This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft File: eaOyw2It-eh5guqDUJeKbJh1p8g.mft (raw, json) Hash identifier: lGxnzYhp8EjgGe0lMocVHvdayfRPhfLv8iiZPyMqJ0g= Subject key identifier: 32:4B:2A:16:51:FB:F6:2D:01:B7:8C:38:83:B0:10:5A:CC:59:0D:D2 Authority key identifier: 79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8 Certificate issuer: /CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8 Certificate serial: 019BE2CA8678775043DEB7A4FD56D1687DBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft Manifest number: 17E7 Signing time: Wed 21 Jan 2026 23:01:22 +0000 Manifest this update: Wed 21 Jan 2026 23:01:22 +0000 Manifest next update: Thu 22 Jan 2026 23:01:22 +0000 Files and hashes: 1: bwuSOp298-dczsmqdU4uLpa6gjo.roa (hash: uzISkAnF902L3J+B/MyOvw4U5tLzeELoUDdqRYulmzE=) 2: eaOyw2It-eh5guqDUJeKbJh1p8g.crl (hash: IYLHZ6cOk9eL1s2GL7eHMaRUYAL8oW+1HN8zmMSu5do=) 3: ntyTSk72RSe0ZIrYeLH81RbxpHA.asa (hash: iPI512YEQ0gn5dd5DCMPxy3EAFdTv8AI/1+OEDUHbSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 23:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e2:ca:86:78:77:50:43:de:b7:a4:fd:56:d1:68:7d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8 Validity Not Before: Jan 21 23:01:22 2026 GMT Not After : Jan 22 23:01:22 2026 GMT Subject: CN=324b2a1651fbf62d01b78c3883b0105acc590dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9e:66:8a:f6:e4:7c:74:87:c9:19:b5:5d:8a: c1:87:90:68:1c:03:9c:4b:b6:f9:30:6f:25:dc:5b: 17:36:0c:08:0a:03:88:d3:e0:4c:2b:c1:71:ba:7d: 5f:2c:ef:12:fa:e3:15:a1:89:36:dc:de:ea:55:60: 06:0d:0e:d9:79:06:37:7e:c1:1c:29:6e:63:06:44: d2:71:0f:24:be:0b:e5:9b:a6:ab:bf:9d:65:97:a6: 3a:ea:31:c0:eb:6d:e0:4c:d2:14:f3:f5:f2:b7:7a: 70:21:ff:1b:92:69:bb:d0:fb:c1:6c:9d:18:9a:43: 0d:77:98:35:3d:62:6b:16:0f:f7:8d:61:0e:d4:4b: 8a:59:ab:f3:47:51:31:e7:85:56:72:9b:9a:a7:c0: 71:32:ec:b2:ca:ef:ba:ef:7d:86:c9:be:b0:0c:c5: 0d:6b:02:bb:1f:a7:9f:bd:31:d6:5e:7b:98:90:e5: 7b:1f:68:dd:53:b2:a1:8b:ed:d8:a4:b5:75:e3:d3: 82:0e:5d:ad:5f:db:ba:d5:64:d5:e9:28:ea:91:0a: 03:bb:80:62:09:39:79:11:de:19:78:8c:6f:b9:13: a5:80:aa:f4:e1:d6:71:50:2b:c7:3e:aa:e9:17:37: 36:25:27:65:f9:a6:21:88:d7:68:3d:bb:8d:55:63: 7f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4B:2A:16:51:FB:F6:2D:01:B7:8C:38:83:B0:10:5A:CC:59:0D:D2 X509v3 Authority Key Identifier: keyid:79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:8a:19:08:a6:d3:ab:d5:e7:d9:1c:44:0e:60:48:9c:78:4b: b2:f9:57:26:21:0c:b0:c0:a6:5b:aa:5a:25:33:2d:10:0c:7c: 48:f6:df:de:21:1a:74:ff:d3:a0:78:dc:f9:f3:af:40:89:03: 1a:c1:79:f4:00:5f:45:2a:14:a9:ca:97:7d:0a:79:73:90:1b: 64:59:e9:74:ae:1a:ea:55:2e:32:df:b5:7a:82:69:84:a7:30: cf:21:22:55:f1:b3:ae:47:64:7b:70:a6:ee:e6:a2:62:d3:71: ee:c5:97:45:25:fd:b0:81:e5:f9:a4:ae:0d:82:14:0a:14:00: ff:5f:5c:0c:a3:69:2c:e6:e7:36:de:50:fb:93:7c:e6:78:83: 71:2c:da:19:0d:eb:20:ba:bc:37:b6:aa:f0:bc:28:ec:29:60: 41:2e:0e:74:9d:d9:46:45:c4:a3:b2:14:6e:91:2f:90:d8:b9: 97:99:a9:d5:10:7d:df:d3:04:09:29:1d:92:88:6c:e2:02:b6: 40:fd:b6:a9:d3:f2:1c:aa:2d:7d:71:53:6b:d9:43:8f:b3:09: fd:6f:e9:47:26:65:d5:2e:d7:87:8f:d3:37:c2:0f:58:82:4d: d8:c5:b3:ec:40:ec:19:0f:bd:9e:34:a9:f6:74:c2:f8:b7:62: f9:94:cb:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZviyoZ4d1BD3rek/VbRaH27MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YTNiMmMzNjIyZGY5ZTg3OTgyZWE4MzUwOTc4YTZjOTg3 NWE3YzgwHhcNMjYwMTIxMjMwMTIyWhcNMjYwMTIyMjMwMTIyWjAzMTEwLwYDVQQD EygzMjRiMmExNjUxZmJmNjJkMDFiNzhjMzg4M2IwMTA1YWNjNTkwZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ5mivbkfHSHyRm1XYrBh5BoHAOc S7b5MG8l3FsXNgwICgOI0+BMK8Fxun1fLO8S+uMVoYk23N7qVWAGDQ7ZeQY3fsEc KW5jBkTScQ8kvgvlm6arv51ll6Y66jHA623gTNIU8/Xyt3pwIf8bkmm70PvBbJ0Y mkMNd5g1PWJrFg/3jWEO1EuKWavzR1Ex54VWcpuap8BxMuyyyu+6732Gyb6wDMUN awK7H6efvTHWXnuYkOV7H2jdU7Khi+3YpLV149OCDl2tX9u61WTV6SjqkQoDu4Bi CTl5Ed4ZeIxvuROlgKr04dZxUCvHPqrpFzc2JSdl+aYhiNdoPbuNVWN/4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJLKhZR+/YtAbeMOIOwEFrMWQ3SMB8GA1UdIwQY MBaAFHmjssNiLfnoeYLqg1CXimyYdafIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWFPeXcySXQtZWg1Z3VxRFVKZUtiSmgxcDhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lNTA2OWItMWNhZC00NWE0LWE2MTkt YzI0ZmY2ODJmN2FkLzEvZWFPeXcySXQtZWg1Z3VxRFVKZUtiSmgxcDhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9lNTA2OWItMWNhZC00NWE0LWE2MTktYzI0ZmY2ODJmN2Fk LzEvZWFPeXcySXQtZWg1Z3VxRFVKZUtiSmgxcDhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIoZCKbT q9Xn2RxEDmBInHhLsvlXJiEMsMCmW6paJTMtEAx8SPbf3iEadP/ToHjc+fOvQIkD GsF59ABfRSoUqcqXfQp5c5AbZFnpdK4a6lUuMt+1eoJphKcwzyEiVfGzrkdke3Cm 7uaiYtNx7sWXRSX9sIHl+aSuDYIUChQA/19cDKNpLObnNt5Q+5N85niDcSzaGQ3r ILq8N7aq8Lwo7ClgQS4OdJ3ZRkXEo7IUbpEvkNi5l5mp1RB939MECSkdkohs4gK2 QP22qdPyHKotfXFTa9lDj7MJ/W/pRyZl1S7Xh4/TN8IPWIJN2MWz7EDsGQ+9njSp 9nTC+Ldi+ZTLWQ== -----END CERTIFICATE-----Generated at Thu Jan 22 08:59:33 2026 by rpki-client