This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft File: _ejRxqr0qT_0G7-hvR2sYZfVlXU.mft (raw, json) Hash identifier: lDo0vyq+pBAXQVHrHNNKGpnt6LH/aI0pgYFocnB+7Fw= Subject key identifier: BB:0B:BE:47:AB:34:BC:07:BB:3A:18:8E:D5:B1:6C:74:E1:C3:B9:BA Authority key identifier: FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75 Certificate issuer: /CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575 Certificate serial: 019BADCB1ADC32A83E8D196C4451D55DF5A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft Manifest number: 17C6 Signing time: Sun 11 Jan 2026 16:02:07 +0000 Manifest this update: Sun 11 Jan 2026 16:02:07 +0000 Manifest next update: Mon 12 Jan 2026 16:02:07 +0000 Files and hashes: 1: I5caSNoaibT5a3lfttKZWdRp0l8.roa (hash: sSCXetknx1GQMkwjOpWfK+QxR9ZMLOdkrRFR3Fi1Ufk=) 2: _ejRxqr0qT_0G7-hvR2sYZfVlXU.crl (hash: SJH4Q+ZIAb4IKX3oLb+r5ESbO3G2uCjY8J3pM3TFMWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 16:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:cb:1a:dc:32:a8:3e:8d:19:6c:44:51:d5:5d:f5:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575 Validity Not Before: Jan 11 16:02:07 2026 GMT Not After : Jan 12 16:02:07 2026 GMT Subject: CN=bb0bbe47ab34bc07bb3a188ed5b16c74e1c3b9ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7b:39:02:38:e2:6e:a3:e3:2f:bf:52:84:36: 25:69:98:65:76:8e:e4:27:33:54:06:5c:9c:90:5c: 67:a2:6c:3d:f0:03:27:84:49:0d:5e:9b:de:e5:29: 04:bb:6b:d2:b1:b1:ff:5c:09:17:63:4b:af:94:fa: 95:3b:95:3f:32:cb:01:16:7d:da:a5:b5:79:30:fa: e7:21:e0:f9:f7:17:a9:85:c6:0f:7f:02:a7:c2:70: 61:7b:19:b2:b5:5c:fa:6c:f5:15:2e:74:1e:78:8f: c8:f3:dc:04:f1:d8:d8:ed:c6:a1:5e:1c:56:a7:e0: c6:98:ab:8e:74:b9:83:fd:a9:03:ce:e5:9a:37:5f: ef:2d:30:05:f7:42:de:80:74:3e:2a:ed:09:db:c6: 1d:e0:b8:af:db:be:90:c1:e7:02:d8:71:a0:bb:0c: 99:f6:e9:3a:fa:dd:b4:15:71:e7:db:91:1b:af:36: f9:7f:15:3a:a5:26:2c:34:d5:35:8a:76:6e:c6:24: b5:55:63:2c:24:45:79:19:ab:3a:00:65:c9:17:ee: 0b:0c:1c:2c:5c:e7:ed:a0:da:40:29:24:9f:57:c6: 17:36:20:04:98:51:fe:57:39:56:4c:eb:2b:17:85: 6c:2d:57:36:d3:e2:7f:29:c5:1b:7a:2a:1c:a3:17: 75:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0B:BE:47:AB:34:BC:07:BB:3A:18:8E:D5:B1:6C:74:E1:C3:B9:BA X509v3 Authority Key Identifier: keyid:FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:5e:0f:a9:a7:51:16:ad:05:34:e8:5a:09:c9:fe:36:21:cc: 55:16:0d:91:51:95:d7:60:0a:0c:69:1e:ba:97:a9:06:fd:6b: bd:67:1b:eb:dc:03:c6:32:91:a9:88:9c:5b:87:e5:32:e2:4f: 39:b4:f4:73:ad:f2:c6:c2:47:65:9e:a7:a0:a2:4b:25:8d:20: 7b:f2:76:4f:6a:0c:69:1c:91:d2:59:e5:28:30:bf:04:06:e6: f1:5b:18:34:b5:a2:86:7c:0b:ff:29:06:fe:9b:75:33:c1:7f: c6:e1:de:8c:a0:20:9a:9e:20:61:8b:db:e1:a3:24:8e:59:7d: db:c2:e6:a7:49:f0:1a:ef:c8:df:6f:73:bb:b7:51:a5:42:c7: 52:93:dd:d4:cd:f8:ce:57:3f:f7:14:d8:78:6c:ad:b5:fc:3f: d6:09:32:9f:9e:34:98:b1:41:df:12:4d:f1:a6:a7:e7:f1:53: d6:82:0f:1b:0b:dd:74:8b:4d:56:51:8a:53:e9:47:62:7e:21: 05:83:2f:96:95:7f:08:a6:45:d4:a5:7c:95:44:7a:08:79:e1: 1e:86:6f:2c:cb:48:1e:44:c2:e5:d5:d4:21:76:1e:79:f9:b7: 31:11:40:1a:cc:99:1d:73:02:94:e2:ee:44:97:00:de:cb:59: 93:cd:8b:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZutyxrcMqg+jRlsRFHVXfWnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZThkMWM2YWFmNGE5M2ZmNDFiYmZhMWJkMWRhYzYxOTdk NTk1NzUwHhcNMjYwMTExMTYwMjA3WhcNMjYwMTEyMTYwMjA3WjAzMTEwLwYDVQQD EyhiYjBiYmU0N2FiMzRiYzA3YmIzYTE4OGVkNWIxNmM3NGUxYzNiOWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtns5AjjibqPjL79ShDYlaZhldo7k JzNUBlyckFxnomw98AMnhEkNXpve5SkEu2vSsbH/XAkXY0uvlPqVO5U/MssBFn3a pbV5MPrnIeD59xephcYPfwKnwnBhexmytVz6bPUVLnQeeI/I89wE8djY7cahXhxW p+DGmKuOdLmD/akDzuWaN1/vLTAF90LegHQ+Ku0J28Yd4Liv276QwecC2HGguwyZ 9uk6+t20FXHn25Ebrzb5fxU6pSYsNNU1inZuxiS1VWMsJEV5Gas6AGXJF+4LDBws XOftoNpAKSSfV8YXNiAEmFH+VzlWTOsrF4VsLVc20+J/KcUbeiocoxd12wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsLvkerNLwHuzoYjtWxbHThw7m6MB8GA1UdIwQY MBaAFP3o0caq9Kk/9Bu/ob0drGGX1ZV1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2VqUnhxcjBxVF8wRzctaHZSMnNZWmZWbFhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80OTY4ODUtNzA5Zi00YmJiLTkzNzUt OTU0ZDE5NTQ5YjYxLzEvX2VqUnhxcjBxVF8wRzctaHZSMnNZWmZWbFhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC80OTY4ODUtNzA5Zi00YmJiLTkzNzUtOTU0ZDE5NTQ5YjYx LzEvX2VqUnhxcjBxVF8wRzctaHZSMnNZWmZWbFhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABl4PqadR Fq0FNOhaCcn+NiHMVRYNkVGV12AKDGkeupepBv1rvWcb69wDxjKRqYicW4flMuJP ObT0c63yxsJHZZ6noKJLJY0ge/J2T2oMaRyR0lnlKDC/BAbm8VsYNLWihnwL/ykG /pt1M8F/xuHejKAgmp4gYYvb4aMkjll928Lmp0nwGu/I329zu7dRpULHUpPd1M34 zlc/9xTYeGyttfw/1gkyn540mLFB3xJN8aan5/FT1oIPGwvddItNVlGKU+lHYn4h BYMvlpV/CKZF1KV8lUR6CHnhHoZvLMtIHkTC5dXUIXYeefm3MRFAGsyZHXMClOLu RJcA3stZk82LaA== -----END CERTIFICATE-----Generated at Sun Jan 11 23:42:03 2026 by rpki-client