This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft File: EGwPOVQQ8obIV2V219L3gwS16Do.mft (raw, json) Hash identifier: UjmpDDa9jNN8lErNXwTAX5p6NUVgJJqkpOZoE6tOILA= Subject key identifier: 31:9D:5F:9A:82:88:1D:A1:47:33:A4:F3:D3:9A:EA:CD:BE:76:62:E9 Authority key identifier: 10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A Certificate issuer: /CN=106c0f395410f286c8576576d7d2f78304b5e83a Certificate serial: 019B906534FCAE913D2C7B493851A009FB99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft Manifest number: 17B2 Signing time: Mon 05 Jan 2026 23:01:50 +0000 Manifest this update: Mon 05 Jan 2026 23:01:50 +0000 Manifest next update: Tue 06 Jan 2026 23:01:50 +0000 Files and hashes: 1: 9i5swc1J4tp7c1o23nouETORP2E.roa (hash: 7qCRSDMfyDVi133KELa0mQ4/QYn5UTkZYhIQJwFytHg=) 2: EGwPOVQQ8obIV2V219L3gwS16Do.crl (hash: qaZS3f/IgW1Wu2GeAtbZ7A7/6qLFYdjIBKGOp8cWWzg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:90:65:34:fc:ae:91:3d:2c:7b:49:38:51:a0:09:fb:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=106c0f395410f286c8576576d7d2f78304b5e83a Validity Not Before: Jan 5 23:01:50 2026 GMT Not After : Jan 6 23:01:50 2026 GMT Subject: CN=319d5f9a82881da14733a4f3d39aeacdbe7662e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f6:cb:23:b9:7f:3c:79:b8:35:bd:15:de:2d: 59:34:7b:70:71:92:91:3a:cb:c3:f7:36:3a:93:7c: 0b:7a:87:9b:1b:67:93:18:78:6d:de:62:6e:0b:fe: 44:28:54:3c:a8:7a:67:ff:65:d6:0e:51:4f:9b:b1: f9:9b:18:94:4a:ce:6b:2a:e7:3b:5f:5c:fe:8c:e7: a4:eb:9a:72:58:f2:db:8f:0d:79:b5:67:c4:7f:6d: 66:e0:70:d7:e1:7b:d8:6a:0e:0a:68:ed:9c:fb:28: bc:dd:46:f8:9e:96:fa:36:01:70:2b:cf:65:c9:75: f9:e2:31:84:06:b1:75:c9:c0:89:7d:90:00:7d:3a: 15:e9:e8:46:f2:26:33:b2:cc:0a:ff:66:e7:06:b5: df:d2:01:ed:13:58:0f:75:df:de:07:cd:ca:7c:ed: c8:50:b8:9e:b3:c6:e8:fb:eb:25:84:de:33:82:0e: 91:37:6f:f4:11:38:5e:12:1b:bb:0d:79:51:76:04: 03:92:bc:3d:73:bb:0a:7d:7c:c8:e6:87:9e:53:b8: 42:2e:5c:60:88:8f:c1:3d:29:87:3e:fc:bf:a3:9e: f2:5f:b1:e6:d7:2b:e0:a2:68:e7:42:99:f3:61:c6: fc:b8:34:12:e7:88:46:f6:0d:15:40:e7:74:ea:e6: 63:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9D:5F:9A:82:88:1D:A1:47:33:A4:F3:D3:9A:EA:CD:BE:76:62:E9 X509v3 Authority Key Identifier: keyid:10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:e2:76:24:1e:67:85:6a:68:d4:2a:39:60:17:a9:75:bb:e6: ee:90:32:ed:42:c8:3e:4d:af:6f:d5:5b:27:3b:8e:b8:d5:70: b8:9b:31:cf:69:9c:d8:fc:1b:e1:fc:f5:06:72:ae:e4:18:37: 2c:0f:c6:61:09:a5:17:ca:c0:bb:46:6d:bb:44:c9:20:e4:32: f1:8e:cc:cc:3b:7e:7e:85:69:ac:93:fd:00:16:d4:d1:fd:e5: 9d:62:70:5a:05:68:bd:65:80:32:c3:e2:86:30:72:1a:66:ae: d8:a4:d1:13:ab:1a:9f:98:09:b0:46:f1:20:f2:ae:20:8f:5a: 75:79:11:b1:98:fd:0e:2b:d8:2e:bb:52:f0:57:ca:6e:67:f0: f0:dc:0b:b8:4b:fb:a7:7f:b0:b6:1e:3d:43:4e:5e:be:06:2b: 29:b4:f5:f1:20:c1:bb:bc:46:3b:f0:3b:43:db:76:9f:29:d7: d0:b8:5b:26:13:40:0d:73:3c:95:8d:0d:5a:36:b8:ef:5d:8e: a4:20:dc:e2:60:95:20:b8:e2:a7:95:dd:dd:da:9d:8f:0b:ca: e4:8d:0c:20:fa:d9:27:d1:5c:ba:8d:22:32:6e:8e:b6:88:78: 4d:35:ac:55:7c:90:5b:aa:e9:cf:a6:d6:d5:d0:74:2c:e8:41: bc:59:16:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuQZTT8rpE9LHtJOFGgCfuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNmMwZjM5NTQxMGYyODZjODU3NjU3NmQ3ZDJmNzgzMDRi NWU4M2EwHhcNMjYwMTA1MjMwMTUwWhcNMjYwMTA2MjMwMTUwWjAzMTEwLwYDVQQD EygzMTlkNWY5YTgyODgxZGExNDczM2E0ZjNkMzlhZWFjZGJlNzY2MmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvbLI7l/PHm4Nb0V3i1ZNHtwcZKR OsvD9zY6k3wLeoebG2eTGHht3mJuC/5EKFQ8qHpn/2XWDlFPm7H5mxiUSs5rKuc7 X1z+jOek65pyWPLbjw15tWfEf21m4HDX4XvYag4KaO2c+yi83Ub4npb6NgFwK89l yXX54jGEBrF1ycCJfZAAfToV6ehG8iYzsswK/2bnBrXf0gHtE1gPdd/eB83KfO3I ULies8bo++slhN4zgg6RN2/0ETheEhu7DXlRdgQDkrw9c7sKfXzI5oeeU7hCLlxg iI/BPSmHPvy/o57yX7Hm1yvgomjnQpnzYcb8uDQS54hG9g0VQOd06uZjGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGdX5qCiB2hRzOk89Oa6s2+dmLpMB8GA1UdIwQY MBaAFBBsDzlUEPKGyFdldtfS94MEteg6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUd3UE9WUVE4b2JJVjJWMjE5TDNnd1MxNkRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zOTNkMzYtNzdiZi00YWUyLTkzMjQt MzQwZjQzMzU4NGQyLzEvRUd3UE9WUVE4b2JJVjJWMjE5TDNnd1MxNkRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8zOTNkMzYtNzdiZi00YWUyLTkzMjQtMzQwZjQzMzU4NGQy LzEvRUd3UE9WUVE4b2JJVjJWMjE5TDNnd1MxNkRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQeJ2JB5n hWpo1Co5YBepdbvm7pAy7ULIPk2vb9VbJzuOuNVwuJsxz2mc2Pwb4fz1BnKu5Bg3 LA/GYQmlF8rAu0Ztu0TJIOQy8Y7MzDt+foVprJP9ABbU0f3lnWJwWgVovWWAMsPi hjByGmau2KTRE6san5gJsEbxIPKuII9adXkRsZj9DivYLrtS8FfKbmfw8NwLuEv7 p3+wth49Q05evgYrKbT18SDBu7xGO/A7Q9t2nynX0LhbJhNADXM8lY0NWja4712O pCDc4mCVILjip5Xd3dqdjwvK5I0MIPrZJ9Fcuo0iMm6Otoh4TTWsVXyQW6rpz6bW 1dB0LOhBvFkWvA== -----END CERTIFICATE-----Generated at Tue Jan 6 02:56:34 2026 by rpki-client