This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft File: r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json) Hash identifier: 3XrNJCs2zrcQqszT6Sy11TAruXr4gkx/kbiE/0pIR2o= Subject key identifier: 62:59:E3:47:2C:5E:70:EB:76:0F:F0:03:4B:EE:20:AA:63:22:00:47 Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68 Certificate issuer: /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68 Certificate serial: 019BF8ACEB39B018DD7C0283D9C3C86E21E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft Manifest number: 0A6B Signing time: Mon 26 Jan 2026 05:00:40 +0000 Manifest this update: Mon 26 Jan 2026 05:00:40 +0000 Manifest next update: Tue 27 Jan 2026 05:00:40 +0000 Files and hashes: 1: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: WKPKj0BPXCU8AxUbUMA3ydGtUKKVgRl5cw6crLFmr5M=) 2: schhp52ulEJ2Q5lWWzeviWV-gSw.roa (hash: HhUn0pI+C/AL7qljIPdAHULHb8txQJ+RtoE68bF3XwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ac:eb:39:b0:18:dd:7c:02:83:d9:c3:c8:6e:21:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68 Validity Not Before: Jan 26 05:00:40 2026 GMT Not After : Jan 27 05:00:40 2026 GMT Subject: CN=6259e3472c5e70eb760ff0034bee20aa63220047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c1:43:9b:71:b9:15:0f:c7:32:f0:19:e6:8a: 9c:d2:df:da:ac:17:d2:d8:05:e4:90:6a:31:d6:b0: 9d:46:fb:7c:be:ee:95:d4:6b:02:1e:86:9a:92:0a: d3:59:14:b7:d9:c6:98:a2:85:8c:b4:68:0c:e6:1d: 17:18:3b:0c:ee:13:f9:75:b0:01:54:50:57:47:1f: 31:8f:ed:d4:dd:8d:3a:92:0c:d3:fb:8b:ca:4f:ff: 73:8a:f4:bf:3a:89:59:ae:3f:64:f4:99:e5:3d:4d: 48:a7:6b:5e:12:3e:64:7e:87:df:e4:ce:49:c7:37: cb:fa:c4:f5:44:37:4c:8f:ea:9b:57:38:59:4f:d1: 61:a3:1f:3d:70:c4:be:0c:42:37:c7:40:bf:91:e1: 1e:b2:ec:64:ce:74:3d:ac:d8:4c:a6:18:4a:df:6e: 62:76:5b:f7:dc:2a:93:df:a4:97:8a:c1:7f:0e:29: fc:ac:a8:99:0b:69:7e:4b:c1:3b:0b:3a:3e:24:d2: 4e:83:91:12:87:81:9f:35:42:09:8a:df:70:55:2a: 47:e7:40:06:86:d7:65:f2:5c:45:77:4d:f4:98:28: 4d:4c:17:69:fb:db:b4:6e:c0:46:d9:cd:8f:16:08: 60:f6:70:e0:ab:3d:ea:38:e8:c3:ca:c9:2e:a9:39: eb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:59:E3:47:2C:5E:70:EB:76:0F:F0:03:4B:EE:20:AA:63:22:00:47 X509v3 Authority Key Identifier: keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:05:44:41:41:b9:c1:d7:49:de:05:4e:d0:c4:6b:0f:d0:e3: 41:eb:08:70:c3:4f:41:6f:b7:e0:79:50:b8:bf:55:fc:ef:3b: 3d:88:78:7e:6c:e3:43:60:7b:80:3f:7f:12:a4:43:83:15:a2: 4c:b8:69:01:cb:5d:3c:c3:46:f5:b5:bd:32:f2:db:6c:11:c0: b5:3e:20:c3:ce:2f:29:ab:d6:a7:45:30:85:96:90:e4:05:2c: f0:4f:8a:c2:de:39:3d:aa:39:79:38:4a:f5:55:4d:c5:be:1e: 25:ce:76:a7:a2:62:01:c6:5b:18:21:e1:11:0a:8e:b9:65:b1: 82:d2:eb:59:cb:7c:89:f6:cc:25:95:9f:18:b9:90:3d:56:ef: 98:2f:7e:bc:63:7b:f1:72:e7:ee:a3:1f:a4:13:0a:47:21:42: 26:54:86:68:7c:00:f5:b7:ae:a6:26:e7:4a:c4:28:ad:23:54: 25:22:22:8a:f8:ca:b1:96:07:d5:9e:79:47:52:5c:56:9d:99: c7:41:33:6f:51:23:d7:72:67:e7:e9:53:71:6b:ac:34:6f:4a: 15:5e:78:1c:32:af:f4:91:be:35:f2:f6:26:5d:be:b5:3c:52: a5:4b:2b:91:28:32:0b:ea:a4:77:eb:2e:9b:17:53:cf:93:c9: 3f:16:00:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rOs5sBjdfAKD2cPIbiHoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNDc4Y2NkYzA0ODBhNmI0M2JhY2Q4YWFlZTAwNzliMTZl YzJlNjgwHhcNMjYwMTI2MDUwMDQwWhcNMjYwMTI3MDUwMDQwWjAzMTEwLwYDVQQD Eyg2MjU5ZTM0NzJjNWU3MGViNzYwZmYwMDM0YmVlMjBhYTYzMjIwMDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MFDm3G5FQ/HMvAZ5oqc0t/arBfS 2AXkkGox1rCdRvt8vu6V1GsCHoaakgrTWRS32caYooWMtGgM5h0XGDsM7hP5dbAB VFBXRx8xj+3U3Y06kgzT+4vKT/9zivS/OolZrj9k9JnlPU1Ip2teEj5kfoff5M5J xzfL+sT1RDdMj+qbVzhZT9Fhox89cMS+DEI3x0C/keEesuxkznQ9rNhMphhK325i dlv33CqT36SXisF/Din8rKiZC2l+S8E7Czo+JNJOg5ESh4GfNUIJit9wVSpH50AG htdl8lxFd030mChNTBdp+9u0bsBG2c2PFghg9nDgqz3qOOjDyskuqTnrUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJZ40csXnDrdg/wA0vuIKpjIgBHMB8GA1UdIwQY MBaAFK9HjM3ASAprQ7rNiq7gB5sW7C5oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85OTA1MDYtNDFiYy00MDk4LWFmN2Yt Y2M4YmYzZmJlZjk5LzEvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS85OTA1MDYtNDFiYy00MDk4LWFmN2YtY2M4YmYzZmJlZjk5 LzEvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQVEQUG5 wddJ3gVO0MRrD9DjQesIcMNPQW+34HlQuL9V/O87PYh4fmzjQ2B7gD9/EqRDgxWi TLhpActdPMNG9bW9MvLbbBHAtT4gw84vKavWp0UwhZaQ5AUs8E+Kwt45Pao5eThK 9VVNxb4eJc52p6JiAcZbGCHhEQqOuWWxgtLrWct8ifbMJZWfGLmQPVbvmC9+vGN7 8XLn7qMfpBMKRyFCJlSGaHwA9beupibnSsQorSNUJSIiivjKsZYH1Z55R1JcVp2Z x0Ezb1Ej13Jn5+lTcWusNG9KFV54HDKv9JG+NfL2Jl2+tTxSpUsrkSgyC+qkd+su mxdTz5PJPxYA4g== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:06 2026 by rpki-client