This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft File: eD8ukq1ZxwyM3CiygCniKXBcbJE.mft (raw, json) Hash identifier: GBY6+5j+Rcya2gJ/tujKWuY5kUPV3WowyM5sj2WDZtU= Subject key identifier: 69:A0:E3:9E:2A:CF:3A:32:87:C9:5D:AB:76:92:98:9B:4C:D3:E5:D3 Authority key identifier: 78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91 Certificate issuer: /CN=783f2e92ad59c70c8cdc28b28029e229705c6c91 Certificate serial: 019BD0FA6ACC8F1001F15BD11ABE536B2182 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft Manifest number: 0CC6 Signing time: Sun 18 Jan 2026 12:00:30 +0000 Manifest this update: Sun 18 Jan 2026 12:00:30 +0000 Manifest next update: Mon 19 Jan 2026 12:00:30 +0000 Files and hashes: 1: cqkPcUlhylPWROpeUvaKpM1IHzI.roa (hash: Vj/WfOnXkP6T4SuWUuZJIwljoQd2+9R6QoAl56Tye4o=) 2: eD8ukq1ZxwyM3CiygCniKXBcbJE.crl (hash: dU1xH/hV0cLAfYF9oHUN7ttDAq5DbU4q3OFRUyZmXBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:fa:6a:cc:8f:10:01:f1:5b:d1:1a:be:53:6b:21:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=783f2e92ad59c70c8cdc28b28029e229705c6c91 Validity Not Before: Jan 18 12:00:30 2026 GMT Not After : Jan 19 12:00:30 2026 GMT Subject: CN=69a0e39e2acf3a3287c95dab7692989b4cd3e5d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:79:b6:8b:4c:cf:eb:ce:76:37:47:b3:27:b3: 48:ff:8f:46:86:32:e3:00:a9:4e:28:2d:9e:30:92: 27:c1:c1:cc:8c:e8:81:e0:44:b0:93:72:be:79:ec: 68:e4:48:5b:49:d1:eb:c6:76:82:51:cc:29:75:2b: 9e:cd:17:0a:92:20:ae:88:a8:34:a1:03:4a:c3:58: 38:2f:09:32:68:3b:3a:e2:e5:bc:2a:8f:a1:21:08: f0:cd:a0:0a:a2:b1:cc:1b:8c:7a:c3:80:d8:2c:b0: 8b:1c:ac:6b:eb:ea:0c:82:57:60:bc:f0:c6:a9:cb: 69:ea:ba:92:93:c9:d9:21:e1:26:fa:27:17:c7:c2: 76:14:80:7a:e2:d4:e7:01:db:ee:09:28:69:64:75: 60:24:c5:2f:6b:76:37:da:c5:c6:cb:b0:59:2e:86: e4:41:b4:2a:8e:4e:87:16:0c:cb:b2:ee:12:ff:12: f9:d7:1f:fb:e7:a0:4f:21:a3:07:ff:85:74:e1:21: 83:c1:0c:ef:08:8b:57:58:bc:8f:92:c9:36:a2:37: ab:0c:e9:b9:df:2d:1c:b6:57:43:62:25:a9:ec:40: 21:e2:fc:45:48:18:c4:ec:e2:dd:45:7c:56:7c:c0: 52:9f:59:9c:68:37:9c:33:ef:2d:5b:37:f0:5e:44: 30:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A0:E3:9E:2A:CF:3A:32:87:C9:5D:AB:76:92:98:9B:4C:D3:E5:D3 X509v3 Authority Key Identifier: keyid:78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:4a:b1:14:12:ac:23:da:5b:a6:ce:ce:ca:1a:97:be:b5:20: 8e:11:6b:5b:42:f3:08:3a:70:41:cc:9b:a8:3b:14:fe:f2:66: d6:1b:11:f9:53:08:9c:c7:b4:27:35:f1:7b:31:b9:1d:a2:94: 39:fb:d4:10:e0:89:37:4a:8e:19:ec:ab:6b:66:5d:9a:fb:17: 48:ad:2d:17:23:d0:71:37:dc:c5:89:85:35:11:90:bc:b6:9e: 5f:18:63:8b:bd:22:c4:6b:4a:24:48:1e:10:0a:7f:85:8c:db: dc:17:56:df:ec:9d:5c:cb:3b:38:e3:bb:ee:9b:01:ee:a7:95: ad:7a:e0:7f:ce:37:69:bf:64:bc:b4:68:26:dd:c6:c7:e7:29: 70:9b:de:0e:46:f8:0f:58:f2:f4:7e:79:bf:95:63:a4:ee:a8: 64:7b:e5:d7:10:14:58:14:1c:ba:e1:eb:95:85:83:18:67:3d: a1:5f:05:aa:0b:a5:60:bd:49:b5:a7:0a:50:e3:e4:95:9b:be: d7:b1:43:57:7b:43:b1:c9:14:62:8e:32:35:15:9d:84:9a:8c: 6d:b8:36:c3:47:48:83:54:9f:f9:ed:92:fc:5f:d1:37:01:13: f1:bc:82:e8:e4:4f:61:fd:dc:d4:15:d9:bc:44:43:0f:2d:29: 63:2e:97:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvQ+mrMjxAB8VvRGr5TayGCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4M2YyZTkyYWQ1OWM3MGM4Y2RjMjhiMjgwMjllMjI5NzA1 YzZjOTEwHhcNMjYwMTE4MTIwMDMwWhcNMjYwMTE5MTIwMDMwWjAzMTEwLwYDVQQD Eyg2OWEwZTM5ZTJhY2YzYTMyODdjOTVkYWI3NjkyOTg5YjRjZDNlNWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Xm2i0zP6852N0ezJ7NI/49GhjLj AKlOKC2eMJInwcHMjOiB4ESwk3K+eexo5EhbSdHrxnaCUcwpdSuezRcKkiCuiKg0 oQNKw1g4LwkyaDs64uW8Ko+hIQjwzaAKorHMG4x6w4DYLLCLHKxr6+oMgldgvPDG qctp6rqSk8nZIeEm+icXx8J2FIB64tTnAdvuCShpZHVgJMUva3Y32sXGy7BZLobk QbQqjk6HFgzLsu4S/xL51x/756BPIaMH/4V04SGDwQzvCItXWLyPksk2ojerDOm5 3y0ctldDYiWp7EAh4vxFSBjE7OLdRXxWfMBSn1mcaDecM+8tWzfwXkQwAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmg454qzzoyh8ldq3aSmJtM0+XTMB8GA1UdIwQY MBaAFHg/LpKtWccMjNwosoAp4ilwXGyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81N2I0MTQtNTA5MS00NjU3LWE5YjQt ZTlhZjU2NmYyYzE0LzEvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81N2I0MTQtNTA5MS00NjU3LWE5YjQtZTlhZjU2NmYyYzE0 LzEvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkqxFBKs I9pbps7OyhqXvrUgjhFrW0LzCDpwQcybqDsU/vJm1hsR+VMInMe0JzXxezG5HaKU OfvUEOCJN0qOGeyra2ZdmvsXSK0tFyPQcTfcxYmFNRGQvLaeXxhji70ixGtKJEge EAp/hYzb3BdW3+ydXMs7OOO77psB7qeVrXrgf843ab9kvLRoJt3Gx+cpcJveDkb4 D1jy9H55v5VjpO6oZHvl1xAUWBQcuuHrlYWDGGc9oV8FqgulYL1JtacKUOPklZu+ 17FDV3tDsckUYo4yNRWdhJqMbbg2w0dIg1Sf+e2S/F/RNwET8byC6ORPYf3c1BXZ vERDDy0pYy6X7A== -----END CERTIFICATE-----Generated at Sun Jan 18 17:58:47 2026 by rpki-client