This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json) Hash identifier: U0OpZFdeGPs9YVcbjvHAfAD7+cMnv+uu0FeRQkyzu04= Subject key identifier: CF:F2:8B:86:20:A5:37:AD:53:F2:4A:79:E9:52:F4:91:25:9D:0F:FF Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40 Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640 Certificate serial: 019BF4D0CCDD8E27918A6A21E8D98E6EEC17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft Manifest number: 0EA3 Signing time: Sun 25 Jan 2026 11:01:22 +0000 Manifest this update: Sun 25 Jan 2026 11:01:22 +0000 Manifest next update: Mon 26 Jan 2026 11:01:22 +0000 Files and hashes: 1: F1IZXSaM0EUoVJYeBekbQHeIDzM.roa (hash: wwBTKYgogZnI9lVmsw1BYLdI24cEQPAqs+GHEd0mVlc=) 2: XRWUGRiRnDftn0w5XsjFN-6BZUA.roa (hash: eD7AmSbdUlIktA8wqOi/TIT8HlO0vCWmUNetc9plP2U=) 3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: mwx4iD91V4RavhhogTQI+5+MXOxgv6BUYF2c5RPnrco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:cc:dd:8e:27:91:8a:6a:21:e8:d9:8e:6e:ec:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640 Validity Not Before: Jan 25 11:01:22 2026 GMT Not After : Jan 26 11:01:22 2026 GMT Subject: CN=cff28b8620a537ad53f24a79e952f491259d0fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:66:90:ca:c0:73:ee:b3:c4:df:07:16:07:54: c9:6c:c4:c5:8a:c1:72:7e:76:c5:94:47:e5:1b:9f: fe:fb:a6:f4:35:ca:c2:74:9c:ef:da:83:59:96:85: 35:29:a6:9a:d3:db:30:f6:32:a7:57:06:59:21:9e: 71:6a:1d:e3:66:17:b8:7f:0f:7f:12:d4:87:f0:1a: 66:71:bc:d1:79:5d:ca:3d:39:29:06:80:6b:04:ce: 2e:2f:08:39:3b:4a:0d:21:0c:b7:c4:2a:7f:91:38: 71:ed:15:ea:b5:15:f7:0f:ec:38:95:3c:02:87:77: 56:8b:df:55:17:80:60:7a:5d:ad:d7:df:27:04:b9: d9:c2:6e:14:f0:70:34:e0:3c:ee:74:cd:5b:93:43: b5:cb:30:d7:9f:50:09:4f:01:2a:7d:6e:a2:aa:2a: 48:bf:50:29:a1:d5:7f:28:c2:15:d8:7b:9e:a3:7e: 8d:c1:05:68:36:ef:a3:9b:4b:84:3a:27:a7:cf:5b: 03:34:f1:16:ef:27:aa:06:0c:a5:c9:c0:c9:84:cd: c4:85:eb:96:8a:c9:99:96:55:1f:71:69:3e:07:23: 17:9e:91:0a:8e:dd:a2:06:d9:2b:3c:d9:8d:6d:ed: 0c:72:b3:19:08:6b:98:35:15:fe:9f:ce:4d:1c:cd: 62:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F2:8B:86:20:A5:37:AD:53:F2:4A:79:E9:52:F4:91:25:9D:0F:FF X509v3 Authority Key Identifier: keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:be:23:f3:85:af:2d:20:75:6d:97:26:85:8a:0a:88:d3:ff: 75:cf:82:e8:da:f7:7c:2f:67:24:41:5e:a8:bc:f0:d2:f5:de: f6:1d:f7:34:be:de:d4:0c:3f:92:b7:8e:46:a1:0a:c8:f2:44: e8:7e:21:65:f5:ab:7d:be:74:8c:11:5e:9e:62:98:56:8e:bf: 1c:82:41:66:24:a2:74:f9:6e:fa:6d:f7:d4:23:26:b1:61:59: 75:e7:15:3b:ff:2f:aa:33:3b:92:47:97:53:92:0b:6a:17:ec: bc:ee:f6:d8:95:75:4e:80:04:93:e0:f8:55:dc:09:e8:40:bb: cf:f0:0b:3a:0d:8e:b2:c5:c1:84:bb:51:0e:e5:59:4c:70:42: 62:74:ee:b7:aa:19:a4:78:60:b9:0d:53:71:0f:34:c3:4f:75: c2:21:34:51:b7:83:da:12:8a:8d:15:4a:61:a9:b3:5c:b9:8a: 8e:c3:14:12:7e:d5:17:b7:c2:46:22:e7:4f:e7:71:61:11:09: 8f:33:57:6d:9f:a4:0f:86:52:7d:63:6b:c1:4c:f0:fd:e3:a6: b4:ad:0d:99:60:fb:ee:16:bd:23:8f:b7:18:a7:da:6f:80:9c: cf:d2:9c:27:22:52:98:d9:cd:6c:40:cd:7f:d9:c9:17:26:63: 03:8f:b7:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00MzdjieRimoh6NmObuwXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNDIzMmMxOWQwYTdmN2VkNzY5YzQ3MTU0MjFlNmNjMThi ZGI2NDAwHhcNMjYwMTI1MTEwMTIyWhcNMjYwMTI2MTEwMTIyWjAzMTEwLwYDVQQD EyhjZmYyOGI4NjIwYTUzN2FkNTNmMjRhNzllOTUyZjQ5MTI1OWQwZmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9GaQysBz7rPE3wcWB1TJbMTFisFy fnbFlEflG5/++6b0NcrCdJzv2oNZloU1Kaaa09sw9jKnVwZZIZ5xah3jZhe4fw9/ EtSH8BpmcbzReV3KPTkpBoBrBM4uLwg5O0oNIQy3xCp/kThx7RXqtRX3D+w4lTwC h3dWi99VF4Bgel2t198nBLnZwm4U8HA04DzudM1bk0O1yzDXn1AJTwEqfW6iqipI v1ApodV/KMIV2Hueo36NwQVoNu+jm0uEOienz1sDNPEW7yeqBgylycDJhM3EheuW ismZllUfcWk+ByMXnpEKjt2iBtkrPNmNbe0McrMZCGuYNRX+n85NHM1ijQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/yi4YgpTetU/JKeelS9JElnQ//MB8GA1UdIwQY MBaAFG9CMsGdCn9+12nEcVQh5swYvbZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMWQ3MDMtZmY5YS00NGIxLThlNjUt NjZjYTU3Zjc0ZTBkLzEvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mMWQ3MDMtZmY5YS00NGIxLThlNjUtNjZjYTU3Zjc0ZTBk LzEvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE74j84Wv LSB1bZcmhYoKiNP/dc+C6Nr3fC9nJEFeqLzw0vXe9h33NL7e1Aw/kreORqEKyPJE 6H4hZfWrfb50jBFenmKYVo6/HIJBZiSidPlu+m331CMmsWFZdecVO/8vqjM7kkeX U5ILahfsvO722JV1ToAEk+D4VdwJ6EC7z/ALOg2OssXBhLtRDuVZTHBCYnTut6oZ pHhguQ1TcQ80w091wiE0UbeD2hKKjRVKYamzXLmKjsMUEn7VF7fCRiLnT+dxYREJ jzNXbZ+kD4ZSfWNrwUzw/eOmtK0NmWD77ha9I4+3GKfab4Ccz9KcJyJSmNnNbEDN f9nJFyZjA4+3sA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:07:28 2026 by rpki-client