This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft File: zHrEehn2b0GDl-6l_vFaB_8sACM.mft (raw, json) Hash identifier: BPLptjZ4OIqMVoRGuqc+Z28uixdO+MHjAJ8GBdX/oOk= Subject key identifier: 6D:E2:09:B9:31:83:AD:4A:18:45:15:8E:19:75:F1:DF:39:A9:A7:F3 Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23 Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023 Certificate serial: 019BF988839E280D156263370B9F49BE9CEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 09:00:31 +0000 Manifest this update: Mon 26 Jan 2026 09:00:31 +0000 Manifest next update: Tue 27 Jan 2026 09:00:31 +0000 Files and hashes: 1: 4lysncKwxgSAj9n9yli9Am0CcOE.roa (hash: jyfAwSL6x2o2QJ3Pd5vHV7+3sGhamJlWvutXDf8SBf4=) 2: AENYJALANSjKlBoltdKemnCFKjs.roa (hash: s2OVjDuX6iIGr8lYPRWiO+GCWriVBdcRjsgW+JAkKFY=) 3: zHrEehn2b0GDl-6l_vFaB_8sACM.crl (hash: I7rFbiqMzPNj9BbgjfyTDEkoXIiL4R5p8PwugGnbcAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:88:83:9e:28:0d:15:62:63:37:0b:9f:49:be:9c:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023 Validity Not Before: Jan 26 09:00:31 2026 GMT Not After : Jan 27 09:00:31 2026 GMT Subject: CN=6de209b93183ad4a1845158e1975f1df39a9a7f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5a:d4:d8:fd:e0:01:ac:d8:1f:b2:1f:a3:16: 98:de:f9:f2:34:fe:5d:44:1c:1f:97:06:cd:b3:31: fa:e1:4b:4b:2f:e5:75:0d:70:b3:b2:f6:18:2c:2b: 0e:b3:3b:f5:83:5f:db:32:a9:89:67:e7:47:2c:a0: fe:c0:27:a5:bf:a6:e3:4f:52:59:40:f8:bb:f5:8a: bb:ad:ae:c2:aa:28:8e:20:ce:72:50:ac:d7:e5:1e: 79:a5:09:d2:e6:4e:de:ac:d9:43:fa:1b:e2:ee:f8: 3f:25:4e:20:bd:44:bc:79:b3:af:19:e8:56:b2:87: da:e9:f4:db:ae:7b:7f:fa:27:44:aa:fe:24:85:ff: 53:f1:e7:41:10:09:4c:58:27:d7:56:4a:0f:56:3d: 91:60:88:c9:57:5a:f0:3c:f8:00:15:84:5f:de:aa: d4:b9:ef:74:3f:0c:ba:47:ca:45:ca:7a:55:ab:4a: e1:45:a3:18:e5:88:1e:7c:58:52:5e:7e:56:18:88: 95:e2:2d:89:e3:4f:53:db:e0:8f:32:99:04:2c:be: d2:2d:bf:c0:6b:0e:d0:b4:2c:e7:f1:bf:70:67:c6: 88:8e:a6:9c:26:e3:f3:96:a4:08:06:5e:0c:20:40: 71:2c:ee:4b:eb:38:10:5e:62:76:0b:cc:f7:3e:29: 63:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E2:09:B9:31:83:AD:4A:18:45:15:8E:19:75:F1:DF:39:A9:A7:F3 X509v3 Authority Key Identifier: keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:4f:2e:23:f2:56:cd:93:83:b3:43:79:ff:a6:5d:ee:42:4b: 38:85:ba:05:00:0f:14:51:dd:41:53:89:c2:9c:b1:0e:50:1d: af:a5:1f:cf:9c:47:3b:dd:c3:40:93:f2:4d:e4:92:b8:d2:7b: ee:8a:69:82:32:46:0e:e4:d2:78:83:c2:9b:7b:dd:ef:2f:90: 74:ed:df:31:19:01:d1:7a:e1:e1:b3:20:ce:9d:01:dd:8e:a5: be:ea:2e:77:9a:45:f8:fd:b4:24:21:c5:b6:84:36:73:19:37: 26:26:27:21:6e:a3:0c:26:0a:54:16:74:ca:5c:08:58:af:2b: ae:19:b9:be:98:e6:a8:4c:4c:0b:8f:62:77:6e:d7:90:fd:63: d6:16:59:ae:11:62:85:d5:7a:8e:86:15:0f:1b:ab:ab:e2:90: b6:ac:86:33:c2:4b:fa:cb:14:c9:e1:e5:79:a1:e4:b4:1e:c1: 2b:c8:7e:c1:e2:ff:e0:c7:2c:c3:2e:4c:88:f7:d4:d9:0d:31: 16:11:32:06:21:c3:bc:f0:5e:fd:1c:23:22:61:24:bd:f7:b1: eb:4c:46:84:f0:01:22:61:f8:95:3b:40:ff:bf:9e:79:21:8e: 03:f0:ae:7e:d0:98:09:99:d6:f0:aa:c0:e6:d9:d8:c4:d1:0f: 36:f8:91:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iIOeKA0VYmM3C59JvpzuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjN2FjNDdhMTlmNjZmNDE4Mzk3ZWVhNWZlZjE1YTA3ZmYy YzAwMjMwHhcNMjYwMTI2MDkwMDMxWhcNMjYwMTI3MDkwMDMxWjAzMTEwLwYDVQQD Eyg2ZGUyMDliOTMxODNhZDRhMTg0NTE1OGUxOTc1ZjFkZjM5YTlhN2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FrU2P3gAazYH7IfoxaY3vnyNP5d RBwflwbNszH64UtLL+V1DXCzsvYYLCsOszv1g1/bMqmJZ+dHLKD+wCelv6bjT1JZ QPi79Yq7ra7CqiiOIM5yUKzX5R55pQnS5k7erNlD+hvi7vg/JU4gvUS8ebOvGehW sofa6fTbrnt/+idEqv4khf9T8edBEAlMWCfXVkoPVj2RYIjJV1rwPPgAFYRf3qrU ue90Pwy6R8pFynpVq0rhRaMY5YgefFhSXn5WGIiV4i2J409T2+CPMpkELL7SLb/A aw7QtCzn8b9wZ8aIjqacJuPzlqQIBl4MIEBxLO5L6zgQXmJ2C8z3Pilj2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3iCbkxg61KGEUVjhl18d85qafzMB8GA1UdIwQY MBaAFMx6xHoZ9m9Bg5fupf7xWgf/LAAjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekhyRWVobjJiMEdEbC02bF92RmFCXzhzQUNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hNzU2OGYtNDQwYi00YTllLWJiM2Et M2VlMWU2OTkxMjY5LzEvekhyRWVobjJiMEdEbC02bF92RmFCXzhzQUNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hNzU2OGYtNDQwYi00YTllLWJiM2EtM2VlMWU2OTkxMjY5 LzEvekhyRWVobjJiMEdEbC02bF92RmFCXzhzQUNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEk8uI/JW zZODs0N5/6Zd7kJLOIW6BQAPFFHdQVOJwpyxDlAdr6Ufz5xHO93DQJPyTeSSuNJ7 7oppgjJGDuTSeIPCm3vd7y+QdO3fMRkB0Xrh4bMgzp0B3Y6lvuoud5pF+P20JCHF toQ2cxk3JiYnIW6jDCYKVBZ0ylwIWK8rrhm5vpjmqExMC49id27XkP1j1hZZrhFi hdV6joYVDxurq+KQtqyGM8JL+ssUyeHleaHktB7BK8h+weL/4Mcswy5MiPfU2Q0x FhEyBiHDvPBe/RwjImEkvfex60xGhPABImH4lTtA/7+eeSGOA/CuftCYCZnW8KrA 5tnYxNEPNviRQg== -----END CERTIFICATE-----Generated at Mon Jan 26 18:18:07 2026 by rpki-client