This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json) Hash identifier: 7vUCnJyVaIWv9Ae4lUTG4OXvwtC4u6RQE6uNzqBBSoU= Subject key identifier: 86:B6:E9:2A:B9:E7:49:8E:15:72:D9:DD:FC:91:C9:EB:67:51:2D:4C Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b Certificate serial: 019BFD65C4E8BB1FBEF15673B787436A82E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft Manifest number: 17EF Signing time: Tue 27 Jan 2026 03:01:03 +0000 Manifest this update: Tue 27 Jan 2026 03:01:03 +0000 Manifest next update: Wed 28 Jan 2026 03:01:03 +0000 Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: jXP2lu/ij1RYGQfT83kLpJL7aiJc00vqzOhNcMvI/Ic=) 2: qvuOHYoyggsc9g8iuTbD4CEqvBo.roa (hash: jWZoQBgvdhifzrjkxPZUHR/6QgarurKmN/mBEWXh09w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:c4:e8:bb:1f:be:f1:56:73:b7:87:43:6a:82:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b Validity Not Before: Jan 27 03:01:03 2026 GMT Not After : Jan 28 03:01:03 2026 GMT Subject: CN=86b6e92ab9e7498e1572d9ddfc91c9eb67512d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:64:be:a3:14:3b:b9:fd:9c:2c:23:1c:2f:2a: df:f1:61:69:12:a5:da:5f:61:e4:77:1a:24:7f:88: 50:6c:2c:a9:3d:37:38:0a:6d:d1:79:42:df:c1:d5: 92:03:b3:00:5e:e0:37:ac:8f:ad:a9:6f:9f:14:36: 4f:84:b3:47:53:d8:15:2c:2d:fc:f7:a0:d5:55:25: dc:b3:fa:52:ab:b9:38:8c:6e:c6:72:db:54:15:b3: 2c:ea:b2:06:22:f1:da:45:8c:ff:e5:94:2a:b7:00: aa:fb:76:25:6c:39:45:aa:ee:fe:f6:5a:70:13:bd: d6:29:cd:3c:b2:23:ba:77:a1:39:43:6e:6d:f1:72: d1:27:e6:a7:68:92:16:d8:8e:58:3c:06:bd:b7:62: 3a:2e:de:31:10:38:40:04:62:c0:42:ef:0b:d0:1d: ee:65:c2:83:a3:f6:44:42:60:2e:f9:12:a2:35:ac: d1:90:bb:59:9d:0f:a1:7d:ad:fd:fe:63:8d:74:3e: 52:9b:c3:81:7e:a1:34:10:6a:72:7b:01:dd:62:fe: 6b:22:89:60:aa:93:ca:16:c3:f3:36:2f:e7:4c:14: 4d:d5:dc:79:55:80:99:98:d0:c8:43:94:c3:16:9b: 40:27:6f:36:54:3c:fc:c4:f7:8e:70:86:9b:c7:6f: 5e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B6:E9:2A:B9:E7:49:8E:15:72:D9:DD:FC:91:C9:EB:67:51:2D:4C X509v3 Authority Key Identifier: keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:4b:f1:1f:90:31:09:9f:52:46:c0:b9:85:0a:b9:ec:ac:8d: b4:0a:25:e1:10:31:9a:7f:62:8d:f5:1a:87:22:1c:d4:4b:39: 4a:f5:42:34:26:3a:e5:f5:64:ad:0c:72:53:59:02:d6:6a:ee: f2:8e:21:03:e4:29:9e:39:32:75:51:d6:a0:51:d2:7d:fc:9b: 77:af:e1:0e:dc:7f:b6:7f:a0:69:45:b7:18:b8:70:7c:c0:fb: 9f:86:ab:cf:b4:56:8b:97:ba:dd:4d:92:ac:b7:43:24:dc:89: 3e:6d:63:94:fb:4e:e2:da:9a:c4:a4:17:7b:9a:e0:c2:bc:e0: e0:77:c1:08:51:f0:51:94:84:34:25:8e:dd:cc:c2:c3:b9:e2: ce:ee:17:5e:64:a9:5f:dc:55:c7:cf:af:cf:a4:8f:1e:d6:57: 58:01:bb:e8:03:b5:c6:d4:80:11:3c:ed:d0:43:7b:85:8d:3b: 51:26:fd:77:19:88:e6:55:14:c9:b7:f6:2c:89:e6:b7:33:13: bc:b6:41:09:26:0f:75:f3:41:97:75:bc:12:84:c3:9c:60:b5: ab:e4:f9:56:12:51:fb:1a:91:83:dd:a1:af:f3:37:5a:a8:cc: 73:97:6d:a7:c4:d7:5c:7e:44:7b:7d:29:ba:16:ba:b4:9e:71: f4:c5:1e:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZcToux++8VZzt4dDaoLhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYmM0MGJjYWI1ZTkwNTNhYjZkYjdkMTllMmEzOGRmMWI2 ZjlhNGIwHhcNMjYwMTI3MDMwMTAzWhcNMjYwMTI4MDMwMTAzWjAzMTEwLwYDVQQD Eyg4NmI2ZTkyYWI5ZTc0OThlMTU3MmQ5ZGRmYzkxYzllYjY3NTEyZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mS+oxQ7uf2cLCMcLyrf8WFpEqXa X2Hkdxokf4hQbCypPTc4Cm3ReULfwdWSA7MAXuA3rI+tqW+fFDZPhLNHU9gVLC38 96DVVSXcs/pSq7k4jG7GcttUFbMs6rIGIvHaRYz/5ZQqtwCq+3YlbDlFqu7+9lpw E73WKc08siO6d6E5Q25t8XLRJ+anaJIW2I5YPAa9t2I6Lt4xEDhABGLAQu8L0B3u ZcKDo/ZEQmAu+RKiNazRkLtZnQ+hfa39/mONdD5Sm8OBfqE0EGpyewHdYv5rIolg qpPKFsPzNi/nTBRN1dx5VYCZmNDIQ5TDFptAJ282VDz8xPeOcIabx29etQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIa26Sq550mOFXLZ3fyRyetnUS1MMB8GA1UdIwQY MBaAFBG8QLyrXpBTq2230Z4qON8bb5pLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kYWZmYjYtOGJkZi00MTFkLWI2YzQt YWU0Zjg0ZTE2Y2ExLzEvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9kYWZmYjYtOGJkZi00MTFkLWI2YzQtYWU0Zjg0ZTE2Y2Ex LzEvRWJ4QXZLdGVrRk9yYmJmUm5pbzQzeHR2bWtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkvxH5Ax CZ9SRsC5hQq57KyNtAol4RAxmn9ijfUahyIc1Es5SvVCNCY65fVkrQxyU1kC1mru 8o4hA+QpnjkydVHWoFHSffybd6/hDtx/tn+gaUW3GLhwfMD7n4arz7RWi5e63U2S rLdDJNyJPm1jlPtO4tqaxKQXe5rgwrzg4HfBCFHwUZSENCWO3czCw7nizu4XXmSp X9xVx8+vz6SPHtZXWAG76AO1xtSAETzt0EN7hY07USb9dxmI5lUUybf2LInmtzMT vLZBCSYPdfNBl3W8EoTDnGC1q+T5VhJR+xqRg92hr/M3WqjMc5dtp8TXXH5Ee30p uha6tJ5x9MUemQ== -----END CERTIFICATE-----Generated at Tue Jan 27 09:50:33 2026 by rpki-client