This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft File: e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft (raw, json) Hash identifier: qS28tCLld/54GbpgpBp/gMpXzmxYGOp8ZXsoTJImtzc= Subject key identifier: 47:A3:D8:ED:09:14:8C:79:5B:A4:FE:58:17:6F:40:01:56:FE:B6:6D Authority key identifier: 7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6 Certificate issuer: /CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6 Certificate serial: 019BF8767702798B242F8C491CE49A09E443 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft Manifest number: 159D Signing time: Mon 26 Jan 2026 04:01:11 +0000 Manifest this update: Mon 26 Jan 2026 04:01:11 +0000 Manifest next update: Tue 27 Jan 2026 04:01:11 +0000 Files and hashes: 1: RCrqoUHCiCj-_mCIijuiOb69DWo.roa (hash: N+TGC8nICgkfbZEg/ul2Bb4VOH/CDC8qHnBferdNNKE=) 2: e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl (hash: UbxEfqXeaWT1wlL6ApB7IIa9ey3A3GEPX/NLoGH20rA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:77:02:79:8b:24:2f:8c:49:1c:e4:9a:09:e4:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6 Validity Not Before: Jan 26 04:01:11 2026 GMT Not After : Jan 27 04:01:11 2026 GMT Subject: CN=47a3d8ed09148c795ba4fe58176f400156feb66d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d0:41:f5:f1:68:d1:3a:1c:39:81:03:06:5d: 6d:df:d1:6b:c7:69:03:51:68:4f:b9:77:44:cc:95: 0e:5b:d0:87:12:ed:fc:0f:c2:20:b7:70:d5:42:a3: 54:ab:0a:cd:e7:6c:21:8f:14:7a:52:a5:8f:49:11: d8:5e:4f:39:c1:52:3e:c8:c5:5c:ac:d0:f9:fb:4f: d5:df:9c:51:96:f9:4f:51:9e:1b:3e:9d:a7:6c:b1: 08:38:44:5a:05:be:7d:56:52:c0:86:b9:be:26:5f: 1b:db:0b:3e:71:d5:0e:eb:3d:20:c7:0c:3c:49:56: bf:5d:ff:cf:d5:1a:12:67:22:e0:50:10:76:e4:86: 7f:a3:ac:36:a7:91:a7:7e:e2:d6:de:f3:1b:9c:0a: 41:2a:86:6f:c8:fc:8e:13:76:86:2f:f7:8a:ff:47: 1d:aa:5e:ca:86:b4:cd:54:92:af:7f:02:bb:e8:86: f1:2e:dc:2b:2c:cd:9e:6c:35:f4:76:eb:71:49:59: 15:d6:92:dc:dc:69:fc:85:08:fc:30:02:cc:59:04: b2:eb:0e:c5:89:b7:7b:d7:63:58:b3:cd:3f:3a:cb: 61:f3:51:b4:19:2f:79:cb:5b:40:dc:1c:b1:12:6b: 22:b0:de:77:8f:54:ce:a5:60:f6:fa:4c:23:f9:e3: 25:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A3:D8:ED:09:14:8C:79:5B:A4:FE:58:17:6F:40:01:56:FE:B6:6D X509v3 Authority Key Identifier: keyid:7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ac:d3:a2:f9:30:8f:ad:bf:84:b2:33:4d:28:98:28:e9:35: 7e:ca:15:f2:3e:df:ca:66:ad:b1:08:c9:7f:ff:9e:7f:a9:de: f4:1a:e6:45:8d:62:ad:54:f4:f3:43:12:9c:84:43:5a:ea:5b: dc:2a:13:8e:6f:85:16:a8:31:fe:a9:2f:56:18:a7:2a:26:8d: 02:8e:41:e5:33:a4:9a:81:c1:a9:41:1c:bc:31:49:7e:28:91: e4:a6:0d:3c:f4:f1:53:cf:14:c7:59:40:2e:04:f2:4d:1c:bd: 2e:66:af:ba:39:72:ee:09:18:f7:d5:a3:bb:56:e2:af:fd:bf: f7:2b:b3:a1:a1:ad:03:a7:1d:5c:ec:33:83:fd:3c:2a:4d:79: 07:c8:57:b2:c6:68:cd:ea:a3:12:d8:1d:fc:d1:eb:88:0d:b8: 98:06:37:2c:11:00:18:49:a2:98:59:3a:56:ad:27:01:e4:8e: d9:47:f0:58:6e:68:b1:f3:2e:1c:2f:34:9b:56:9b:3d:65:43: 9c:a4:2d:19:43:d3:be:a5:4b:00:19:7a:c3:6b:ab:20:8d:79: 62:77:5e:e6:16:89:e7:f5:c3:df:2d:01:39:62:26:86:49:aa: 45:64:75:8d:ce:b0:1b:a8:25:7f:0f:a0:18:2b:0c:18:16:03: d2:c7:0e:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dncCeYskL4xJHOSaCeRDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYzA5OTk4Y2UzOWNmZGNhNjZlY2ZkOGRkM2FjMzg2NDRk M2M4YTYwHhcNMjYwMTI2MDQwMTExWhcNMjYwMTI3MDQwMTExWjAzMTEwLwYDVQQD Eyg0N2EzZDhlZDA5MTQ4Yzc5NWJhNGZlNTgxNzZmNDAwMTU2ZmViNjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9BB9fFo0TocOYEDBl1t39Frx2kD UWhPuXdEzJUOW9CHEu38D8Igt3DVQqNUqwrN52whjxR6UqWPSRHYXk85wVI+yMVc rND5+0/V35xRlvlPUZ4bPp2nbLEIOERaBb59VlLAhrm+Jl8b2ws+cdUO6z0gxww8 SVa/Xf/P1RoSZyLgUBB25IZ/o6w2p5GnfuLW3vMbnApBKoZvyPyOE3aGL/eK/0cd ql7KhrTNVJKvfwK76IbxLtwrLM2ebDX0dutxSVkV1pLc3Gn8hQj8MALMWQSy6w7F ibd712NYs80/Osth81G0GS95y1tA3ByxEmsisN53j1TOpWD2+kwj+eMlBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEej2O0JFIx5W6T+WBdvQAFW/rZtMB8GA1UdIwQY MBaAFHvAmZjOOc/cpm7P2N06w4ZE08imMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lZDY1ZTUtZjgxZi00ZDlkLTg0MDMt MjJkNmNkMWUxYThhLzEvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9lZDY1ZTUtZjgxZi00ZDlkLTg0MDMtMjJkNmNkMWUxYThh LzEvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6zTovkw j62/hLIzTSiYKOk1fsoV8j7fymatsQjJf/+ef6ne9BrmRY1irVT080MSnIRDWupb 3CoTjm+FFqgx/qkvVhinKiaNAo5B5TOkmoHBqUEcvDFJfiiR5KYNPPTxU88Ux1lA LgTyTRy9Lmavujly7gkY99Wju1bir/2/9yuzoaGtA6cdXOwzg/08Kk15B8hXssZo zeqjEtgd/NHriA24mAY3LBEAGEmimFk6Vq0nAeSO2UfwWG5osfMuHC80m1abPWVD nKQtGUPTvqVLABl6w2urII15Ynde5haJ5/XD3y0BOWImhkmqRWR1jc6wG6glfw+g GCsMGBYD0scOYA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:28 2026 by rpki-client