This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft File: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft (raw, json) Hash identifier: xiV9Qn2/ttFZoyb5b8+PP60ZB421FJjSFql3zpIbSWg= Subject key identifier: FD:7E:4D:FD:2B:27:54:71:DA:B6:1D:F2:58:A9:9A:49:CE:07:B7:14 Authority key identifier: F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94 Certificate issuer: /CN=f9e0257d067ef8b85f620c67220cf977ddde3994 Certificate serial: 019BF42BB40F9429C549678701DA9E6BE299 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 08:01:03 +0000 Manifest this update: Sun 25 Jan 2026 08:01:03 +0000 Manifest next update: Mon 26 Jan 2026 08:01:03 +0000 Files and hashes: 1: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl (hash: 9WuGhOuXY4+V1Y9WLYAjnKczD5eZDk49+UOVHNiX8/M=) 2: 5335TVWq-TAy75K-3w-T_kbzaH0.roa (hash: 9SO05Pcou3qWF6g88dlB6s3gfpWtXt6YbpW1v8iIrjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:b4:0f:94:29:c5:49:67:87:01:da:9e:6b:e2:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9e0257d067ef8b85f620c67220cf977ddde3994 Validity Not Before: Jan 25 08:01:03 2026 GMT Not After : Jan 26 08:01:03 2026 GMT Subject: CN=fd7e4dfd2b275471dab61df258a99a49ce07b714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:30:3c:dd:d7:e7:0b:97:de:40:58:09:19:d3: 21:83:6a:4a:17:79:9a:3b:95:df:33:3b:cf:0b:23: 85:18:da:7f:9b:69:ec:fe:81:88:a3:de:52:fa:aa: 11:48:ca:f0:59:ca:8b:80:88:f7:b1:50:1f:a9:c7: 06:ea:70:98:54:a8:03:b9:8f:ae:73:fb:09:ab:c6: 7c:0d:44:b7:a6:ca:d3:99:c8:fc:c6:2e:19:d3:2f: 3f:64:9a:66:ab:12:2a:72:dd:c6:a9:a5:32:9c:79: c6:82:9d:ea:0b:25:0d:d8:4c:39:72:e7:7b:7d:cf: 3e:b2:6c:5d:48:3c:00:4d:24:27:bf:f9:23:6b:e4: 98:ea:4f:cd:d5:40:39:50:02:71:ea:4a:ce:9d:c1: 06:d6:e6:35:cb:3c:ff:92:3f:df:f6:9c:39:88:b5: c1:95:ab:2f:f0:6b:a7:85:0d:44:7c:95:fc:23:d0: 9b:94:23:e8:3f:ef:c7:54:eb:b4:bd:5c:3e:bc:0e: db:39:14:76:5b:61:c5:8e:ef:32:45:46:2b:65:6e: fe:e9:09:89:34:33:46:79:a9:8a:15:e0:e6:ec:d9: 99:8d:9d:3a:e8:f9:17:45:d3:17:54:d6:c9:9b:34: e6:fc:d7:77:54:b6:20:6c:4b:a2:b4:b9:6d:94:80: 43:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7E:4D:FD:2B:27:54:71:DA:B6:1D:F2:58:A9:9A:49:CE:07:B7:14 X509v3 Authority Key Identifier: keyid:F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:35:24:5b:91:9d:aa:34:9a:c7:a8:fb:21:d1:b7:e8:fe:21: 28:f7:ea:96:38:5e:23:67:3a:d8:6c:3f:86:1d:00:15:eb:06: 9e:44:a5:e5:01:91:a7:f8:f6:54:40:63:5f:05:02:dc:9b:45: 39:40:b6:56:fb:b1:c6:5d:43:ed:de:90:9f:df:7a:3b:6d:54: bd:ff:a0:08:d2:f5:f5:f3:66:a7:e7:d1:5b:40:dc:ee:75:bf: c2:a5:4a:23:65:e4:f8:14:4c:b4:6f:88:65:46:8a:fd:55:3e: 22:fc:c2:84:e7:18:a6:4e:44:bc:a6:85:d5:14:5c:71:e3:c7: 4f:5a:ad:7e:6e:30:66:26:a2:9d:f3:06:29:93:ac:3a:60:8e: d4:77:40:ce:ff:38:d8:ac:35:7e:55:1e:57:a0:42:22:32:74: de:4b:2b:22:29:67:8b:82:19:8d:a9:18:bf:84:e1:33:18:e2: 31:c2:8f:e6:b6:7b:a0:cc:bf:77:07:fe:85:f1:96:51:6d:90: 6a:65:ec:01:e2:33:9a:55:89:9f:51:89:29:ce:da:ac:ad:9b: 85:af:80:c6:56:6a:82:c2:26:fa:52:8d:f2:ca:60:a9:95:40: 5c:54:71:20:0a:30:19:f0:43:e8:26:ad:f2:06:94:6e:de:65: 52:45:bf:6e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv0K7QPlCnFSWeHAdqea+KZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ZTAyNTdkMDY3ZWY4Yjg1ZjYyMGM2NzIyMGNmOTc3ZGRk ZTM5OTQwHhcNMjYwMTI1MDgwMTAzWhcNMjYwMTI2MDgwMTAzWjAzMTEwLwYDVQQD EyhmZDdlNGRmZDJiMjc1NDcxZGFiNjFkZjI1OGE5OWE0OWNlMDdiNzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzA83dfnC5feQFgJGdMhg2pKF3ma O5XfMzvPCyOFGNp/m2ns/oGIo95S+qoRSMrwWcqLgIj3sVAfqccG6nCYVKgDuY+u c/sJq8Z8DUS3psrTmcj8xi4Z0y8/ZJpmqxIqct3GqaUynHnGgp3qCyUN2Ew5cud7 fc8+smxdSDwATSQnv/kja+SY6k/N1UA5UAJx6krOncEG1uY1yzz/kj/f9pw5iLXB lasv8GunhQ1EfJX8I9CblCPoP+/HVOu0vVw+vA7bORR2W2HFju8yRUYrZW7+6QmJ NDNGeamKFeDm7NmZjZ066PkXRdMXVNbJmzTm/Nd3VLYgbEuitLltlIBDfQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFP1+Tf0rJ1Rx2rYd8lipmknOB7cUMB8GA1UdIwQY MBaAFPngJX0Gfvi4X2IMZyIM+Xfd3jmUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1lQWxmUVotLUxoZllneG5JZ3o1ZDkzZU9aUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvNjkxOTRhLTQ1YTAtNDhlZi05OWJm LThlMDQ4ODdjMGFiZi8xLzEtZUFsZlFaLS1MaGZZZ3huSWd6NWQ5M2VPWlEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2ViLzY5MTk0YS00NWEwLTQ4ZWYtOTliZi04ZTA0ODg3YzBh YmYvMS8xLWVBbGZRWi0tTGhmWWd4bklnejVkOTNlT1pRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzDUk W5GdqjSax6j7IdG36P4hKPfqljheI2c62Gw/hh0AFesGnkSl5QGRp/j2VEBjXwUC 3JtFOUC2Vvuxxl1D7d6Qn996O21Uvf+gCNL19fNmp+fRW0Dc7nW/wqVKI2Xk+BRM tG+IZUaK/VU+IvzChOcYpk5EvKaF1RRccePHT1qtfm4wZiainfMGKZOsOmCO1HdA zv842Kw1flUeV6BCIjJ03ksrIilni4IZjakYv4ThMxjiMcKP5rZ7oMy/dwf+hfGW UW2QamXsAeIzmlWJn1GJKc7arK2bha+AxlZqgsIm+lKN8spgqZVAXFRxIAowGfBD 6Cat8gaUbt5lUkW/bg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:46:00 2026 by rpki-client