This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft File: ehuEnDQHAlATY6H5J-xCQJm5RyY.mft (raw, json) Hash identifier: /yGhZWl94DGamu61i/KC65v+PyBWltNd9AXbnYV5+DQ= Subject key identifier: 63:D0:F0:11:D8:88:04:8E:D4:20:68:47:91:F6:F0:B8:0C:3E:B1:42 Authority key identifier: 7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26 Certificate issuer: /CN=7a1b849c340702501363a1f927ec424099b94726 Certificate serial: 019BAF4BB2D8CE846B18F4CA3F7CC16EB203 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft Manifest number: 17C4 Signing time: Sun 11 Jan 2026 23:02:12 +0000 Manifest this update: Sun 11 Jan 2026 23:02:12 +0000 Manifest next update: Mon 12 Jan 2026 23:02:12 +0000 Files and hashes: 1: 7UaBbCaDn-KSS5fLxt56x8jizZs.roa (hash: GSd2jVlV8OoeGmAQ8ge5d6QxeXQZs/RSCSQ5Bh6rcq8=) 2: ehuEnDQHAlATY6H5J-xCQJm5RyY.crl (hash: U+dSBEBYGyMdbb79OLUXx+fzD1QMlhkwNEoqbDl3iZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:4b:b2:d8:ce:84:6b:18:f4:ca:3f:7c:c1:6e:b2:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1b849c340702501363a1f927ec424099b94726 Validity Not Before: Jan 11 23:02:12 2026 GMT Not After : Jan 12 23:02:12 2026 GMT Subject: CN=63d0f011d888048ed420684791f6f0b80c3eb142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:98:f0:b8:7e:a3:27:c4:2a:d6:35:21:da:07: 02:4c:3f:0a:b9:f2:b0:4d:18:1b:b6:dd:19:bf:87: 8d:71:cf:58:86:03:ec:2a:1b:0c:7f:19:4e:2f:41: 4e:10:17:22:59:3d:47:e9:99:1f:8f:b2:75:3e:79: d4:44:b4:a8:b1:ac:71:7c:22:f2:d9:0c:8e:7d:b0: ca:99:5d:b3:76:e3:1f:d0:1a:65:1b:c7:d0:cd:3b: e9:4b:c8:86:a3:96:34:a5:69:c7:6d:19:b0:3e:c4: ce:49:01:8e:c5:2d:68:b0:3c:32:ee:50:d1:be:e0: c9:52:0b:fd:3f:8f:22:90:7c:33:db:ff:c0:1f:bf: 1a:e5:a1:de:51:72:29:93:c0:35:48:ba:44:be:f5: 16:d3:f7:33:26:b0:ff:42:f8:83:63:ab:51:5f:f8: c3:9b:98:0b:69:27:ea:9e:cb:3d:86:49:72:1c:09: a6:17:4d:a2:d1:45:a6:61:94:e0:db:1b:16:95:b5: e5:24:b8:b0:80:c5:bf:2d:98:d3:70:40:90:d4:f6: 19:6b:2f:de:e9:71:33:61:ee:ce:39:a0:b1:c8:6e: a6:78:19:09:ec:aa:10:6c:04:9a:93:17:cc:a2:39: c7:96:80:0d:df:93:0a:e4:34:27:1c:a1:4c:b5:7c: 67:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D0:F0:11:D8:88:04:8E:D4:20:68:47:91:F6:F0:B8:0C:3E:B1:42 X509v3 Authority Key Identifier: keyid:7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:64:72:d1:e7:2d:69:9d:88:0f:55:b0:65:d7:ec:bb:f6:4a: af:4b:87:d0:04:e5:8e:01:f5:f1:a9:e4:21:12:62:df:5f:14: c8:3f:5b:14:03:1a:67:e1:18:91:fc:da:30:57:fc:f4:b5:eb: ed:1b:92:8f:49:81:5a:9c:d5:80:d0:99:4d:18:04:ee:1d:a5: f0:5d:f0:85:2b:b3:ac:1c:77:a2:87:3b:9b:9f:90:ba:c5:5c: 21:c0:6d:ed:fb:83:de:61:c0:4d:6f:20:41:f2:8d:0a:26:26: a5:29:55:4c:2e:e4:24:21:fa:f3:b4:19:0a:c1:cc:f6:e4:41: 13:b4:fe:cc:8d:83:e5:0f:c1:9d:ed:96:20:06:05:d3:54:c8: 9c:eb:e3:ac:0a:68:6e:cc:06:bf:d6:d4:7e:fb:78:76:38:75: 7d:bc:45:df:90:ec:91:65:0a:a8:36:13:e4:e6:4d:0e:6e:79: 4d:5c:53:bd:78:9a:86:a4:f4:33:81:75:14:8b:c6:07:99:f0: 1d:a7:53:2e:fd:54:40:4d:df:0a:a1:5a:6e:00:17:4e:46:5b: 99:c8:bc:33:5f:08:79:ec:d9:ea:f1:5c:11:92:13:37:95:81: 7f:b4:06:7a:5e:0f:bb:4f:22:f1:64:28:3a:b6:80:5a:80:8a: 6a:00:ae:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvS7LYzoRrGPTKP3zBbrIDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMWI4NDljMzQwNzAyNTAxMzYzYTFmOTI3ZWM0MjQwOTli OTQ3MjYwHhcNMjYwMTExMjMwMjEyWhcNMjYwMTEyMjMwMjEyWjAzMTEwLwYDVQQD Eyg2M2QwZjAxMWQ4ODgwNDhlZDQyMDY4NDc5MWY2ZjBiODBjM2ViMTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZjwuH6jJ8Qq1jUh2gcCTD8KufKw TRgbtt0Zv4eNcc9YhgPsKhsMfxlOL0FOEBciWT1H6Zkfj7J1PnnURLSosaxxfCLy 2QyOfbDKmV2zduMf0BplG8fQzTvpS8iGo5Y0pWnHbRmwPsTOSQGOxS1osDwy7lDR vuDJUgv9P48ikHwz2//AH78a5aHeUXIpk8A1SLpEvvUW0/czJrD/QviDY6tRX/jD m5gLaSfqnss9hklyHAmmF02i0UWmYZTg2xsWlbXlJLiwgMW/LZjTcECQ1PYZay/e 6XEzYe7OOaCxyG6meBkJ7KoQbASakxfMojnHloAN35MK5DQnHKFMtXxnzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPQ8BHYiASO1CBoR5H28LgMPrFCMB8GA1UdIwQY MBaAFHobhJw0BwJQE2Oh+SfsQkCZuUcmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWh1RW5EUUhBbEFUWTZINUoteENRSm01UnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yNzczMzMtZTFmMy00MmVjLWE4YWMt YjFmNTZhNDU0ZDgyLzEvZWh1RW5EUUhBbEFUWTZINUoteENRSm01UnlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8yNzczMzMtZTFmMy00MmVjLWE4YWMtYjFmNTZhNDU0ZDgy LzEvZWh1RW5EUUhBbEFUWTZINUoteENRSm01UnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmRy0ect aZ2ID1WwZdfsu/ZKr0uH0ATljgH18ankIRJi318UyD9bFAMaZ+EYkfzaMFf89LXr 7RuSj0mBWpzVgNCZTRgE7h2l8F3whSuzrBx3ooc7m5+QusVcIcBt7fuD3mHATW8g QfKNCiYmpSlVTC7kJCH687QZCsHM9uRBE7T+zI2D5Q/Bne2WIAYF01TInOvjrApo bswGv9bUfvt4djh1fbxF35DskWUKqDYT5OZNDm55TVxTvXiahqT0M4F1FIvGB5nw HadTLv1UQE3fCqFabgAXTkZbmci8M18IeezZ6vFcEZITN5WBf7QGel4Pu08i8WQo OraAWoCKagCuYA== -----END CERTIFICATE-----Generated at Mon Jan 12 02:31:46 2026 by rpki-client