This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft File: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft (raw, json) Hash identifier: CP1IhzzCkxwU/OXZ8IJuTQAPo1ItW2UqWNPIWwIFvMY= Subject key identifier: DD:4F:E5:1B:C0:64:99:F9:75:84:D2:CB:9C:62:55:68:7A:FB:B7:11 Authority key identifier: 12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64 Certificate issuer: /CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64 Certificate serial: 019BFDD40B373C9349DA04E697E3A3B997EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft Manifest number: 08ED Signing time: Tue 27 Jan 2026 05:01:30 +0000 Manifest this update: Tue 27 Jan 2026 05:01:30 +0000 Manifest next update: Wed 28 Jan 2026 05:01:30 +0000 Files and hashes: 1: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl (hash: Q6AdJi7B/efPOgsi4f8/PhmANpT4oP0rnHjLetGfsPw=) 2: zY6-TSsM-n0cGeuR4MC7O4QKpZU.roa (hash: pDF4f+98qM6dWbtI9D665+bMv7kt2epaA+MQQ2O8Qdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:d4:0b:37:3c:93:49:da:04:e6:97:e3:a3:b9:97:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64 Validity Not Before: Jan 27 05:01:30 2026 GMT Not After : Jan 28 05:01:30 2026 GMT Subject: CN=dd4fe51bc06499f97584d2cb9c6255687afbb711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ad:56:d5:3b:c9:99:49:d7:a6:b0:00:06:33: bc:4e:e1:f8:b2:f6:2c:43:f8:66:0a:13:dd:9a:bb: ae:d9:71:87:40:27:c6:ae:f1:33:13:c4:e0:8c:bd: 99:18:4c:04:5a:ff:de:e3:17:96:60:42:09:e7:89: bf:70:b7:b8:f3:c5:cf:4c:95:c0:0a:10:01:11:e2: 2e:c7:2a:8e:bc:13:c6:11:8d:0b:59:d9:04:93:d8: a2:33:e5:76:14:bd:b2:ba:28:16:c1:18:ff:a4:59: f4:63:74:45:53:a5:b2:31:05:5d:a3:04:35:18:f6: 23:ef:b2:89:0e:fc:e4:13:73:42:bf:52:89:f8:67: b0:99:98:0b:97:23:89:ab:29:10:d3:17:79:c7:60: 0c:7c:49:e2:85:a7:ad:68:66:61:ad:8e:43:ae:c3: b8:23:f6:92:06:9e:65:76:1c:a4:1b:53:14:ca:bd: fb:02:a5:1e:b3:41:e4:0d:41:db:6c:6e:cc:1d:eb: fb:0e:04:93:7c:cc:22:0c:c7:f8:e1:74:a5:96:79: b5:cc:a8:ad:ec:59:f4:14:92:e7:18:e7:75:a1:e8: 1a:5f:66:b4:e0:36:34:82:32:6a:7e:dd:fe:f4:e5: 63:06:64:5f:af:b9:5b:90:5e:1e:e9:44:85:e4:5a: ea:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4F:E5:1B:C0:64:99:F9:75:84:D2:CB:9C:62:55:68:7A:FB:B7:11 X509v3 Authority Key Identifier: keyid:12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:e5:5e:b2:79:d5:1e:86:c4:8a:6d:57:1e:78:8e:9f:fb:28: 9b:72:8b:93:e9:c5:f7:d0:c5:97:ee:cd:16:85:e7:0e:ee:d3: 8b:1f:b2:f5:fb:f5:06:cc:ea:49:90:5f:04:d0:2c:83:0b:03: 4f:a6:03:18:17:6c:64:61:51:37:5c:6b:f2:54:f0:92:ca:f6: df:a1:4d:5a:2e:2c:a0:ed:1a:ce:19:d4:df:ef:f0:9d:d1:a7: b6:ea:b6:57:77:d8:cc:92:9c:72:9a:13:d4:83:a7:9f:20:25: 69:f8:33:bb:70:bc:14:4d:3c:a6:ff:25:03:14:88:7a:af:ee: b8:1e:40:09:33:60:eb:7c:32:da:bd:82:9d:ec:1e:5e:3d:a2: 1a:3d:85:3f:4e:9e:56:08:e2:80:7f:ae:d8:dc:1e:6a:1f:77: a2:89:e6:c0:5f:3a:04:c1:eb:9f:db:83:f9:6d:b1:44:a3:09: f1:00:bc:35:e7:32:b9:bb:48:b5:df:e5:25:63:ff:b4:6a:80: 97:4f:f0:a3:44:9c:95:da:6b:3e:c3:66:93:32:c1:64:61:28: 03:38:56:11:55:f9:39:df:81:c8:fc:f2:0b:d0:bb:11:79:35: 5d:02:51:c4:2f:0a:47:ba:fc:a3:8e:75:bf:b4:cd:19:bc:be: ca:ec:8f:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv91As3PJNJ2gTml+OjuZfrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTMzYTY1MjNlMmVkMGEwYzlhMzZlYThhN2M2ZjBlNzJh NWRkNjQwHhcNMjYwMTI3MDUwMTMwWhcNMjYwMTI4MDUwMTMwWjAzMTEwLwYDVQQD EyhkZDRmZTUxYmMwNjQ5OWY5NzU4NGQyY2I5YzYyNTU2ODdhZmJiNzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn61W1TvJmUnXprAABjO8TuH4svYs Q/hmChPdmruu2XGHQCfGrvEzE8TgjL2ZGEwEWv/e4xeWYEIJ54m/cLe488XPTJXA ChABEeIuxyqOvBPGEY0LWdkEk9iiM+V2FL2yuigWwRj/pFn0Y3RFU6WyMQVdowQ1 GPYj77KJDvzkE3NCv1KJ+GewmZgLlyOJqykQ0xd5x2AMfEnihaetaGZhrY5DrsO4 I/aSBp5ldhykG1MUyr37AqUes0HkDUHbbG7MHev7DgSTfMwiDMf44XSllnm1zKit 7Fn0FJLnGOd1oegaX2a04DY0gjJqft3+9OVjBmRfr7lbkF4e6USF5Frq9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1P5RvAZJn5dYTSy5xiVWh6+7cRMB8GA1UdIwQY MBaAFBITOmUj4u0KDJo26op8bw5ypd1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85MzRlYzMtYjc2YS00MGQwLThhM2Et ODI0NzI5YWI0YjlhLzEvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85MzRlYzMtYjc2YS00MGQwLThhM2EtODI0NzI5YWI0Yjlh LzEvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYeVesnnV HobEim1XHniOn/som3KLk+nF99DFl+7NFoXnDu7Tix+y9fv1BszqSZBfBNAsgwsD T6YDGBdsZGFRN1xr8lTwksr236FNWi4soO0azhnU3+/wndGntuq2V3fYzJKccpoT 1IOnnyAlafgzu3C8FE08pv8lAxSIeq/uuB5ACTNg63wy2r2CneweXj2iGj2FP06e VgjigH+u2Nweah93oonmwF86BMHrn9uD+W2xRKMJ8QC8NecyubtItd/lJWP/tGqA l0/wo0ScldprPsNmkzLBZGEoAzhWEVX5Od+ByPzyC9C7EXk1XQJRxC8KR7r8o451 v7TNGby+yuyPLg== -----END CERTIFICATE-----Generated at Tue Jan 27 10:42:58 2026 by rpki-client