This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft File: _ejRxqr0qT_0G7-hvR2sYZfVlXU.mft (raw, json) Hash identifier: b84l6P0EFi/FCxhsaGw2Mdgnyj+jpknA8Iq6p5MV4fk= Subject key identifier: 39:FE:EC:5E:3C:F2:7D:64:81:7B:E2:FD:81:38:C8:59:BA:5E:51:DE Authority key identifier: FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75 Certificate issuer: /CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575 Certificate serial: 019BB1A7959CB4EC2EE247C0A634174F075A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft Manifest number: 17C8 Signing time: Mon 12 Jan 2026 10:01:48 +0000 Manifest this update: Mon 12 Jan 2026 10:01:48 +0000 Manifest next update: Tue 13 Jan 2026 10:01:48 +0000 Files and hashes: 1: I5caSNoaibT5a3lfttKZWdRp0l8.roa (hash: sSCXetknx1GQMkwjOpWfK+QxR9ZMLOdkrRFR3Fi1Ufk=) 2: _ejRxqr0qT_0G7-hvR2sYZfVlXU.crl (hash: 1dxI/FLprLI9m2Or6ltK1pSjNKLr49WlczQkgw4k1po=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 10:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:a7:95:9c:b4:ec:2e:e2:47:c0:a6:34:17:4f:07:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575 Validity Not Before: Jan 12 10:01:48 2026 GMT Not After : Jan 13 10:01:48 2026 GMT Subject: CN=39feec5e3cf27d64817be2fd8138c859ba5e51de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a2:eb:7c:0b:4d:e9:e5:6d:64:0e:f7:25:6f: 26:30:f3:8f:ec:cd:2d:49:c0:25:5e:7d:50:c2:d3: 55:d5:23:f1:d0:25:39:7f:2a:7f:e5:71:71:43:3d: b0:85:15:e1:5a:5b:d3:18:b4:87:2d:d7:9e:03:08: 35:b7:3f:83:bc:9a:97:df:37:69:b1:ad:25:61:00: a4:04:b5:5c:7f:01:6c:4f:8a:8b:3e:67:b6:b3:a7: 0d:d9:26:52:c3:48:fe:34:1b:d2:07:5c:9d:c3:cd: 5b:de:ff:22:33:59:38:b8:42:48:53:00:14:39:f6: 6f:39:db:10:30:69:04:80:66:a5:ff:01:7d:0f:08: fc:82:82:93:bb:55:a2:48:7f:c3:56:48:e7:f8:21: aa:f0:1b:6f:73:1d:2b:05:f5:22:52:03:51:b2:88: e8:20:0a:85:5e:cc:45:03:cb:38:79:9c:e2:55:28: 09:5f:4d:05:55:bb:3a:31:9b:7e:b9:75:ea:b9:59: 50:16:b9:43:76:2d:7a:51:c7:12:e9:fa:dc:9e:1c: a6:45:47:12:db:b0:a6:b6:57:f8:3a:25:b3:2b:99: b6:9b:31:86:34:31:57:93:af:d2:73:fd:16:dd:5f: 23:55:a5:30:b9:1d:10:b3:2c:08:d0:07:8f:39:d5: 4d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FE:EC:5E:3C:F2:7D:64:81:7B:E2:FD:81:38:C8:59:BA:5E:51:DE X509v3 Authority Key Identifier: keyid:FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:9c:9d:83:49:1b:7b:30:5b:02:97:7c:47:7d:b7:cd:9d:92: 0a:27:5e:af:f5:92:cc:74:c0:cf:3e:57:a7:e7:2c:e4:8a:99: 9a:c5:6b:19:66:0b:ba:00:0d:e3:f5:41:48:e4:37:3d:8e:42: 51:84:7a:ed:2e:cf:5d:c6:02:bf:e0:6b:b9:36:8e:6e:93:2f: 4d:63:17:5e:82:1b:6b:28:c9:78:78:3d:a1:59:dd:9f:f6:3c: c6:0f:6a:7b:f6:2d:53:6d:f7:42:65:5e:f3:b1:19:de:62:64: e0:eb:86:ed:e5:3c:9d:a3:5e:39:cc:b9:4a:ac:1c:87:ed:ae: 7b:03:c1:ce:02:9e:1d:85:75:39:42:9e:13:e6:1b:4e:1f:c4: 40:de:6f:5f:4a:32:36:3a:c9:32:a7:83:22:0c:a6:10:f8:03: 2a:11:28:c9:90:b8:69:75:74:1e:3e:b3:14:e2:a0:79:6d:07: 6a:d7:82:e5:84:40:fd:5d:fe:e9:e5:94:a4:49:60:7f:48:50: 5e:b9:d9:78:ed:8b:d9:a5:8a:85:63:4e:85:c8:0e:b9:c5:c1: a5:b1:71:a7:5f:44:fd:aa:42:56:a6:18:d3:78:0a:ee:04:d5: 03:50:26:c0:76:0c:ef:7a:9d:dd:96:b1:07:e0:ae:d1:ba:ed: 93:21:b6:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuxp5WctOwu4kfApjQXTwdaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZThkMWM2YWFmNGE5M2ZmNDFiYmZhMWJkMWRhYzYxOTdk NTk1NzUwHhcNMjYwMTEyMTAwMTQ4WhcNMjYwMTEzMTAwMTQ4WjAzMTEwLwYDVQQD EygzOWZlZWM1ZTNjZjI3ZDY0ODE3YmUyZmQ4MTM4Yzg1OWJhNWU1MWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6LrfAtN6eVtZA73JW8mMPOP7M0t ScAlXn1QwtNV1SPx0CU5fyp/5XFxQz2whRXhWlvTGLSHLdeeAwg1tz+DvJqX3zdp sa0lYQCkBLVcfwFsT4qLPme2s6cN2SZSw0j+NBvSB1ydw81b3v8iM1k4uEJIUwAU OfZvOdsQMGkEgGal/wF9Dwj8goKTu1WiSH/DVkjn+CGq8Btvcx0rBfUiUgNRsojo IAqFXsxFA8s4eZziVSgJX00FVbs6MZt+uXXquVlQFrlDdi16UccS6frcnhymRUcS 27Cmtlf4OiWzK5m2mzGGNDFXk6/Sc/0W3V8jVaUwuR0QsywI0AePOdVNQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDn+7F488n1kgXvi/YE4yFm6XlHeMB8GA1UdIwQY MBaAFP3o0caq9Kk/9Bu/ob0drGGX1ZV1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2VqUnhxcjBxVF8wRzctaHZSMnNZWmZWbFhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80OTY4ODUtNzA5Zi00YmJiLTkzNzUt OTU0ZDE5NTQ5YjYxLzEvX2VqUnhxcjBxVF8wRzctaHZSMnNZWmZWbFhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC80OTY4ODUtNzA5Zi00YmJiLTkzNzUtOTU0ZDE5NTQ5YjYx LzEvX2VqUnhxcjBxVF8wRzctaHZSMnNZWmZWbFhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsZydg0kb ezBbApd8R323zZ2SCider/WSzHTAzz5Xp+cs5IqZmsVrGWYLugAN4/VBSOQ3PY5C UYR67S7PXcYCv+BruTaObpMvTWMXXoIbayjJeHg9oVndn/Y8xg9qe/YtU233QmVe 87EZ3mJk4OuG7eU8naNeOcy5Sqwch+2uewPBzgKeHYV1OUKeE+YbTh/EQN5vX0oy NjrJMqeDIgymEPgDKhEoyZC4aXV0Hj6zFOKgeW0HateC5YRA/V3+6eWUpElgf0hQ XrnZeO2L2aWKhWNOhcgOucXBpbFxp19E/apCVqYY03gK7gTVA1AmwHYM73qd3Zax B+Cu0brtkyG2Sg== -----END CERTIFICATE-----Generated at Mon Jan 12 15:00:39 2026 by rpki-client