This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft File: 2BzxqsIapYI7AZ3pGu7sI-PlJts.mft (raw, json) Hash identifier: W2CSt5VZvJoQPkpKkyKf7/YL/e0FMkT1kMZkahktZ0g= Subject key identifier: 45:2E:B6:50:EC:BD:13:75:BF:FB:19:E2:5B:30:68:D5:86:6E:7D:A1 Authority key identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB Certificate issuer: /CN=d81cf1aac21aa5823b019de91aeeec23e3e526db Certificate serial: 019BF8ACEA6127400E40B1FCEACDA51EE4B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft Manifest number: 16B0 Signing time: Mon 26 Jan 2026 05:00:40 +0000 Manifest this update: Mon 26 Jan 2026 05:00:40 +0000 Manifest next update: Tue 27 Jan 2026 05:00:40 +0000 Files and hashes: 1: 2BzxqsIapYI7AZ3pGu7sI-PlJts.crl (hash: HPazTPfGbulpTdQdmt211FAA5stmf962LBnxcdvcJrs=) 2: M_wYZNoIggWkJnIM6XvfidHolKY.roa (hash: EFTDpTat3ODzn/1H+OY3BBqxfsDk+P79i5ALHFGhTpo=) 3: bQp6UIfbTzW5AcQXknJHvnkzhQg.roa (hash: hPsgca8+uCeyeGUqGhR5eAAml/xZhMTXccnFrzec2lw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ac:ea:61:27:40:0e:40:b1:fc:ea:cd:a5:1e:e4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d81cf1aac21aa5823b019de91aeeec23e3e526db Validity Not Before: Jan 26 05:00:40 2026 GMT Not After : Jan 27 05:00:40 2026 GMT Subject: CN=452eb650ecbd1375bffb19e25b3068d5866e7da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6d:56:99:8d:29:1c:fe:65:81:ef:d6:8e:11: 16:de:6e:b4:37:ad:95:69:c2:7d:3f:57:e1:2e:dc: 36:6f:f2:79:a2:bb:95:48:b0:67:4b:d1:fc:e8:64: da:10:96:06:61:b1:8a:52:ca:92:12:94:de:73:27: 99:66:4a:88:25:3d:b5:0a:b0:91:f9:fc:f4:c8:12: 02:35:18:07:70:a9:b7:4d:f5:ab:a4:c2:95:61:57: 47:f8:88:33:b8:7e:c1:24:05:ee:7f:5d:38:27:01: 35:fa:28:c5:44:73:40:6e:70:06:ce:6d:88:4c:fa: c1:31:10:32:43:da:8c:76:ed:92:aa:ee:51:13:5e: 86:06:2f:38:39:07:86:f8:f0:1e:77:49:b1:af:47: d0:c9:8b:27:b6:6d:86:68:a6:fe:e4:dc:07:f9:4a: 5d:f5:c2:ca:7f:c8:e7:dd:22:97:21:c3:d7:87:63: f2:10:31:68:37:86:05:e1:4e:26:58:38:95:45:66: cf:81:c9:cf:ee:50:ae:a8:84:7c:09:dc:ed:93:d8: 57:db:9f:fd:59:fd:8a:cd:6e:50:da:d9:09:c4:79: 72:a7:d3:a8:75:bf:45:a4:8c:39:a9:2c:38:03:12: 78:9e:f2:34:00:dd:91:df:17:ac:74:78:54:f9:74: 32:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2E:B6:50:EC:BD:13:75:BF:FB:19:E2:5B:30:68:D5:86:6E:7D:A1 X509v3 Authority Key Identifier: keyid:D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:dc:ff:1b:3f:8f:14:2b:da:d9:56:b9:f9:49:9d:a6:22:70: 4d:43:28:68:d2:35:e7:f5:5c:a6:16:17:e4:02:33:44:da:f0: fd:f2:60:97:87:09:a6:79:4e:e0:1a:5f:8f:e8:f4:cb:41:ed: cf:6a:33:b4:c2:71:8c:b7:70:b9:f5:3a:23:ba:f8:88:1c:21: ad:d7:2a:4f:86:00:53:c4:64:7b:76:f8:ea:c0:9b:b0:c0:cb: ce:1f:10:b3:6a:f0:53:49:c8:63:da:9e:06:09:b0:87:2e:35: 73:8a:71:97:f4:8d:8a:f3:1d:c5:c3:09:44:b8:9b:82:ae:fd: 4f:7d:8f:64:1d:9e:b1:f1:43:c4:e7:56:a8:3e:9b:59:7d:c9: 92:d4:83:9b:fd:f1:6b:a7:0c:68:41:68:ce:44:55:54:d0:fb: eb:c5:62:9d:46:61:f6:b3:a2:97:ee:3b:f6:e5:51:eb:2d:1e: 68:b2:f2:9e:3b:1d:9c:17:1a:ee:d3:40:7e:54:e4:72:61:7d: dc:52:0b:bc:dd:58:46:69:49:6d:96:f6:a1:ad:d4:a5:6d:0c: 5d:a3:fd:38:e9:cf:52:ce:10:13:ec:c3:33:01:08:6d:74:5b: 8f:12:f0:e7:e7:4a:3f:9d:66:f6:e7:76:6f:85:38:e8:92:f7: 97:60:f7:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rOphJ0AOQLH86s2lHuSwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MWNmMWFhYzIxYWE1ODIzYjAxOWRlOTFhZWVlYzIzZTNl NTI2ZGIwHhcNMjYwMTI2MDUwMDQwWhcNMjYwMTI3MDUwMDQwWjAzMTEwLwYDVQQD Eyg0NTJlYjY1MGVjYmQxMzc1YmZmYjE5ZTI1YjMwNjhkNTg2NmU3ZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG1WmY0pHP5lge/WjhEW3m60N62V acJ9P1fhLtw2b/J5oruVSLBnS9H86GTaEJYGYbGKUsqSEpTecyeZZkqIJT21CrCR +fz0yBICNRgHcKm3TfWrpMKVYVdH+IgzuH7BJAXuf104JwE1+ijFRHNAbnAGzm2I TPrBMRAyQ9qMdu2Squ5RE16GBi84OQeG+PAed0mxr0fQyYsntm2GaKb+5NwH+Upd 9cLKf8jn3SKXIcPXh2PyEDFoN4YF4U4mWDiVRWbPgcnP7lCuqIR8Cdztk9hX25/9 Wf2KzW5Q2tkJxHlyp9Oodb9FpIw5qSw4AxJ4nvI0AN2R3xesdHhU+XQytQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUutlDsvRN1v/sZ4lswaNWGbn2hMB8GA1UdIwQY MBaAFNgc8arCGqWCOwGd6Rru7CPj5SbbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkJ6eHFzSWFwWUk3QVozcEd1N3NJLVBsSnRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9iOGE2YTQtZjdlYS00YWZlLWI2MGYt OWMwZGUzNjUyNzM4LzEvMkJ6eHFzSWFwWUk3QVozcEd1N3NJLVBsSnRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9iOGE2YTQtZjdlYS00YWZlLWI2MGYtOWMwZGUzNjUyNzM4 LzEvMkJ6eHFzSWFwWUk3QVozcEd1N3NJLVBsSnRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9z/Gz+P FCva2Va5+UmdpiJwTUMoaNI15/VcphYX5AIzRNrw/fJgl4cJpnlO4Bpfj+j0y0Ht z2oztMJxjLdwufU6I7r4iBwhrdcqT4YAU8Rke3b46sCbsMDLzh8Qs2rwU0nIY9qe Bgmwhy41c4pxl/SNivMdxcMJRLibgq79T32PZB2esfFDxOdWqD6bWX3JktSDm/3x a6cMaEFozkRVVND768VinUZh9rOil+479uVR6y0eaLLynjsdnBca7tNAflTkcmF9 3FILvN1YRmlJbZb2oa3UpW0MXaP9OOnPUs4QE+zDMwEIbXRbjxLw5+dKP51m9ud2 b4U46JL3l2D3yQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:49:43 2026 by rpki-client