This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft File: egXqWYBflL4YUoIDm7ri-oqSU_U.mft (raw, json) Hash identifier: Tw4kFRBb132lNxYZGa098Eh1rBqdtHrYdnqdba9+2iw= Subject key identifier: 17:80:BA:4A:BD:3E:C7:47:44:EE:19:36:E5:01:8D:92:E6:A2:FE:35 Authority key identifier: 7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5 Certificate issuer: /CN=7a05ea59805f94be185282039bbae2fa8a9253f5 Certificate serial: 019BFEAF66BB36D0CDF9CA3550D4B8DBB074 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft Manifest number: 17FA Signing time: Tue 27 Jan 2026 09:01:06 +0000 Manifest this update: Tue 27 Jan 2026 09:01:06 +0000 Manifest next update: Wed 28 Jan 2026 09:01:06 +0000 Files and hashes: 1: 8bt9cYMzZg1dDKygP-KGgoxWo28.roa (hash: VD9f7yAgGBnI+i2ExDasoXpcEMGiS4J+ud75AVisTxs=) 2: SyRRL1yNRh33pq8px_OkuREORJY.roa (hash: d9SZDZnKX/nPflr/y3Jk5i1sPAUrQ/hcdwPlZ2KkY68=) 3: egXqWYBflL4YUoIDm7ri-oqSU_U.crl (hash: bivkYc3fkqNol4oEG4jj68Wocvo1Zk4Qtr3R9AohXkQ=) 4: nxP9eu3JnVKWb4uYzkTOPk9xSgg.roa (hash: LvM9PvMHii47fjgjeXdKFvVutcctBWDj/KaR746D+Xc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:af:66:bb:36:d0:cd:f9:ca:35:50:d4:b8:db:b0:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a05ea59805f94be185282039bbae2fa8a9253f5 Validity Not Before: Jan 27 09:01:06 2026 GMT Not After : Jan 28 09:01:06 2026 GMT Subject: CN=1780ba4abd3ec74744ee1936e5018d92e6a2fe35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c8:18:97:63:ee:dd:c0:f9:2d:9d:87:d3:7a: d4:fd:af:84:6f:c8:e4:f9:e3:6b:74:c5:1e:5f:84: 99:d3:e0:2c:61:f9:40:43:4f:aa:02:98:00:95:6d: 71:9c:88:4d:55:8f:bf:a2:aa:3e:89:8f:d3:58:01: a0:72:8d:37:c2:09:3b:6c:45:cb:4c:7a:0c:7a:57: 8e:31:dc:5b:53:78:df:5b:71:4d:df:80:98:b9:4b: f5:81:aa:9b:7f:11:b0:83:bf:3c:f2:15:f0:36:fa: 7f:fc:67:c2:b3:44:be:1d:ac:86:21:49:f3:4a:99: 78:fb:f3:6c:8a:91:69:6e:a8:f8:b6:c7:43:ec:82: f4:9a:ae:f3:c5:87:e7:24:dd:5d:23:69:96:6c:e0: ad:a3:f0:e8:5b:8e:78:3d:bb:00:f8:9c:8f:50:4d: e0:95:4b:cf:b4:a3:1c:7e:69:0e:20:c8:b3:b7:00: dd:6f:14:4f:7c:6a:8e:d9:fd:79:42:d7:d1:55:6b: 25:fe:2d:80:56:a8:b8:8a:d3:e0:fb:23:4e:e7:c2: 3d:00:28:36:c2:ea:c0:9e:ff:4c:44:06:6e:96:e0: 39:23:c7:08:16:8b:4c:f0:3f:5d:41:80:6f:7f:39: 46:7e:f0:69:a4:48:a9:85:77:6f:8d:5d:4d:8f:78: 3d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:80:BA:4A:BD:3E:C7:47:44:EE:19:36:E5:01:8D:92:E6:A2:FE:35 X509v3 Authority Key Identifier: keyid:7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:29:c7:64:2c:de:36:5f:24:f1:a9:93:53:a8:21:57:d3:34: ca:d5:de:4a:fa:de:32:c6:ab:2c:1a:d2:71:b1:2c:af:5c:f6: 3f:6a:e6:24:62:5d:9f:c1:63:3d:53:62:d5:25:d0:33:c0:8d: 9f:07:79:73:bb:98:bf:18:fe:19:33:cc:a1:76:bb:95:aa:c7: d7:92:bf:52:04:d9:84:7f:37:90:7a:84:dd:e5:35:97:21:8a: f5:8f:46:fb:cd:ef:2a:67:e2:22:f8:34:a1:ce:8f:c9:58:65: 62:c7:dd:29:ac:d4:8d:df:cb:66:47:c3:d5:14:17:60:90:4d: 1f:75:ce:80:44:b1:f6:d7:10:a8:ed:b5:cb:87:37:f5:0f:c3: 9a:ef:5a:89:d9:db:3e:2d:44:4e:5c:c9:0d:72:fa:f8:51:9f: dd:78:cf:cc:5f:db:4a:01:ab:04:0f:79:a7:22:94:74:df:db: 6a:21:47:f4:52:a8:b4:69:2f:85:f8:1d:a8:2b:05:99:48:b1: ec:5b:92:a1:cd:89:c6:e6:7f:4e:f6:cd:e6:4b:5e:4d:1f:d3: 2f:7b:38:63:0e:59:35:4f:0e:4c:47:be:06:0a:ac:cf:f7:46: d1:17:60:d3:d5:71:14:41:16:1b:8c:86:08:f6:fa:bb:87:41: 6c:22:d1:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+r2a7NtDN+co1UNS427B0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMDVlYTU5ODA1Zjk0YmUxODUyODIwMzliYmFlMmZhOGE5 MjUzZjUwHhcNMjYwMTI3MDkwMTA2WhcNMjYwMTI4MDkwMTA2WjAzMTEwLwYDVQQD EygxNzgwYmE0YWJkM2VjNzQ3NDRlZTE5MzZlNTAxOGQ5MmU2YTJmZTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cgYl2Pu3cD5LZ2H03rU/a+Eb8jk +eNrdMUeX4SZ0+AsYflAQ0+qApgAlW1xnIhNVY+/oqo+iY/TWAGgco03wgk7bEXL THoMeleOMdxbU3jfW3FN34CYuUv1gaqbfxGwg7888hXwNvp//GfCs0S+HayGIUnz Spl4+/NsipFpbqj4tsdD7IL0mq7zxYfnJN1dI2mWbOCto/DoW454PbsA+JyPUE3g lUvPtKMcfmkOIMiztwDdbxRPfGqO2f15QtfRVWsl/i2AVqi4itPg+yNO58I9ACg2 wurAnv9MRAZuluA5I8cIFotM8D9dQYBvfzlGfvBppEiphXdvjV1Nj3g9PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBeAukq9PsdHRO4ZNuUBjZLmov41MB8GA1UdIwQY MBaAFHoF6lmAX5S+GFKCA5u64vqKklP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWdYcVdZQmZsTDRZVW9JRG03cmktb3FTVV9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jZjI0YmQtYzE1Yi00ODRjLTk3MzIt MDRiMzgxM2YzYjNkLzEvZWdYcVdZQmZsTDRZVW9JRG03cmktb3FTVV9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9jZjI0YmQtYzE1Yi00ODRjLTk3MzItMDRiMzgxM2YzYjNk LzEvZWdYcVdZQmZsTDRZVW9JRG03cmktb3FTVV9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVinHZCze Nl8k8amTU6ghV9M0ytXeSvreMsarLBrScbEsr1z2P2rmJGJdn8FjPVNi1SXQM8CN nwd5c7uYvxj+GTPMoXa7larH15K/UgTZhH83kHqE3eU1lyGK9Y9G+83vKmfiIvg0 oc6PyVhlYsfdKazUjd/LZkfD1RQXYJBNH3XOgESx9tcQqO21y4c39Q/Dmu9aidnb Pi1ETlzJDXL6+FGf3XjPzF/bSgGrBA95pyKUdN/baiFH9FKotGkvhfgdqCsFmUix 7FuSoc2JxuZ/TvbN5kteTR/TL3s4Yw5ZNU8OTEe+Bgqsz/dG0Rdg09VxFEEWG4yG CPb6u4dBbCLRlQ== -----END CERTIFICATE-----Generated at Tue Jan 27 12:45:25 2026 by rpki-client