This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft File: eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft (raw, json) Hash identifier: UnUdWWrl+Zk3M8jYzH9kwPqZ2Xmd2bzwTvoXLhlKIV8= Subject key identifier: B9:3E:EE:88:D8:BB:8B:80:F0:AE:5B:C4:FF:1E:D0:B8:62:78:66:84 Authority key identifier: 79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F Certificate issuer: /CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f Certificate serial: 019C1D27D01DF5EE50AB2D9AF1AA627CDC58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft Manifest number: 17FF Signing time: Mon 02 Feb 2026 07:01:14 +0000 Manifest this update: Mon 02 Feb 2026 07:01:14 +0000 Manifest next update: Tue 03 Feb 2026 07:01:14 +0000 Files and hashes: 1: 5zwZDxIuULUKjp1rgcwRTBY-pVU.roa (hash: mUMWXUGRFNqTfVs8CnS61wDQkaxlvFmZ/n69Cmi6CP8=) 2: eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl (hash: fXwKBBnh3xGQ0HDgPCsGpoV0Cysq+GId9XRUWHNLc8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:27:d0:1d:f5:ee:50:ab:2d:9a:f1:aa:62:7c:dc:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f Validity Not Before: Feb 2 07:01:14 2026 GMT Not After : Feb 3 07:01:14 2026 GMT Subject: CN=b93eee88d8bb8b80f0ae5bc4ff1ed0b862786684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:66:97:aa:bb:27:04:00:8f:31:d8:de:6f:d1: 8d:1d:dc:d2:4b:31:ab:e2:6f:c1:bc:79:83:f1:06: a8:87:ad:9e:04:a5:77:33:6c:95:70:86:cc:d2:2e: 8a:a8:f6:a8:32:18:cb:45:0a:0d:66:46:d8:15:da: b6:f0:ff:5e:da:4d:e3:09:96:1f:9b:80:3b:69:3c: 26:8c:22:fc:97:95:90:2a:b2:1f:d9:a5:a2:ab:59: cd:23:ab:a2:2e:a9:c9:eb:c7:f0:6e:ac:ab:ea:4e: 88:dc:61:f4:0c:bf:e7:cf:16:bd:18:e4:29:56:ac: bd:da:03:90:78:42:38:cd:c1:3e:26:27:55:b8:fb: d0:41:a5:8d:53:90:1d:3d:78:e7:bb:3c:b2:6a:0d: e4:d3:b7:b9:43:41:c3:a4:ab:64:b4:49:9f:4d:bb: ed:92:b6:ad:11:29:16:48:84:dc:0d:6a:c6:ba:2d: 28:45:42:50:62:77:d8:59:80:a0:fc:e4:d0:55:5b: 14:7d:db:06:88:10:fe:f5:a2:61:f4:bf:67:d8:81: de:03:ae:8e:bf:85:19:46:70:dd:42:1e:f4:b0:7a: 44:d4:9f:84:09:8d:a1:15:89:43:1a:ad:26:a4:9e: d0:4e:b5:64:b4:2d:bb:7a:95:42:47:89:bb:d9:4a: ad:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3E:EE:88:D8:BB:8B:80:F0:AE:5B:C4:FF:1E:D0:B8:62:78:66:84 X509v3 Authority Key Identifier: keyid:79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f3:d9:e2:97:35:b3:66:af:19:99:36:31:72:06:85:ff:ef: f4:52:72:29:d9:ec:8f:ee:86:ae:ec:a3:32:8c:08:d3:74:6e: b5:8f:83:45:4a:f7:01:33:19:1b:74:0f:c5:94:f0:d3:a8:0e: 6b:6c:89:8b:da:a3:41:10:28:c4:00:46:46:10:ad:54:5b:f9: a2:da:91:9d:d6:f8:22:c9:14:90:43:43:50:54:4f:b5:17:ac: 11:22:55:c8:b2:ad:f4:92:e7:f3:cb:8f:4d:19:d9:bf:a4:a7: ed:9e:3e:55:25:8c:57:5e:41:1a:ae:30:78:d8:df:b2:51:3e: 2c:2c:0c:d1:aa:21:56:71:b8:91:21:02:ee:ec:b8:0d:41:cc: 7e:57:80:ab:e3:06:bb:63:a9:ed:1a:fe:8d:24:d3:fb:8f:2a: a5:ab:bb:04:b2:4b:4e:a0:97:da:7a:31:33:59:3b:4b:1d:16: e5:3f:4e:bd:2d:27:10:87:9f:10:01:26:37:05:8f:6b:56:f6: 28:b9:ff:ac:f2:56:84:79:6e:30:e4:eb:20:2b:a2:e3:ac:e9: aa:7d:48:48:52:98:cd:ce:c6:7f:8b:05:ec:68:b4:58:2d:ae: 82:b6:bb:e4:f2:d3:2b:16:5a:90:f2:47:9f:70:bf:ae:11:c9: 34:9f:1d:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwdJ9Ad9e5Qqy2a8apifNxYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YTFjZjFhYThmYmM0ZTMzMzc4NjczZWJkMDUzNjQ4ODBl MmE5MWYwHhcNMjYwMjAyMDcwMTE0WhcNMjYwMjAzMDcwMTE0WjAzMTEwLwYDVQQD EyhiOTNlZWU4OGQ4YmI4YjgwZjBhZTViYzRmZjFlZDBiODYyNzg2Njg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWaXqrsnBACPMdjeb9GNHdzSSzGr 4m/BvHmD8Qaoh62eBKV3M2yVcIbM0i6KqPaoMhjLRQoNZkbYFdq28P9e2k3jCZYf m4A7aTwmjCL8l5WQKrIf2aWiq1nNI6uiLqnJ68fwbqyr6k6I3GH0DL/nzxa9GOQp Vqy92gOQeEI4zcE+JidVuPvQQaWNU5AdPXjnuzyyag3k07e5Q0HDpKtktEmfTbvt kratESkWSITcDWrGui0oRUJQYnfYWYCg/OTQVVsUfdsGiBD+9aJh9L9n2IHeA66O v4UZRnDdQh70sHpE1J+ECY2hFYlDGq0mpJ7QTrVktC27epVCR4m72Uqt8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLk+7ojYu4uA8K5bxP8e0LhieGaEMB8GA1UdIwQY MBaAFHmhzxqo+8TjM3hnPr0FNkiA4qkfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kZjViYWQtYWM1OS00MTNlLTlhZDAt NTk5NWFlOGFjYjlmLzEvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9kZjViYWQtYWM1OS00MTNlLTlhZDAtNTk5NWFlOGFjYjlm LzEvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/PZ4pc1 s2avGZk2MXIGhf/v9FJyKdnsj+6GruyjMowI03RutY+DRUr3ATMZG3QPxZTw06gO a2yJi9qjQRAoxABGRhCtVFv5otqRndb4IskUkENDUFRPtResESJVyLKt9JLn88uP TRnZv6Sn7Z4+VSWMV15BGq4weNjfslE+LCwM0aohVnG4kSEC7uy4DUHMfleAq+MG u2Op7Rr+jSTT+48qpau7BLJLTqCX2noxM1k7Sx0W5T9OvS0nEIefEAEmNwWPa1b2 KLn/rPJWhHluMOTrICui46zpqn1ISFKYzc7Gf4sF7Gi0WC2ugra75PLTKxZakPJH n3C/rhHJNJ8dRw== -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:14 2026 by rpki-client