This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft File: _EcO7LHxvgUlJRQvYKC1naXxgVY.mft (raw, json) Hash identifier: +BEicEZo0G1npc2iSQG8II9XBYYdlWfaIsc7r1rfUZU= Subject key identifier: 8A:BE:85:13:AF:C7:1E:23:AC:D5:54:B2:AA:15:1A:2F:EB:78:C0:DA Authority key identifier: FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56 Certificate issuer: /CN=fc470eecb1f1be052525142f60a0b59da5f18156 Certificate serial: 019BFC8A3035B12888667AE96052C0782702 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft Manifest number: 0E16 Signing time: Mon 26 Jan 2026 23:01:13 +0000 Manifest this update: Mon 26 Jan 2026 23:01:13 +0000 Manifest next update: Tue 27 Jan 2026 23:01:13 +0000 Files and hashes: 1: _EcO7LHxvgUlJRQvYKC1naXxgVY.crl (hash: QA+HPx0LWrzIGfzkxZyQNNacZrMOI+KHnTrbsUCDkdE=) 2: quAV4eYcasGlgRODEpBGamYZ6h0.roa (hash: xcRHN39YJK/QeKfoe37h6fY7xr+CzjZ9Q02OAtdg1cY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:30:35:b1:28:88:66:7a:e9:60:52:c0:78:27:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc470eecb1f1be052525142f60a0b59da5f18156 Validity Not Before: Jan 26 23:01:13 2026 GMT Not After : Jan 27 23:01:13 2026 GMT Subject: CN=8abe8513afc71e23acd554b2aa151a2feb78c0da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7a:3b:65:b4:fd:55:66:37:0a:e8:ba:52:f3: cc:4e:d1:70:48:b5:50:f4:ee:de:f6:e5:05:97:0d: 19:ff:1e:a3:52:7f:f2:9a:d3:22:9a:94:90:c2:4c: 04:8b:5c:2f:9d:78:4e:eb:66:bd:5e:42:e3:b9:3f: 5b:db:d3:2b:3b:fe:2e:92:11:45:3a:16:f6:90:2e: bd:a0:93:82:c5:36:57:8b:e5:32:fd:38:d6:2b:8a: 4f:1b:f3:30:12:2b:23:3b:33:fc:d1:41:82:19:66: 14:58:e4:ca:2f:29:4d:83:72:84:ef:39:53:04:2b: 2c:fe:9f:d2:1e:2e:23:e5:e3:c5:fc:41:84:c7:0b: e9:47:8f:fc:8c:42:82:c8:cd:ba:7e:92:4f:b5:8a: 11:a2:1c:94:72:6a:fe:1a:aa:0b:c9:83:88:30:1b: e5:85:ce:d4:c5:5a:f3:91:02:22:a1:f2:1c:10:87: 37:be:5c:9f:c1:7a:f8:27:64:de:46:ff:72:d8:fd: 1e:e6:62:b3:a2:f7:b9:95:d7:0b:80:ba:5a:0a:3f: 8e:79:90:56:ef:4f:b4:0a:01:19:5c:7e:55:ed:cb: 18:01:3b:21:bb:ce:24:0f:2f:28:37:bd:60:a8:56: f8:ac:ce:3f:4d:b4:41:75:1b:fe:92:a2:37:cd:a9: ad:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BE:85:13:AF:C7:1E:23:AC:D5:54:B2:AA:15:1A:2F:EB:78:C0:DA X509v3 Authority Key Identifier: keyid:FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:80:cb:3a:a8:dc:c8:47:da:74:56:13:d8:7b:20:86:12:ce: 2d:2c:1e:01:e3:e3:f8:18:d8:6d:06:8e:1c:26:c5:79:ed:e6: 50:1a:4d:19:40:48:e5:2c:2f:2b:ef:43:c2:52:29:8e:d2:c1: a5:c9:ac:6e:a7:f8:ec:e9:53:a5:56:bf:f5:f7:19:f6:31:99: 5f:38:95:76:5f:86:9e:5f:47:0b:f9:74:37:b5:3a:c4:0e:83: 51:76:38:18:f7:4f:c4:d5:57:a0:b7:49:51:05:79:fb:f0:66: 32:eb:42:98:ca:18:69:af:59:ab:e9:7a:f0:f0:08:67:67:8e: 17:e4:fa:b1:3a:f6:72:5c:4c:0a:5a:57:e1:f4:9c:4a:00:59: 66:32:70:14:80:75:ce:6b:86:19:e5:6f:29:db:af:70:e3:e7: 59:2d:3e:24:e4:56:0e:38:c2:11:29:3b:e2:f0:df:a8:23:db: 6f:6f:e3:fd:3e:1e:c8:6d:5b:c2:20:95:79:12:88:c9:6b:99: c7:c4:81:6a:52:4d:7f:88:47:0c:3e:c4:cb:f1:d3:31:ad:28: c9:32:3b:ec:56:51:d4:cb:dc:ba:d1:b9:d9:36:ed:cf:ec:06: c9:48:18:97:b8:81:23:8a:e1:8e:1e:a5:1f:d0:17:13:42:52: 50:56:10:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8ijA1sSiIZnrpYFLAeCcCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDcwZWVjYjFmMWJlMDUyNTI1MTQyZjYwYTBiNTlkYTVm MTgxNTYwHhcNMjYwMTI2MjMwMTEzWhcNMjYwMTI3MjMwMTEzWjAzMTEwLwYDVQQD Eyg4YWJlODUxM2FmYzcxZTIzYWNkNTU0YjJhYTE1MWEyZmViNzhjMGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXo7ZbT9VWY3Cui6UvPMTtFwSLVQ 9O7e9uUFlw0Z/x6jUn/ymtMimpSQwkwEi1wvnXhO62a9XkLjuT9b29MrO/4ukhFF Ohb2kC69oJOCxTZXi+Uy/TjWK4pPG/MwEisjOzP80UGCGWYUWOTKLylNg3KE7zlT BCss/p/SHi4j5ePF/EGExwvpR4/8jEKCyM26fpJPtYoRohyUcmr+GqoLyYOIMBvl hc7UxVrzkQIiofIcEIc3vlyfwXr4J2TeRv9y2P0e5mKzove5ldcLgLpaCj+OeZBW 70+0CgEZXH5V7csYATshu84kDy8oN71gqFb4rM4/TbRBdRv+kqI3zamtUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIq+hROvxx4jrNVUsqoVGi/reMDaMB8GA1UdIwQY MBaAFPxHDuyx8b4FJSUUL2CgtZ2l8YFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VjTzdMSHh2Z1VsSlJRdllLQzFuYVh4Z1ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82ZjgyZDQtMmVjMy00NGE1LThkYjUt Y2E3ZDA0ZTI5MTZjLzEvX0VjTzdMSHh2Z1VsSlJRdllLQzFuYVh4Z1ZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS82ZjgyZDQtMmVjMy00NGE1LThkYjUtY2E3ZDA0ZTI5MTZj LzEvX0VjTzdMSHh2Z1VsSlJRdllLQzFuYVh4Z1ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxIDLOqjc yEfadFYT2HsghhLOLSweAePj+BjYbQaOHCbFee3mUBpNGUBI5SwvK+9DwlIpjtLB pcmsbqf47OlTpVa/9fcZ9jGZXziVdl+Gnl9HC/l0N7U6xA6DUXY4GPdPxNVXoLdJ UQV5+/BmMutCmMoYaa9Zq+l68PAIZ2eOF+T6sTr2clxMClpX4fScSgBZZjJwFIB1 zmuGGeVvKduvcOPnWS0+JORWDjjCESk74vDfqCPbb2/j/T4eyG1bwiCVeRKIyWuZ x8SBalJNf4hHDD7Ey/HTMa0oyTI77FZR1MvcutG52Tbtz+wGyUgYl7iBI4rhjh6l H9AXE0JSUFYQtQ== -----END CERTIFICATE-----Generated at Tue Jan 27 01:07:34 2026 by rpki-client