This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft File: pW4itGIL0EL3OiqWIfDJJH1RJIo.mft (raw, json) Hash identifier: wE2r+arHlzRX99nkvB1am9TU7X/ucP1rQ6BjPC4xZuE= Subject key identifier: 8D:00:8F:A9:43:33:7C:10:A2:A9:E4:85:E6:5C:1F:E2:68:A8:F7:04 Authority key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A Certificate issuer: /CN=a56e22b4620bd042f73a2a9621f0c9247d51248a Certificate serial: 019BF72CD1AB1038AE186C7EAE38FF20F746 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft Manifest number: 020C Signing time: Sun 25 Jan 2026 22:01:08 +0000 Manifest this update: Sun 25 Jan 2026 22:01:08 +0000 Manifest next update: Mon 26 Jan 2026 22:01:08 +0000 Files and hashes: 1: Kkl_6cJ2NW9gkA52-5jv-Obc7ns.roa (hash: 4jf6X5p/dhPdcVjaKtN3T7ju4heIpjF/dGvY5hyoUAg=) 2: pW4itGIL0EL3OiqWIfDJJH1RJIo.crl (hash: dNT4JfEEOPbEw0sd1YyTKTDbio6fjnm1a6S5oXxnats=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:d1:ab:10:38:ae:18:6c:7e:ae:38:ff:20:f7:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a Validity Not Before: Jan 25 22:01:08 2026 GMT Not After : Jan 26 22:01:08 2026 GMT Subject: CN=8d008fa943337c10a2a9e485e65c1fe268a8f704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d9:3f:44:11:b9:db:e7:87:9f:ff:8b:2d:7e: bb:05:b2:df:d7:36:ef:18:dd:3a:e9:cd:0a:6d:45: bc:37:9c:1d:39:db:40:2b:f8:53:c2:e7:20:05:e4: ff:06:37:e7:e2:d0:19:f7:66:ed:9b:03:f5:0c:0f: 5e:30:b5:85:15:7a:16:4a:1e:83:13:6d:a0:19:73: 15:83:af:bb:68:e0:58:cc:f6:48:b7:10:e5:03:db: 2e:7c:3e:3b:bd:e0:53:ca:8c:0f:52:e2:c9:04:00: 6d:f0:d8:b2:d2:75:be:1e:12:c3:4a:61:cd:ef:48: ac:b2:f2:dc:4e:a7:1f:da:ba:34:75:a4:91:bd:5f: 51:50:c4:a2:2a:90:59:b3:7d:9f:58:a0:05:cf:32: e7:57:89:59:8c:d7:4b:f7:7d:2d:dc:04:d3:71:9c: 94:70:89:a3:59:ce:36:d9:00:66:17:39:65:90:d4: 36:4a:f1:93:33:09:0a:97:b0:5f:fc:10:b1:b0:c1: 12:db:14:be:8a:04:72:b5:6a:49:35:4f:82:50:e7: f1:46:9a:90:ba:23:8c:38:30:7e:28:f9:61:f8:2a: d0:05:c0:f4:68:e2:90:bd:df:93:5b:44:09:d5:50: eb:a4:3b:f4:ca:ca:97:ed:7e:7e:98:21:77:27:ce: e4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:00:8F:A9:43:33:7C:10:A2:A9:E4:85:E6:5C:1F:E2:68:A8:F7:04 X509v3 Authority Key Identifier: keyid:A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:ee:d8:45:49:82:67:f7:17:72:a6:d9:1d:62:6a:16:31:df: 4d:ab:f6:54:1d:d5:0b:88:40:c1:cf:c2:19:96:48:93:bf:18: 1c:5e:43:ca:b2:59:56:2e:09:0e:5c:18:b0:f1:d5:ee:9b:7d: 78:67:34:78:40:16:4f:d1:04:b8:2b:de:00:d3:5b:46:32:90: a2:a6:96:9d:2b:4a:27:fb:40:12:36:0c:12:8e:69:1f:6c:90: 13:55:83:7a:46:90:c2:7b:58:c0:b2:c6:f9:09:6f:09:7d:62: 1d:b1:5c:61:ed:1f:57:2c:72:df:80:59:e0:9b:c7:67:6e:ec: db:2b:f0:9c:8a:1b:8e:5c:19:73:ac:c9:59:6b:2d:ac:4a:98: 55:e6:0e:b9:b1:cc:b1:ac:3f:8d:c4:56:1b:76:fc:b4:49:ce: 0b:1f:d8:8c:6f:ba:2e:37:f6:cd:0d:92:8d:63:be:15:f2:03: 76:aa:71:e8:d9:72:34:d3:10:8a:bc:8b:a1:9d:d8:a8:c7:c2: ce:99:84:29:71:d1:7b:f5:c9:f8:7b:e2:42:a0:f0:80:41:b6: 9a:92:3f:f3:47:c4:be:73:b0:0c:f2:b6:4e:5d:de:6b:7c:e6: f8:ca:72:bf:70:36:36:9a:25:c5:a8:d6:79:d9:bc:89:bc:4c: 8e:f1:f0:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LNGrEDiuGGx+rjj/IPdGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NmUyMmI0NjIwYmQwNDJmNzNhMmE5NjIxZjBjOTI0N2Q1 MTI0OGEwHhcNMjYwMTI1MjIwMTA4WhcNMjYwMTI2MjIwMTA4WjAzMTEwLwYDVQQD Eyg4ZDAwOGZhOTQzMzM3YzEwYTJhOWU0ODVlNjVjMWZlMjY4YThmNzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttk/RBG52+eHn/+LLX67BbLf1zbv GN066c0KbUW8N5wdOdtAK/hTwucgBeT/Bjfn4tAZ92btmwP1DA9eMLWFFXoWSh6D E22gGXMVg6+7aOBYzPZItxDlA9sufD47veBTyowPUuLJBABt8Niy0nW+HhLDSmHN 70issvLcTqcf2ro0daSRvV9RUMSiKpBZs32fWKAFzzLnV4lZjNdL930t3ATTcZyU cImjWc422QBmFzllkNQ2SvGTMwkKl7Bf/BCxsMES2xS+igRytWpJNU+CUOfxRpqQ uiOMODB+KPlh+CrQBcD0aOKQvd+TW0QJ1VDrpDv0ysqX7X5+mCF3J87k/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0Aj6lDM3wQoqnkheZcH+JoqPcEMB8GA1UdIwQY MBaAFKVuIrRiC9BC9zoqliHwySR9USSKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFc0aXRHSUwwRUwzT2lxV0lmREpKSDFSSklvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iNzgxOGQtMzI5OC00MDY5LTgyOTAt YzZlMWNmZDYwNjYxLzEvcFc0aXRHSUwwRUwzT2lxV0lmREpKSDFSSklvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9iNzgxOGQtMzI5OC00MDY5LTgyOTAtYzZlMWNmZDYwNjYx LzEvcFc0aXRHSUwwRUwzT2lxV0lmREpKSDFSSklvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgO7YRUmC Z/cXcqbZHWJqFjHfTav2VB3VC4hAwc/CGZZIk78YHF5DyrJZVi4JDlwYsPHV7pt9 eGc0eEAWT9EEuCveANNbRjKQoqaWnStKJ/tAEjYMEo5pH2yQE1WDekaQwntYwLLG +QlvCX1iHbFcYe0fVyxy34BZ4JvHZ27s2yvwnIobjlwZc6zJWWstrEqYVeYOubHM saw/jcRWG3b8tEnOCx/YjG+6Ljf2zQ2SjWO+FfIDdqpx6NlyNNMQiryLoZ3YqMfC zpmEKXHRe/XJ+HviQqDwgEG2mpI/80fEvnOwDPK2Tl3ea3zm+Mpyv3A2NpolxajW edm8ibxMjvHwzg== -----END CERTIFICATE-----Generated at Mon Jan 26 06:06:49 2026 by rpki-client