This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft File: ehuwNttA15nYYRmKUkOzwD1Wwgo.mft (raw, json) Hash identifier: V9ZTysl/+1rBwSrzhAgxZHjqP2RkX81hdefJRxU3q5Y= Subject key identifier: EB:77:7C:A1:60:98:A1:D9:9A:B1:A4:7E:97:AB:87:A8:A9:5A:A4:BC Authority key identifier: 7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A Certificate issuer: /CN=7a1bb036db40d799d861198a5243b3c03d56c20a Certificate serial: 019BD8472548A67686CDD23C1F13F201C949 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft Manifest number: 0320 Signing time: Mon 19 Jan 2026 22:01:39 +0000 Manifest this update: Mon 19 Jan 2026 22:01:39 +0000 Manifest next update: Tue 20 Jan 2026 22:01:39 +0000 Files and hashes: 1: 2xwSBwS6RDNnNKRZKOi0MbfjwVc.roa (hash: RMcEguGLwOa0BQU2j27En5sOEwzBOElDccZLVB4NNcw=) 2: MRM-CoQOpNzOiMlv-SoepHZ_vkg.roa (hash: XmXaFQhLTQFHGNBv8hvjwKW9TmIBhDQDOsRTHRNNRp8=) 3: ehuwNttA15nYYRmKUkOzwD1Wwgo.crl (hash: tzjaJlGT0UYLPTi0AoJNJL9b9iuAqOwBMadHQhnVIyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:47:25:48:a6:76:86:cd:d2:3c:1f:13:f2:01:c9:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1bb036db40d799d861198a5243b3c03d56c20a Validity Not Before: Jan 19 22:01:39 2026 GMT Not After : Jan 20 22:01:39 2026 GMT Subject: CN=eb777ca16098a1d99ab1a47e97ab87a8a95aa4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9d:7c:5e:bd:9a:54:c5:3e:10:db:ca:07:fd: 58:84:28:a6:dc:99:df:b9:73:5c:f9:07:b7:65:61: 42:04:b7:1a:26:02:69:ca:3e:5c:ac:d2:53:9c:4a: 6c:1a:a7:1b:a0:c3:df:60:f5:f9:e3:b8:91:8e:54: 16:20:56:3c:d3:67:de:f7:9e:ec:7d:35:9c:c5:93: ca:56:77:b4:d3:2c:87:fc:5f:52:ce:9a:04:77:9c: b7:d5:39:f8:35:f7:2c:90:af:44:63:bd:1b:c1:86: d3:4e:65:77:e6:26:4a:48:10:5a:1e:6a:07:bb:64: a3:e2:75:cf:ec:b7:f9:d0:07:d8:89:76:86:df:41: 13:ed:c5:94:9b:59:00:47:c9:09:3e:19:03:20:69: 9a:30:31:34:16:9c:eb:f1:dc:40:03:30:88:a8:bd: 4f:b6:68:3a:a0:94:1f:ff:95:8c:28:10:c7:22:bb: f0:4b:11:89:46:27:cc:05:7c:26:af:9b:30:76:34: 69:37:00:73:6d:32:5d:a0:de:b9:1c:b3:10:0c:04: 57:e5:e7:81:30:89:2a:c3:69:02:f6:b6:9e:bd:ee: e8:d8:66:64:5c:4c:cc:62:d0:4f:67:0b:69:ca:0f: c3:90:cb:bb:96:ed:1c:56:b5:c5:b1:01:63:4f:7b: db:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:77:7C:A1:60:98:A1:D9:9A:B1:A4:7E:97:AB:87:A8:A9:5A:A4:BC X509v3 Authority Key Identifier: keyid:7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:b4:2c:ba:87:50:11:78:81:f8:97:d6:66:e5:ed:2b:fe:3d: 8b:f1:a8:d3:55:05:22:f5:be:66:8e:2e:9e:a9:a5:12:74:6f: da:6c:87:c4:b3:75:d6:91:fa:14:ac:bc:84:2d:51:7b:ef:02: 56:51:fa:15:2e:85:51:e1:cc:55:05:51:d3:4f:9c:18:49:25: b8:06:b0:d9:b9:4e:c1:3d:e0:9d:82:7e:1f:47:9d:d4:5e:d0: 4b:76:73:eb:90:16:3d:5a:b5:53:00:78:57:32:a0:a5:12:2c: 11:e6:08:45:b6:2e:b8:ca:82:7f:c5:e5:7e:80:19:5d:82:90: 55:63:c8:fc:86:fa:3c:fc:fc:f0:9a:83:35:8e:e8:72:ab:41: a7:45:df:b6:0b:ad:89:1b:91:77:9c:1f:f7:9d:45:75:38:c3: cb:d3:7b:53:57:a2:53:70:82:57:a9:7e:16:1a:2e:cf:2f:46: 97:22:68:0d:f9:4c:99:1e:19:37:8f:2e:61:bc:64:56:dc:46: 94:82:3c:6e:1b:67:5b:bd:a4:34:f6:90:dc:7b:d7:a0:a2:31: 72:40:43:c7:2c:c7:4a:a1:61:d4:df:e8:1d:2b:87:a0:15:78: c0:96:dc:4d:44:8c:d7:08:41:1e:88:fb:64:d1:dd:5b:75:d2: 3a:c2:09:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYRyVIpnaGzdI8HxPyAclJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMWJiMDM2ZGI0MGQ3OTlkODYxMTk4YTUyNDNiM2MwM2Q1 NmMyMGEwHhcNMjYwMTE5MjIwMTM5WhcNMjYwMTIwMjIwMTM5WjAzMTEwLwYDVQQD EyhlYjc3N2NhMTYwOThhMWQ5OWFiMWE0N2U5N2FiODdhOGE5NWFhNGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq518Xr2aVMU+ENvKB/1YhCim3Jnf uXNc+Qe3ZWFCBLcaJgJpyj5crNJTnEpsGqcboMPfYPX547iRjlQWIFY802fe957s fTWcxZPKVne00yyH/F9SzpoEd5y31Tn4NfcskK9EY70bwYbTTmV35iZKSBBaHmoH u2Sj4nXP7Lf50AfYiXaG30ET7cWUm1kAR8kJPhkDIGmaMDE0Fpzr8dxAAzCIqL1P tmg6oJQf/5WMKBDHIrvwSxGJRifMBXwmr5swdjRpNwBzbTJdoN65HLMQDARX5eeB MIkqw2kC9raeve7o2GZkXEzMYtBPZwtpyg/DkMu7lu0cVrXFsQFjT3vbgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOt3fKFgmKHZmrGkfperh6ipWqS8MB8GA1UdIwQY MBaAFHobsDbbQNeZ2GEZilJDs8A9VsIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWh1d050dEExNW5ZWVJtS1VrT3p3RDFXd2dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ZGE1YjMtMjRjNy00ZWU1LTk1ZGMt YjA4ZGIzYzM2ZmJiLzEvZWh1d050dEExNW5ZWVJtS1VrT3p3RDFXd2dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ZGE1YjMtMjRjNy00ZWU1LTk1ZGMtYjA4ZGIzYzM2ZmJi LzEvZWh1d050dEExNW5ZWVJtS1VrT3p3RDFXd2dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlbQsuodQ EXiB+JfWZuXtK/49i/Go01UFIvW+Zo4unqmlEnRv2myHxLN11pH6FKy8hC1Re+8C VlH6FS6FUeHMVQVR00+cGEkluAaw2blOwT3gnYJ+H0ed1F7QS3Zz65AWPVq1UwB4 VzKgpRIsEeYIRbYuuMqCf8XlfoAZXYKQVWPI/Ib6PPz88JqDNY7ocqtBp0Xftgut iRuRd5wf951FdTjDy9N7U1eiU3CCV6l+Fhouzy9GlyJoDflMmR4ZN48uYbxkVtxG lII8bhtnW72kNPaQ3HvXoKIxckBDxyzHSqFh1N/oHSuHoBV4wJbcTUSM1whBHoj7 ZNHdW3XSOsIJoQ== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:49 2026 by rpki-client