This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft File: EKllDXIX3bmfO8AOvd1rsgKFEuc.mft (raw, json) Hash identifier: a8GI7eKmoydt7Zas1RMEknGrhyLky+4urxIC3bd1lVU= Subject key identifier: F9:FF:9B:3C:DB:BA:0E:36:8C:E0:16:09:5B:8C:4A:D9:C5:13:52:77 Authority key identifier: 10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7 Certificate issuer: /CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7 Certificate serial: 019BA1C6BB0C43C07E1A3D3AE96316A6DA59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft Manifest number: 17BF Signing time: Fri 09 Jan 2026 08:01:54 +0000 Manifest this update: Fri 09 Jan 2026 08:01:54 +0000 Manifest next update: Sat 10 Jan 2026 08:01:54 +0000 Files and hashes: 1: EKllDXIX3bmfO8AOvd1rsgKFEuc.crl (hash: 5aQcuc8/Yufr2ZHxQea15tlGU+F0CC6PynElBUvc4WM=) 2: sCS20lWrmzeyxokn2zq4J5-PfaE.roa (hash: VXAS157p8uRxJj1RoW4AvSv9fiFK2zSkA5/I6JVzL10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 08:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:c6:bb:0c:43:c0:7e:1a:3d:3a:e9:63:16:a6:da:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7 Validity Not Before: Jan 9 08:01:54 2026 GMT Not After : Jan 10 08:01:54 2026 GMT Subject: CN=f9ff9b3cdbba0e368ce016095b8c4ad9c5135277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:31:4a:3c:f8:0c:38:1e:37:56:fe:ae:ef:fc: d4:5f:1a:92:cb:9d:6b:06:a5:bd:94:40:62:f4:d0: 57:39:3d:e5:b6:2b:6a:21:56:de:78:56:8c:0f:ce: f3:52:e5:72:49:e9:11:3e:7e:2f:f8:f0:7f:14:b4: 33:d8:41:f4:8b:3d:2e:6b:45:ca:cb:b2:bc:04:40: 30:d0:67:23:c7:94:8a:74:88:5a:e3:31:77:a7:67: 16:ea:12:1d:e6:4b:8a:cb:88:04:bb:1e:72:7a:7f: 6d:ef:c4:9f:f9:27:a4:03:42:4d:24:78:1c:6d:f9: 91:fc:20:7f:00:e5:97:bd:bd:36:03:42:1e:5f:b1: 03:2a:67:c8:5b:91:90:21:35:d0:c5:e4:a3:54:81: 79:13:fd:a7:66:25:6e:d9:6d:28:f7:c2:33:68:e4: 56:a8:70:a5:7b:f8:b3:2f:c2:51:2f:f3:71:9b:0b: f3:9d:27:d7:c7:52:1a:ef:b1:1f:a3:af:ec:9c:da: be:44:80:4d:65:5f:7e:44:0c:46:55:32:43:b6:30: 73:24:e5:7b:d0:dc:35:6e:61:24:b5:be:96:ab:5e: 51:20:f0:2e:63:c0:8b:e3:ae:65:e5:87:8c:2b:6c: 54:09:a3:17:38:c2:5d:85:f7:4c:f9:fa:a4:02:b4: 80:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FF:9B:3C:DB:BA:0E:36:8C:E0:16:09:5B:8C:4A:D9:C5:13:52:77 X509v3 Authority Key Identifier: keyid:10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:33:db:9d:57:bf:38:91:1e:2c:71:e1:22:3b:ba:37:a6:e9: f4:f7:14:8e:67:d2:4e:0e:84:26:dc:b7:76:2f:11:07:aa:6d: 9a:0f:c5:88:66:47:af:f6:cc:8b:91:68:96:2b:e0:28:d4:31: d0:22:48:c3:b3:1a:da:a4:a0:d2:09:21:23:a5:08:dd:d6:29: 5f:09:4b:fe:d2:0d:a5:86:fd:22:a8:82:e0:8e:40:4d:09:68: 7a:36:02:ab:5b:06:c0:c8:32:16:c6:e9:79:5d:14:b4:a3:1e: 16:46:16:19:70:e6:00:5f:bc:37:15:cf:33:09:d1:c7:2b:86: 22:a6:74:02:3b:bf:24:2b:04:fa:a6:bd:1f:9c:1b:62:c2:97: 24:3a:2f:a5:f1:58:4a:61:d5:54:a9:2a:57:45:7b:38:f0:83: 85:a5:75:e4:f6:9c:1d:b2:c5:e7:09:c1:40:89:8d:54:fb:8e: f3:39:48:09:c3:b8:e3:59:60:18:70:fe:9e:c5:e7:5f:b2:e4: d2:45:ae:aa:8c:a9:d9:53:63:a3:4f:03:c3:ea:4d:54:01:8a: ef:7b:02:3e:94:a5:a2:33:88:0f:29:c5:8d:5b:bd:0f:b8:16: 6b:2f:2c:9c:29:f0:2e:84:46:04:13:14:bf:83:84:d0:c7:76: 3f:d1:d4:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuhxrsMQ8B+Gj066WMWptpZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYTk2NTBkNzIxN2RkYjk5ZjNiYzAwZWJkZGQ2YmIyMDI4 NTEyZTcwHhcNMjYwMTA5MDgwMTU0WhcNMjYwMTEwMDgwMTU0WjAzMTEwLwYDVQQD EyhmOWZmOWIzY2RiYmEwZTM2OGNlMDE2MDk1YjhjNGFkOWM1MTM1Mjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzFKPPgMOB43Vv6u7/zUXxqSy51r BqW9lEBi9NBXOT3ltitqIVbeeFaMD87zUuVySekRPn4v+PB/FLQz2EH0iz0ua0XK y7K8BEAw0Gcjx5SKdIha4zF3p2cW6hId5kuKy4gEux5yen9t78Sf+SekA0JNJHgc bfmR/CB/AOWXvb02A0IeX7EDKmfIW5GQITXQxeSjVIF5E/2nZiVu2W0o98IzaORW qHCle/izL8JRL/NxmwvznSfXx1Ia77Efo6/snNq+RIBNZV9+RAxGVTJDtjBzJOV7 0Nw1bmEktb6Wq15RIPAuY8CL465l5YeMK2xUCaMXOMJdhfdM+fqkArSAxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPn/mzzbug42jOAWCVuMStnFE1J3MB8GA1UdIwQY MBaAFBCpZQ1yF925nzvADr3da7IChRLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUtsbERYSVgzYm1mTzhBT3ZkMXJzZ0tGRXVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8yMzFhNGEtODNkZS00MmZkLTk2OTEt ODA2MmYyNDFkZDk2LzEvRUtsbERYSVgzYm1mTzhBT3ZkMXJzZ0tGRXVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8yMzFhNGEtODNkZS00MmZkLTk2OTEtODA2MmYyNDFkZDk2 LzEvRUtsbERYSVgzYm1mTzhBT3ZkMXJzZ0tGRXVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzPbnVe/ OJEeLHHhIju6N6bp9PcUjmfSTg6EJty3di8RB6ptmg/FiGZHr/bMi5FolivgKNQx 0CJIw7Ma2qSg0gkhI6UI3dYpXwlL/tINpYb9IqiC4I5ATQloejYCq1sGwMgyFsbp eV0UtKMeFkYWGXDmAF+8NxXPMwnRxyuGIqZ0Aju/JCsE+qa9H5wbYsKXJDovpfFY SmHVVKkqV0V7OPCDhaV15PacHbLF5wnBQImNVPuO8zlICcO441lgGHD+nsXnX7Lk 0kWuqoyp2VNjo08Dw+pNVAGK73sCPpSlojOIDynFjVu9D7gWay8snCnwLoRGBBMU v4OE0Md2P9HUpw== -----END CERTIFICATE-----Generated at Fri Jan 9 16:01:35 2026 by rpki-client