This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft File: Rs_EGkGae71tjoxO5oVZW2pAufE.mft (raw, json) Hash identifier: WHz4yposBBOrzYhnydpDf5zPMS11a0z0gfm5azPRlQg= Subject key identifier: 65:F5:CD:E9:96:B9:1E:86:DA:5B:10:53:B5:B1:95:51:A0:F8:44:C8 Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1 Certificate issuer: /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1 Certificate serial: 019BF8ADBEBD002F2CDC6A3BEE1DCCBE1A1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 05:01:34 +0000 Manifest this update: Mon 26 Jan 2026 05:01:34 +0000 Manifest next update: Tue 27 Jan 2026 05:01:34 +0000 Files and hashes: 1: PHd3RlGosSCiiJlgByr5DyGNERo.roa (hash: H4E9jAo8k6ZvIudithlFluMLgtGMVfZdqBunaDN8nQM=) 2: Rs_EGkGae71tjoxO5oVZW2pAufE.crl (hash: t6LMtnGk7UDhIFv8/7RFktaLfy0kf29H0ZcDDKDXhiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:be:bd:00:2f:2c:dc:6a:3b:ee:1d:cc:be:1a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1 Validity Not Before: Jan 26 05:01:34 2026 GMT Not After : Jan 27 05:01:34 2026 GMT Subject: CN=65f5cde996b91e86da5b1053b5b19551a0f844c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9c:35:32:a8:fe:20:fc:4f:01:79:c8:77:fb: e4:ca:7b:44:f3:a2:eb:bd:1b:19:32:63:a5:03:98: 32:d6:27:c7:13:f6:db:23:2a:4e:6d:cc:08:67:40: ac:21:97:60:88:bc:32:c0:fc:91:fa:87:8f:b5:f1: b9:e2:af:4e:5d:62:58:d9:fa:c6:6f:51:20:b6:a5: 18:a6:96:b8:61:f7:49:6a:77:2c:29:ae:43:4d:98: cd:4c:4d:4d:df:91:00:d5:c0:08:cd:11:91:86:63: 62:49:a4:42:0f:43:5e:ac:33:a9:28:02:35:15:98: 30:42:3c:61:eb:98:ec:92:e1:28:0a:e4:d0:a0:35: a8:e1:a1:5a:05:64:a6:d3:f0:20:01:8a:cb:a0:b6: c8:3c:53:96:db:6f:4a:30:8e:83:ca:f6:67:91:8e: 45:d6:46:b0:b5:c4:91:3f:14:5e:2c:62:55:4b:da: e6:d7:c7:fd:47:52:6b:3e:6e:13:14:36:a9:87:e8: a6:ea:4c:95:de:8c:7b:16:66:91:4b:26:b5:70:52: c9:2b:42:bc:5a:f6:e0:a8:42:85:3c:28:24:2f:9f: 31:9f:5b:a7:fd:80:d7:d0:73:22:14:e3:d0:13:c3: eb:cb:d3:94:1a:0d:27:f9:35:57:10:ec:09:0e:35: bc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F5:CD:E9:96:B9:1E:86:DA:5B:10:53:B5:B1:95:51:A0:F8:44:C8 X509v3 Authority Key Identifier: keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:04:cd:e3:36:f9:4f:81:b3:c5:65:43:bb:ff:9d:15:34:f5: 2c:c1:bf:fe:60:84:80:3a:d6:da:9a:d1:8f:d6:7f:50:96:2b: 82:bf:f8:0e:83:e5:67:04:c8:fa:68:63:52:30:2f:2f:31:ff: a9:a6:01:30:a2:13:f5:1c:31:c5:42:a2:33:9f:d0:9a:85:f9: a6:4a:e3:99:ac:ae:f6:47:49:41:fc:ef:54:9b:d6:44:b8:27: cb:86:59:23:69:f3:4b:9d:9c:e1:ac:9c:25:80:e2:ee:e7:12: b1:54:f1:c9:88:6e:5b:49:bd:e2:43:58:8d:99:b5:e0:6b:4d: 06:5b:2b:10:28:9a:8e:19:e9:00:c2:23:51:1d:48:3d:81:9b: b3:a7:8a:90:2b:4f:62:b8:49:45:89:ab:a5:4f:31:6e:f7:2f: b5:66:97:70:47:b3:49:ab:6e:9f:ff:78:dc:da:5c:2c:88:5d: ac:b5:22:19:29:0e:e5:31:12:12:8f:be:3d:bb:b0:76:bd:c1: 2f:27:5e:7b:44:3f:96:f4:23:be:63:bd:9b:06:b2:d0:44:98: 96:81:1a:d4:78:46:f6:ff:18:81:91:2d:be:9b:81:4d:4f:f3: e6:31:7f:30:06:4f:f5:96:9a:fb:4d:f1:82:88:7d:93:c5:21: 5f:88:0e:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rb69AC8s3Go77h3MvhofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2Y2ZjNDFhNDE5YTdiYmQ2ZDhlOGM0ZWU2ODU1OTViNmE0 MGI5ZjEwHhcNMjYwMTI2MDUwMTM0WhcNMjYwMTI3MDUwMTM0WjAzMTEwLwYDVQQD Eyg2NWY1Y2RlOTk2YjkxZTg2ZGE1YjEwNTNiNWIxOTU1MWEwZjg0NGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJw1Mqj+IPxPAXnId/vkyntE86Lr vRsZMmOlA5gy1ifHE/bbIypObcwIZ0CsIZdgiLwywPyR+oePtfG54q9OXWJY2frG b1EgtqUYppa4YfdJancsKa5DTZjNTE1N35EA1cAIzRGRhmNiSaRCD0NerDOpKAI1 FZgwQjxh65jskuEoCuTQoDWo4aFaBWSm0/AgAYrLoLbIPFOW229KMI6DyvZnkY5F 1kawtcSRPxReLGJVS9rm18f9R1JrPm4TFDaph+im6kyV3ox7FmaRSya1cFLJK0K8 WvbgqEKFPCgkL58xn1un/YDX0HMiFOPQE8Pry9OUGg0n+TVXEOwJDjW89wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGX1zemWuR6G2lsQU7WxlVGg+ETIMB8GA1UdIwQY MBaAFEbPxBpBmnu9bY6MTuaFWVtqQLnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yYzIzN2EtOGJiYy00OWMzLWFkZWEt Y2MzMzc2ZWY3MzAwLzEvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8yYzIzN2EtOGJiYy00OWMzLWFkZWEtY2MzMzc2ZWY3MzAw LzEvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxQTN4zb5 T4GzxWVDu/+dFTT1LMG//mCEgDrW2prRj9Z/UJYrgr/4DoPlZwTI+mhjUjAvLzH/ qaYBMKIT9RwxxUKiM5/QmoX5pkrjmayu9kdJQfzvVJvWRLgny4ZZI2nzS52c4ayc JYDi7ucSsVTxyYhuW0m94kNYjZm14GtNBlsrECiajhnpAMIjUR1IPYGbs6eKkCtP YrhJRYmrpU8xbvcvtWaXcEezSatun/943NpcLIhdrLUiGSkO5TESEo++Pbuwdr3B Lydee0Q/lvQjvmO9mway0ESYloEa1HhG9v8YgZEtvpuBTU/z5jF/MAZP9Zaa+03x goh9k8UhX4gOgQ== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:29 2026 by rpki-client