This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft File: EMg25c4r_rgh831kpJwWGFX-LFI.mft (raw, json) Hash identifier: PLWS85UW/l6EoEoG8tRnrciiTJ+u+rOYq9SINHQQ+fY= Subject key identifier: E1:0A:EF:0E:A9:42:1D:AE:A1:9B:F1:45:52:16:95:93:01:5E:4F:C6 Authority key identifier: 10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52 Certificate issuer: /CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52 Certificate serial: 019BF8E3CE3F347E69E424E575FDCE3141B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft Manifest number: 07CE Signing time: Mon 26 Jan 2026 06:00:37 +0000 Manifest this update: Mon 26 Jan 2026 06:00:37 +0000 Manifest next update: Tue 27 Jan 2026 06:00:37 +0000 Files and hashes: 1: EMg25c4r_rgh831kpJwWGFX-LFI.crl (hash: bTEyq0n1gp87NvLYwLE1E++m5JdpVtpUOFQXwZ7p+LA=) 2: gu3gbqmYc42MBrN2tTrBxhokk-w.roa (hash: TMIVSIIzGJ/WU4Qk37G7HBf3N3RPvDoJEdio74aPoFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e3:ce:3f:34:7e:69:e4:24:e5:75:fd:ce:31:41:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52 Validity Not Before: Jan 26 06:00:37 2026 GMT Not After : Jan 27 06:00:37 2026 GMT Subject: CN=e10aef0ea9421daea19bf14552169593015e4fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b8:d4:41:ec:1e:94:79:81:31:cb:d8:61:b4: bc:27:5a:09:af:6a:03:b2:2d:df:6f:90:d3:a1:69: 16:62:cc:1e:e4:13:2d:73:b1:5b:0d:d0:ac:02:bc: b5:ab:8d:7c:11:fa:b4:54:08:55:2d:44:b1:46:d5: 05:e8:67:db:4d:af:9b:30:c0:f4:1b:7f:1f:48:9a: 09:94:34:01:60:ed:ec:5c:db:c8:77:bd:14:da:85: e7:32:53:ec:d8:8f:83:de:31:64:87:80:38:d9:82: fd:75:2a:b7:03:f2:e4:4c:e2:8d:0e:2c:14:3f:43: 92:8f:0a:ad:52:0c:d6:c7:c4:1c:c1:64:5b:75:ee: 20:b6:d3:24:47:25:58:1f:d2:44:a9:68:d6:fb:24: f9:50:35:0d:70:f0:92:37:0e:71:2c:fc:4e:1b:19: ae:55:a3:f1:4d:e6:91:1f:cf:b3:39:ba:84:63:ff: bf:1b:77:91:70:74:32:69:ca:65:26:e7:47:e7:1c: db:0a:be:9a:a7:bf:9f:f5:1f:f4:0a:de:45:6b:77: f2:39:00:9b:16:60:d0:0e:ca:4d:e1:a2:48:64:3d: fd:47:9b:e5:ee:7f:60:50:15:9a:3f:89:0c:1b:70: bb:fd:66:b1:9d:ce:37:ac:67:26:50:b2:c3:c5:b3: 8a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0A:EF:0E:A9:42:1D:AE:A1:9B:F1:45:52:16:95:93:01:5E:4F:C6 X509v3 Authority Key Identifier: keyid:10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:4b:ad:38:6a:bf:65:b2:14:7b:29:35:2f:3f:51:9d:e7:db: aa:1b:1e:46:ff:1e:4e:5b:b0:e8:00:d5:66:14:00:36:b6:1b: 66:84:58:37:01:64:d5:db:c5:02:76:a4:81:99:db:71:3e:07: 0b:65:59:6f:64:40:21:c8:9e:86:c4:17:fc:83:b7:b3:1d:39: df:94:0d:ec:53:97:6f:cd:43:d6:52:98:92:c2:3d:f8:31:26: 77:a0:75:49:ce:8e:59:c3:62:48:a8:ad:1f:3f:23:6f:3e:2d: 39:f0:95:bf:d6:b8:aa:b7:07:1a:4d:ea:bb:91:e5:b6:be:b8: 84:d2:f5:0e:8c:6d:29:29:ee:71:4c:c0:5d:c3:f1:36:7e:ef: 3f:34:3f:28:f9:f9:54:54:97:35:97:38:0c:49:f3:3e:ff:16: 38:2f:31:72:ed:5e:a1:fa:78:4c:d1:88:a1:5e:72:05:5e:20: 3a:82:6c:2e:38:ce:85:2e:c7:ab:3c:7c:c1:67:94:16:32:7c: a2:99:88:81:6a:45:17:94:9a:bc:7b:e1:1b:2a:8b:2b:f6:d9: 93:49:04:ee:81:28:d8:a0:e3:da:8e:e9:3e:ef:82:c7:45:88: 55:f9:58:b6:26:b9:17:2d:9d:a6:ae:e0:02:f7:51:cd:b5:95: da:af:48:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4484/NH5p5CTldf3OMUG2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYzgzNmU1Y2UyYmZlYjgyMWYzN2Q2NGE0OWMxNjE4NTVm ZTJjNTIwHhcNMjYwMTI2MDYwMDM3WhcNMjYwMTI3MDYwMDM3WjAzMTEwLwYDVQQD EyhlMTBhZWYwZWE5NDIxZGFlYTE5YmYxNDU1MjE2OTU5MzAxNWU0ZmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrjUQewelHmBMcvYYbS8J1oJr2oD si3fb5DToWkWYswe5BMtc7FbDdCsAry1q418Efq0VAhVLUSxRtUF6GfbTa+bMMD0 G38fSJoJlDQBYO3sXNvId70U2oXnMlPs2I+D3jFkh4A42YL9dSq3A/LkTOKNDiwU P0OSjwqtUgzWx8QcwWRbde4gttMkRyVYH9JEqWjW+yT5UDUNcPCSNw5xLPxOGxmu VaPxTeaRH8+zObqEY/+/G3eRcHQyacplJudH5xzbCr6ap7+f9R/0Ct5Fa3fyOQCb FmDQDspN4aJIZD39R5vl7n9gUBWaP4kMG3C7/Waxnc43rGcmULLDxbOKdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEK7w6pQh2uoZvxRVIWlZMBXk/GMB8GA1UdIwQY MBaAFBDINuXOK/64IfN9ZKScFhhV/ixSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NWNkNDUtNjBiNS00YzRiLWI4Yjgt OWYzYzA5YmI3NDFjLzEvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83NWNkNDUtNjBiNS00YzRiLWI4YjgtOWYzYzA5YmI3NDFj LzEvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQUutOGq/ ZbIUeyk1Lz9RnefbqhseRv8eTluw6ADVZhQANrYbZoRYNwFk1dvFAnakgZnbcT4H C2VZb2RAIciehsQX/IO3sx0535QN7FOXb81D1lKYksI9+DEmd6B1Sc6OWcNiSKit Hz8jbz4tOfCVv9a4qrcHGk3qu5Hltr64hNL1DoxtKSnucUzAXcPxNn7vPzQ/KPn5 VFSXNZc4DEnzPv8WOC8xcu1eofp4TNGIoV5yBV4gOoJsLjjOhS7Hqzx8wWeUFjJ8 opmIgWpFF5SavHvhGyqLK/bZk0kE7oEo2KDj2o7pPu+Cx0WIVflYtia5Fy2dpq7g AvdRzbWV2q9IsQ== -----END CERTIFICATE-----Generated at Mon Jan 26 08:02:17 2026 by rpki-client