This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft File: EsMFQE6AtaTXDSHauG_FtrgBqLg.mft (raw, json) Hash identifier: dvvL+/Bq0YdizjYCz42tyIs6gd5lW/qX6y9xnHqaaRg= Subject key identifier: 03:03:C4:77:02:73:C9:41:85:D3:B3:21:11:48:54:CC:55:61:4C:D2 Authority key identifier: 12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8 Certificate issuer: /CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8 Certificate serial: 019BF988AA6C81712CA51C7626F885CC177F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 09:00:41 +0000 Manifest this update: Mon 26 Jan 2026 09:00:41 +0000 Manifest next update: Tue 27 Jan 2026 09:00:41 +0000 Files and hashes: 1: EsMFQE6AtaTXDSHauG_FtrgBqLg.crl (hash: PmZ95Dz1OB0uXM5UTSeIuteWUsL+j/2cFBSHhUHm9DI=) 2: tvvdON_7uU2iILnjNIDovzdgl18.roa (hash: HmPjAANeq+ZoUqxrsiFavZcSafX1mVbsEsctTvfq1to=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:88:aa:6c:81:71:2c:a5:1c:76:26:f8:85:cc:17:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8 Validity Not Before: Jan 26 09:00:41 2026 GMT Not After : Jan 27 09:00:41 2026 GMT Subject: CN=0303c4770273c94185d3b321114854cc55614cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1f:ab:da:7f:8b:f0:6c:ec:47:a5:8b:50:24: f4:73:33:58:03:33:8d:f3:77:a3:31:45:bc:fa:9e: 8d:13:69:10:66:4f:37:3b:ab:bd:cb:e1:83:74:59: 15:4f:a8:f3:b6:33:1e:58:62:05:a3:8a:62:ef:3b: 55:56:98:ab:36:ca:dd:61:70:64:3d:41:73:44:30: d5:1f:45:ed:f7:0d:2a:6c:d0:89:0f:df:fb:d4:8c: 7b:c1:8a:cd:2f:92:37:35:6a:a5:b1:e5:f3:31:a2: 8d:ab:01:09:bb:40:de:66:8e:91:11:f7:60:41:2f: 4b:b9:ee:be:1e:60:04:5c:9d:03:d4:66:92:d5:52: cb:db:b1:9c:b4:f2:a8:56:f5:69:ae:55:22:d4:7d: 4f:29:f9:b1:4a:11:e8:8c:be:85:7d:53:6c:22:53: e0:1b:69:9d:57:0f:23:85:cf:94:2d:2d:69:d9:3b: c6:fa:a5:20:59:19:33:82:ab:da:71:84:8f:34:7c: ea:12:44:e5:67:e5:61:2a:a3:8d:e1:6c:db:48:62: ab:ef:f5:a6:42:ae:ba:54:13:c9:45:48:db:4d:bd: 39:06:13:ff:dc:cb:c8:18:ba:37:3c:bc:1b:78:5a: e5:f1:99:87:b2:b9:b4:eb:cb:56:69:9e:3c:6f:6d: ca:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:03:C4:77:02:73:C9:41:85:D3:B3:21:11:48:54:CC:55:61:4C:D2 X509v3 Authority Key Identifier: keyid:12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:cd:98:4f:95:dd:83:72:7b:f4:33:66:c8:20:48:ab:cc:03: 2c:85:b5:c3:93:e0:bf:39:8e:07:4b:dd:be:7a:74:de:5d:83: 9e:b8:da:31:e6:38:69:7c:29:19:f4:8b:e9:26:b8:21:7b:da: 6c:b1:3c:53:c7:2d:fa:f4:b5:55:36:b1:f6:00:1a:f7:97:d0: 61:0b:24:65:b4:a8:b0:50:8e:f6:a7:22:cd:61:a9:65:9a:a1: ee:27:0f:cd:70:49:92:68:cb:02:26:54:84:fd:f8:11:70:60: f9:31:bb:db:1c:70:59:67:a9:c5:0a:19:83:ba:d7:bb:13:26: 2e:a2:e8:bd:d5:5e:58:71:ea:e7:15:8c:62:39:b3:8a:d6:f7: f4:66:37:d1:bd:3a:18:2f:86:58:23:68:7a:d5:a5:5e:54:89: ce:7a:77:39:22:de:92:e7:51:4c:2f:5f:3a:a1:97:69:cd:94: e6:bf:58:17:6b:35:76:30:24:c8:04:18:9c:42:d8:06:d2:72: 99:d2:2d:3b:71:a8:0d:e7:b5:89:3a:64:e8:21:de:ca:65:12: 41:54:73:1b:b4:4e:ad:b2:92:eb:1b:07:d2:d1:c1:40:fe:c4: e6:9a:f1:67:66:60:42:4b:dd:1b:aa:79:4a:9d:dc:2f:81:4c: a0:a3:bc:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iKpsgXEspRx2JviFzBd/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYzMwNTQwNGU4MGI1YTRkNzBkMjFkYWI4NmZjNWI2Yjgw MWE4YjgwHhcNMjYwMTI2MDkwMDQxWhcNMjYwMTI3MDkwMDQxWjAzMTEwLwYDVQQD EygwMzAzYzQ3NzAyNzNjOTQxODVkM2IzMjExMTQ4NTRjYzU1NjE0Y2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR+r2n+L8GzsR6WLUCT0czNYAzON 83ejMUW8+p6NE2kQZk83O6u9y+GDdFkVT6jztjMeWGIFo4pi7ztVVpirNsrdYXBk PUFzRDDVH0Xt9w0qbNCJD9/71Ix7wYrNL5I3NWqlseXzMaKNqwEJu0DeZo6REfdg QS9Lue6+HmAEXJ0D1GaS1VLL27GctPKoVvVprlUi1H1PKfmxShHojL6FfVNsIlPg G2mdVw8jhc+ULS1p2TvG+qUgWRkzgqvacYSPNHzqEkTlZ+VhKqON4WzbSGKr7/Wm Qq66VBPJRUjbTb05BhP/3MvIGLo3PLwbeFrl8ZmHsrm068tWaZ48b23KgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMDxHcCc8lBhdOzIRFIVMxVYUzSMB8GA1UdIwQY MBaAFBLDBUBOgLWk1w0h2rhvxba4Aai4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNNRlFFNkF0YVRYRFNIYXVHX0Z0cmdCcUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83YzdlOTAtYzc4MS00MmFiLTk2OTEt Y2U5MjNkMTk1MDhmLzEvRXNNRlFFNkF0YVRYRFNIYXVHX0Z0cmdCcUxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni83YzdlOTAtYzc4MS00MmFiLTk2OTEtY2U5MjNkMTk1MDhm LzEvRXNNRlFFNkF0YVRYRFNIYXVHX0Z0cmdCcUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc82YT5Xd g3J79DNmyCBIq8wDLIW1w5PgvzmOB0vdvnp03l2DnrjaMeY4aXwpGfSL6Sa4IXva bLE8U8ct+vS1VTax9gAa95fQYQskZbSosFCO9qcizWGpZZqh7icPzXBJkmjLAiZU hP34EXBg+TG72xxwWWepxQoZg7rXuxMmLqLovdVeWHHq5xWMYjmzitb39GY30b06 GC+GWCNoetWlXlSJznp3OSLekudRTC9fOqGXac2U5r9YF2s1djAkyAQYnELYBtJy mdItO3GoDee1iTpk6CHeymUSQVRzG7ROrbKS6xsH0tHBQP7E5prxZ2ZgQkvdG6p5 Sp3cL4FMoKO8VA== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:28 2026 by rpki-client