This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft File: EsiJlks1tRuo5eZ5oVsZox8TNXg.mft (raw, json) Hash identifier: wY4dXXkruVcd6ZdTsKqL7IWzyTENbQ8aWtaw8bQRMEc= Subject key identifier: E7:46:55:FD:FE:54:55:56:88:2A:59:B8:DB:92:7D:FF:D1:84:3E:77 Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78 Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578 Certificate serial: 019BFB0A0914489321E458ECC53857CA9964 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft Manifest number: 17F1 Signing time: Mon 26 Jan 2026 16:01:37 +0000 Manifest this update: Mon 26 Jan 2026 16:01:37 +0000 Manifest next update: Tue 27 Jan 2026 16:01:37 +0000 Files and hashes: 1: 1-75h6Z8XZfpA-J4Xkm8JYxrcW7E.roa (hash: YgoOaQlFbXUdsZx8u8PNBd2uQHXrr/r+JgEvwggSZDA=) 2: 1-kxJVrZkUbclMp6kSpvfNZEt1VM.roa (hash: sllzVYP/WiMPElY3BFy/EfBmKfiCPi4PRAGGrxfDP7g=) 3: 6LKvF_6ld6s3n--fTX7f7BK_ehc.roa (hash: /eEnxWv6EmUP6K8zfowjl8E4hGLa0C38VlYeIpY/h7w=) 4: EsiJlks1tRuo5eZ5oVsZox8TNXg.crl (hash: g6Ux5O7ZMvycxxRj8R3GmNYjgTtkOqegWl1m5VKEtvY=) 5: GHJyTF0ORoaY9AckOmArWob3_HY.roa (hash: uI00sPFgBL2eDPBgh7Ys5Cfku0oem0hVhkVJpAs4CZg=) 6: QzNYXaK9Heg5iwI0_fdSvPsjX10.roa (hash: 7DicMrMZcYWPra55/EcMga9qpWnVA1JBNRCO/E/beAo=) 7: vsAEpL5w14p4gOY7B1dWMsDjDJI.roa (hash: ULT4TLN8aqk2Vz6VZZi8pMSOHDlIrdLD0OUPI10LgY0=) 8: wsgq7r0bmgVuGnMWeJq55bfKJ_U.roa (hash: TZU5rVeqp7nDnIs3V8dsH2Vbd18ixFe0rwWSFe7vxYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 16:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:0a:09:14:48:93:21:e4:58:ec:c5:38:57:ca:99:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578 Validity Not Before: Jan 26 16:01:37 2026 GMT Not After : Jan 27 16:01:37 2026 GMT Subject: CN=e74655fdfe545556882a59b8db927dffd1843e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b9:e8:0b:3e:74:d0:b2:4c:63:ae:1c:95:58: 35:eb:51:70:3a:86:69:b8:07:b1:88:37:f2:a0:76: ca:09:06:2c:60:ab:0f:ec:ed:3a:eb:78:e7:29:49: d4:c4:df:9d:5b:19:b5:5a:c9:ee:7e:a2:ec:54:d3: 83:7e:4d:de:6a:96:6c:b9:e4:05:6e:72:f3:79:9f: d0:3c:e5:4b:39:9b:00:e5:2c:e8:8e:a4:00:2e:b3: 46:c5:ee:2f:c6:02:67:51:14:ec:89:08:08:fd:97: e1:e1:e5:14:5f:81:4b:3a:a1:4d:94:7d:67:f6:e3: 46:2e:b8:70:23:dd:52:2f:9b:31:62:da:18:a2:67: 16:41:76:23:b3:c6:5e:c5:29:1d:bd:33:59:00:26: 92:52:1c:f0:2c:a6:b9:74:ea:4d:1c:ed:7d:e1:7b: 4b:ec:33:6c:65:b1:69:74:cc:ca:97:86:75:7f:3d: 28:cd:9b:13:b1:70:7a:aa:fe:c3:f7:9c:33:92:71: 1b:73:f6:5c:b7:d9:4a:6a:10:0f:95:56:d1:6b:98: 30:35:91:0c:43:0f:00:bc:6a:ce:d0:cc:dc:2b:40: 43:30:ad:3a:2c:eb:a3:c0:d8:5a:f0:3f:01:d2:16: b4:72:e7:62:89:7e:d2:14:8d:cc:ce:d6:35:35:98: 1d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:46:55:FD:FE:54:55:56:88:2A:59:B8:DB:92:7D:FF:D1:84:3E:77 X509v3 Authority Key Identifier: keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:cb:08:f7:45:3f:fb:27:65:0e:44:f7:ed:a5:bf:3d:8f:4d: 07:9d:2c:ce:85:4f:1a:87:f8:0b:9e:c6:8c:b6:3b:36:d5:78: a1:48:b7:1e:4e:e1:5d:32:e2:28:ee:4b:43:57:e2:e3:f1:d4: c8:12:60:61:ae:20:f2:75:fc:80:c5:e0:f5:65:e3:c3:43:d3: d7:20:6f:9a:9f:20:18:dc:ae:ed:6b:c8:ee:7f:f2:d8:cd:22: 79:a2:13:e3:0e:ed:9e:36:fd:e7:3b:83:ce:d3:54:19:ca:21: 09:e8:5c:d9:b6:bb:8b:96:14:29:9e:a0:8d:cc:20:02:35:6f: a8:79:b8:38:20:f3:dc:11:8c:93:90:78:9b:c9:01:2a:64:37: d3:cb:a7:90:88:59:bb:8a:c6:9b:ca:21:c4:e3:71:7a:58:17: 0d:8a:a5:5f:ae:4f:7a:0c:31:b1:6d:5f:97:b0:77:30:77:1f: fb:ae:51:23:61:7a:09:a9:8b:d6:19:d3:cf:03:29:f1:93:50: ba:7e:af:e2:26:d5:96:1c:3a:4f:52:68:26:d1:fc:34:8a:01: 84:60:7a:5d:6f:1f:b0:ce:54:4b:d5:ea:40:16:fe:60:07:35: b4:bc:23:98:7f:b9:6d:80:a7:a0:bc:a4:b0:2e:e9:dd:07:fe: 7f:f8:c4:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CgkUSJMh5FjsxThXyplkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYzg4OTk2NGIzNWI1MWJhOGU1ZTY3OWExNWIxOWEzMWYx MzM1NzgwHhcNMjYwMTI2MTYwMTM3WhcNMjYwMTI3MTYwMTM3WjAzMTEwLwYDVQQD EyhlNzQ2NTVmZGZlNTQ1NTU2ODgyYTU5YjhkYjkyN2RmZmQxODQzZTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubnoCz500LJMY64clVg161FwOoZp uAexiDfyoHbKCQYsYKsP7O0663jnKUnUxN+dWxm1WsnufqLsVNODfk3eapZsueQF bnLzeZ/QPOVLOZsA5SzojqQALrNGxe4vxgJnURTsiQgI/Zfh4eUUX4FLOqFNlH1n 9uNGLrhwI91SL5sxYtoYomcWQXYjs8ZexSkdvTNZACaSUhzwLKa5dOpNHO194XtL 7DNsZbFpdMzKl4Z1fz0ozZsTsXB6qv7D95wzknEbc/Zct9lKahAPlVbRa5gwNZEM Qw8AvGrO0MzcK0BDMK06LOujwNha8D8B0ha0cudiiX7SFI3MztY1NZgdmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdGVf3+VFVWiCpZuNuSff/RhD53MB8GA1UdIwQY MBaAFBLIiZZLNbUbqOXmeaFbGaMfEzV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYt YWQ2ZjBiZjg4NDM4LzEvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYtYWQ2ZjBiZjg4NDM4 LzEvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhssI90U/ +ydlDkT37aW/PY9NB50szoVPGof4C57GjLY7NtV4oUi3Hk7hXTLiKO5LQ1fi4/HU yBJgYa4g8nX8gMXg9WXjw0PT1yBvmp8gGNyu7WvI7n/y2M0ieaIT4w7tnjb95zuD ztNUGcohCehc2ba7i5YUKZ6gjcwgAjVvqHm4OCDz3BGMk5B4m8kBKmQ308unkIhZ u4rGm8ohxONxelgXDYqlX65PegwxsW1fl7B3MHcf+65RI2F6CamL1hnTzwMp8ZNQ un6v4ibVlhw6T1JoJtH8NIoBhGB6XW8fsM5US9XqQBb+YAc1tLwjmH+5bYCnoLyk sC7p3Qf+f/jErA== -----END CERTIFICATE-----Generated at Tue Jan 27 02:18:55 2026 by rpki-client