This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft File: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json) Hash identifier: VT+8Xg/WhppT+9LP6ERiIHWeKYPtwiDjDhAXcQUB1Q4= Subject key identifier: C1:2A:E6:45:65:B0:F2:2C:29:F8:B5:53:69:FD:28:D8:B9:91:57:D9 Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7 Certificate issuer: /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7 Certificate serial: 019BF9F67C279E48776897DDC8B920E49500 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft Manifest number: 12C7 Signing time: Mon 26 Jan 2026 11:00:38 +0000 Manifest this update: Mon 26 Jan 2026 11:00:38 +0000 Manifest next update: Tue 27 Jan 2026 11:00:38 +0000 Files and hashes: 1: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: JRxKpVOgV3IhPGZxDiVXGtd2t5t7ug6zbCEaygWHt9I=) 2: OvDyFgQ7aVEur7yi4gHYha9Nw7M.roa (hash: cCoaNTZocMlM/qThQBA0C6Jf87gZHNJ0d8o+1R7Z+44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:7c:27:9e:48:77:68:97:dd:c8:b9:20:e4:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7 Validity Not Before: Jan 26 11:00:38 2026 GMT Not After : Jan 27 11:00:38 2026 GMT Subject: CN=c12ae64565b0f22c29f8b55369fd28d8b99157d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:83:cb:97:c2:b5:59:60:a3:b2:38:e8:42:6d: b3:d3:74:b9:37:dd:e3:b9:a6:1e:2d:ae:bf:86:5c: 14:dd:61:4b:7a:6f:9f:95:58:5b:8f:53:82:a9:aa: 4d:d8:f4:2d:9c:fd:f7:e6:b4:92:9b:6f:44:04:f5: 5b:32:13:99:2f:61:63:02:2b:56:82:2d:43:e3:26: ef:ff:5d:1d:17:22:2f:c6:71:be:3a:25:18:96:8c: c5:f3:0b:e0:f1:f8:9a:d2:e5:52:20:a9:bc:5f:0e: 06:21:f9:c6:ff:1e:90:e5:4b:c8:b4:02:3b:48:88: b9:d9:b1:fa:3f:28:f7:68:be:46:1a:7b:0c:04:08: 16:4b:4c:81:73:e7:3b:3c:4b:9a:6a:c6:dc:ce:81: 66:5e:23:c4:a8:3d:06:a8:7c:b0:ec:82:3f:3d:4c: 8b:f6:1d:99:47:b5:c4:00:0b:d5:3c:84:6c:75:06: a4:17:3e:66:58:32:f5:d7:09:9d:ae:83:e7:d2:33: 92:16:5c:3a:5d:41:54:7e:2b:12:c2:02:6e:62:ad: 2d:9d:24:d4:94:82:4e:61:5b:c4:36:68:b0:03:e3: 62:9f:74:74:ab:0b:cf:c4:b0:f4:bf:7c:13:75:a2: 9e:b5:f3:38:75:28:39:ba:af:09:7a:68:30:0e:f3: de:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2A:E6:45:65:B0:F2:2C:29:F8:B5:53:69:FD:28:D8:B9:91:57:D9 X509v3 Authority Key Identifier: keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:fb:bf:07:93:47:c2:63:97:1f:c3:98:0e:47:f1:fa:66:14: 0c:e2:be:f2:07:eb:03:ff:65:7f:c9:6d:ee:21:9d:68:76:37: 6b:b4:8d:82:1d:e6:d7:14:29:ae:4b:05:75:9d:a0:21:fa:54: 8d:0a:96:01:21:00:95:b2:48:a9:3b:9f:8e:8f:5a:fc:3b:33: 1e:55:0e:b5:09:c1:ac:23:fa:73:19:f8:1e:44:d8:f6:c8:27: 85:05:e7:79:b0:25:83:2f:3a:f4:94:e0:0c:be:08:59:59:43: f5:4b:f2:02:cb:a5:2e:db:95:d4:c5:c6:3d:41:35:e3:f6:38: a4:14:64:81:fb:ec:78:08:69:e4:59:1d:6b:e5:6d:f9:1c:7f: b1:59:d1:f2:de:ea:ad:07:34:44:80:de:b4:98:0a:cd:95:de: 96:b1:48:b2:e7:a3:a4:f3:0f:11:e5:05:12:09:a0:c8:35:c2: a4:ec:f3:57:2c:0b:3c:2c:d1:27:31:91:fc:f8:ad:76:a1:f0: f6:0a:c5:f9:da:32:8c:f5:29:6b:ba:0b:48:28:fc:8c:cf:81: f8:36:2c:7e:63:b9:c8:b0:04:3a:02:0f:e4:0d:21:66:74:03: 15:77:2f:4a:7d:87:ae:bd:0f:21:39:49:2d:4d:a8:9e:a4:96: d9:ba:bc:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59nwnnkh3aJfdyLkg5JUAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYjgwZWEwZjk5NjVmNjg4MDMyOWIxMmZlYzI3YTkzOTBm YzFjYjcwHhcNMjYwMTI2MTEwMDM4WhcNMjYwMTI3MTEwMDM4WjAzMTEwLwYDVQQD EyhjMTJhZTY0NTY1YjBmMjJjMjlmOGI1NTM2OWZkMjhkOGI5OTE1N2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYPLl8K1WWCjsjjoQm2z03S5N93j uaYeLa6/hlwU3WFLem+flVhbj1OCqapN2PQtnP335rSSm29EBPVbMhOZL2FjAitW gi1D4ybv/10dFyIvxnG+OiUYlozF8wvg8fia0uVSIKm8Xw4GIfnG/x6Q5UvItAI7 SIi52bH6Pyj3aL5GGnsMBAgWS0yBc+c7PEuaasbczoFmXiPEqD0GqHyw7II/PUyL 9h2ZR7XEAAvVPIRsdQakFz5mWDL11wmdroPn0jOSFlw6XUFUfisSwgJuYq0tnSTU lIJOYVvENmiwA+Nin3R0qwvPxLD0v3wTdaKetfM4dSg5uq8JemgwDvPeVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEq5kVlsPIsKfi1U2n9KNi5kVfZMB8GA1UdIwQY MBaAFNq4DqD5ll9ogDKbEv7CepOQ/By3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnJnT29QbVdYMmlBTXBzU19zSjZrNUQ4SExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xNTNmZjctZDRiMi00MDdmLWEyMTYt OWY2YWE0Y2YwNzk5LzEvMnJnT29QbVdYMmlBTXBzU19zSjZrNUQ4SExjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8xNTNmZjctZDRiMi00MDdmLWEyMTYtOWY2YWE0Y2YwNzk5 LzEvMnJnT29QbVdYMmlBTXBzU19zSjZrNUQ4SExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvu/B5NH wmOXH8OYDkfx+mYUDOK+8gfrA/9lf8lt7iGdaHY3a7SNgh3m1xQprksFdZ2gIfpU jQqWASEAlbJIqTufjo9a/DszHlUOtQnBrCP6cxn4HkTY9sgnhQXnebAlgy869JTg DL4IWVlD9UvyAsulLtuV1MXGPUE14/Y4pBRkgfvseAhp5Fkda+Vt+Rx/sVnR8t7q rQc0RIDetJgKzZXelrFIsuejpPMPEeUFEgmgyDXCpOzzVywLPCzRJzGR/PitdqHw 9grF+doyjPUpa7oLSCj8jM+B+DYsfmO5yLAEOgIP5A0hZnQDFXcvSn2Hrr0PITlJ LU2onqSW2bq8yA== -----END CERTIFICATE-----Generated at Mon Jan 26 13:05:32 2026 by rpki-client