This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft File: d0972iMD4D6ANP52MfUEi5mF9n4.mft (raw, json) Hash identifier: 3aQUQ4ilWp0ogEK02IWgCc21IVdRn5ut0SxrOrbJHPg= Subject key identifier: 75:E9:D2:37:94:C6:6E:E7:DF:F4:09:A1:DE:6D:18:F6:7D:9F:EF:FF Authority key identifier: 77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E Certificate issuer: /CN=774f7bda2303e03e8034fe7631f5048b9985f67e Certificate serial: 019BF4D00B3E641F10AA3A05FC4406016378 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft Manifest number: 0142 Signing time: Sun 25 Jan 2026 11:00:33 +0000 Manifest this update: Sun 25 Jan 2026 11:00:33 +0000 Manifest next update: Mon 26 Jan 2026 11:00:33 +0000 Files and hashes: 1: d0972iMD4D6ANP52MfUEi5mF9n4.crl (hash: mpHn4eWS9MKefBOv+XWSodcqeqqpVFHj2CPdki5GX3I=) 2: vr-KcEvzFupIdELOEs6eVsczP7A.roa (hash: sVJX8b77ReEC5s9osN7ZZ4vvNkbfeOM17MUXGpuCdfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:0b:3e:64:1f:10:aa:3a:05:fc:44:06:01:63:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=774f7bda2303e03e8034fe7631f5048b9985f67e Validity Not Before: Jan 25 11:00:33 2026 GMT Not After : Jan 26 11:00:33 2026 GMT Subject: CN=75e9d23794c66ee7dff409a1de6d18f67d9fefff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:99:d7:3f:bb:71:da:b7:0e:58:4d:bd:90:89: f1:ba:18:cc:46:60:9f:dc:82:fb:92:ab:44:2c:f0: d6:01:f6:87:03:54:4b:af:7c:bd:d6:39:26:fd:c7: 98:6a:d9:07:70:9a:4c:82:fa:1b:b9:33:bc:d9:89: fb:dd:72:f1:5a:9e:e5:0e:be:1c:03:71:53:3c:d4: bd:5e:65:5f:71:4b:12:3d:d0:2d:d9:6c:1c:2c:b4: c6:58:1e:1f:43:42:f5:44:8d:11:b0:d2:6a:93:4b: e9:00:74:9c:8b:01:ca:53:13:f3:58:f5:2d:77:c9: 6a:9e:fd:cf:b9:11:51:b4:95:8d:f6:78:22:e9:5a: ec:ef:0e:12:7e:52:2b:53:f2:9f:df:35:97:cf:4a: 76:cd:29:a6:bd:7c:29:fa:6c:62:f1:7d:34:00:d1: 84:d0:65:67:25:f2:f6:7c:6a:43:68:e0:82:e1:88: ff:b0:ca:ab:0e:ed:4b:12:12:88:2a:26:84:2c:4b: f9:e1:19:82:fb:50:ae:1d:52:bf:6a:80:04:41:5f: 03:c1:5a:6b:90:0b:e1:b0:3d:e9:3d:73:bf:4c:da: fd:a6:9f:11:1a:52:85:7e:5d:38:57:4f:0d:ed:c5: 81:ea:9e:29:1a:0c:cb:70:3a:2b:2a:32:a7:18:4b: e0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E9:D2:37:94:C6:6E:E7:DF:F4:09:A1:DE:6D:18:F6:7D:9F:EF:FF X509v3 Authority Key Identifier: keyid:77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:8e:88:8b:bd:e2:8d:ab:bf:8c:2b:2e:a3:52:9e:ac:12:47: da:1d:71:76:3a:39:4a:fb:c5:f9:3c:4b:7f:fa:2b:c8:cb:b2: 2a:53:3f:88:82:6b:db:c2:4d:15:2c:c2:9c:56:5e:bf:9d:08: e7:3b:ea:ae:fb:3b:a1:2b:c2:df:a6:48:a7:4c:aa:95:f3:2f: f8:91:fe:75:9b:6b:d8:22:1a:bc:3f:46:9a:6e:55:3e:b3:f0: 17:f7:c2:de:bf:72:96:cf:d6:32:71:ad:33:98:f3:5a:ee:e8: 15:ae:4e:6d:59:7f:2e:d5:b8:0e:66:02:02:04:9e:e6:ad:84: c9:b8:1a:c8:06:a5:f8:b8:b1:19:fd:13:4a:ee:3c:f1:88:c5: ee:26:d2:e0:47:53:f5:90:c5:cd:51:c8:01:2c:18:75:77:d9: e7:e6:81:59:ee:78:da:57:31:b5:69:0d:be:9a:8c:be:ce:7e: 51:7f:50:fc:13:9a:f4:33:eb:7b:75:2f:f3:1a:03:11:13:1f: 0d:9c:fc:a6:11:49:95:61:28:4e:8c:c0:11:0e:f9:ac:e7:72: ce:b4:43:83:9b:5b:cc:61:d4:3b:3f:1c:60:8d:30:4a:9b:98: b5:9d:1f:31:97:50:96:f0:52:8f:19:35:a8:b1:a5:d0:ab:4b: 6b:1a:59:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00As+ZB8QqjoF/EQGAWN4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NGY3YmRhMjMwM2UwM2U4MDM0ZmU3NjMxZjUwNDhiOTk4 NWY2N2UwHhcNMjYwMTI1MTEwMDMzWhcNMjYwMTI2MTEwMDMzWjAzMTEwLwYDVQQD Eyg3NWU5ZDIzNzk0YzY2ZWU3ZGZmNDA5YTFkZTZkMThmNjdkOWZlZmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpnXP7tx2rcOWE29kInxuhjMRmCf 3IL7kqtELPDWAfaHA1RLr3y91jkm/ceYatkHcJpMgvobuTO82Yn73XLxWp7lDr4c A3FTPNS9XmVfcUsSPdAt2WwcLLTGWB4fQ0L1RI0RsNJqk0vpAHSciwHKUxPzWPUt d8lqnv3PuRFRtJWN9ngi6Vrs7w4SflIrU/Kf3zWXz0p2zSmmvXwp+mxi8X00ANGE 0GVnJfL2fGpDaOCC4Yj/sMqrDu1LEhKIKiaELEv54RmC+1CuHVK/aoAEQV8DwVpr kAvhsD3pPXO/TNr9pp8RGlKFfl04V08N7cWB6p4pGgzLcDorKjKnGEvgDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXp0jeUxm7n3/QJod5tGPZ9n+//MB8GA1UdIwQY MBaAFHdPe9ojA+A+gDT+djH1BIuZhfZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDA5NzJpTUQ0RDZBTlA1Mk1mVUVpNW1GOW40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi85ZjQ5MGQtOWMwMS00ZDJmLWE5ZWQt MzgxNzA0MDEyY2UyLzEvZDA5NzJpTUQ0RDZBTlA1Mk1mVUVpNW1GOW40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi85ZjQ5MGQtOWMwMS00ZDJmLWE5ZWQtMzgxNzA0MDEyY2Uy LzEvZDA5NzJpTUQ0RDZBTlA1Mk1mVUVpNW1GOW40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbY6Ii73i jau/jCsuo1KerBJH2h1xdjo5SvvF+TxLf/oryMuyKlM/iIJr28JNFSzCnFZev50I 5zvqrvs7oSvC36ZIp0yqlfMv+JH+dZtr2CIavD9Gmm5VPrPwF/fC3r9yls/WMnGt M5jzWu7oFa5ObVl/LtW4DmYCAgSe5q2EybgayAal+LixGf0TSu488YjF7ibS4EdT 9ZDFzVHIASwYdXfZ5+aBWe542lcxtWkNvpqMvs5+UX9Q/BOa9DPre3Uv8xoDERMf DZz8phFJlWEoTozAEQ75rOdyzrRDg5tbzGHUOz8cYI0wSpuYtZ0fMZdQlvBSjxk1 qLGl0KtLaxpZqg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:23:34 2026 by rpki-client