv27RcmlEKd+gI5K78 KiqKMlao6slA5EDu5QKEIu2zhb/hVA5j9zkJZnnK79coZSFKVihmMMFR1a9kTV/5 Bv47c0UiBe85Lw7EpqsHRcZXo1iSUHPMIyBeILydroXQ6FSXkPiFAnfDBuOnzaN1 TK4TKCnRQ8mMNcWnwICa3bpx/80Z8y2exylHvXCIFFnPg/EDrcF/DNAg/aN9tzMO hFTuGEbeigUCnw== -----END CERTIFICATE-----Generated at Mon Jan 26 11:48:32 2026 by rpki-client