This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft File: ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft (raw, json) Hash identifier: 51DdWHQ8l0PFyM3ggAxPZr/3SwxNmUVqyeGDXxCt5Jk= Subject key identifier: 0B:D7:41:A3:D0:15:39:5B:33:D8:B9:04:7B:24:CE:58:67:03:97:61 Authority key identifier: 11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A Certificate issuer: /CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a Certificate serial: 019BF7D253A1C55E8DF76538E9A2B2EECC67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft Manifest number: 0FDF Signing time: Mon 26 Jan 2026 01:01:54 +0000 Manifest this update: Mon 26 Jan 2026 01:01:54 +0000 Manifest next update: Tue 27 Jan 2026 01:01:54 +0000 Files and hashes: 1: ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl (hash: axKXmr+vWXwmVXRLjMD6XD97AOnhsuxoxLXXunp9uTU=) 2: Ow_V3D3LkyTM_r00ewpLU-JasWM.roa (hash: n2QpzWe5qjli0Yj1OxzqDbdWwdmykVdSNeAfSZ+0exo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:53:a1:c5:5e:8d:f7:65:38:e9:a2:b2:ee:cc:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a Validity Not Before: Jan 26 01:01:54 2026 GMT Not After : Jan 27 01:01:54 2026 GMT Subject: CN=0bd741a3d015395b33d8b9047b24ce5867039761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:43:3f:68:c4:ed:b6:dd:00:76:51:f8:3f:1a: 8b:dc:39:53:9f:43:f1:23:c4:f0:7c:3a:21:5f:13: 69:a5:09:87:f8:46:b7:2f:68:11:fc:d7:30:00:32: 49:df:e3:85:72:05:b3:98:9b:5d:14:c6:22:4d:eb: 0e:84:30:98:4f:3f:72:78:f0:27:85:61:9c:c2:57: 9f:e3:18:0e:ab:d5:69:af:b8:4d:8e:ac:31:a8:87: 4b:29:37:ea:4e:e3:77:50:c2:15:e0:f5:28:bc:71: 8b:bf:10:58:cb:5c:dc:51:82:c6:1b:ef:dc:7d:db: 33:e7:40:37:cb:9b:12:3f:d9:16:51:b2:d9:7e:3a: 4e:7d:05:de:54:fa:02:c1:80:ab:ef:ec:0a:69:3c: 16:4d:c4:71:a1:fa:9b:84:31:77:68:83:59:c6:e6: 87:f6:e4:2d:dd:22:75:07:5a:c3:0e:6b:da:11:11: 5b:b5:0a:5c:33:d6:fa:f1:f2:97:11:5b:d4:09:ed: ae:83:88:6e:12:a1:15:97:87:10:ac:9b:2c:8a:8b: a6:79:eb:a8:73:4b:bc:3b:36:b3:b7:a5:35:ab:34: 14:fc:c9:6d:fa:cc:41:4d:5e:a5:aa:72:3b:0c:9e: 4a:cc:ea:ad:a9:12:43:12:b1:3d:a5:6d:f2:e0:b1: a9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D7:41:A3:D0:15:39:5B:33:D8:B9:04:7B:24:CE:58:67:03:97:61 X509v3 Authority Key Identifier: keyid:11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:70:98:5f:99:1a:82:46:b0:99:f7:87:78:c6:77:79:ea:6a: 24:8d:e3:af:16:99:50:49:d4:08:84:7d:83:bf:1b:df:4d:df: 63:b9:c1:89:81:83:25:5b:1c:06:f5:35:32:44:c2:d4:ac:c7: a8:9c:1b:ef:27:45:6b:9c:cc:77:c7:21:e6:38:70:d0:d2:c7: da:29:55:4c:e3:d7:91:5a:4f:51:af:95:8b:af:b8:1a:74:f7: 49:bf:96:c1:d7:54:91:15:b4:6e:6a:73:e2:61:b8:1b:0b:61: 80:ad:65:62:55:60:ba:db:50:36:bc:f1:4d:d6:48:29:2a:25: e3:77:28:7d:fd:cd:70:f1:c6:92:33:75:88:84:d7:a5:19:d7: 59:f3:8f:be:86:5f:f0:de:13:7b:01:2a:c7:8b:53:d8:03:c3: 50:ee:2f:e6:83:3f:fe:53:72:2f:6d:8b:16:c3:28:b4:5d:17: 81:51:a9:c8:8f:08:ad:73:1a:61:0e:f2:2e:df:06:2f:b1:84: 47:da:c5:d9:68:52:15:73:f3:eb:82:e0:83:41:08:1b:b7:b5: 40:08:b2:dd:7f:64:07:07:68:ae:fd:02:0a:13:ef:91:42:84: 06:06:a5:b8:75:54:d0:00:3b:27:7a:f6:6b:38:b9:d7:a5:62: fc:fe:9e:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30lOhxV6N92U46aKy7sxnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMzYyZjNjZmI5NGI5MjIzYzc4NDMzMTk3YzRlMGNhMTJk YmQ3MGEwHhcNMjYwMTI2MDEwMTU0WhcNMjYwMTI3MDEwMTU0WjAzMTEwLwYDVQQD EygwYmQ3NDFhM2QwMTUzOTViMzNkOGI5MDQ3YjI0Y2U1ODY3MDM5NzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEM/aMTttt0AdlH4PxqL3DlTn0Px I8TwfDohXxNppQmH+Ea3L2gR/NcwADJJ3+OFcgWzmJtdFMYiTesOhDCYTz9yePAn hWGcwlef4xgOq9Vpr7hNjqwxqIdLKTfqTuN3UMIV4PUovHGLvxBYy1zcUYLGG+/c fdsz50A3y5sSP9kWUbLZfjpOfQXeVPoCwYCr7+wKaTwWTcRxofqbhDF3aINZxuaH 9uQt3SJ1B1rDDmvaERFbtQpcM9b68fKXEVvUCe2ug4huEqEVl4cQrJssioumeeuo c0u8Ozazt6U1qzQU/Mlt+sxBTV6lqnI7DJ5KzOqtqRJDErE9pW3y4LGpmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvXQaPQFTlbM9i5BHskzlhnA5dhMB8GA1UdIwQY MBaAFBE2Lzz7lLkiPHhDMZfE4MoS29cKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVRZdlBQdVV1U0k4ZUVNeGw4VGd5aExiMXdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hYmEyNjAtMDg1MC00NDYwLTgwNTMt OTRjYTljMTY1Nzc5LzEvRVRZdlBQdVV1U0k4ZUVNeGw4VGd5aExiMXdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hYmEyNjAtMDg1MC00NDYwLTgwNTMtOTRjYTljMTY1Nzc5 LzEvRVRZdlBQdVV1U0k4ZUVNeGw4VGd5aExiMXdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinCYX5ka gkawmfeHeMZ3eepqJI3jrxaZUEnUCIR9g78b303fY7nBiYGDJVscBvU1MkTC1KzH qJwb7ydFa5zMd8ch5jhw0NLH2ilVTOPXkVpPUa+Vi6+4GnT3Sb+WwddUkRW0bmpz 4mG4GwthgK1lYlVguttQNrzxTdZIKSol43coff3NcPHGkjN1iITXpRnXWfOPvoZf 8N4TewEqx4tT2APDUO4v5oM//lNyL22LFsMotF0XgVGpyI8IrXMaYQ7yLt8GL7GE R9rF2WhSFXPz64Lgg0EIG7e1QAiy3X9kBwdorv0CChPvkUKEBgaluHVU0AA7J3r2 azi516Vi/P6ePA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:58:06 2026 by rpki-client