This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft File: p0msqF3GbIPOVezcBFyWB1yn3rw.mft (raw, json) Hash identifier: O/P290ZZOCh+Fd379T/ABkGY46NQbsbYUQSCj/+00D8= Subject key identifier: 41:7A:03:F1:3D:6A:2D:CB:12:10:AA:83:63:0C:D7:FA:F3:92:8E:58 Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc Certificate serial: 019BF6F5512B61297B2515985B5C018EA136 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 21:00:30 +0000 Manifest this update: Sun 25 Jan 2026 21:00:30 +0000 Manifest next update: Mon 26 Jan 2026 21:00:30 +0000 Files and hashes: 1: 4g2KoICvRhAlF5rUzbxNV7SMp8U.roa (hash: Ctanikf8U9Sdy0xnpwf0T9RlsG+za8SDalPfgQYX/Y4=) 2: Ff-FE_841YKkM3pTxc9IBAIW24Y.roa (hash: DJoJ2bsSXRYjcv8lRsV6GjC25VZGryCw4Oz9ykQkgwc=) 3: p0msqF3GbIPOVezcBFyWB1yn3rw.crl (hash: t04GrRFRFlPNBdaPvZuwdllq85qm3miE9gceAIM0UB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:51:2b:61:29:7b:25:15:98:5b:5c:01:8e:a1:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc Validity Not Before: Jan 25 21:00:30 2026 GMT Not After : Jan 26 21:00:30 2026 GMT Subject: CN=417a03f13d6a2dcb1210aa83630cd7faf3928e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:81:a2:5c:7e:53:96:d5:f0:6e:b1:d7:16:03: bb:3c:4e:4d:2f:90:84:44:5c:80:44:5c:75:cd:6b: 81:f3:45:d3:44:37:87:f8:21:9e:32:3d:c8:7e:c7: c9:35:53:2e:cb:f5:90:24:d2:e6:c3:2f:3f:c1:50: 3b:d2:16:22:35:f7:a6:77:dd:d7:f4:d4:c2:6d:35: 02:09:51:f8:6d:76:13:3b:11:ad:01:42:8b:41:37: c9:e6:a8:5e:79:f4:84:0f:3a:02:b1:bd:94:bc:64: 37:33:4b:09:23:89:7c:55:e7:c5:e2:67:3d:b3:b0: 4b:00:49:0d:38:42:37:c9:75:6c:7f:33:5a:55:70: 4a:cd:85:ff:c7:df:53:a7:a3:41:49:34:a9:50:c8: 96:a1:2f:d9:2d:1d:7c:24:21:d9:c3:b9:8c:5a:1a: bb:f5:87:c8:62:d7:9c:b5:ae:a4:35:db:a7:bd:0e: 2f:82:ad:5d:35:3b:5c:0a:f2:ae:2a:e0:71:8d:c8: 81:9a:ca:34:af:d7:4d:c2:e1:a6:b6:c1:11:90:96: 57:f0:a7:ed:79:06:0a:74:90:38:d7:4c:85:d7:a1: 8d:62:ae:a7:e8:31:47:4a:57:48:96:dc:e9:48:db: b1:38:17:53:af:6e:63:d1:7b:94:1c:ca:51:76:c3: 90:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7A:03:F1:3D:6A:2D:CB:12:10:AA:83:63:0C:D7:FA:F3:92:8E:58 X509v3 Authority Key Identifier: keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:94:7d:30:41:11:67:ec:5c:c0:2f:45:be:61:a9:6b:f6:bb: aa:c4:9d:47:25:39:76:3a:9e:58:01:dd:0b:03:45:51:84:2a: 66:18:00:c9:15:aa:df:0b:3f:ef:00:fc:6c:69:22:2f:ee:81: 81:c9:08:b8:f0:18:ba:d5:63:81:fd:03:a2:64:45:1b:2d:f5: ed:9f:94:91:d4:57:6e:62:8c:8b:36:65:1a:a7:3c:19:19:c8: f1:4d:fb:6f:50:d2:bd:e7:31:15:66:2d:22:fd:1e:69:5a:58: 06:e6:a8:59:97:aa:1b:89:ad:1b:68:4f:5f:f5:8f:f1:06:75: 0b:6c:c5:31:e8:cf:01:02:4d:65:71:e3:4a:2c:a9:32:75:11: 96:c5:3e:2d:e3:e6:4e:b2:2a:fe:aa:09:c7:26:cb:23:0f:65: fd:55:49:b7:d1:65:66:bf:80:62:92:d2:99:37:ec:6d:45:a4: 2d:fb:c0:2f:73:e7:e6:ef:4b:c9:eb:b6:4e:a2:81:6f:19:0b: 01:34:75:8c:ac:13:fe:27:6b:23:59:f8:ee:e5:d1:8c:04:65: f4:8d:ad:0e:47:8e:94:a2:9d:82:d7:dd:ca:1d:b3:d3:49:72: 98:c6:83:df:64:5d:5f:87:d8:7f:69:e8:03:8e:fe:5d:2f:14: 47:18:71:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29VErYSl7JRWYW1wBjqE2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NDlhY2E4NWRjNjZjODNjZTU1ZWNkYzA0NWM5NjA3NWNh N2RlYmMwHhcNMjYwMTI1MjEwMDMwWhcNMjYwMTI2MjEwMDMwWjAzMTEwLwYDVQQD Eyg0MTdhMDNmMTNkNmEyZGNiMTIxMGFhODM2MzBjZDdmYWYzOTI4ZTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4GiXH5TltXwbrHXFgO7PE5NL5CE RFyARFx1zWuB80XTRDeH+CGeMj3IfsfJNVMuy/WQJNLmwy8/wVA70hYiNfemd93X 9NTCbTUCCVH4bXYTOxGtAUKLQTfJ5qheefSEDzoCsb2UvGQ3M0sJI4l8VefF4mc9 s7BLAEkNOEI3yXVsfzNaVXBKzYX/x99Tp6NBSTSpUMiWoS/ZLR18JCHZw7mMWhq7 9YfIYtecta6kNdunvQ4vgq1dNTtcCvKuKuBxjciBmso0r9dNwuGmtsERkJZX8Kft eQYKdJA410yF16GNYq6n6DFHSldIltzpSNuxOBdTr25j0XuUHMpRdsOQDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEF6A/E9ai3LEhCqg2MM1/rzko5YMB8GA1UdIwQY MBaAFKdJrKhdxmyDzlXs3ARclgdcp968MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zM2U1MDgtMTI3ZC00OTQ2LWIzY2Mt NGM5ZjQzZjg3OGFiLzEvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8zM2U1MDgtMTI3ZC00OTQ2LWIzY2MtNGM5ZjQzZjg3OGFi LzEvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpR9MEER Z+xcwC9FvmGpa/a7qsSdRyU5djqeWAHdCwNFUYQqZhgAyRWq3ws/7wD8bGkiL+6B gckIuPAYutVjgf0DomRFGy317Z+UkdRXbmKMizZlGqc8GRnI8U37b1DSvecxFWYt Iv0eaVpYBuaoWZeqG4mtG2hPX/WP8QZ1C2zFMejPAQJNZXHjSiypMnURlsU+LePm TrIq/qoJxybLIw9l/VVJt9FlZr+AYpLSmTfsbUWkLfvAL3Pn5u9Lyeu2TqKBbxkL ATR1jKwT/idrI1n47uXRjARl9I2tDkeOlKKdgtfdyh2z00lymMaD32RdX4fYf2no A47+XS8URxhxNA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:04:50 2026 by rpki-client