This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft File: V27gKsYF8LuYu81jeprfrkg6boQ.mft (raw, json) Hash identifier: yfkUSaZRNtXoGx6UVHqRFV3lruUrZijTa4Ut0Ysa+2A= Subject key identifier: 60:24:15:A0:C0:1E:D7:03:31:68:DD:55:17:35:07:D0:95:53:23:E9 Authority key identifier: 57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84 Certificate issuer: /CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84 Certificate serial: 019BF72D75AE79015B30E4A06EA586A21B41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft Manifest number: 11DE Signing time: Sun 25 Jan 2026 22:01:50 +0000 Manifest this update: Sun 25 Jan 2026 22:01:50 +0000 Manifest next update: Mon 26 Jan 2026 22:01:50 +0000 Files and hashes: 1: 0i0XuDvoPgs1nd1NeD83B2IScVA.roa (hash: YNJF/olVt/Dil/zKrwDDUgcE/N5peyDf18kFIpNKPX8=) 2: V27gKsYF8LuYu81jeprfrkg6boQ.crl (hash: v+Pq3kw85GBnfn8AAFEx4Czj9VY08uiUPyb6j4TybYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:75:ae:79:01:5b:30:e4:a0:6e:a5:86:a2:1b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84 Validity Not Before: Jan 25 22:01:50 2026 GMT Not After : Jan 26 22:01:50 2026 GMT Subject: CN=602415a0c01ed7033168dd55173507d0955323e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b5:c4:09:4d:ce:86:bf:32:27:55:d1:38:94: 42:f0:47:87:ff:57:93:63:57:ab:48:34:d5:2e:45: b4:b0:1a:30:13:49:8d:16:2b:11:ff:64:db:8b:3f: ea:c0:a3:38:de:76:e7:95:b3:1d:2f:7d:f8:14:2e: 67:02:63:29:7e:84:f3:cb:2f:f6:e2:9b:3d:9c:b4: cb:7c:24:f5:f1:65:b2:b7:d6:77:cb:7e:34:15:6c: 31:8c:cc:83:85:d9:7c:8a:a9:e5:fd:b7:12:08:56: 8e:76:ef:5d:12:3d:12:e7:94:72:80:af:d2:d7:84: fc:c0:57:f4:be:d1:13:30:d6:60:67:9b:b0:29:7b: 09:0a:6e:00:39:9e:9d:ca:82:cf:e8:08:28:fc:ec: 56:d7:71:71:62:c1:8e:a0:b6:80:d7:7f:73:17:03: a2:5f:79:25:60:ac:a3:5c:f7:1f:2d:c7:9d:1c:0d: 1d:b6:72:44:36:bf:77:58:aa:53:36:3a:61:7d:c7: 8d:a6:36:83:a1:b6:67:2b:e5:ef:eb:60:01:34:dc: b6:46:21:55:e3:d5:f3:b2:e0:9b:a7:bf:21:d2:69: f5:47:50:80:a4:6e:13:92:af:c5:c7:14:e2:10:81: cc:36:e6:5a:10:aa:8b:c6:e2:a4:b0:a2:f2:aa:6d: df:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:24:15:A0:C0:1E:D7:03:31:68:DD:55:17:35:07:D0:95:53:23:E9 X509v3 Authority Key Identifier: keyid:57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:9b:d5:44:82:6b:85:a4:9b:80:64:31:4a:ca:b5:e8:63:17: c0:b3:93:42:b2:7e:14:37:85:c9:3a:ab:6f:bd:e2:95:04:2e: ab:35:df:8f:74:60:cc:93:92:8f:90:ee:78:8b:a4:34:66:d9: dc:31:0b:7d:f3:80:45:5d:8b:39:fa:25:db:0d:28:ff:73:57: c9:cd:8a:59:12:1b:d1:db:d7:94:f2:d2:98:09:05:94:26:9a: e0:f2:2e:2d:b1:75:80:61:d5:c7:25:23:1f:d3:4e:ab:f4:54: 3a:3b:df:dc:4c:e6:cf:49:33:16:37:c6:f0:18:46:49:11:42: fd:53:5b:86:15:89:8c:fe:56:3e:46:f3:bb:25:29:ea:b5:dd: ee:f4:9c:f5:1a:5d:f6:6c:dd:14:9c:d0:0e:a4:27:a1:91:3f: f6:00:27:b6:78:ad:4d:16:38:bb:72:76:e3:6c:64:79:78:e1: ca:36:32:c0:df:f2:84:34:08:96:1f:f5:de:e3:ca:44:28:1e: 50:2e:51:d9:b9:8b:7f:75:52:9b:25:00:f5:e8:56:66:4e:84: 9f:09:3a:71:80:9e:af:53:92:83:a5:f0:50:52:ca:a0:1d:f5: f6:f7:6f:a7:a7:3f:bd:99:ce:f2:1e:35:96:32:5c:63:5d:10: 5f:6f:46:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LXWueQFbMOSgbqWGohtBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NmVlMDJhYzYwNWYwYmI5OGJiY2Q2MzdhOWFkZmFlNDgz YTZlODQwHhcNMjYwMTI1MjIwMTUwWhcNMjYwMTI2MjIwMTUwWjAzMTEwLwYDVQQD Eyg2MDI0MTVhMGMwMWVkNzAzMzE2OGRkNTUxNzM1MDdkMDk1NTMyM2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLXECU3Ohr8yJ1XROJRC8EeH/1eT Y1erSDTVLkW0sBowE0mNFisR/2Tbiz/qwKM43nbnlbMdL334FC5nAmMpfoTzyy/2 4ps9nLTLfCT18WWyt9Z3y340FWwxjMyDhdl8iqnl/bcSCFaOdu9dEj0S55RygK/S 14T8wFf0vtETMNZgZ5uwKXsJCm4AOZ6dyoLP6Ago/OxW13FxYsGOoLaA139zFwOi X3klYKyjXPcfLcedHA0dtnJENr93WKpTNjphfceNpjaDobZnK+Xv62ABNNy2RiFV 49XzsuCbp78h0mn1R1CApG4Tkq/FxxTiEIHMNuZaEKqLxuKksKLyqm3fOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAkFaDAHtcDMWjdVRc1B9CVUyPpMB8GA1UdIwQY MBaAFFdu4CrGBfC7mLvNY3qa365IOm6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjI3Z0tzWUY4THVZdTgxamVwcmZya2c2Ym9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mODFhNjYtNjcwNi00OTViLTllMGEt YjA4OWQxOGZjMDliLzEvVjI3Z0tzWUY4THVZdTgxamVwcmZya2c2Ym9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9mODFhNjYtNjcwNi00OTViLTllMGEtYjA4OWQxOGZjMDli LzEvVjI3Z0tzWUY4THVZdTgxamVwcmZya2c2Ym9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZvVRIJr haSbgGQxSsq16GMXwLOTQrJ+FDeFyTqrb73ilQQuqzXfj3RgzJOSj5DueIukNGbZ 3DELffOARV2LOfol2w0o/3NXyc2KWRIb0dvXlPLSmAkFlCaa4PIuLbF1gGHVxyUj H9NOq/RUOjvf3Ezmz0kzFjfG8BhGSRFC/VNbhhWJjP5WPkbzuyUp6rXd7vSc9Rpd 9mzdFJzQDqQnoZE/9gAntnitTRY4u3J242xkeXjhyjYywN/yhDQIlh/13uPKRCge UC5R2bmLf3VSmyUA9ehWZk6Enwk6cYCer1OSg6XwUFLKoB319vdvp6c/vZnO8h41 ljJcY10QX29GLA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:40 2026 by rpki-client