This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft File: ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json) Hash identifier: 2ei3RS8S6xjssFZzry0C0USX0PVfuISVzVkul4DiH+Q= Subject key identifier: 10:87:36:85:8D:1A:6A:1B:37:7F:EA:04:42:B8:37:84:07:7E:E3:DC Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC Certificate issuer: /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc Certificate serial: 019BFA2D58CF3960C72F8819190AD1A6AD04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft Manifest number: 16AC Signing time: Mon 26 Jan 2026 12:00:34 +0000 Manifest this update: Mon 26 Jan 2026 12:00:34 +0000 Manifest next update: Tue 27 Jan 2026 12:00:34 +0000 Files and hashes: 1: Ala0VEiwCJ-XgbkKMuOQm4WQGUM.roa (hash: kHPaxmGFnvypL4VtsE3od5qxMzTcY3hqjMVSes+1x+o=) 2: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: iEwXCMvjVc8NCpbXDeV9qXwnOG6ud6mbPB/tllsneu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:58:cf:39:60:c7:2f:88:19:19:0a:d1:a6:ad:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc Validity Not Before: Jan 26 12:00:34 2026 GMT Not After : Jan 27 12:00:34 2026 GMT Subject: CN=108736858d1a6a1b377fea0442b83784077ee3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:68:49:3d:f9:39:86:12:ba:a5:9a:35:fd:6a: 57:c9:36:97:aa:24:26:56:00:ab:ce:14:4c:f8:c4: 95:a3:1c:f2:1b:4a:43:77:ca:c4:90:1d:13:bd:db: 7e:6b:ed:e1:3c:cc:96:f3:12:e0:e7:eb:00:21:4e: 8b:a8:b2:a9:0b:b7:5e:52:1d:22:9e:3c:92:d1:ac: b4:62:21:02:ad:30:8d:64:37:ae:d6:9c:1d:29:3e: 34:fc:be:6f:af:72:e9:72:a7:0b:9a:46:c8:63:19: a4:d6:3a:46:c9:f1:09:08:63:30:77:c6:82:fa:bb: 8b:38:c8:e4:a2:de:07:c1:fd:64:e4:e5:e2:5a:36: 7c:47:27:7b:18:87:34:b9:f1:ee:95:72:f5:df:02: 8e:e7:0e:4c:36:76:01:71:43:4d:02:28:00:1c:a8: 5c:a1:06:ba:ec:d6:02:bf:ac:c4:6a:d7:ca:c7:e1: 11:84:85:df:32:b4:48:82:27:24:d0:ce:b6:0f:95: b1:a8:0a:05:9a:e9:a0:08:10:0e:e0:43:f0:ad:9e: 39:9d:ff:2d:6a:20:4b:b1:17:47:ab:6c:6d:c9:e0: 66:e8:50:f1:6b:55:07:34:42:be:14:ee:5d:71:6b: 30:c2:73:77:fc:60:53:da:29:85:91:f7:92:00:cc: 1a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:87:36:85:8D:1A:6A:1B:37:7F:EA:04:42:B8:37:84:07:7E:E3:DC X509v3 Authority Key Identifier: keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:16:13:b3:c6:46:d6:dc:92:4e:45:50:dc:6b:66:40:48:be: 6d:c2:0b:e3:84:8b:36:6f:1e:7a:53:a7:73:11:a8:23:28:71: bb:b6:c2:9e:da:c3:69:ca:e2:aa:29:f6:1c:c6:93:11:fc:e5: 8c:cb:47:4c:96:94:ae:24:eb:71:b5:ad:87:e8:7e:a3:ca:46: 7d:45:3a:60:3c:22:3f:2f:5e:db:81:fd:ed:0a:c9:4f:d2:b0: 5a:37:8b:23:5d:fc:e9:7b:fb:10:6e:08:c8:27:da:78:9a:ef: 73:b1:40:18:74:37:93:a0:f6:2f:b1:d7:01:ce:b3:9b:fb:8f: 62:7e:d0:bb:3c:77:9e:63:92:6d:59:dc:a2:28:f2:1c:7b:99: e4:c2:22:84:97:6a:c8:1c:b3:e9:a5:0a:ab:91:b8:53:76:96: b6:76:1e:53:a3:5c:b2:5d:70:74:33:56:a5:31:52:00:2b:b0: 12:76:28:87:c7:de:68:63:6f:52:38:ac:7a:0e:85:63:00:e4: ff:b6:84:75:aa:38:1d:a9:32:25:46:4f:41:12:16:6f:41:02: 3d:8d:a8:89:bd:b4:b8:29:82:b5:1e:b4:dd:ff:89:4a:a9:b8: ed:66:ea:cc:81:5e:de:45:3e:ae:aa:0b:21:f9:c8:12:fb:94: 5b:e4:8a:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LVjPOWDHL4gZGQrRpq0EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YTlmNmEzODFjZTRhNWEzZWNjYjI0OTNhNjg0NjA5Yzk4 OGEwZmMwHhcNMjYwMTI2MTIwMDM0WhcNMjYwMTI3MTIwMDM0WjAzMTEwLwYDVQQD EygxMDg3MzY4NThkMWE2YTFiMzc3ZmVhMDQ0MmI4Mzc4NDA3N2VlM2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2hJPfk5hhK6pZo1/WpXyTaXqiQm VgCrzhRM+MSVoxzyG0pDd8rEkB0Tvdt+a+3hPMyW8xLg5+sAIU6LqLKpC7deUh0i njyS0ay0YiECrTCNZDeu1pwdKT40/L5vr3LpcqcLmkbIYxmk1jpGyfEJCGMwd8aC +ruLOMjkot4Hwf1k5OXiWjZ8Ryd7GIc0ufHulXL13wKO5w5MNnYBcUNNAigAHKhc oQa67NYCv6zEatfKx+ERhIXfMrRIgick0M62D5WxqAoFmumgCBAO4EPwrZ45nf8t aiBLsRdHq2xtyeBm6FDxa1UHNEK+FO5dcWswwnN3/GBT2imFkfeSAMwacwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCHNoWNGmobN3/qBEK4N4QHfuPcMB8GA1UdIwQY MBaAFHmp9qOBzkpaPsyySTpoRgnJiKD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUt ZWNhZjU1M2MzMWQ3LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUtZWNhZjU1M2MzMWQ3 LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxYTs8ZG 1tySTkVQ3GtmQEi+bcIL44SLNm8eelOncxGoIyhxu7bCntrDacriqin2HMaTEfzl jMtHTJaUriTrcbWth+h+o8pGfUU6YDwiPy9e24H97QrJT9KwWjeLI1386Xv7EG4I yCfaeJrvc7FAGHQ3k6D2L7HXAc6zm/uPYn7Quzx3nmOSbVncoijyHHuZ5MIihJdq yByz6aUKq5G4U3aWtnYeU6Ncsl1wdDNWpTFSACuwEnYoh8feaGNvUjiseg6FYwDk /7aEdao4HakyJUZPQRIWb0ECPY2oib20uCmCtR603f+JSqm47WbqzIFe3kU+rqoL IfnIEvuUW+SKCA== -----END CERTIFICATE-----Generated at Mon Jan 26 22:27:39 2026 by rpki-client