This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft File: EHQA5PCchADaMYvWywP9XFSqqfE.mft (raw, json) Hash identifier: nqjKbKRNmhG5fZ1VDyotkMDqSgrJMcIBqKBCDhm/IuE= Subject key identifier: 11:11:95:31:FC:6B:DF:45:21:05:44:76:E1:6B:F0:EF:63:76:56:5D Authority key identifier: 10:74:00:E4:F0:9C:84:00:DA:31:8B:D6:CB:03:FD:5C:54:AA:A9:F1 Certificate issuer: /CN=107400e4f09c8400da318bd6cb03fd5c54aaa9f1 Certificate serial: 019BFB4014FB0A5068AA4298C29A6880A0E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft Manifest number: 4A Signing time: Mon 26 Jan 2026 17:00:39 +0000 Manifest this update: Mon 26 Jan 2026 17:00:39 +0000 Manifest next update: Tue 27 Jan 2026 17:00:39 +0000 Files and hashes: 1: EHQA5PCchADaMYvWywP9XFSqqfE.crl (hash: SAXAb6JUCg9/y0Ua8w5AeSk4l/4ua/g0Eq44jlIj3XI=) 2: msGNeRKY4hek2w_pSa5AbdvnMq8.asa (hash: PIe6d7l8SXdZZ/I+p6eU+FbcvFslTUziAAD/2pokhqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:14:fb:0a:50:68:aa:42:98:c2:9a:68:80:a0:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=107400e4f09c8400da318bd6cb03fd5c54aaa9f1 Validity Not Before: Jan 26 17:00:39 2026 GMT Not After : Jan 27 17:00:39 2026 GMT Subject: CN=11119531fc6bdf4521054476e16bf0ef6376565d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:15:05:06:9f:c0:f7:d5:74:a2:0b:f7:bc:d0: c9:77:d7:5e:2a:46:ee:8d:07:a5:03:94:58:50:86: 4e:88:cc:0e:15:d0:81:57:c9:99:c9:62:8b:4e:06: 1b:7b:56:b4:31:cd:4f:b0:3e:06:0f:f2:fa:4c:ae: 51:27:ff:0d:09:30:b5:83:7b:2b:c6:96:42:62:08: 02:e8:25:88:ec:91:ec:d2:6e:a4:13:ca:b8:98:ae: 87:47:a3:89:1f:5f:ae:79:a8:bd:f5:12:27:7e:2c: 14:22:89:6a:30:18:64:c9:f1:41:0e:ae:e8:83:98: f4:3c:a1:30:66:5e:59:b4:23:cf:80:ff:01:05:39: 5b:45:81:cb:d4:3a:61:fb:03:79:ce:74:9f:45:ac: 91:0f:f1:25:80:aa:a3:5c:72:d3:83:6d:f5:cd:8c: ef:a1:75:50:49:49:fb:96:6d:a1:7d:d9:fe:25:38: cb:fb:45:ac:95:47:86:55:7a:bd:c8:b7:44:45:1c: 9d:72:0f:d9:fb:00:30:27:a6:49:80:b4:21:81:32: 5a:0a:e5:d9:b6:70:55:5d:94:23:e0:43:fd:1c:ca: 2e:07:d5:77:a6:98:9f:6a:1a:28:bd:0c:3a:07:6d: 17:11:3b:44:d8:94:4c:64:12:e3:74:04:7f:7e:55: a0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:11:95:31:FC:6B:DF:45:21:05:44:76:E1:6B:F0:EF:63:76:56:5D X509v3 Authority Key Identifier: keyid:10:74:00:E4:F0:9C:84:00:DA:31:8B:D6:CB:03:FD:5C:54:AA:A9:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHQA5PCchADaMYvWywP9XFSqqfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/f1efa9-d7ea-4c29-bcef-035639e9ebb5/1/EHQA5PCchADaMYvWywP9XFSqqfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ab:bb:0c:c7:14:78:52:d9:af:31:04:25:49:b4:f5:b2:b5: 62:87:d5:c0:0d:c5:25:b2:4d:21:ae:77:ac:57:d6:2a:f9:3e: 77:e6:b3:9f:48:45:7a:e3:a6:ad:30:ec:db:d9:5c:8c:f6:a8: e5:32:f4:6f:92:20:be:a3:33:79:3e:f9:d5:a4:99:7d:a9:45: 64:94:a9:a0:be:56:3f:88:f5:e7:7a:57:f1:dd:4a:c3:a1:c2: 31:ee:a5:62:0d:cc:08:8e:a9:39:77:17:57:ac:2d:33:46:01: 26:29:76:f8:53:73:f0:63:47:f6:c6:39:c1:e1:7a:52:15:e7: 0b:6d:0b:80:f0:b4:be:73:fe:10:37:82:c9:30:96:fb:9a:58: 86:81:7d:e8:68:f1:11:47:59:25:8e:8f:52:79:e3:d9:6f:fe: 7b:fa:3e:ba:51:05:8d:b2:68:96:2a:9a:b0:80:f5:74:bc:ba: 22:09:21:00:7a:5b:8c:a6:ee:a2:a3:01:f7:fd:6d:87:99:51: 24:49:86:5e:94:61:62:f3:1c:66:3e:10:15:5a:55:be:97:f6: d4:c5:e9:6e:e1:26:36:9a:4b:ad:c3:e2:7f:0c:70:02:32:a6: b0:e4:ed:79:c5:ab:37:e2:af:7d:bc:69:5a:9b:1e:2e:80:2b: 6f:f7:bc:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QBT7ClBoqkKYwppogKDnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzQwMGU0ZjA5Yzg0MDBkYTMxOGJkNmNiMDNmZDVjNTRh YWE5ZjEwHhcNMjYwMTI2MTcwMDM5WhcNMjYwMTI3MTcwMDM5WjAzMTEwLwYDVQQD EygxMTExOTUzMWZjNmJkZjQ1MjEwNTQ0NzZlMTZiZjBlZjYzNzY1NjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthUFBp/A99V0ogv3vNDJd9deKkbu jQelA5RYUIZOiMwOFdCBV8mZyWKLTgYbe1a0Mc1PsD4GD/L6TK5RJ/8NCTC1g3sr xpZCYggC6CWI7JHs0m6kE8q4mK6HR6OJH1+ueai99RInfiwUIolqMBhkyfFBDq7o g5j0PKEwZl5ZtCPPgP8BBTlbRYHL1Dph+wN5znSfRayRD/ElgKqjXHLTg231zYzv oXVQSUn7lm2hfdn+JTjL+0WslUeGVXq9yLdERRydcg/Z+wAwJ6ZJgLQhgTJaCuXZ tnBVXZQj4EP9HMouB9V3ppifahoovQw6B20XETtE2JRMZBLjdAR/flWg1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBERlTH8a99FIQVEduFr8O9jdlZdMB8GA1UdIwQY MBaAFBB0AOTwnIQA2jGL1ssD/VxUqqnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhRQTVQQ2NoQURhTVl2V3l3UDlYRlNxcWZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9mMWVmYTktZDdlYS00YzI5LWJjZWYt MDM1NjM5ZTllYmI1LzEvRUhRQTVQQ2NoQURhTVl2V3l3UDlYRlNxcWZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9mMWVmYTktZDdlYS00YzI5LWJjZWYtMDM1NjM5ZTllYmI1 LzEvRUhRQTVQQ2NoQURhTVl2V3l3UDlYRlNxcWZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6u7DMcU eFLZrzEEJUm09bK1YofVwA3FJbJNIa53rFfWKvk+d+azn0hFeuOmrTDs29lcjPao 5TL0b5IgvqMzeT751aSZfalFZJSpoL5WP4j153pX8d1Kw6HCMe6lYg3MCI6pOXcX V6wtM0YBJil2+FNz8GNH9sY5weF6UhXnC20LgPC0vnP+EDeCyTCW+5pYhoF96Gjx EUdZJY6PUnnj2W/+e/o+ulEFjbJoliqasID1dLy6IgkhAHpbjKbuoqMB9/1th5lR JEmGXpRhYvMcZj4QFVpVvpf21MXpbuEmNppLrcPifwxwAjKmsOTtecWrN+Kvfbxp WpseLoArb/e8ZA== -----END CERTIFICATE-----Generated at Mon Jan 26 21:04:46 2026 by rpki-client