This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft File: ee4R2MQpe-xUvTBUMMpHct-shHo.mft (raw, json) Hash identifier: hxy+KaEqBXXw4UWO6JoECqqg0aVO4s4AmXufn++kc44= Subject key identifier: CD:09:DA:7F:2F:78:89:49:2D:3A:6C:73:FA:62:E5:59:BB:DE:70:41 Authority key identifier: 79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A Certificate issuer: /CN=79ee11d8c4297bec54bd305430ca4772dfac847a Certificate serial: 019BFA2E38645E77A724A173CCE379D259D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft Manifest number: 0BF8 Signing time: Mon 26 Jan 2026 12:01:31 +0000 Manifest this update: Mon 26 Jan 2026 12:01:31 +0000 Manifest next update: Tue 27 Jan 2026 12:01:31 +0000 Files and hashes: 1: ee4R2MQpe-xUvTBUMMpHct-shHo.crl (hash: HzRgNthC0UXiR4W1h3jKOb1sr56EKJRZM2Jxo/x/HJI=) 2: nkXiZoMMW3zafsjty-VJgGg0Xzc.roa (hash: F3sEH4KSkZNHFk1f1SP7LzRoEDV0ahVUx0fynXewv18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2e:38:64:5e:77:a7:24:a1:73:cc:e3:79:d2:59:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79ee11d8c4297bec54bd305430ca4772dfac847a Validity Not Before: Jan 26 12:01:31 2026 GMT Not After : Jan 27 12:01:31 2026 GMT Subject: CN=cd09da7f2f7889492d3a6c73fa62e559bbde7041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:62:ae:84:f9:6b:40:a9:44:8c:90:4d:f7:2b: 08:5f:f9:77:d3:63:5e:21:18:25:24:fa:00:63:58: c7:cc:0d:65:8b:99:5a:5a:4a:b7:c6:12:3f:9b:39: 97:d1:5d:10:00:e6:6a:44:51:8d:d0:a9:15:94:6e: fe:64:07:4f:77:85:91:18:41:4f:ed:74:c9:41:2a: 0e:a8:2c:71:0e:41:2c:19:de:97:a4:ee:3c:2e:f8: 99:eb:2a:c1:3f:b4:5d:fc:58:c0:e5:57:bf:41:cc: de:f7:b3:56:72:e4:b2:0a:4f:1a:b1:02:9c:34:e5: 3e:ba:b8:4e:3a:61:12:6a:f9:88:8f:d2:34:a0:47: 8e:ef:8f:8b:00:a3:60:43:4e:07:76:f3:74:f7:b4: a8:5c:30:ec:23:36:c9:63:a0:aa:a8:34:91:79:81: 1b:70:b9:72:37:4b:ed:30:f4:c3:6d:a9:bb:16:d1: 4f:6b:88:76:9b:1a:46:58:11:93:f2:fb:ff:e1:35: 00:6f:e1:39:fa:26:f5:74:38:d2:b3:7d:84:70:34: 71:aa:25:07:c6:49:a7:6a:ff:29:4d:fb:89:44:3c: 07:9e:d1:2e:74:dc:c1:d7:c9:30:e5:34:25:76:cb: 64:a0:a2:81:84:4f:bf:a6:01:c4:10:83:52:b8:5d: 17:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:09:DA:7F:2F:78:89:49:2D:3A:6C:73:FA:62:E5:59:BB:DE:70:41 X509v3 Authority Key Identifier: keyid:79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:9b:a0:40:7a:b8:78:da:07:38:27:58:e9:b3:1d:a2:f4:0f: c9:d3:72:46:13:28:14:04:94:68:f9:a4:5a:56:c7:a5:94:5e: ab:08:c0:69:9b:dd:e8:27:18:f3:10:61:3a:98:1b:0d:f8:7e: 29:45:a2:5d:82:35:83:b3:59:3c:f0:7c:00:18:1f:cd:77:17: 2a:24:85:1b:dd:55:d8:ae:55:76:86:61:5d:3a:dd:bd:5a:2d: 9b:ec:7c:c9:a7:43:7a:a8:58:33:84:3a:86:e9:86:5f:6c:a1: f3:b3:17:f2:38:d5:32:3d:48:3e:ad:3b:25:e5:ab:74:0a:89: 83:3e:33:cc:2c:92:2f:c5:0d:8f:6c:49:30:b9:de:e3:ca:0c: 6d:7a:f5:50:44:b3:4a:19:58:76:08:62:5d:72:d3:03:58:57: 4f:6c:0b:a9:e6:a3:04:70:64:79:db:de:81:96:03:ea:56:aa: 51:21:2d:d7:43:6f:dc:f3:2f:d1:b1:da:9b:5c:7a:cb:99:d2: 0f:a6:83:46:d9:3e:95:b6:aa:3d:24:e0:ad:9a:14:f0:11:67: 8c:b8:7e:ad:4f:21:e3:b2:12:45:20:e5:74:cb:8d:03:8b:54: db:85:91:14:57:56:52:8e:4d:6f:2d:b3:a9:61:8b:94:24:ce: d9:ee:d1:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LjhkXnenJKFzzON50lnSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5ZWUxMWQ4YzQyOTdiZWM1NGJkMzA1NDMwY2E0NzcyZGZh Yzg0N2EwHhcNMjYwMTI2MTIwMTMxWhcNMjYwMTI3MTIwMTMxWjAzMTEwLwYDVQQD EyhjZDA5ZGE3ZjJmNzg4OTQ5MmQzYTZjNzNmYTYyZTU1OWJiZGU3MDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmKuhPlrQKlEjJBN9ysIX/l302Ne IRglJPoAY1jHzA1li5laWkq3xhI/mzmX0V0QAOZqRFGN0KkVlG7+ZAdPd4WRGEFP 7XTJQSoOqCxxDkEsGd6XpO48LviZ6yrBP7Rd/FjA5Ve/Qcze97NWcuSyCk8asQKc NOU+urhOOmESavmIj9I0oEeO74+LAKNgQ04HdvN097SoXDDsIzbJY6CqqDSReYEb cLlyN0vtMPTDbam7FtFPa4h2mxpGWBGT8vv/4TUAb+E5+ib1dDjSs32EcDRxqiUH xkmnav8pTfuJRDwHntEudNzB18kw5TQldstkoKKBhE+/pgHEEINSuF0XZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0J2n8veIlJLTpsc/pi5Vm73nBBMB8GA1UdIwQY MBaAFHnuEdjEKXvsVL0wVDDKR3LfrIR6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWU0UjJNUXBlLXhVdlRCVU1NcEhjdC1zaEhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mODViM2QtNjI0ZS00YjFhLWFkMzMt MTBhMjA2ZGE3YjZiLzEvZWU0UjJNUXBlLXhVdlRCVU1NcEhjdC1zaEhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9mODViM2QtNjI0ZS00YjFhLWFkMzMtMTBhMjA2ZGE3YjZi LzEvZWU0UjJNUXBlLXhVdlRCVU1NcEhjdC1zaEhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5ugQHq4 eNoHOCdY6bMdovQPydNyRhMoFASUaPmkWlbHpZReqwjAaZvd6CcY8xBhOpgbDfh+ KUWiXYI1g7NZPPB8ABgfzXcXKiSFG91V2K5VdoZhXTrdvVotm+x8yadDeqhYM4Q6 humGX2yh87MX8jjVMj1IPq07JeWrdAqJgz4zzCySL8UNj2xJMLne48oMbXr1UESz ShlYdghiXXLTA1hXT2wLqeajBHBkedvegZYD6laqUSEt10Nv3PMv0bHam1x6y5nS D6aDRtk+lbaqPSTgrZoU8BFnjLh+rU8h47ISRSDldMuNA4tU24WRFFdWUo5Nby2z qWGLlCTO2e7R9A== -----END CERTIFICATE-----Generated at Mon Jan 26 20:54:34 2026 by rpki-client