This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft File: ENJnhg06QDsA4aYcVDSs_265c5Q.mft (raw, json) Hash identifier: kzpACbj/Ihx94LNhzDrTl2Vs8XyUSzePltgtrYchqwU= Subject key identifier: 18:BB:91:32:AD:36:07:95:D6:CE:F5:BE:66:02:CA:F9:B3:2D:02:44 Authority key identifier: 10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94 Certificate issuer: /CN=10d267860d3a403b00e1a61c5434acff6eb97394 Certificate serial: 019B7FDE3B5BC5B754F6DDD37ACF34E18DF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft Manifest number: 173E Signing time: Fri 02 Jan 2026 18:00:29 +0000 Manifest this update: Fri 02 Jan 2026 18:00:29 +0000 Manifest next update: Sat 03 Jan 2026 18:00:29 +0000 Files and hashes: 1: 8AFAw8J8BylZNxkuCYZxLwFMDu4.roa (hash: rqqV4vNuT7ox7Umt3jz1Rj0aoR+gnpbzztReONXP05Y=) 2: ENJnhg06QDsA4aYcVDSs_265c5Q.crl (hash: Rv++WAIvkHqDLo16ENc+6gZ1fjyGLAximhKW5GDsGp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:de:3b:5b:c5:b7:54:f6:dd:d3:7a:cf:34:e1:8d:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10d267860d3a403b00e1a61c5434acff6eb97394 Validity Not Before: Jan 2 18:00:29 2026 GMT Not After : Jan 3 18:00:29 2026 GMT Subject: CN=18bb9132ad360795d6cef5be6602caf9b32d0244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:39:1c:19:36:47:72:4c:3a:2f:3c:ba:51:ba: c4:df:be:ae:e5:4d:a8:6a:f4:ed:b0:38:fc:bb:d0: 17:49:ad:a0:76:1c:28:46:6e:e8:8e:77:05:02:dc: 92:ae:16:94:66:88:20:a8:b9:bd:d0:e1:7a:4e:a3: b9:db:08:20:94:ca:1c:9c:fb:b5:0b:c3:21:0e:f4: 73:c5:42:93:a8:57:2b:ad:cd:a1:90:af:06:3f:41: 09:96:41:41:0b:8e:14:be:cb:1f:4f:70:6d:af:4f: 4c:f6:86:2a:cd:c5:98:6e:ba:7a:6f:f5:ac:70:8e: a3:fc:c4:b3:9d:f5:df:ff:7a:d6:b8:fe:61:69:0a: b5:05:8c:7e:bb:0c:6a:24:9d:ae:10:10:0c:5d:91: ab:38:48:bd:d7:b1:7a:f4:fd:df:02:f6:f4:f1:eb: 09:fd:ad:87:4e:38:13:a0:46:00:bb:bb:30:6f:12: 22:c3:7e:86:09:77:1e:a2:97:2e:53:35:07:60:aa: 84:c7:de:20:ed:ad:44:09:bb:70:a5:60:91:11:dd: 3b:68:d2:3f:3c:15:8e:b8:3a:81:8a:86:eb:13:de: 49:2b:c8:d2:ef:df:17:e1:3e:f5:d5:31:66:b0:41: 3f:3e:d3:78:c8:fb:0c:a2:12:ea:70:90:74:82:d3: e6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BB:91:32:AD:36:07:95:D6:CE:F5:BE:66:02:CA:F9:B3:2D:02:44 X509v3 Authority Key Identifier: keyid:10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:7d:f9:83:f3:49:8a:62:86:a2:ab:0c:6d:e8:b2:0a:aa:a4: 7e:c2:98:e5:de:2b:97:40:61:cb:54:bf:d8:ad:3d:b6:04:90: 0a:be:76:39:ab:1d:b6:e2:42:9a:dc:67:cb:5d:cf:37:22:2a: e2:65:dd:25:bb:dc:03:50:5d:b9:5d:cb:4d:2a:4f:63:fe:82: 99:15:c4:10:6c:c2:4a:ec:d6:82:e9:8e:b9:6a:52:9f:7b:90: 25:b0:ff:5f:b8:df:9a:f8:99:43:26:cc:2a:36:7f:a8:bf:38: 0e:da:bd:ce:89:ba:de:ed:bf:7d:c2:e5:71:a5:86:6e:dd:d8: 14:9f:31:39:07:58:38:5e:a5:90:13:b3:c4:2b:cc:10:6c:a2: e3:57:c3:9c:f2:7f:d3:1f:b2:b8:84:ee:2c:51:a1:f5:2e:66: dd:51:0b:77:52:c5:f7:7e:f8:58:67:c1:41:b5:28:79:55:4a: e6:2e:36:20:33:53:58:f4:71:e3:fd:f3:5e:b7:b7:01:75:b8: 17:a0:e7:90:b1:33:60:4c:cf:51:4d:d9:42:7c:62:02:9a:b0: a1:d7:b5:4e:23:90:01:4b:cd:31:af:f0:e7:5b:49:06:e0:be: 1b:6e:82:fa:58:a2:e0:74:5e:86:95:ca:51:d6:98:f9:97:bd: 92:39:1f:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/3jtbxbdU9t3Tes804Y35MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZDI2Nzg2MGQzYTQwM2IwMGUxYTYxYzU0MzRhY2ZmNmVi OTczOTQwHhcNMjYwMTAyMTgwMDI5WhcNMjYwMTAzMTgwMDI5WjAzMTEwLwYDVQQD EygxOGJiOTEzMmFkMzYwNzk1ZDZjZWY1YmU2NjAyY2FmOWIzMmQwMjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zkcGTZHckw6Lzy6UbrE376u5U2o avTtsDj8u9AXSa2gdhwoRm7ojncFAtySrhaUZoggqLm90OF6TqO52wgglMocnPu1 C8MhDvRzxUKTqFcrrc2hkK8GP0EJlkFBC44UvssfT3Btr09M9oYqzcWYbrp6b/Ws cI6j/MSznfXf/3rWuP5haQq1BYx+uwxqJJ2uEBAMXZGrOEi917F69P3fAvb08esJ /a2HTjgToEYAu7swbxIiw36GCXceopcuUzUHYKqEx94g7a1ECbtwpWCREd07aNI/ PBWOuDqBiobrE95JK8jS798X4T711TFmsEE/PtN4yPsMohLqcJB0gtPmQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBi7kTKtNgeV1s71vmYCyvmzLQJEMB8GA1UdIwQY MBaAFBDSZ4YNOkA7AOGmHFQ0rP9uuXOUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU5KbmhnMDZRRHNBNGFZY1ZEU3NfMjY1YzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iNmVmNDItYjhjMC00ZTVhLWJkYTEt MDM0YmNmNGViZGNiLzEvRU5KbmhnMDZRRHNBNGFZY1ZEU3NfMjY1YzVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9iNmVmNDItYjhjMC00ZTVhLWJkYTEtMDM0YmNmNGViZGNi LzEvRU5KbmhnMDZRRHNBNGFZY1ZEU3NfMjY1YzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL335g/NJ imKGoqsMbeiyCqqkfsKY5d4rl0Bhy1S/2K09tgSQCr52OasdtuJCmtxny13PNyIq 4mXdJbvcA1BduV3LTSpPY/6CmRXEEGzCSuzWgumOuWpSn3uQJbD/X7jfmviZQybM KjZ/qL84Dtq9zom63u2/fcLlcaWGbt3YFJ8xOQdYOF6lkBOzxCvMEGyi41fDnPJ/ 0x+yuITuLFGh9S5m3VELd1LF9374WGfBQbUoeVVK5i42IDNTWPRx4/3zXre3AXW4 F6DnkLEzYEzPUU3ZQnxiApqwode1TiOQAUvNMa/w51tJBuC+G26C+lii4HRehpXK UdaY+Ze9kjkfQw== -----END CERTIFICATE-----Generated at Sat Jan 3 04:16:05 2026 by rpki-client