This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft File: EPt5C_XsxPQgY7C5YKmU95kClQs.mft (raw, json) Hash identifier: HrcnmrKGG8l/nDoRlYuA8Y/KJMjkirpvDmXJyyS2Ces= Subject key identifier: EC:7E:AF:C8:63:AC:B5:A5:03:F9:37:60:DF:22:29:05:B9:C0:36:16 Authority key identifier: 10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B Certificate issuer: /CN=10fb790bf5ecc4f42063b0b960a994f79902950b Certificate serial: 019BFD2E724BE7314B2EEA4E58193B5C3F1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft Manifest number: 88 Signing time: Tue 27 Jan 2026 02:00:38 +0000 Manifest this update: Tue 27 Jan 2026 02:00:38 +0000 Manifest next update: Wed 28 Jan 2026 02:00:38 +0000 Files and hashes: 1: EPt5C_XsxPQgY7C5YKmU95kClQs.crl (hash: USO9d2FIgWTT4VjJK53Z0jMZEz1/b+PGGKxfu6vlqJM=) 2: WRzFAQD96PiFm7zmXWmL1m9WLI4.asa (hash: dndJ9DGWxNZLozvP8wqqSXTlQ6oOsIMlnknEpXmZxaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:2e:72:4b:e7:31:4b:2e:ea:4e:58:19:3b:5c:3f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10fb790bf5ecc4f42063b0b960a994f79902950b Validity Not Before: Jan 27 02:00:38 2026 GMT Not After : Jan 28 02:00:38 2026 GMT Subject: CN=ec7eafc863acb5a503f93760df222905b9c03616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e2:54:3a:e4:f8:52:5c:92:04:c3:8f:7a:ed: bf:42:a3:b8:ad:0e:84:e2:75:27:a3:4d:66:e3:33: 6e:84:cc:7a:73:4e:1e:07:db:ec:cf:5d:60:06:ab: e4:c2:7b:da:d8:b7:2c:ec:69:ff:2f:22:72:7a:33: bb:2b:fc:65:4d:9e:0b:10:fd:61:95:10:fc:20:74: 44:df:76:53:b4:bc:09:90:10:a9:f0:b4:fa:15:aa: 96:e6:39:18:b0:07:9b:cc:10:9b:6f:5a:6b:af:fb: b3:51:52:0a:22:e1:04:eb:70:c2:8d:8a:10:b3:e8: 31:c5:2f:c6:a7:83:11:40:c4:1d:d7:77:06:0a:8a: 2d:24:80:13:1a:5e:91:6e:8a:ce:0d:c0:20:57:50: b2:ea:44:57:07:5a:79:75:60:94:c1:90:6e:92:ed: 51:be:91:92:45:89:d6:2d:8f:8a:e3:5e:dd:7f:0d: 9c:88:5f:da:71:7d:29:de:ea:e5:f8:3d:d6:00:2e: 8b:70:10:4c:f7:80:72:68:e0:25:7f:f2:00:20:da: 2e:86:00:64:f4:89:eb:72:bd:ab:2c:5f:46:78:51: 57:e1:a3:e2:07:cf:59:60:34:80:56:9b:1a:29:0e: 8a:e6:f9:09:8c:4b:20:c3:34:99:d4:93:bd:00:3f: 2e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:7E:AF:C8:63:AC:B5:A5:03:F9:37:60:DF:22:29:05:B9:C0:36:16 X509v3 Authority Key Identifier: keyid:10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:58:ba:09:be:eb:49:e4:1b:4e:e9:93:c4:41:3e:7d:73:63: 69:8a:53:50:25:e0:89:99:f0:cc:f1:09:df:23:93:ba:d9:c4: 3c:90:95:55:6d:18:43:20:df:77:76:0d:31:a9:c0:8a:c4:4e: 88:7c:ea:c4:43:e1:ca:00:1e:48:e9:85:ec:0d:d2:d2:5a:59: 07:3f:52:a9:d3:12:43:05:58:ce:1f:8b:69:93:46:73:cf:1f: 59:f6:28:58:65:42:2a:36:e9:c9:90:26:11:77:fd:c5:03:b6: 7f:61:33:b4:e0:14:24:85:9f:40:29:f3:ba:f2:40:a2:56:40: 61:bf:bd:9c:6a:4f:03:a1:4a:ca:0c:e8:36:b4:aa:76:36:d0: 60:a9:c3:16:02:bd:8f:13:6f:aa:fa:73:3b:f4:43:27:71:ba: 14:7c:a9:d3:6a:f6:a9:94:8a:ef:fc:3b:80:8c:b6:91:b7:33: b6:a7:21:bc:1a:65:49:71:73:58:a5:e9:81:cb:57:2b:9d:d8: e6:4a:c3:01:29:03:82:78:01:b4:7f:2b:ec:e5:f5:4f:3a:72: bd:ee:98:a4:22:48:35:6e:25:89:97:d7:db:63:72:57:b1:17: 02:b7:7f:fc:6c:19:6b:09:1f:7e:42:3b:b0:a7:be:06:54:e4: c7:40:7f:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9LnJL5zFLLupOWBk7XD8cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZmI3OTBiZjVlY2M0ZjQyMDYzYjBiOTYwYTk5NGY3OTkw Mjk1MGIwHhcNMjYwMTI3MDIwMDM4WhcNMjYwMTI4MDIwMDM4WjAzMTEwLwYDVQQD EyhlYzdlYWZjODYzYWNiNWE1MDNmOTM3NjBkZjIyMjkwNWI5YzAzNjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOJUOuT4UlySBMOPeu2/QqO4rQ6E 4nUno01m4zNuhMx6c04eB9vsz11gBqvkwnva2Lcs7Gn/LyJyejO7K/xlTZ4LEP1h lRD8IHRE33ZTtLwJkBCp8LT6FaqW5jkYsAebzBCbb1prr/uzUVIKIuEE63DCjYoQ s+gxxS/Gp4MRQMQd13cGCootJIATGl6RborODcAgV1Cy6kRXB1p5dWCUwZBuku1R vpGSRYnWLY+K417dfw2ciF/acX0p3url+D3WAC6LcBBM94ByaOAlf/IAINouhgBk 9Inrcr2rLF9GeFFX4aPiB89ZYDSAVpsaKQ6K5vkJjEsgwzSZ1JO9AD8uowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOx+r8hjrLWlA/k3YN8iKQW5wDYWMB8GA1UdIwQY MBaAFBD7eQv17MT0IGOwuWCplPeZApULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVB0NUNfWHN4UFFnWTdDNVlLbVU5NWtDbFFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xMjcyNDAtN2ZhNC00ZDhhLWI4YTgt MjI4OTRkZTE0Y2JiLzEvRVB0NUNfWHN4UFFnWTdDNVlLbVU5NWtDbFFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8xMjcyNDAtN2ZhNC00ZDhhLWI4YTgtMjI4OTRkZTE0Y2Ji LzEvRVB0NUNfWHN4UFFnWTdDNVlLbVU5NWtDbFFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYVi6Cb7r SeQbTumTxEE+fXNjaYpTUCXgiZnwzPEJ3yOTutnEPJCVVW0YQyDfd3YNManAisRO iHzqxEPhygAeSOmF7A3S0lpZBz9SqdMSQwVYzh+LaZNGc88fWfYoWGVCKjbpyZAm EXf9xQO2f2EztOAUJIWfQCnzuvJAolZAYb+9nGpPA6FKygzoNrSqdjbQYKnDFgK9 jxNvqvpzO/RDJ3G6FHyp02r2qZSK7/w7gIy2kbcztqchvBplSXFzWKXpgctXK53Y 5krDASkDgngBtH8r7OX1Tzpyve6YpCJINW4liZfX22NyV7EXArd//GwZawkffkI7 sKe+BlTkx0B/QA== -----END CERTIFICATE-----Generated at Tue Jan 27 07:46:47 2026 by rpki-client