This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft File: EVwEDsl1QyAjbNymTjk5C93jYmo.mft (raw, json) Hash identifier: WbGIk9Hu26Zq5fPh9pz3Rn4Ggjg/3X3rFx4laD1pSr0= Subject key identifier: FA:A4:90:18:DA:4E:8D:6E:82:90:46:F5:89:3E:79:55:4F:59:2B:A8 Authority key identifier: 11:5C:04:0E:C9:75:43:20:23:6C:DC:A6:4E:39:39:0B:DD:E3:62:6A Certificate issuer: /CN=115c040ec9754320236cdca64e39390bdde3626a Certificate serial: 019BFD2E970237E38639E2305BFFA38795E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft Manifest number: 0CCD Signing time: Tue 27 Jan 2026 02:00:47 +0000 Manifest this update: Tue 27 Jan 2026 02:00:47 +0000 Manifest next update: Wed 28 Jan 2026 02:00:47 +0000 Files and hashes: 1: EVwEDsl1QyAjbNymTjk5C93jYmo.crl (hash: TAQKtKUljg34XPdW1KBD3wya0Gh/6VFP4WDzeRb4wjA=) 2: T5FYecDL9dYudSF4znOqL3xO-3I.roa (hash: tGYqIZRK3jsFGjXl9JsU630t/v5iPjAOq7gYJouPhLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.crl rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:97:02:37:e3:86:39:e2:30:5b:ff:a3:87:95:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115c040ec9754320236cdca64e39390bdde3626a Validity Not Before: Jan 27 02:00:47 2026 GMT Not After : Jan 28 02:00:47 2026 GMT Subject: CN=faa49018da4e8d6e829046f5893e79554f592ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:91:7e:c4:70:84:18:2b:62:87:8e:81:a6:e2: bb:0c:51:0a:d9:05:9b:96:c2:73:d4:ba:69:4d:fb: 16:8e:7b:1d:24:e9:b2:c4:44:2a:d5:92:af:af:07: 83:9f:dd:54:ed:1c:1b:94:17:89:c1:aa:5e:15:2f: 43:0e:bb:37:77:1b:c6:7d:31:fe:08:73:04:15:5d: d4:97:27:3f:f1:ed:75:3c:40:8c:34:5f:ff:65:88: 0a:4e:7e:0b:99:35:59:ef:a5:6d:4b:c3:3c:a0:60: ff:fb:14:f8:ac:bd:35:53:f4:4f:67:94:04:9c:d5: 00:a3:da:db:e0:84:fa:b1:c4:61:dd:ba:1c:59:33: b8:6a:2b:6c:a7:d7:09:e8:ff:d1:36:70:a7:7b:22: 29:a3:b0:2f:95:2e:a7:65:47:7d:91:02:58:2d:ee: 30:27:35:a4:4c:70:26:b8:de:d4:46:41:31:1b:62: 0d:48:c9:56:21:c1:da:35:38:88:e5:8d:c9:56:a7: ef:2d:68:70:26:93:f9:95:c9:ec:f6:e2:6d:08:5d: ba:4d:c0:ba:66:33:2c:84:db:c4:59:8f:ee:2c:69: 29:6a:8b:d8:b2:cd:5f:d3:2c:fd:26:d6:26:2d:5b: 14:ca:e5:b3:9c:f6:72:6b:95:21:aa:02:87:e3:d3: 62:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A4:90:18:DA:4E:8D:6E:82:90:46:F5:89:3E:79:55:4F:59:2B:A8 X509v3 Authority Key Identifier: keyid:11:5C:04:0E:C9:75:43:20:23:6C:DC:A6:4E:39:39:0B:DD:E3:62:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVwEDsl1QyAjbNymTjk5C93jYmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e65152-39fb-4976-8cda-70e7d057ff2d/1/EVwEDsl1QyAjbNymTjk5C93jYmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:8a:37:fb:e6:12:5d:8b:96:70:5e:ee:1b:6b:b4:a5:b1:52: c1:5d:5b:e2:7a:3c:0c:f5:a6:8e:93:dd:e2:70:62:c0:35:4f: c4:b6:d2:f9:47:6d:ea:c5:a6:05:49:b9:65:80:ad:0f:7c:db: 82:82:d9:e9:c4:8f:36:57:f7:12:ad:90:18:31:0b:3d:e6:10: 20:59:55:7c:e3:53:5b:6d:a5:38:46:55:c8:0c:03:2b:47:68: 77:41:ca:b6:5e:77:d2:c8:66:89:d9:ad:c9:0a:1c:f8:94:d1: 58:bd:9a:12:a8:7f:ea:f3:45:0b:7e:88:fe:69:06:f7:5f:44: e9:41:e0:91:d2:b2:8f:2a:b2:45:03:09:09:b4:22:f6:b4:56: ec:51:23:25:3d:44:86:56:24:17:13:b4:ad:65:9f:39:5e:ac: 73:c6:66:3b:fd:e1:2e:18:1c:74:58:12:4c:db:98:ed:9b:b0: df:04:87:ba:03:af:ab:bb:72:48:e5:6b:06:d9:5c:2a:69:46: 20:48:08:cc:99:4e:22:b1:b8:58:ab:43:04:22:75:08:47:f7: 4b:32:7e:cd:c3:b3:33:0a:42:41:69:24:90:0d:d1:d9:f9:39: 73:cf:6d:23:50:5b:92:b5:01:19:9f:df:d2:b5:59:bb:34:54: 77:c5:35:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9LpcCN+OGOeIwW/+jh5XiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNWMwNDBlYzk3NTQzMjAyMzZjZGNhNjRlMzkzOTBiZGRl MzYyNmEwHhcNMjYwMTI3MDIwMDQ3WhcNMjYwMTI4MDIwMDQ3WjAzMTEwLwYDVQQD EyhmYWE0OTAxOGRhNGU4ZDZlODI5MDQ2ZjU4OTNlNzk1NTRmNTkyYmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJF+xHCEGCtih46BpuK7DFEK2QWb lsJz1LppTfsWjnsdJOmyxEQq1ZKvrweDn91U7RwblBeJwapeFS9DDrs3dxvGfTH+ CHMEFV3Ulyc/8e11PECMNF//ZYgKTn4LmTVZ76VtS8M8oGD/+xT4rL01U/RPZ5QE nNUAo9rb4IT6scRh3bocWTO4aitsp9cJ6P/RNnCneyIpo7AvlS6nZUd9kQJYLe4w JzWkTHAmuN7URkExG2INSMlWIcHaNTiI5Y3JVqfvLWhwJpP5lcns9uJtCF26TcC6 ZjMshNvEWY/uLGkpaovYss1f0yz9JtYmLVsUyuWznPZya5UhqgKH49NivQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqkkBjaTo1ugpBG9Yk+eVVPWSuoMB8GA1UdIwQY MBaAFBFcBA7JdUMgI2zcpk45OQvd42JqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVZ3RURzbDFReUFqYk55bVRqazVDOTNqWW1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lNjUxNTItMzlmYi00OTc2LThjZGEt NzBlN2QwNTdmZjJkLzEvRVZ3RURzbDFReUFqYk55bVRqazVDOTNqWW1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9lNjUxNTItMzlmYi00OTc2LThjZGEtNzBlN2QwNTdmZjJk LzEvRVZ3RURzbDFReUFqYk55bVRqazVDOTNqWW1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4o3++YS XYuWcF7uG2u0pbFSwV1b4no8DPWmjpPd4nBiwDVPxLbS+Udt6sWmBUm5ZYCtD3zb goLZ6cSPNlf3Eq2QGDELPeYQIFlVfONTW22lOEZVyAwDK0dod0HKtl530shmidmt yQoc+JTRWL2aEqh/6vNFC36I/mkG919E6UHgkdKyjyqyRQMJCbQi9rRW7FEjJT1E hlYkFxO0rWWfOV6sc8ZmO/3hLhgcdFgSTNuY7Zuw3wSHugOvq7tySOVrBtlcKmlG IEgIzJlOIrG4WKtDBCJ1CEf3SzJ+zcOzMwpCQWkkkA3R2fk5c89tI1BbkrUBGZ/f 0rVZuzRUd8U1TQ== -----END CERTIFICATE-----Generated at Tue Jan 27 06:06:50 2026 by rpki-client