This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft File: EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json) Hash identifier: M+llXbmNL0IrCCAnVfM/uZoukJWIT3+Qiz1km0zOCPc= Subject key identifier: 16:9D:33:40:A6:3A:66:A6:A1:FB:98:FE:6C:30:DB:D5:66:3D:15:10 Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1 Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1 Certificate serial: 019BDEB70C0258F18173BC734A492ACAA156 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft Manifest number: 17E5 Signing time: Wed 21 Jan 2026 04:01:36 +0000 Manifest this update: Wed 21 Jan 2026 04:01:36 +0000 Manifest next update: Thu 22 Jan 2026 04:01:36 +0000 Files and hashes: 1: 0dC4r-_GYoQ6ya9DJPoU2aoMd4k.roa (hash: 8JZ2nYpbU9wzayV2maNMxpbZwQJ8oUlvvk4sDKPfND4=) 2: 2UJnYkLlrBrsr-FiuY1t_mTWT4k.roa (hash: Xa61lzBRtSApWj6goAfzYPWzx5tHlOIe0rD8n3ZeiWM=) 3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: sTNioeaquzLali7VWfth+EoKXzatfxbWN/dEQhLbSyo=) 4: IL8deFD8PSOp3NWJSt_iFRSnHrw.roa (hash: q/v7MQox/nq9r/rZ534FmTQXSTW9buaaFYPj+WtYk78=) 5: ZKLNMt3VfAzRkdvHr5Xd6gL_UHI.roa (hash: MwQzyqB63sngmzcWgEGwpFF72y7jC9kNOl+3Zg+6fcs=) 6: fKYfVT1YDQ8JUaTATaBTlPz4QNw.roa (hash: oYpajimnxUNbsLq6vnCVkRjpUdwX5aoikIaxhzhw2Vw=) 7: qK_PP9-atac9mTKlNBkq0IeVJSc.roa (hash: 7XIhv4ZG0yNjDke4N6v5k/ztyTTS+fsvn2uOI243g1w=) 8: xd5IZiz1YB2PdB-q-VKoWUqlfWg.roa (hash: s14zG8n95cnLanJ2EGUmy/+O9/gNhrX1fm7XyiLB6RQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:b7:0c:02:58:f1:81:73:bc:73:4a:49:2a:ca:a1:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1 Validity Not Before: Jan 21 04:01:36 2026 GMT Not After : Jan 22 04:01:36 2026 GMT Subject: CN=169d3340a63a66a6a1fb98fe6c30dbd5663d1510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:68:bd:10:dc:c7:dc:40:8b:d8:50:41:d2:29: fb:e9:ce:60:dd:82:1c:3b:c0:c7:79:b9:fe:69:8b: 2f:6c:c8:29:13:9e:41:db:ee:e2:fa:c5:4a:56:88: f5:50:4c:99:c5:3f:41:d5:b1:ad:8a:90:97:ca:39: dc:71:03:92:b3:91:a9:9c:5b:9d:c2:ee:80:7d:eb: 13:3e:68:df:a9:59:c4:12:9c:71:80:b9:20:b4:05: f1:d3:95:54:09:91:b6:7c:fb:ba:7e:0d:6d:05:78: f9:ff:9b:96:71:84:a4:f0:58:b5:7a:87:5f:92:4b: 32:82:a1:21:06:ef:ea:f3:3a:0f:ba:d9:5c:89:c9: dc:88:5c:69:52:38:99:07:8c:30:52:4c:c8:80:12: c4:cd:6e:7c:cf:9e:5c:65:09:68:56:b3:5c:9a:83: 9a:29:18:9a:c0:ed:a3:e4:5f:17:bf:cd:3a:cf:06: 58:41:42:33:6b:94:51:3b:9c:50:4d:1c:18:1a:fb: 7b:2c:51:fa:e1:e0:d3:15:e5:9d:1b:ab:a4:45:89: 75:2b:0f:39:8c:13:6b:74:88:35:eb:74:ae:5f:53: 15:c9:f5:c9:71:e2:2f:8e:6f:fa:10:7a:b4:e9:a2: 03:ae:d8:7f:ae:d2:87:bb:1d:32:30:7a:63:11:c8: e3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9D:33:40:A6:3A:66:A6:A1:FB:98:FE:6C:30:DB:D5:66:3D:15:10 X509v3 Authority Key Identifier: keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:de:f9:fe:23:52:a8:73:2b:57:0f:36:6e:2a:55:89:43:4d: dc:68:a0:0d:4e:51:4e:c7:39:5d:4c:95:fd:41:6f:08:88:6b: bc:4f:ae:89:f7:df:f6:a0:09:18:a3:e7:4b:72:95:97:6c:f2: 0c:4e:eb:52:55:f4:87:25:1f:62:15:c3:ee:10:c6:27:3d:c9: 75:79:1c:a9:19:c7:9c:26:c1:1d:16:5e:80:95:83:32:a0:35: 5d:38:fd:29:b9:0e:f7:3e:c3:52:32:9a:95:03:04:2d:42:cc: 10:f0:40:81:11:4f:b6:fe:7b:cb:55:59:e6:0e:1b:93:40:84: 04:6c:2b:41:a7:c3:a2:3e:7c:f2:84:b4:10:18:bb:de:ef:f4: 4a:2a:bc:23:66:fc:af:b2:f1:85:ae:f4:0c:4e:99:92:c1:b5: 32:63:06:b2:db:cc:1c:b7:29:45:d2:48:90:e1:5e:47:f4:cc: 49:ca:ce:9c:64:71:08:91:9d:4e:94:c8:ec:1c:c8:8a:71:1d: a2:de:2f:42:03:e2:ed:1e:19:f9:eb:98:13:c2:62:59:55:67: 39:53:f3:e7:83:ac:5d:4b:84:f2:13:3c:f2:77:0b:60:c7:8a: 88:80:24:03:40:15:b8:fc:3b:73:72:60:7a:a8:2a:db:e8:b9: 50:f3:4e:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvetwwCWPGBc7xzSkkqyqFWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTRhN2UyYThjNzAxMjMyNWFlOTczZWQxYTJiYmEwNWIy YmI5YzEwHhcNMjYwMTIxMDQwMTM2WhcNMjYwMTIyMDQwMTM2WjAzMTEwLwYDVQQD EygxNjlkMzM0MGE2M2E2NmE2YTFmYjk4ZmU2YzMwZGJkNTY2M2QxNTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWi9ENzH3ECL2FBB0in76c5g3YIc O8DHebn+aYsvbMgpE55B2+7i+sVKVoj1UEyZxT9B1bGtipCXyjnccQOSs5GpnFud wu6AfesTPmjfqVnEEpxxgLkgtAXx05VUCZG2fPu6fg1tBXj5/5uWcYSk8Fi1eodf kksygqEhBu/q8zoPutlcicnciFxpUjiZB4wwUkzIgBLEzW58z55cZQloVrNcmoOa KRiawO2j5F8Xv806zwZYQUIza5RRO5xQTRwYGvt7LFH64eDTFeWdG6ukRYl1Kw85 jBNrdIg163SuX1MVyfXJceIvjm/6EHq06aIDrth/rtKHux0yMHpjEcjjjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBadM0CmOmamofuY/mww29VmPRUQMB8GA1UdIwQY MBaAFBIUp+KoxwEjJa6XPtGiu6BbK7nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQt ZTljMzY0OWMxMjE4LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQtZTljMzY0OWMxMjE4 LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAet75/iNS qHMrVw82bipViUNN3GigDU5RTsc5XUyV/UFvCIhrvE+uifff9qAJGKPnS3KVl2zy DE7rUlX0hyUfYhXD7hDGJz3JdXkcqRnHnCbBHRZegJWDMqA1XTj9KbkO9z7DUjKa lQMELULMEPBAgRFPtv57y1VZ5g4bk0CEBGwrQafDoj588oS0EBi73u/0Siq8I2b8 r7Lxha70DE6ZksG1MmMGstvMHLcpRdJIkOFeR/TMScrOnGRxCJGdTpTI7BzIinEd ot4vQgPi7R4Z+euYE8JiWVVnOVPz54OsXUuE8hM88ncLYMeKiIAkA0AVuPw7c3Jg eqgq2+i5UPNOug== -----END CERTIFICATE-----Generated at Wed Jan 21 13:35:36 2026 by rpki-client