This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft File: ERhPtlA6dgZX-QJw4naj_LULjo8.mft (raw, json) Hash identifier: pARVDY3vJydoiYLVKwrumgNzFY3E2o0XIpH4vRqlysc= Subject key identifier: 00:0A:F0:6A:CE:03:F3:DF:1E:93:DA:4F:F7:DC:67:1C:08:5D:EC:3A Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F Certificate issuer: /CN=11184fb6503a760657f90270e276a3fcb50b8e8f Certificate serial: 019BDF92AAD6A0BF9E0549DA03FEB967E82D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft Manifest number: 17DF Signing time: Wed 21 Jan 2026 08:01:29 +0000 Manifest this update: Wed 21 Jan 2026 08:01:29 +0000 Manifest next update: Thu 22 Jan 2026 08:01:29 +0000 Files and hashes: 1: ERhPtlA6dgZX-QJw4naj_LULjo8.crl (hash: l0hjS821Jxtfx/aCG9zUrES+yYTtDcuwlFjvgrPE0tk=) 2: I9hNFsiUppOM9VZIcAfH4qbXw_k.roa (hash: W4bc2pkEjBkLLPhivhIIPW+Vl4uMQLKBx8OjNwjL98A=) 3: lypKNyumbp3Rx5Ca8OfilFGC6co.roa (hash: 1pqIQQrSkAL4LQAupUembuigh5NslsCnzhntmGy1wNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:92:aa:d6:a0:bf:9e:05:49:da:03:fe:b9:67:e8:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f Validity Not Before: Jan 21 08:01:29 2026 GMT Not After : Jan 22 08:01:29 2026 GMT Subject: CN=000af06ace03f3df1e93da4ff7dc671c085dec3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8b:11:01:56:a3:cc:b1:94:97:0b:cf:3d:7d: 95:3f:d4:b9:ff:e2:0a:b7:95:3c:46:57:45:25:3d: ce:9e:80:ba:b2:11:e1:34:6b:ea:e9:c1:ad:51:a1: 72:a8:06:2d:7c:9c:52:5d:da:02:09:aa:f8:08:d5: bc:c3:45:6f:b7:7b:bc:df:73:90:7c:e7:d2:09:14: 94:ee:08:76:c3:98:75:cf:9b:f9:52:42:5b:e8:af: d4:88:66:96:0c:1d:26:60:64:ae:fa:a3:c4:64:01: 70:ba:bf:38:93:c4:ad:5b:eb:07:cc:13:b8:12:f8: 4f:43:ec:b7:ea:e9:ba:49:fe:2b:fe:ed:63:af:68: e3:50:e6:3f:a4:1b:89:93:ba:9a:28:cb:36:69:91: b6:33:20:d3:0c:5e:7d:59:75:f0:26:c6:a1:9d:4c: 39:1e:bd:1e:af:6f:0e:9e:51:d8:08:97:5e:e3:45: 15:de:16:8b:ae:e1:b1:64:e5:dd:b9:63:26:18:ee: f2:d7:1f:c9:3d:c0:09:76:f4:24:e7:ae:ef:a8:a8: 60:83:ba:bf:5f:ed:94:3c:d9:09:6d:6e:6b:4e:ca: e0:d5:c5:60:7b:26:6b:af:d2:24:f7:f7:5f:ae:7e: 54:5d:f5:65:42:84:90:45:5f:2d:1c:9a:ca:91:c8: c5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0A:F0:6A:CE:03:F3:DF:1E:93:DA:4F:F7:DC:67:1C:08:5D:EC:3A X509v3 Authority Key Identifier: keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:32:06:4e:59:57:4b:78:a8:4a:53:eb:b2:3c:7c:84:56:f1: 43:9d:f1:0a:b9:17:db:4e:78:5c:81:85:38:c6:f1:82:da:39: 63:f1:d3:09:aa:2f:27:51:46:7f:7a:45:7f:43:cd:f2:e3:5d: 2c:0c:a8:c9:a7:25:2b:16:ca:2d:bd:4e:ae:14:ed:69:7e:3d: ab:76:d4:89:99:f3:66:56:93:39:aa:bc:ba:da:48:56:1d:b9: d4:dc:54:9f:d0:7d:df:57:e2:f3:42:56:80:63:18:b9:af:c9: 13:b7:72:83:2d:62:88:90:4b:99:00:83:43:af:4f:81:93:0f: 95:ae:98:68:6c:63:9b:e5:09:98:b5:70:c2:49:fa:db:e0:4f: 04:c2:09:f1:92:1e:21:3b:74:ee:90:cc:10:05:ba:0b:63:16: b8:80:b5:4d:56:fb:a6:1b:22:c1:a9:9d:b8:cb:2b:f1:cb:8f: a2:ca:40:2e:f8:c7:48:9d:23:29:d5:0c:ca:ec:a9:65:3e:a7: 72:4f:d4:e8:ef:a7:f5:0b:3b:d4:78:2a:4b:26:46:e7:a8:76: d1:02:ff:5f:10:53:19:6f:0c:2e:bd:ac:fc:29:e5:8e:b9:22: 2a:8d:53:70:71:99:f8:58:4e:a5:75:69:eb:b8:d9:e1:ef:cf: c3:ff:51:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvfkqrWoL+eBUnaA/65Z+gtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMTg0ZmI2NTAzYTc2MDY1N2Y5MDI3MGUyNzZhM2ZjYjUw YjhlOGYwHhcNMjYwMTIxMDgwMTI5WhcNMjYwMTIyMDgwMTI5WjAzMTEwLwYDVQQD EygwMDBhZjA2YWNlMDNmM2RmMWU5M2RhNGZmN2RjNjcxYzA4NWRlYzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxosRAVajzLGUlwvPPX2VP9S5/+IK t5U8RldFJT3OnoC6shHhNGvq6cGtUaFyqAYtfJxSXdoCCar4CNW8w0Vvt3u833OQ fOfSCRSU7gh2w5h1z5v5UkJb6K/UiGaWDB0mYGSu+qPEZAFwur84k8StW+sHzBO4 EvhPQ+y36um6Sf4r/u1jr2jjUOY/pBuJk7qaKMs2aZG2MyDTDF59WXXwJsahnUw5 Hr0er28OnlHYCJde40UV3haLruGxZOXduWMmGO7y1x/JPcAJdvQk567vqKhgg7q/ X+2UPNkJbW5rTsrg1cVgeyZrr9Ik9/dfrn5UXfVlQoSQRV8tHJrKkcjFgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAK8GrOA/PfHpPaT/fcZxwIXew6MB8GA1UdIwQY MBaAFBEYT7ZQOnYGV/kCcOJ2o/y1C46PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJoUHRsQTZkZ1pYLVFKdzRuYWpfTFVMam84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zM2E3MzMtZWYwNS00YWYwLTg1MzUt MTk2ZDY2NmQyYjJiLzEvRVJoUHRsQTZkZ1pYLVFKdzRuYWpfTFVMam84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8zM2E3MzMtZWYwNS00YWYwLTg1MzUtMTk2ZDY2NmQyYjJi LzEvRVJoUHRsQTZkZ1pYLVFKdzRuYWpfTFVMam84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjIGTllX S3ioSlPrsjx8hFbxQ53xCrkX2054XIGFOMbxgto5Y/HTCaovJ1FGf3pFf0PN8uNd LAyoyaclKxbKLb1OrhTtaX49q3bUiZnzZlaTOaq8utpIVh251NxUn9B931fi80JW gGMYua/JE7dygy1iiJBLmQCDQ69PgZMPla6YaGxjm+UJmLVwwkn62+BPBMIJ8ZIe ITt07pDMEAW6C2MWuIC1TVb7phsiwamduMsr8cuPospALvjHSJ0jKdUMyuypZT6n ck/U6O+n9Qs71HgqSyZG56h20QL/XxBTGW8MLr2s/CnljrkiKo1TcHGZ+FhOpXVp 67jZ4e/Pw/9Rng== -----END CERTIFICATE-----Generated at Wed Jan 21 14:34:15 2026 by rpki-client