This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft File: enBAB-ITXIsSeANbp2QrmRWURLE.mft (raw, json) Hash identifier: Vhp4+paH3AKsuxw2YuF107pyXUt/uZo9aXmMPW1DbnA= Subject key identifier: E0:0D:05:CB:FB:A2:7A:C3:30:E1:6F:72:28:57:14:1C:22:CD:C1:5F Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1 Certificate issuer: /CN=7a704007e2135c8b1278035ba7642b99159444b1 Certificate serial: 019BFA9BCC60120321B2651B2B2CD95D5329 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft Manifest number: 17E7 Signing time: Mon 26 Jan 2026 14:01:12 +0000 Manifest this update: Mon 26 Jan 2026 14:01:12 +0000 Manifest next update: Tue 27 Jan 2026 14:01:12 +0000 Files and hashes: 1: enBAB-ITXIsSeANbp2QrmRWURLE.crl (hash: xfNLDQBg8Vli1KyRjk21px6ZvYjbjNtiHrwjnW5UyUM=) 2: n2RXCHmE2mIVVK86mWjjYTONVEY.roa (hash: vfexF/zKDf9M5bj3mCjRl7MbjkVTZHBSgi+Kjne7g2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:cc:60:12:03:21:b2:65:1b:2b:2c:d9:5d:53:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1 Validity Not Before: Jan 26 14:01:12 2026 GMT Not After : Jan 27 14:01:12 2026 GMT Subject: CN=e00d05cbfba27ac330e16f722857141c22cdc15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8c:4d:cd:04:d1:9e:49:18:d4:5d:18:39:c6: 7c:6e:ae:ca:d3:a5:8c:48:6d:65:d0:c5:7e:d4:f6: d8:40:7a:54:d2:2f:ca:c4:e8:ad:65:0d:bd:1c:0d: 11:2a:b5:60:d2:8f:8d:0b:45:62:97:b3:39:0f:16: eb:7d:8a:f1:e0:c1:46:4d:1c:41:4d:ed:77:61:05: 35:46:31:18:cb:27:39:9a:5f:90:25:d5:8d:5a:af: dd:06:46:b0:e1:91:48:40:d2:83:5b:83:2e:8d:ab: 3f:94:e3:cb:49:45:f9:a0:e6:53:3a:7a:5d:77:77: ae:b9:c8:f8:57:0a:af:94:91:71:7f:4d:48:1c:da: e9:d2:8a:89:fb:a8:30:30:43:f3:d5:76:28:98:0b: 5f:54:c5:47:6a:c8:d3:84:27:f7:58:22:a4:9c:eb: 30:35:63:be:a8:e9:6a:92:5b:6a:d2:bd:f6:ec:3e: cd:85:c1:88:fd:f1:da:de:9f:87:8b:71:d5:3f:a6: 95:f6:3a:63:e1:3a:d8:d0:97:ea:90:b7:d2:df:eb: 16:a3:ab:7e:fc:ab:6d:48:19:3e:c7:fb:a8:b4:57: f5:c1:8d:cf:05:3b:b7:02:0f:d6:34:8b:e7:12:da: 5d:2a:ff:7a:11:ac:b2:5a:c3:e9:6d:e3:bc:bf:f5: f6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0D:05:CB:FB:A2:7A:C3:30:E1:6F:72:28:57:14:1C:22:CD:C1:5F X509v3 Authority Key Identifier: keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:c8:ee:cf:e3:95:af:87:f7:b7:d2:43:aa:f9:4e:c7:55:0a: 1d:af:53:67:14:0a:87:f0:22:dd:ad:20:fd:09:1c:9d:8a:70: f3:89:5c:28:b8:ea:9c:cd:bf:56:73:70:ae:25:c7:7b:79:51: d3:cb:af:f9:4b:35:ca:15:57:78:34:da:5a:68:ad:21:c8:50: a9:18:ee:4b:cd:a0:cb:60:19:54:6a:82:99:01:d7:03:3d:de: c8:fd:a5:82:a8:f4:a7:55:ac:98:a4:f2:0c:59:f5:59:6f:b1: f7:58:74:25:7f:bc:96:d1:3b:0b:a6:32:1d:0f:1c:b7:54:71: 89:e9:f2:7b:12:34:9e:82:d3:14:e9:00:63:54:fc:dd:f5:e7: 50:06:ca:bf:28:1f:ab:2f:a0:69:e7:16:ef:7c:85:39:99:f2: e2:ab:9f:5a:6d:e3:9a:5e:d6:0f:ef:b5:7a:04:fc:e1:f2:5a: 48:55:a4:58:53:b2:b8:c5:29:2c:07:de:6d:d8:6d:20:37:5b: 82:c3:b5:5d:3a:29:fd:d2:7c:17:7f:38:c5:b7:47:a2:99:47: 36:8b:e8:f4:ea:38:e8:3c:1d:75:9e:90:48:27:0c:fd:eb:87: 38:f9:6b:ef:90:f2:68:51:16:1b:27:20:58:9c:ae:65:5b:0a: ae:6f:b1:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m8xgEgMhsmUbKyzZXVMpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNzA0MDA3ZTIxMzVjOGIxMjc4MDM1YmE3NjQyYjk5MTU5 NDQ0YjEwHhcNMjYwMTI2MTQwMTEyWhcNMjYwMTI3MTQwMTEyWjAzMTEwLwYDVQQD EyhlMDBkMDVjYmZiYTI3YWMzMzBlMTZmNzIyODU3MTQxYzIyY2RjMTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oxNzQTRnkkY1F0YOcZ8bq7K06WM SG1l0MV+1PbYQHpU0i/KxOitZQ29HA0RKrVg0o+NC0Vil7M5DxbrfYrx4MFGTRxB Te13YQU1RjEYyyc5ml+QJdWNWq/dBkaw4ZFIQNKDW4Mujas/lOPLSUX5oOZTOnpd d3euucj4VwqvlJFxf01IHNrp0oqJ+6gwMEPz1XYomAtfVMVHasjThCf3WCKknOsw NWO+qOlqkltq0r327D7NhcGI/fHa3p+Hi3HVP6aV9jpj4TrY0JfqkLfS3+sWo6t+ /KttSBk+x/uotFf1wY3PBTu3Ag/WNIvnEtpdKv96EayyWsPpbeO8v/X29QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOANBcv7onrDMOFvcihXFBwizcFfMB8GA1UdIwQY MBaAFHpwQAfiE1yLEngDW6dkK5kVlESxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW5CQUItSVRYSXNTZUFOYnAyUXJtUldVUkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi80ZWRkYTQtZWJjNS00NDM0LWJiOTEt Zjc3MTBhMDMwZmEyLzEvZW5CQUItSVRYSXNTZUFOYnAyUXJtUldVUkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi80ZWRkYTQtZWJjNS00NDM0LWJiOTEtZjc3MTBhMDMwZmEy LzEvZW5CQUItSVRYSXNTZUFOYnAyUXJtUldVUkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScjuz+OV r4f3t9JDqvlOx1UKHa9TZxQKh/Ai3a0g/QkcnYpw84lcKLjqnM2/VnNwriXHe3lR 08uv+Us1yhVXeDTaWmitIchQqRjuS82gy2AZVGqCmQHXAz3eyP2lgqj0p1WsmKTy DFn1WW+x91h0JX+8ltE7C6YyHQ8ct1RxienyexI0noLTFOkAY1T83fXnUAbKvygf qy+gaecW73yFOZny4qufWm3jml7WD++1egT84fJaSFWkWFOyuMUpLAfebdhtIDdb gsO1XTop/dJ8F384xbdHoplHNovo9Oo46DwddZ6QSCcM/euHOPlr75DyaFEWGycg WJyuZVsKrm+xQA== -----END CERTIFICATE-----Generated at Mon Jan 26 22:11:31 2026 by rpki-client