This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft File: E-8y2L8VPATGOTviTwYyQ_fop-I.mft (raw, json) Hash identifier: +JSIxOAs2T3zi8zNEnNKce9Akzx5lCoTseZQWhMfeD8= Subject key identifier: 46:EF:B7:1D:60:6A:5B:BE:76:17:85:EE:67:EE:D9:1E:4F:35:21:00 Authority key identifier: 13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2 Certificate issuer: /CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2 Certificate serial: 019BAE383EE85D39370328D16EE3C39C4219 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft Manifest number: 0A27 Signing time: Sun 11 Jan 2026 18:01:20 +0000 Manifest this update: Sun 11 Jan 2026 18:01:20 +0000 Manifest next update: Mon 12 Jan 2026 18:01:20 +0000 Files and hashes: 1: E-8y2L8VPATGOTviTwYyQ_fop-I.crl (hash: ulXrzQdtjgJirRFoLyzUej6KohwQNaM9953Ubmk54cs=) 2: gXqLoCjch24SvYMMr4ERE1p3TXY.roa (hash: iUQ1Oys+V4y+EkeTDwfkNa5H0Gsu8L8N4uEAk+c5TDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:38:3e:e8:5d:39:37:03:28:d1:6e:e3:c3:9c:42:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2 Validity Not Before: Jan 11 18:01:20 2026 GMT Not After : Jan 12 18:01:20 2026 GMT Subject: CN=46efb71d606a5bbe761785ee67eed91e4f352100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:24:07:55:98:ab:74:ae:21:d5:e3:a5:dd:22: c3:10:85:2d:94:d0:ab:ac:96:54:e9:4c:58:fb:63: 58:03:f1:17:7b:ce:0e:e5:72:4c:9a:c7:1c:e6:91: 93:9c:57:ac:59:39:e8:3e:53:70:60:5e:14:41:e2: 17:5b:81:c3:a3:e9:c2:6b:22:be:87:3f:b9:a5:a4: 14:14:7f:a0:9d:db:78:c2:bb:37:88:af:88:ea:81: ca:d6:4b:6a:80:8b:65:77:a3:64:df:a9:5b:09:ab: 20:82:be:e1:f7:d3:12:e8:6c:f7:3d:aa:60:a2:31: 76:95:e3:e1:f2:71:2c:49:b3:d2:37:b6:f8:16:6e: d4:03:d7:30:d2:ca:9c:48:1a:27:0f:6b:f4:6b:74: d4:c0:a8:90:92:d4:2d:1a:0f:e4:d4:87:9a:27:1d: c0:d3:a4:5b:22:1b:b7:ae:2b:95:c9:04:e7:3b:e7: a5:db:e8:08:29:be:1b:c3:b4:15:74:81:fa:12:6e: 13:f1:e3:a2:39:84:aa:d0:1d:a8:38:3f:e7:c6:ac: ca:b0:79:e7:b7:97:c0:2b:34:74:ab:bb:60:9e:26: ec:b8:63:5d:0a:8b:3f:08:c2:41:6b:bc:12:e0:22: 90:41:ef:37:0c:69:c4:81:70:0b:b0:b5:4d:34:5e: 5c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EF:B7:1D:60:6A:5B:BE:76:17:85:EE:67:EE:D9:1E:4F:35:21:00 X509v3 Authority Key Identifier: keyid:13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:3c:86:3f:d2:c1:1e:a6:69:71:94:c4:be:8c:03:f3:02:51: 24:52:da:5b:31:54:37:f8:f5:9b:20:51:7a:fb:52:4d:41:e2: c6:38:ea:c7:13:80:41:4c:0a:c7:bc:75:0c:3a:4e:e2:a8:4b: 7a:2b:a6:d4:e8:36:01:1f:48:96:58:a6:b2:3c:71:5b:d3:84: 08:0f:b5:00:6f:1c:88:ad:8e:ca:ab:63:e4:29:48:15:e7:62: 42:45:50:3b:32:f6:7e:ba:c0:90:e1:95:40:bf:48:c1:03:6a: 60:69:64:8b:1d:cb:50:25:3e:be:36:7b:0a:10:b7:46:41:1c: e4:71:63:f2:98:92:5a:0d:57:1c:ab:af:bc:cd:a2:85:0a:d1: e3:a9:f1:ec:d8:ab:31:11:fd:92:fe:53:ab:ac:32:66:f9:4e: 16:0d:b2:9e:74:67:29:e7:ae:ef:65:bb:64:b5:55:20:fb:a5: 74:a3:f8:c3:72:86:3e:c1:6f:54:ed:ed:be:c2:37:cc:c3:ad: 64:ea:5c:71:14:79:8a:a1:40:43:40:1f:34:e5:17:86:b4:e9: fe:f6:7f:a0:cc:b5:58:50:a9:ce:6b:0a:d6:11:86:64:4e:5d: 42:d7:60:f2:be:cd:7b:23:c7:80:d5:95:23:14:7d:b9:1c:c7: 0a:ed:51:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuuOD7oXTk3AyjRbuPDnEIZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZWYzMmQ4YmYxNTNjMDRjNjM5M2JlMjRmMDYzMjQzZjdl OGE3ZTIwHhcNMjYwMTExMTgwMTIwWhcNMjYwMTEyMTgwMTIwWjAzMTEwLwYDVQQD Eyg0NmVmYjcxZDYwNmE1YmJlNzYxNzg1ZWU2N2VlZDkxZTRmMzUyMTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyQHVZirdK4h1eOl3SLDEIUtlNCr rJZU6UxY+2NYA/EXe84O5XJMmscc5pGTnFesWTnoPlNwYF4UQeIXW4HDo+nCayK+ hz+5paQUFH+gndt4wrs3iK+I6oHK1ktqgItld6Nk36lbCasggr7h99MS6Gz3Papg ojF2lePh8nEsSbPSN7b4Fm7UA9cw0sqcSBonD2v0a3TUwKiQktQtGg/k1IeaJx3A 06RbIhu3riuVyQTnO+el2+gIKb4bw7QVdIH6Em4T8eOiOYSq0B2oOD/nxqzKsHnn t5fAKzR0q7tgnibsuGNdCos/CMJBa7wS4CKQQe83DGnEgXALsLVNNF5c6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbvtx1galu+dheF7mfu2R5PNSEAMB8GA1UdIwQY MBaAFBPvMti/FTwExjk74k8GMkP36KfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xNDgyMWEtMjExOS00NzcxLThjNzYt Mzg3NzA2YzJhODQ5LzEvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xNDgyMWEtMjExOS00NzcxLThjNzYtMzg3NzA2YzJhODQ5 LzEvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzyGP9LB HqZpcZTEvowD8wJRJFLaWzFUN/j1myBRevtSTUHixjjqxxOAQUwKx7x1DDpO4qhL eium1Og2AR9IllimsjxxW9OECA+1AG8ciK2Oyqtj5ClIFediQkVQOzL2frrAkOGV QL9IwQNqYGlkix3LUCU+vjZ7ChC3RkEc5HFj8piSWg1XHKuvvM2ihQrR46nx7Nir MRH9kv5Tq6wyZvlOFg2ynnRnKeeu72W7ZLVVIPuldKP4w3KGPsFvVO3tvsI3zMOt ZOpccRR5iqFAQ0AfNOUXhrTp/vZ/oMy1WFCpzmsK1hGGZE5dQtdg8r7NeyPHgNWV IxR9uRzHCu1RkQ== -----END CERTIFICATE-----Generated at Sun Jan 11 20:11:12 2026 by rpki-client