This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft File: EMjta5UtlCnjU08U2TJlmQ8cp84.mft (raw, json) Hash identifier: bMv4fB/4QUhtcKP3lidvpMgB0hRvPVy0hhhnzsPkYro= Subject key identifier: CC:78:47:38:AC:80:0A:49:DB:CA:36:3C:AD:D2:C5:F1:D8:F7:7D:75 Authority key identifier: 10:C8:ED:6B:95:2D:94:29:E3:53:4F:14:D9:32:65:99:0F:1C:A7:CE Certificate issuer: /CN=10c8ed6b952d9429e3534f14d93265990f1ca7ce Certificate serial: 019BFA41C6526E3D31389037758B2B381BA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft Manifest number: 02 Signing time: Mon 26 Jan 2026 12:22:53 +0000 Manifest this update: Mon 26 Jan 2026 12:22:53 +0000 Manifest next update: Tue 27 Jan 2026 12:22:53 +0000 Files and hashes: 1: 83u4srH8ACpTsU951VXyIZw_p80.roa (hash: q/HJzvlHBUwM+2hxkEl4HK2p/wjtVm5tBQqZRN97Q3I=) 2: EMjta5UtlCnjU08U2TJlmQ8cp84.crl (hash: feKjsge2BToVp0th6yazhg7l1o/mnyXJQYbncee+p3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:41:c6:52:6e:3d:31:38:90:37:75:8b:2b:38:1b:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10c8ed6b952d9429e3534f14d93265990f1ca7ce Validity Not Before: Jan 26 12:22:53 2026 GMT Not After : Jan 27 12:22:53 2026 GMT Subject: CN=cc784738ac800a49dbca363cadd2c5f1d8f77d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:09:66:d7:9d:69:79:b7:47:49:68:bb:47:50: 18:7b:bf:f9:22:07:ad:59:d4:ad:24:68:c5:01:28: 18:10:01:a2:e7:07:b2:4a:4d:9c:94:f9:ca:97:cd: 16:1b:41:d9:02:28:bb:bd:e5:bd:7b:9c:c4:32:9a: da:3a:f6:95:0a:da:66:5f:02:bc:a1:e2:81:aa:b0: 8e:fa:db:01:6e:28:8b:2a:6a:4c:f8:47:35:e8:db: 1a:a2:6b:0c:82:ea:b5:19:fd:db:3b:c6:67:d9:15: 75:fc:9e:84:be:d8:cd:98:a0:10:c3:b5:97:27:ea: 08:4b:93:75:87:0e:0a:c4:a4:e3:0c:12:02:c3:23: 2f:07:68:ca:a7:ee:65:e4:d5:f7:ed:e4:15:73:e6: cf:b2:32:15:6c:1f:61:3d:9b:eb:63:03:4b:f7:a8: 85:e1:43:ce:20:9c:70:a7:b7:b6:74:1d:ec:01:2b: 39:eb:27:8b:02:4a:b6:97:3f:da:d6:99:97:88:8e: ef:44:e9:ad:0b:8b:90:f8:80:6b:27:e2:75:42:08: f4:0d:3e:b6:19:7b:f4:ce:01:46:71:ec:44:25:47: 30:46:67:79:1a:a0:e5:25:c0:d8:46:22:58:07:8c: ae:5d:85:f8:75:cc:31:87:26:93:24:fb:9d:68:51: e9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:78:47:38:AC:80:0A:49:DB:CA:36:3C:AD:D2:C5:F1:D8:F7:7D:75 X509v3 Authority Key Identifier: keyid:10:C8:ED:6B:95:2D:94:29:E3:53:4F:14:D9:32:65:99:0F:1C:A7:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:48:d6:d6:c5:41:ed:84:ad:b1:04:3f:d1:49:fc:61:74:9c: 63:7a:6b:5d:40:5b:0a:0c:d3:03:46:33:05:ec:62:70:e1:3a: c6:23:9c:e1:8a:9c:16:d1:32:89:c3:c1:4c:fe:41:80:35:b7: 6c:08:87:f6:96:e5:76:0d:5b:e6:79:de:70:3d:ba:c4:1d:eb: 93:59:47:33:bb:dd:b6:f7:25:47:05:5f:52:ef:34:c7:80:53: 00:64:b4:16:b2:59:9f:fc:74:7b:2f:51:dc:af:3d:c2:24:35: b7:d5:97:e1:92:a4:61:dc:62:07:67:39:b5:17:9e:86:88:05: 02:e0:63:f8:4c:42:2d:84:e5:9f:c9:9b:65:fd:ed:70:de:e8: 09:d1:44:76:0b:cf:b7:dc:eb:55:d1:4f:4d:87:98:f0:88:78: 90:d9:1b:a9:86:cb:c7:ea:ab:f2:54:ba:5f:71:ea:b8:a6:6c: 82:12:af:85:0c:4d:f3:dd:f8:f0:85:54:df:af:9e:e1:d9:2e: 68:fa:b4:aa:21:75:6e:0d:f2:bc:2e:3b:30:96:d8:40:3f:9a: ea:11:b7:2c:e7:63:af:9e:55:62:2e:1c:78:f7:a0:43:d1:9b: 93:dd:5b:92:7a:30:90:6f:e5:16:8f:36:ab:50:f2:95:48:b7: 5c:91:a3:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6QcZSbj0xOJA3dYsrOBukMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYzhlZDZiOTUyZDk0MjllMzUzNGYxNGQ5MzI2NTk5MGYx Y2E3Y2UwHhcNMjYwMTI2MTIyMjUzWhcNMjYwMTI3MTIyMjUzWjAzMTEwLwYDVQQD EyhjYzc4NDczOGFjODAwYTQ5ZGJjYTM2M2NhZGQyYzVmMWQ4Zjc3ZDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwlm151pebdHSWi7R1AYe7/5Iget WdStJGjFASgYEAGi5weySk2clPnKl80WG0HZAii7veW9e5zEMpraOvaVCtpmXwK8 oeKBqrCO+tsBbiiLKmpM+Ec16NsaomsMguq1Gf3bO8Zn2RV1/J6EvtjNmKAQw7WX J+oIS5N1hw4KxKTjDBICwyMvB2jKp+5l5NX37eQVc+bPsjIVbB9hPZvrYwNL96iF 4UPOIJxwp7e2dB3sASs56yeLAkq2lz/a1pmXiI7vROmtC4uQ+IBrJ+J1Qgj0DT62 GXv0zgFGcexEJUcwRmd5GqDlJcDYRiJYB4yuXYX4dcwxhyaTJPudaFHp/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMx4RzisgApJ28o2PK3SxfHY9311MB8GA1UdIwQY MBaAFBDI7WuVLZQp41NPFNkyZZkPHKfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU1qdGE1VXRsQ25qVTA4VTJUSmxtUThjcDg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85MGExMTAtOTk0OC00M2IzLWEzY2Mt OGQ4OTdkOGE5ZjljLzEvRU1qdGE1VXRsQ25qVTA4VTJUSmxtUThjcDg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS85MGExMTAtOTk0OC00M2IzLWEzY2MtOGQ4OTdkOGE5Zjlj LzEvRU1qdGE1VXRsQ25qVTA4VTJUSmxtUThjcDg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkjW1sVB 7YStsQQ/0Un8YXScY3prXUBbCgzTA0YzBexicOE6xiOc4YqcFtEyicPBTP5BgDW3 bAiH9pbldg1b5nnecD26xB3rk1lHM7vdtvclRwVfUu80x4BTAGS0FrJZn/x0ey9R 3K89wiQ1t9WX4ZKkYdxiB2c5tReehogFAuBj+ExCLYTln8mbZf3tcN7oCdFEdgvP t9zrVdFPTYeY8Ih4kNkbqYbLx+qr8lS6X3HquKZsghKvhQxN89348IVU36+e4dku aPq0qiF1bg3yvC47MJbYQD+a6hG3LOdjr55VYi4cePegQ9Gbk91bknowkG/lFo82 q1DylUi3XJGjBg== -----END CERTIFICATE-----Generated at Mon Jan 26 22:57:24 2026 by rpki-client