This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft File: RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json) Hash identifier: RZzMHTnXiKGRqYpVsuZtZJ1KGu0oKNDCJmRLWOr+sIs= Subject key identifier: 8A:2B:33:3B:2D:A0:C5:11:02:D2:C1:E6:9A:74:6B:FF:50:26:BF:37 Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66 Certificate issuer: /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966 Certificate serial: 019BF7D1949FFF6123291676A6FC74945D99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft Manifest number: 1731 Signing time: Mon 26 Jan 2026 01:01:05 +0000 Manifest this update: Mon 26 Jan 2026 01:01:05 +0000 Manifest next update: Tue 27 Jan 2026 01:01:05 +0000 Files and hashes: 1: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: H3MXrtp6dQ0YjCGvG56eQDtW70lA/kimL30oXe7bw5Q=) 2: cyldzaN5uMb66fkP-hiffFjw-IE.roa (hash: Gj1kHwBLzSGp/dgWtzh7IJONH/VWApAr2xjaYZ7+1iY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:94:9f:ff:61:23:29:16:76:a6:fc:74:94:5d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966 Validity Not Before: Jan 26 01:01:05 2026 GMT Not After : Jan 27 01:01:05 2026 GMT Subject: CN=8a2b333b2da0c51102d2c1e69a746bff5026bf37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ff:55:e6:df:a7:6e:15:ea:06:02:fc:4f:09: 63:d8:a2:fe:a9:43:65:99:be:c3:b5:35:45:1e:7a: 31:ba:36:b9:d0:e4:9d:7f:53:41:de:7e:ac:2a:65: 3a:3d:af:27:e9:5f:26:58:2b:aa:c3:90:bf:7c:d4: 1c:66:6c:84:f4:07:67:13:85:a7:da:15:29:b2:ce: 4f:08:35:e1:59:41:23:15:77:57:bf:ad:3a:1c:e7: 99:c1:86:41:2d:36:81:69:45:3d:88:d4:8e:f0:77: e7:04:d5:58:b9:c3:05:c4:38:0b:e5:3a:79:e4:77: d4:ea:f4:8c:1e:41:fc:8b:46:43:aa:fe:9e:9e:a2: 41:5b:ec:da:9b:9c:ab:54:ef:a0:9e:3f:19:55:12: e5:59:b4:1e:75:e6:2b:5a:cd:45:ee:b3:f7:45:9b: 6c:e5:c7:52:34:9d:2f:27:9f:3a:56:0c:f2:fc:51: 15:5a:92:d0:d8:86:09:27:0b:5a:2b:62:41:fb:ca: 9a:89:b1:fa:2b:cb:27:4a:27:0e:6f:4b:ce:c8:3b: 6a:b2:d4:a8:69:2f:79:21:00:56:c2:39:fe:f9:86: 9e:50:ee:2a:ef:df:ad:26:fe:b9:2a:50:91:b9:27: 26:3c:6d:18:10:13:bc:5a:45:42:d0:18:1f:27:d8: 5f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2B:33:3B:2D:A0:C5:11:02:D2:C1:E6:9A:74:6B:FF:50:26:BF:37 X509v3 Authority Key Identifier: keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:e4:5f:5f:63:d9:de:e4:fb:83:03:3f:dc:47:76:28:1c:d5: 7c:f9:29:dc:98:c8:7c:49:47:24:4e:20:81:7d:83:be:3d:54: 4f:65:73:40:1f:c8:7a:6e:cc:ef:a1:0b:ac:de:6d:14:db:33: 8f:6c:15:32:a1:c9:54:36:5e:d0:48:83:2a:90:42:44:17:84: e3:c6:8a:87:d1:0e:57:2a:3d:86:6c:bf:a0:f3:e0:ea:5d:8a: e7:ad:72:67:2d:64:39:8d:3d:01:2d:1e:26:83:50:8a:47:f5: 78:ff:35:6e:5f:a8:2d:3e:3d:c8:c6:a0:65:71:73:06:85:fb: 0f:4c:91:d6:e5:6a:50:eb:48:14:9a:5e:3f:05:15:b0:42:d3: 9e:cb:33:af:7d:fd:76:0f:d7:73:77:c0:5a:17:d2:48:ae:0f: f1:56:de:30:fe:e4:9d:4b:79:59:1e:fb:e5:20:8f:49:0e:8b: 74:de:97:af:ad:41:17:65:97:e1:7d:86:e9:16:65:a1:b6:4c: aa:8a:87:9b:bb:b3:d0:72:b2:ec:10:ba:d4:65:d9:7f:98:26: 50:af:3b:11:73:69:db:9c:10:1f:66:a7:d3:db:cd:ab:ad:cd: 06:be:9b:1b:40:7a:ff:de:c2:1e:e1:3b:af:6a:60:28:75:0b: 98:5b:ab:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30ZSf/2EjKRZ2pvx0lF2ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MTI1OGY1ZTNiNmI5NGUzOTE2ZGQyYjVkMTZlMzQyZmQ2 MDU5NjYwHhcNMjYwMTI2MDEwMTA1WhcNMjYwMTI3MDEwMTA1WjAzMTEwLwYDVQQD Eyg4YTJiMzMzYjJkYTBjNTExMDJkMmMxZTY5YTc0NmJmZjUwMjZiZjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP9V5t+nbhXqBgL8Twlj2KL+qUNl mb7DtTVFHnoxuja50OSdf1NB3n6sKmU6Pa8n6V8mWCuqw5C/fNQcZmyE9AdnE4Wn 2hUpss5PCDXhWUEjFXdXv606HOeZwYZBLTaBaUU9iNSO8HfnBNVYucMFxDgL5Tp5 5HfU6vSMHkH8i0ZDqv6enqJBW+zam5yrVO+gnj8ZVRLlWbQedeYrWs1F7rP3RZts 5cdSNJ0vJ586Vgzy/FEVWpLQ2IYJJwtaK2JB+8qaibH6K8snSicOb0vOyDtqstSo aS95IQBWwjn++YaeUO4q79+tJv65KlCRuScmPG0YEBO8WkVC0BgfJ9hfnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIorMzstoMURAtLB5pp0a/9QJr83MB8GA1UdIwQY MBaAFEYSWPXjtrlOORbdK10W40L9YFlmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmhKWTllTzJ1VTQ1RnQwclhSYmpRdjFnV1dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lODA1NzUtOGM4Yi00OWE0LTg1ZGUt NTgzYmNlNmZiNTY3LzEvUmhKWTllTzJ1VTQ1RnQwclhSYmpRdjFnV1dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lODA1NzUtOGM4Yi00OWE0LTg1ZGUtNTgzYmNlNmZiNTY3 LzEvUmhKWTllTzJ1VTQ1RnQwclhSYmpRdjFnV1dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAteRfX2PZ 3uT7gwM/3Ed2KBzVfPkp3JjIfElHJE4ggX2Dvj1UT2VzQB/Iem7M76ELrN5tFNsz j2wVMqHJVDZe0EiDKpBCRBeE48aKh9EOVyo9hmy/oPPg6l2K561yZy1kOY09AS0e JoNQikf1eP81bl+oLT49yMagZXFzBoX7D0yR1uVqUOtIFJpePwUVsELTnsszr339 dg/Xc3fAWhfSSK4P8VbeMP7knUt5WR775SCPSQ6LdN6Xr61BF2WX4X2G6RZlobZM qoqHm7uz0HKy7BC61GXZf5gmUK87EXNp25wQH2an09vNq63NBr6bG0B6/97CHuE7 r2pgKHULmFurAQ== -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:30 2026 by rpki-client