This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft File: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft (raw, json) Hash identifier: u0QK63Wp9z3OA7MjEPDxk+jkW0Lmp58QunbLHrj9izg= Subject key identifier: 98:35:33:BE:B1:A9:C2:60:9D:E3:67:B5:33:D1:5C:D6:83:E8:E4:C5 Authority key identifier: 7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4 Certificate issuer: /CN=7accf137245aec66b2f674a8581a7449ae2cfce4 Certificate serial: 019BACEE7A81B3DB250E977751E22EBB360F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft Manifest number: 17C3 Signing time: Sun 11 Jan 2026 12:01:08 +0000 Manifest this update: Sun 11 Jan 2026 12:01:08 +0000 Manifest next update: Mon 12 Jan 2026 12:01:08 +0000 Files and hashes: 1: 1-gB5rLPnht4_2fTXD19vo6rGOgY.roa (hash: MrHKvfkkxIsYa65L6lLIguftbi69CSEX2nGOpQCCn6M=) 2: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl (hash: 0JEi12XiXOPRlscqLbOWFYc+x6F0nOGLuigYC88sOOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:ee:7a:81:b3:db:25:0e:97:77:51:e2:2e:bb:36:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7accf137245aec66b2f674a8581a7449ae2cfce4 Validity Not Before: Jan 11 12:01:08 2026 GMT Not After : Jan 12 12:01:08 2026 GMT Subject: CN=983533beb1a9c2609de367b533d15cd683e8e4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f6:34:37:6c:29:b1:6a:43:09:8a:06:22:d6: 51:14:80:48:97:17:d6:e3:21:15:d6:da:1d:a1:5e: ba:66:48:f1:2c:46:f2:aa:d4:dc:c0:36:13:e3:01: ce:6e:b3:ff:f0:e2:9d:75:d2:c4:31:50:0a:5d:40: cd:a6:e8:f7:ee:b4:2d:6b:45:6a:0d:6e:3c:0b:dd: 7b:a5:cb:5e:c3:51:1b:48:0f:82:08:e5:31:ae:f4: 3a:af:34:cf:e0:e1:f5:34:5d:8a:c3:95:6b:f5:6a: 49:6c:26:85:4a:41:b8:9c:a3:cd:a8:fd:b1:e0:02: 58:53:9a:d4:cf:60:4b:1a:2e:16:c7:1a:f6:4c:7b: e4:ac:38:63:62:70:b5:36:dc:4e:4f:9b:56:82:ae: 12:10:c0:aa:ef:b8:66:0e:8f:3a:f0:95:73:8a:fd: 54:28:a7:f2:f6:0e:43:ef:e2:e5:d2:5e:dd:5a:1a: 51:99:3b:7c:5c:02:57:3c:d4:39:6f:2f:de:c0:cb: b3:82:2e:26:fe:b3:0b:86:e8:4b:2b:1d:c8:04:f7: ea:23:55:29:6c:72:58:86:f0:c3:df:29:d9:da:0c: a8:b4:e0:72:13:9b:23:35:f7:f2:c9:cf:c9:1f:eb: ff:f0:99:cd:f6:01:0d:66:f0:c8:a8:e4:8b:6f:85: 00:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:35:33:BE:B1:A9:C2:60:9D:E3:67:B5:33:D1:5C:D6:83:E8:E4:C5 X509v3 Authority Key Identifier: keyid:7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d7:cb:71:46:8c:cf:55:a5:02:2f:2b:f1:21:b0:1f:8b:90: c9:d9:5a:c9:cf:4e:1e:96:86:69:f0:8e:ea:04:4a:d5:79:6d: 27:3c:ba:69:b6:1d:33:65:88:56:64:fa:61:eb:23:aa:ad:b2: 20:f1:e8:50:a8:e3:39:23:ef:0d:7b:50:fc:e1:dc:08:f0:33: a4:61:54:33:8f:5c:65:b2:f1:06:14:b3:0e:71:9f:13:03:9a: ee:8f:1e:94:d9:c0:9a:b7:e7:57:81:81:57:0c:62:c4:a9:3f: 24:8d:11:0f:85:c5:70:1e:0c:74:52:8d:b5:3a:31:bc:46:76: 1b:7b:63:a5:a4:df:b0:12:c5:7f:21:93:97:9a:b6:1a:10:6f: 34:6d:b1:7c:3d:3d:ef:df:d8:a9:02:a3:e5:7a:41:ce:d1:35: 62:a9:bd:1c:2e:e8:6b:3e:db:10:26:54:5d:67:32:d3:c3:3e: d7:eb:af:28:41:b7:3c:1d:74:b6:2b:98:4e:5d:24:70:a4:ed: d6:7c:ad:01:d5:11:b8:00:a2:ce:c8:88:4f:22:20:f2:43:54: 05:71:cd:f5:97:4e:33:d2:9a:3f:49:ec:2e:e2:71:b3:28:35: 9f:8d:04:84:01:41:ed:44:86:a3:a6:56:ba:8b:d5:cb:e4:e7: 02:8b:26:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZus7nqBs9slDpd3UeIuuzYPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhY2NmMTM3MjQ1YWVjNjZiMmY2NzRhODU4MWE3NDQ5YWUy Y2ZjZTQwHhcNMjYwMTExMTIwMTA4WhcNMjYwMTEyMTIwMTA4WjAzMTEwLwYDVQQD Eyg5ODM1MzNiZWIxYTljMjYwOWRlMzY3YjUzM2QxNWNkNjgzZThlNGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vY0N2wpsWpDCYoGItZRFIBIlxfW 4yEV1todoV66ZkjxLEbyqtTcwDYT4wHObrP/8OKdddLEMVAKXUDNpuj37rQta0Vq DW48C917pctew1EbSA+CCOUxrvQ6rzTP4OH1NF2Kw5Vr9WpJbCaFSkG4nKPNqP2x 4AJYU5rUz2BLGi4Wxxr2THvkrDhjYnC1NtxOT5tWgq4SEMCq77hmDo868JVziv1U KKfy9g5D7+Ll0l7dWhpRmTt8XAJXPNQ5by/ewMuzgi4m/rMLhuhLKx3IBPfqI1Up bHJYhvDD3ynZ2gyotOByE5sjNffyyc/JH+v/8JnN9gENZvDIqOSLb4UA9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJg1M76xqcJgneNntTPRXNaD6OTFMB8GA1UdIwQY MBaAFHrM8TckWuxmsvZ0qFgadEmuLPzkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXN6eE55UmE3R2F5OW5Tb1dCcDBTYTRzX09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zOGYyNGItYjY4ZS00MTQzLWJiNTIt N2ZjM2ZlMDVmMzEwLzEvZXN6eE55UmE3R2F5OW5Tb1dCcDBTYTRzX09RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8zOGYyNGItYjY4ZS00MTQzLWJiNTItN2ZjM2ZlMDVmMzEw LzEvZXN6eE55UmE3R2F5OW5Tb1dCcDBTYTRzX09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHtfLcUaM z1WlAi8r8SGwH4uQydlayc9OHpaGafCO6gRK1XltJzy6abYdM2WIVmT6Yesjqq2y IPHoUKjjOSPvDXtQ/OHcCPAzpGFUM49cZbLxBhSzDnGfEwOa7o8elNnAmrfnV4GB VwxixKk/JI0RD4XFcB4MdFKNtToxvEZ2G3tjpaTfsBLFfyGTl5q2GhBvNG2xfD09 79/YqQKj5XpBztE1Yqm9HC7oaz7bECZUXWcy08M+1+uvKEG3PB10tiuYTl0kcKTt 1nytAdURuACizsiITyIg8kNUBXHN9ZdOM9KaP0nsLuJxsyg1n40EhAFB7USGo6ZW uovVy+TnAosm4Q== -----END CERTIFICATE-----Generated at Sun Jan 11 14:43:44 2026 by rpki-client