This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft File: eXfk4sKqJsENBx-hBFwTHm0WD3A.mft (raw, json) Hash identifier: pRXfAuK7codNF0GuIyVkItAOJnzu6f3nhODAYareBrU= Subject key identifier: E4:C9:3A:1A:D5:E3:2E:77:6B:B1:03:5E:B5:B4:BD:24:24:F7:D3:0E Authority key identifier: 79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70 Certificate issuer: /CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70 Certificate serial: 019BCED4FD0AE74E43820B13297CC3495205 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft Manifest number: 8C Signing time: Sun 18 Jan 2026 02:00:23 +0000 Manifest this update: Sun 18 Jan 2026 02:00:23 +0000 Manifest next update: Mon 19 Jan 2026 02:00:23 +0000 Files and hashes: 1: Fw8PMiL8XbMvdKq8X17Je2tMF2E.roa (hash: NpJsXlY3046ddjEeyCOq10eq8sScmSmiV1XiKlKV9B0=) 2: eXfk4sKqJsENBx-hBFwTHm0WD3A.crl (hash: dViqWsI5j9wO7w0t0PrsTykl7H7tu3o3ERB/I9S5XDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ce:d4:fd:0a:e7:4e:43:82:0b:13:29:7c:c3:49:52:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7977e4e2c2aa26c10d071fa1045c131e6d160f70 Validity Not Before: Jan 18 02:00:23 2026 GMT Not After : Jan 19 02:00:23 2026 GMT Subject: CN=e4c93a1ad5e32e776bb1035eb5b4bd2424f7d30e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8b:8f:69:1e:fe:b7:be:f6:6f:92:84:c0:5a: be:e2:41:e3:9c:05:bc:6b:a4:c9:e2:f9:a5:39:bf: 2d:8e:4e:0c:12:32:b9:7c:eb:04:26:d6:ef:d8:c3: 91:67:18:8a:e1:ba:4b:ef:8f:2c:b4:6d:8e:23:6f: 77:22:05:d7:74:f2:c1:a3:3e:c1:58:02:68:94:6e: ad:af:94:79:c9:58:02:41:4f:6f:e3:7f:02:c9:0d: 53:a2:07:74:31:22:cd:2b:a5:2d:3c:b0:09:bb:8a: fe:f3:a6:65:7e:7b:e5:4b:27:65:39:b1:79:b0:ee: d9:04:de:b3:81:e0:8e:73:ac:84:af:3a:fc:d6:87: 0c:15:29:c5:bc:5b:7a:43:e4:da:da:b1:5a:b3:e4: 6c:91:d2:1f:59:95:87:30:c4:bd:28:c3:56:0b:18: 7b:15:0d:a4:a2:f1:39:79:8e:4d:a9:87:2c:02:85: 96:41:3d:1d:66:ff:7f:09:b1:79:89:ad:21:06:4f: bc:26:dd:5f:72:35:94:e0:c3:31:1e:e9:a2:b2:85: 0a:b0:2f:b2:f3:bf:6a:c1:46:86:d3:54:eb:e3:37: c0:28:9e:9a:63:12:fc:24:d6:44:5a:c4:2a:e4:14: c5:20:45:f9:e8:de:f9:fd:b5:74:f0:b0:ec:96:50: d8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C9:3A:1A:D5:E3:2E:77:6B:B1:03:5E:B5:B4:BD:24:24:F7:D3:0E X509v3 Authority Key Identifier: keyid:79:77:E4:E2:C2:AA:26:C1:0D:07:1F:A1:04:5C:13:1E:6D:16:0F:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXfk4sKqJsENBx-hBFwTHm0WD3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6717d9-8671-4c60-8fd9-2216c3957598/1/eXfk4sKqJsENBx-hBFwTHm0WD3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:3d:66:c4:77:4b:6f:45:06:cb:58:6e:58:63:28:61:f1:a8: 2e:7e:df:d7:9b:5b:68:33:f8:c6:39:88:dd:e4:bc:a7:be:99: dd:0a:0d:06:71:80:aa:c0:13:74:72:f5:aa:9b:aa:10:79:9d: 30:80:c3:43:b0:67:a5:d1:85:9e:76:20:39:d9:0c:b4:77:ac: ed:9a:a4:58:de:14:fc:49:47:29:fd:26:18:50:2f:b4:9f:da: cd:6b:af:2b:63:31:48:0e:0a:37:b1:4c:69:34:ec:47:d4:98: 65:43:54:48:14:07:7a:e7:28:3f:8b:48:01:99:2d:b5:aa:44: a1:3e:b7:3f:58:c4:9f:ad:f4:fd:f7:af:0e:84:b8:35:39:4e: 0b:90:82:14:82:50:e9:84:22:f7:c8:6d:26:e0:48:97:a2:ae: 22:b3:b0:e2:49:6a:15:21:c4:54:53:98:77:58:be:7c:b0:8e: 6f:45:4d:07:03:ed:bc:00:32:ad:2a:be:b0:7f:e3:00:eb:5d: 41:b7:f2:01:9c:eb:3a:27:be:3e:d6:1f:7d:7c:4f:66:fa:4e: 45:3f:89:32:5c:ad:36:fa:99:bf:50:a1:9b:fc:c6:45:b7:46: b6:c4:33:0d:47:cc:fe:ee:5e:b8:66:3f:8a:fb:2b:a8:48:db: bb:4c:37:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvO1P0K505DggsTKXzDSVIFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NzdlNGUyYzJhYTI2YzEwZDA3MWZhMTA0NWMxMzFlNmQx NjBmNzAwHhcNMjYwMTE4MDIwMDIzWhcNMjYwMTE5MDIwMDIzWjAzMTEwLwYDVQQD EyhlNGM5M2ExYWQ1ZTMyZTc3NmJiMTAzNWViNWI0YmQyNDI0ZjdkMzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYuPaR7+t772b5KEwFq+4kHjnAW8 a6TJ4vmlOb8tjk4MEjK5fOsEJtbv2MORZxiK4bpL748stG2OI293IgXXdPLBoz7B WAJolG6tr5R5yVgCQU9v438CyQ1Togd0MSLNK6UtPLAJu4r+86ZlfnvlSydlObF5 sO7ZBN6zgeCOc6yErzr81ocMFSnFvFt6Q+Ta2rFas+RskdIfWZWHMMS9KMNWCxh7 FQ2kovE5eY5NqYcsAoWWQT0dZv9/CbF5ia0hBk+8Jt1fcjWU4MMxHumisoUKsC+y 879qwUaG01Tr4zfAKJ6aYxL8JNZEWsQq5BTFIEX56N75/bV08LDsllDYiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTJOhrV4y53a7EDXrW0vSQk99MOMB8GA1UdIwQY MBaAFHl35OLCqibBDQcfoQRcEx5tFg9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhmazRzS3FKc0VOQngtaEJGd1RIbTBXRDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82NzE3ZDktODY3MS00YzYwLThmZDkt MjIxNmMzOTU3NTk4LzEvZVhmazRzS3FKc0VOQngtaEJGd1RIbTBXRDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS82NzE3ZDktODY3MS00YzYwLThmZDktMjIxNmMzOTU3NTk4 LzEvZVhmazRzS3FKc0VOQngtaEJGd1RIbTBXRDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACz1mxHdL b0UGy1huWGMoYfGoLn7f15tbaDP4xjmI3eS8p76Z3QoNBnGAqsATdHL1qpuqEHmd MIDDQ7BnpdGFnnYgOdkMtHes7ZqkWN4U/ElHKf0mGFAvtJ/azWuvK2MxSA4KN7FM aTTsR9SYZUNUSBQHeucoP4tIAZkttapEoT63P1jEn630/fevDoS4NTlOC5CCFIJQ 6YQi98htJuBIl6KuIrOw4klqFSHEVFOYd1i+fLCOb0VNBwPtvAAyrSq+sH/jAOtd QbfyAZzrOie+PtYffXxPZvpORT+JMlytNvqZv1Chm/zGRbdGtsQzDUfM/u5euGY/ ivsrqEjbu0w3/Q== -----END CERTIFICATE-----Generated at Sun Jan 18 12:07:56 2026 by rpki-client