This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft File: Eo0NA9Adij4t-t3y29j5fgkPgOk.mft (raw, json) Hash identifier: 9xUKJaLY6Vc93QsHPL2VmF2TcHwscFHB0XGiDf9h8EU= Subject key identifier: BB:B8:E9:E5:C5:59:19:BC:02:CA:98:1B:93:1A:2F:E8:5A:0E:09:AE Authority key identifier: 12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9 Certificate issuer: /CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9 Certificate serial: 019BF79AB5E7FC5936C65E996F3CC3A425B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft Manifest number: 05F7 Signing time: Mon 26 Jan 2026 00:01:09 +0000 Manifest this update: Mon 26 Jan 2026 00:01:09 +0000 Manifest next update: Tue 27 Jan 2026 00:01:09 +0000 Files and hashes: 1: Eo0NA9Adij4t-t3y29j5fgkPgOk.crl (hash: xkehyZzn0SBt125kRVIeGJSfd2tgTsCvl9PJbk2Ox14=) 2: lmGJr61Mn429__yMZ50UIOtKDTo.roa (hash: FZAxYj1+7XK5ZM4/SMzLX2AW7UQL0exFYNBa3AxvrbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:b5:e7:fc:59:36:c6:5e:99:6f:3c:c3:a4:25:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9 Validity Not Before: Jan 26 00:01:09 2026 GMT Not After : Jan 27 00:01:09 2026 GMT Subject: CN=bbb8e9e5c55919bc02ca981b931a2fe85a0e09ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3f:27:7f:75:6b:bf:00:f0:8d:93:68:d6:0f: 72:03:d0:cd:f6:7c:5c:07:83:f8:37:fd:14:a4:d0: 9b:eb:93:a4:13:ea:2b:fe:27:f9:a9:f6:3e:91:f9: c8:95:87:8d:14:c9:08:07:65:80:8e:aa:93:ee:76: 29:73:0a:75:91:59:ad:fb:a9:6d:a3:6b:e1:04:0b: 61:ad:6a:c6:2e:62:d9:20:ae:48:71:4c:cf:8c:b0: 9b:7d:67:c2:e3:dc:bb:80:51:15:7f:bb:cd:1b:2c: be:e5:9e:b5:d9:09:31:1b:88:19:00:ad:45:c0:56: 44:69:60:a4:ef:0f:90:52:42:4f:c7:71:e9:a9:a3: 0b:a4:34:46:2b:3a:b4:c0:58:f5:3b:a1:6b:20:36: b5:ee:e9:e6:6b:25:81:11:8c:83:45:bc:ad:dd:0e: 4a:cb:2a:f0:8c:ae:55:d3:2f:35:e5:be:c2:69:03: ba:5d:29:2a:b5:49:de:b6:15:3a:af:db:d0:6f:ed: d2:ed:c0:66:08:8e:af:7e:30:df:d0:68:d7:ea:25: c0:b0:e6:55:74:61:3d:94:dd:82:d3:d2:d0:70:b9: aa:95:7b:26:77:f1:fc:ca:8a:2a:ed:13:d6:0c:df: 15:e4:f5:4c:9e:e6:39:93:bd:1f:8c:73:73:c6:89: c7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B8:E9:E5:C5:59:19:BC:02:CA:98:1B:93:1A:2F:E8:5A:0E:09:AE X509v3 Authority Key Identifier: keyid:12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d3:85:25:25:cc:2f:69:d8:76:e3:ac:cd:19:91:1e:bd:b4: 99:ca:b4:fb:b4:f7:f9:52:55:2a:1a:e4:d9:c2:d2:66:14:a0: 04:38:ce:dd:9a:65:95:9e:bf:7f:04:5e:7d:7e:b0:c7:5c:f7: 7a:9a:81:77:55:14:c9:b6:08:f7:52:3f:82:08:33:22:1c:99: b1:ad:b9:eb:f6:36:2b:92:67:4b:a5:b2:25:a8:24:e9:2d:7b: 93:dc:20:f0:9c:33:1b:c8:75:4c:2d:46:38:b9:55:63:67:8f: 2e:e7:f6:5a:3b:f1:cf:7c:d4:87:c1:13:f7:20:74:3b:af:ad: 62:3a:22:8e:8f:05:42:70:2b:3f:e5:22:c6:08:80:d6:59:bd: de:6b:3c:35:c1:76:88:6e:a4:af:ee:f1:d9:37:f4:c8:85:84: d8:f2:2d:b0:f9:28:c0:3c:66:a9:8f:64:e5:94:4c:88:f8:a7: 6a:61:c8:e0:d0:f8:42:fc:26:4e:69:13:c8:92:63:56:c3:78: ff:af:49:f6:fc:76:85:d2:c7:48:7d:0d:4c:91:0c:b4:66:e5: 00:89:ee:c2:0c:56:e1:e2:d6:e8:6e:45:50:ca:31:8b:86:00: f3:f4:be:50:af:ec:8d:93:b5:fe:3b:b0:38:cb:d8:30:fe:b7: 33:c2:25:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mrXn/Fk2xl6ZbzzDpCW2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyOGQwZDAzZDAxZDhhM2UyZGZhZGRmMmRiZDhmOTdlMDkw ZjgwZTkwHhcNMjYwMTI2MDAwMTA5WhcNMjYwMTI3MDAwMTA5WjAzMTEwLwYDVQQD EyhiYmI4ZTllNWM1NTkxOWJjMDJjYTk4MWI5MzFhMmZlODVhMGUwOWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3j8nf3VrvwDwjZNo1g9yA9DN9nxc B4P4N/0UpNCb65OkE+or/if5qfY+kfnIlYeNFMkIB2WAjqqT7nYpcwp1kVmt+6lt o2vhBAthrWrGLmLZIK5IcUzPjLCbfWfC49y7gFEVf7vNGyy+5Z612QkxG4gZAK1F wFZEaWCk7w+QUkJPx3HpqaMLpDRGKzq0wFj1O6FrIDa17unmayWBEYyDRbyt3Q5K yyrwjK5V0y815b7CaQO6XSkqtUnethU6r9vQb+3S7cBmCI6vfjDf0GjX6iXAsOZV dGE9lN2C09LQcLmqlXsmd/H8yooq7RPWDN8V5PVMnuY5k70fjHNzxonHRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLu46eXFWRm8AsqYG5MaL+haDgmuMB8GA1UdIwQY MBaAFBKNDQPQHYo+Lfrd8tvY+X4JD4DpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW8wTkE5QWRpajR0LXQzeTI5ajVmZ2tQZ09rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kYmM2ZmEtYzQ3NC00NmMzLTg5NDUt YWY1MGZiNWNjNzdhLzEvRW8wTkE5QWRpajR0LXQzeTI5ajVmZ2tQZ09rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kYmM2ZmEtYzQ3NC00NmMzLTg5NDUtYWY1MGZiNWNjNzdh LzEvRW8wTkE5QWRpajR0LXQzeTI5ajVmZ2tQZ09rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNOFJSXM L2nYduOszRmRHr20mcq0+7T3+VJVKhrk2cLSZhSgBDjO3ZpllZ6/fwRefX6wx1z3 epqBd1UUybYI91I/gggzIhyZsa256/Y2K5JnS6WyJagk6S17k9wg8JwzG8h1TC1G OLlVY2ePLuf2Wjvxz3zUh8ET9yB0O6+tYjoijo8FQnArP+UixgiA1lm93ms8NcF2 iG6kr+7x2Tf0yIWE2PItsPkowDxmqY9k5ZRMiPinamHI4ND4QvwmTmkTyJJjVsN4 /69J9vx2hdLHSH0NTJEMtGblAInuwgxW4eLW6G5FUMoxi4YA8/S+UK/sjZO1/juw OMvYMP63M8IlFQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:57:36 2026 by rpki-client