This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft File: EiTl7_GrwObYvwKeT3MuCrcbwWo.mft (raw, json) Hash identifier: NOGrn19eIZEZxExFMlHCU+zCkH6Kk87i1LvRsDxI1hg= Subject key identifier: D5:7B:24:4E:F3:05:CC:07:5E:A7:A7:F4:5B:6B:74:3B:0E:06:A1:F6 Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A Certificate issuer: /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a Certificate serial: 019BD76B63292C55D60FBDB457DC84224094 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft Manifest number: 17E3 Signing time: Mon 19 Jan 2026 18:01:37 +0000 Manifest this update: Mon 19 Jan 2026 18:01:37 +0000 Manifest next update: Tue 20 Jan 2026 18:01:37 +0000 Files and hashes: 1: 7DKhg71ZB3nnMpauf53JDjRxvcE.roa (hash: JaQt7Bz1hiKlJT1Mi9uSBQ4bdQnONHvQK2D4cbBsnd4=) 2: EiTl7_GrwObYvwKeT3MuCrcbwWo.crl (hash: 37rH17xrcZQ8jHXouDZ4Vn8TsBci9IDa/DIrhlxeGeQ=) 3: IUysQoBsRWVOL5sdLOOClz3M4Tc.roa (hash: Q0b0Ej5B0Uf7P54rUhyCPtXaonVa+DMphvbAdFQOd6c=) 4: _D31CaslokzBzJb570s1tCqC6rU.roa (hash: vPfarYHxZRzOYIcHGYTZOf+++xHO9r+2vS0OJV7F/0s=) 5: hMkkOV3vcdpEBCz-ov_DfQAHhD8.roa (hash: E0l9RjnNf9Lrz/LeJVfSiJ9Bu3PLC8j0ZQdTbyOvhkY=) 6: iIvK0GriwCR5-e0INxYXsaN5HeA.roa (hash: y+xjj91MYcyeEl9ZZP8msaIhf1Zsnrl/qJUlt2VVY1Q=) 7: omKHkE8YHZq1XP5PN9HMJprVOp8.roa (hash: MmpJRNhqaLRfTIGoiK2U5hLmuW2sEbpdb2u4AXDgU9A=) 8: sL9_3JSSE2xT5n7OAXMAHMxKq1g.roa (hash: vGCCVcEYQcDBKDtRD4+hEi2hrb6nrXfbvM90L9lRcO0=) 9: xC4HZY2FAIOZlVLev_OryihHWUo.roa (hash: t5wlokLTk+K42yuANt3hwr4tFRZLOSrgIWyKhOKmoyk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:6b:63:29:2c:55:d6:0f:bd:b4:57:dc:84:22:40:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a Validity Not Before: Jan 19 18:01:37 2026 GMT Not After : Jan 20 18:01:37 2026 GMT Subject: CN=d57b244ef305cc075ea7a7f45b6b743b0e06a1f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e9:91:ba:dd:80:9c:4e:b7:35:45:44:a6:d6: 8c:d2:7c:70:bf:b2:0e:c9:6a:0c:9d:a8:14:f0:60: 32:79:cb:54:05:aa:52:d5:36:a6:ef:5a:81:b3:fc: 5b:d7:b3:f8:f3:d5:8f:b4:31:76:ef:ed:6c:17:af: bf:46:d1:21:ff:59:d2:73:ed:63:4b:45:1b:3c:63: 42:c3:cd:ad:12:c4:03:2d:6f:db:2e:53:c4:77:eb: f3:f6:a9:56:6f:84:9d:53:3a:5a:6b:24:ea:88:f5: 2f:4b:d2:48:70:1a:a8:9f:77:e1:f3:3e:a0:bc:fc: 67:7f:b4:ca:6f:7e:b4:bb:f2:5d:42:97:97:92:2b: ae:36:e9:95:a8:99:97:82:e5:a6:8a:c1:d6:38:25: 7f:9d:74:7d:5f:cb:a4:0e:d3:fe:21:07:86:ee:df: 57:ab:85:bb:ba:a6:d9:50:4c:bf:36:58:be:ee:98: fd:c4:f2:8b:d7:fb:a0:bb:e9:0c:39:16:e1:c5:d0: 3b:f1:55:8d:ce:60:5e:6b:62:ae:fe:d5:1c:24:63: 10:58:72:7a:78:51:d3:12:11:2f:23:f7:42:d4:6e: ac:fa:53:76:97:ab:a9:83:48:de:a6:36:45:6c:f3: 82:4e:28:54:29:c5:06:89:c7:da:89:cb:f2:a9:c8: b5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7B:24:4E:F3:05:CC:07:5E:A7:A7:F4:5B:6B:74:3B:0E:06:A1:F6 X509v3 Authority Key Identifier: keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a0:fd:d1:f0:57:36:7c:bb:bd:02:aa:a8:1a:e0:ee:a2:29: d5:3f:da:a1:ec:94:3b:71:7d:c7:88:06:dd:a4:a4:00:97:a3: 97:5d:d6:c8:74:20:fa:ad:72:3a:5a:ae:fe:f7:0d:be:42:22: ca:a8:6f:a8:69:da:98:db:28:4b:02:f8:cf:18:5c:20:79:81: d6:ce:7c:f4:38:9d:1c:24:e4:fb:a9:1e:72:37:a0:4b:7d:3c: 9d:7c:4e:c7:39:00:d2:08:29:0f:79:e2:5d:7b:7d:36:d4:76: bf:d8:76:39:92:53:64:d5:37:9d:62:04:ac:a4:22:f4:63:1e: 7f:91:0f:97:45:4b:9b:4b:3d:e0:53:51:31:24:21:48:89:3c: 90:0b:a1:32:ba:7d:7d:2e:e7:a8:95:70:15:f9:62:63:c3:16: 51:e4:96:fd:c2:fc:05:12:b4:d0:03:b5:ce:02:61:a3:0c:8b: 3a:17:0d:14:d7:a5:4d:07:4e:d8:38:aa:7b:8a:64:2f:f4:f3: 27:fe:03:99:d1:15:3f:4a:6a:24:08:ae:cb:d8:5c:82:f2:f2: fa:07:34:03:de:e6:d3:f7:7b:ab:9e:d2:e2:22:06:7e:d4:74: 5c:f6:53:9b:5e:22:3f:a0:5d:65:77:9e:f2:f6:0f:5f:78:7d: 9e:a8:a1:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvXa2MpLFXWD720V9yEIkCUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMjRlNWVmZjFhYmMwZTZkOGJmMDI5ZTRmNzMyZTBhYjcx YmMxNmEwHhcNMjYwMTE5MTgwMTM3WhcNMjYwMTIwMTgwMTM3WjAzMTEwLwYDVQQD EyhkNTdiMjQ0ZWYzMDVjYzA3NWVhN2E3ZjQ1YjZiNzQzYjBlMDZhMWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+mRut2AnE63NUVEptaM0nxwv7IO yWoMnagU8GAyectUBapS1Tam71qBs/xb17P489WPtDF27+1sF6+/RtEh/1nSc+1j S0UbPGNCw82tEsQDLW/bLlPEd+vz9qlWb4SdUzpaayTqiPUvS9JIcBqon3fh8z6g vPxnf7TKb360u/JdQpeXkiuuNumVqJmXguWmisHWOCV/nXR9X8ukDtP+IQeG7t9X q4W7uqbZUEy/Nli+7pj9xPKL1/ugu+kMORbhxdA78VWNzmBea2Ku/tUcJGMQWHJ6 eFHTEhEvI/dC1G6s+lN2l6upg0jepjZFbPOCTihUKcUGicfaicvyqci12wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNV7JE7zBcwHXqen9FtrdDsOBqH2MB8GA1UdIwQY MBaAFBIk5e/xq8Dm2L8Cnk9zLgq3G8FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWlUbDdfR3J3T2JZdndLZVQzTXVDcmNid1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8xMWJlMjMtM2JlNi00ODgxLWEzZDEt NTM4NmIxZDk2M2JjLzEvRWlUbDdfR3J3T2JZdndLZVQzTXVDcmNid1dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8xMWJlMjMtM2JlNi00ODgxLWEzZDEtNTM4NmIxZDk2M2Jj LzEvRWlUbDdfR3J3T2JZdndLZVQzTXVDcmNid1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm6D90fBX Nny7vQKqqBrg7qIp1T/aoeyUO3F9x4gG3aSkAJejl13WyHQg+q1yOlqu/vcNvkIi yqhvqGnamNsoSwL4zxhcIHmB1s589DidHCTk+6kecjegS308nXxOxzkA0ggpD3ni XXt9NtR2v9h2OZJTZNU3nWIErKQi9GMef5EPl0VLm0s94FNRMSQhSIk8kAuhMrp9 fS7nqJVwFfliY8MWUeSW/cL8BRK00AO1zgJhowyLOhcNFNelTQdO2Diqe4pkL/Tz J/4DmdEVP0pqJAiuy9hcgvLy+gc0A97m0/d7q57S4iIGftR0XPZTm14iP6BdZXee 8vYPX3h9nqihVw== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:45 2026 by rpki-client