This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft File: cEZO_kc3QepObM9sPFo3xm89oXk.mft (raw, json) Hash identifier: sE8pxHfqwCs1MQmeWofzg7Bhhbt1eym7tpVAYyrMRmY= Subject key identifier: 1A:2E:50:11:58:F5:C8:B9:FD:E2:A7:7C:45:6F:B5:D8:68:60:38:11 Authority key identifier: 70:46:4E:FE:47:37:41:EA:4E:6C:CF:6C:3C:5A:37:C6:6F:3D:A1:79 Certificate issuer: /CN=70464efe473741ea4e6ccf6c3c5a37c66f3da179 Certificate serial: 019BFBAF28B3A17EC676753DBBF7EFD321E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft Manifest number: 03 Signing time: Mon 26 Jan 2026 19:01:58 +0000 Manifest this update: Mon 26 Jan 2026 19:01:58 +0000 Manifest next update: Tue 27 Jan 2026 19:01:58 +0000 Files and hashes: 1: ROpNx89soFP8JE-okJDCTVHVXDs.roa (hash: 5HtcGDIbCLb9z7TZql7Z+rs2Xx1sglk4pFTRwXa2X+g=) 2: cEZO_kc3QepObM9sPFo3xm89oXk.crl (hash: SDX0Wq8dqGHB6afzLb5APjqpqLvAWCemhtjc+Qen0QE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:af:28:b3:a1:7e:c6:76:75:3d:bb:f7:ef:d3:21:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70464efe473741ea4e6ccf6c3c5a37c66f3da179 Validity Not Before: Jan 26 19:01:58 2026 GMT Not After : Jan 27 19:01:58 2026 GMT Subject: CN=1a2e501158f5c8b9fde2a77c456fb5d868603811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:60:bd:9a:f2:50:44:fb:b3:53:3b:fc:d7:28: 76:92:f0:a9:bb:89:90:cc:bd:29:44:97:d2:92:b5: 4c:b9:39:39:89:75:0f:13:9f:d0:23:45:82:52:c4: 30:04:86:19:9b:6b:0a:f0:7d:d4:b3:63:9c:94:31: 80:11:f4:a0:41:53:d1:a8:c1:ce:40:f4:69:9c:95: 23:37:20:80:5f:7b:2f:b8:d7:a6:fd:e5:c1:5b:1a: 62:c6:27:32:3d:e0:df:02:59:7e:76:6f:49:00:8b: 4d:44:fe:a7:58:7b:06:ca:24:9d:16:4c:da:69:c8: 6a:c3:73:ae:e2:e1:8f:3e:f8:68:72:ec:9c:bd:b4: 15:67:fd:43:43:8a:bd:89:9c:c4:2b:33:05:50:34: 77:45:a5:cd:f6:1d:6a:c5:0e:27:cb:c2:48:12:5a: 00:54:6d:26:a0:b4:bc:de:dc:b6:1c:5a:ab:06:04: cc:1f:fe:ba:b5:87:95:45:25:b2:8a:b2:4a:9b:fd: c8:65:fa:fa:e0:28:83:b3:dc:c1:98:75:a0:46:de: 03:0e:43:2d:f4:f4:de:93:20:8a:6c:81:ca:9c:7e: 03:aa:32:57:1c:e8:b0:9f:32:7e:1f:2b:bd:a4:3f: 52:87:d3:80:7d:65:e7:d9:df:8b:95:ab:71:14:d8: 06:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2E:50:11:58:F5:C8:B9:FD:E2:A7:7C:45:6F:B5:D8:68:60:38:11 X509v3 Authority Key Identifier: keyid:70:46:4E:FE:47:37:41:EA:4E:6C:CF:6C:3C:5A:37:C6:6F:3D:A1:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a1:ad:09:65:cd:75:0c:62:23:d6:3f:00:51:97:b5:60:fe: ef:d8:c8:57:39:65:89:23:3d:f2:c8:0f:b7:ba:7d:80:36:ed: dc:a0:61:dd:02:7e:bc:23:b6:47:ba:3e:cc:e7:17:bc:38:7d: 11:50:ed:35:a5:7d:34:04:ce:c4:90:3c:68:78:ea:84:af:18: 4d:8b:11:b4:44:8f:00:ec:29:5d:d3:d8:68:62:50:5e:56:dc: d9:06:45:bf:a9:3b:87:73:1f:6f:69:22:d4:3a:b7:fb:eb:97: c4:ab:96:61:bb:1c:a5:db:28:c7:b4:27:61:91:f6:6e:77:44: 54:61:13:16:9c:e5:b1:7f:57:2c:9e:61:36:d8:73:34:44:ea: d1:1d:24:88:a2:50:44:36:b1:65:7b:c6:98:00:87:f2:24:a3: 78:a0:45:40:3d:7e:c0:8e:3b:92:24:a4:10:8b:dc:5a:a2:ce: e7:3c:2d:2b:ea:7d:04:cc:b6:36:f9:eb:89:20:5e:54:60:d8: e2:0a:83:26:3c:56:95:b8:98:5e:0e:fe:35:ba:ff:86:89:55: 29:71:72:2a:ef:45:91:10:6e:01:fc:77:e8:64:eb:b3:08:49: ca:f3:6a:ad:00:b0:dc:9c:19:b8:e3:55:ec:37:8f:b8:49:65: 51:c8:ee:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7ryizoX7GdnU9u/fv0yHlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNDY0ZWZlNDczNzQxZWE0ZTZjY2Y2YzNjNWEzN2M2NmYz ZGExNzkwHhcNMjYwMTI2MTkwMTU4WhcNMjYwMTI3MTkwMTU4WjAzMTEwLwYDVQQD EygxYTJlNTAxMTU4ZjVjOGI5ZmRlMmE3N2M0NTZmYjVkODY4NjAzODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62C9mvJQRPuzUzv81yh2kvCpu4mQ zL0pRJfSkrVMuTk5iXUPE5/QI0WCUsQwBIYZm2sK8H3Us2OclDGAEfSgQVPRqMHO QPRpnJUjNyCAX3svuNem/eXBWxpixicyPeDfAll+dm9JAItNRP6nWHsGyiSdFkza achqw3Ou4uGPPvhocuycvbQVZ/1DQ4q9iZzEKzMFUDR3RaXN9h1qxQ4ny8JIEloA VG0moLS83ty2HFqrBgTMH/66tYeVRSWyirJKm/3IZfr64CiDs9zBmHWgRt4DDkMt 9PTekyCKbIHKnH4DqjJXHOiwnzJ+Hyu9pD9Sh9OAfWXn2d+LlatxFNgGeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBouUBFY9ci5/eKnfEVvtdhoYDgRMB8GA1UdIwQY MBaAFHBGTv5HN0HqTmzPbDxaN8ZvPaF5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0VaT19rYzNRZXBPYk05c1BGbzN4bTg5b1hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9lYzRiODAtNDZlZC00M2I1LTljZmEt OWI4MDdkZTYwOTAyLzEvY0VaT19rYzNRZXBPYk05c1BGbzN4bTg5b1hrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9lYzRiODAtNDZlZC00M2I1LTljZmEtOWI4MDdkZTYwOTAy LzEvY0VaT19rYzNRZXBPYk05c1BGbzN4bTg5b1hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6GtCWXN dQxiI9Y/AFGXtWD+79jIVzlliSM98sgPt7p9gDbt3KBh3QJ+vCO2R7o+zOcXvDh9 EVDtNaV9NATOxJA8aHjqhK8YTYsRtESPAOwpXdPYaGJQXlbc2QZFv6k7h3Mfb2ki 1Dq3++uXxKuWYbscpdsox7QnYZH2bndEVGETFpzlsX9XLJ5hNthzNETq0R0kiKJQ RDaxZXvGmACH8iSjeKBFQD1+wI47kiSkEIvcWqLO5zwtK+p9BMy2NvnriSBeVGDY 4gqDJjxWlbiYXg7+Nbr/holVKXFyKu9FkRBuAfx36GTrswhJyvNqrQCw3JwZuONV 7DePuEllUcju1A== -----END CERTIFICATE-----Generated at Mon Jan 26 22:58:29 2026 by rpki-client