This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft File: 71VFlkWXnEE9C8b3RU8NNuQOmfk.mft (raw, json) Hash identifier: yJlfWel4YCbPRDhEMWhZdqsnajuOBQtQN4yeWGYsFVw= Subject key identifier: 14:4F:48:75:91:34:56:97:0D:E3:15:E6:E5:A1:02:C7:D3:EE:0B:B0 Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9 Certificate issuer: /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9 Certificate serial: 019BF462E137578D56F02518DD48E77C7728 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft Manifest number: 04D3 Signing time: Sun 25 Jan 2026 09:01:19 +0000 Manifest this update: Sun 25 Jan 2026 09:01:19 +0000 Manifest next update: Mon 26 Jan 2026 09:01:19 +0000 Files and hashes: 1: 71VFlkWXnEE9C8b3RU8NNuQOmfk.crl (hash: aP1U+zD9GD/Bx31xZv2+vW/upaik6VjhFfZrWtU7nec=) 2: 9qV0mW2ia-2OR-SkYKC9xwGTJ6w.roa (hash: SoSvqfnQLKFn05LffsfjlMnv43OqaQmrvJqr1M8+Itw=) 3: Du79ji7HHfBba4InbN4bIGS0_iA.roa (hash: tcL+qNRXPaCLc8dP3FfLSCO8N4UwsOC7d+xUqdSxXTQ=) 4: O5W4X-XBYeWAvMUfvIjNuACgFkg.asa (hash: 7Z8pxKRz4YvwT86qT++qRx70dU1ZdttXNNnewjJqgt0=) 5: iXmoB-hRblPDcJ-8Lbzjw5FJXeE.asa (hash: KlQBY6M94I1QY6KQo3uEfY4PPExUBLB4IqDYeIRa6Gw=) 6: yoNR3031t1c5fIpSVbBNiZg-fgU.roa (hash: WFBkEZbt/RtOe+ZGOFWHx7RKyRoySV4z75BvLA08kjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:e1:37:57:8d:56:f0:25:18:dd:48:e7:7c:77:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9 Validity Not Before: Jan 25 09:01:19 2026 GMT Not After : Jan 26 09:01:19 2026 GMT Subject: CN=144f4875913456970de315e6e5a102c7d3ee0bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ea:b9:2a:13:47:f6:d9:77:55:c4:e5:d4:d0: 67:05:f1:ac:cd:07:12:38:b9:14:58:d5:6c:c9:ba: a1:3f:99:ac:01:c1:59:e5:f8:19:91:40:f9:54:a0: f1:c2:81:4c:04:15:02:2c:6d:b3:7f:de:5f:a4:68: d7:09:bb:19:35:1a:d9:c4:46:5d:0d:c5:05:a9:fd: 74:06:31:5f:e0:06:6b:58:21:db:e9:c1:aa:5a:3e: 62:db:d8:11:81:a0:08:d7:87:58:58:95:f5:9f:6b: d3:37:f8:eb:db:fc:a8:f7:fe:98:bd:82:fc:34:90: ae:2b:0b:a8:66:20:98:8b:69:32:b1:f8:b9:0e:c8: 4a:cc:4a:39:52:a0:7b:17:e1:12:13:a7:c9:a1:82: b5:f4:c6:4a:82:b4:56:d3:8c:35:17:aa:62:cc:5b: 21:38:08:ef:ca:3e:3e:76:f7:08:93:0e:95:34:00: 5f:c7:37:aa:b6:55:34:8f:72:54:49:0a:b6:56:5b: d7:53:bd:87:6c:6c:30:a7:12:80:8f:6d:10:e6:bf: 2e:f3:82:d4:ec:1b:aa:f8:87:9a:78:a8:9b:57:1d: 35:2c:08:cb:e3:e6:03:b0:5f:a2:e3:e7:c7:a0:3d: ad:4e:ba:62:a4:15:e8:ad:1f:06:46:f1:a8:b7:ea: b0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4F:48:75:91:34:56:97:0D:E3:15:E6:E5:A1:02:C7:D3:EE:0B:B0 X509v3 Authority Key Identifier: keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:93:cb:0d:33:20:61:02:8a:ce:c0:77:6c:8d:fd:d5:e2:a5: f2:36:ef:89:b2:9d:46:72:d9:c5:cf:b4:d2:e0:ee:df:3d:f7: 04:22:b3:8a:68:09:aa:37:41:37:ca:10:67:65:4f:e8:3f:0c: fa:c8:1c:0b:f0:26:d4:f2:b7:81:2d:f5:ad:1a:c0:36:13:40: bc:8a:24:04:7b:d3:a6:1f:ed:8e:98:8e:4d:71:7c:2b:d7:71: c8:f6:80:55:51:0e:cc:a4:29:91:c9:e1:19:67:52:e5:71:72: d0:64:20:b1:8d:8c:fc:a3:94:eb:d1:ff:34:73:1c:27:d5:67: 58:d8:c9:29:75:ed:e8:59:a7:5e:41:c8:04:78:2a:fc:81:20: 1a:64:51:04:46:c0:06:6f:92:be:43:20:e9:4f:a5:6c:60:90: 85:f6:50:8c:58:05:56:71:e4:1e:46:7e:a4:4a:0c:2d:57:16: 8f:4d:e2:56:bd:ed:27:8c:68:4a:8e:1a:6b:d1:9e:d3:8e:17: b2:2f:53:9c:d3:c8:1c:f9:e3:ba:de:01:2b:7c:f2:7f:ea:0c: f9:38:23:e1:7b:88:db:c2:a0:1d:92:90:28:9d:57:d9:ee:d0: e0:bd:61:15:12:83:c9:7c:79:12:d1:08:7b:a1:54:de:1f:f2: d4:b1:31:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YuE3V41W8CUY3UjnfHcoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTU0NTk2NDU5NzljNDEzZDBiYzZmNzQ1NGYwZDM2ZTQw ZTk5ZjkwHhcNMjYwMTI1MDkwMTE5WhcNMjYwMTI2MDkwMTE5WjAzMTEwLwYDVQQD EygxNDRmNDg3NTkxMzQ1Njk3MGRlMzE1ZTZlNWExMDJjN2QzZWUwYmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouq5KhNH9tl3VcTl1NBnBfGszQcS OLkUWNVsybqhP5msAcFZ5fgZkUD5VKDxwoFMBBUCLG2zf95fpGjXCbsZNRrZxEZd DcUFqf10BjFf4AZrWCHb6cGqWj5i29gRgaAI14dYWJX1n2vTN/jr2/yo9/6YvYL8 NJCuKwuoZiCYi2kysfi5DshKzEo5UqB7F+ESE6fJoYK19MZKgrRW04w1F6pizFsh OAjvyj4+dvcIkw6VNABfxzeqtlU0j3JUSQq2VlvXU72HbGwwpxKAj20Q5r8u84LU 7Buq+IeaeKibVx01LAjL4+YDsF+i4+fHoD2tTrpipBXorR8GRvGot+qwewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRPSHWRNFaXDeMV5uWhAsfT7guwMB8GA1UdIwQY MBaAFO9VRZZFl5xBPQvG90VPDTbkDpn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFWRmxrV1huRUU5QzhiM1JVOE5OdVFPbWZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wNTEyZGYtN2QwYy00NjNiLTg3MjQt ODI1MzFlOWM3ODA0LzEvNzFWRmxrV1huRUU5QzhiM1JVOE5OdVFPbWZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8wNTEyZGYtN2QwYy00NjNiLTg3MjQtODI1MzFlOWM3ODA0 LzEvNzFWRmxrV1huRUU5QzhiM1JVOE5OdVFPbWZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5PLDTMg YQKKzsB3bI391eKl8jbvibKdRnLZxc+00uDu3z33BCKzimgJqjdBN8oQZ2VP6D8M +sgcC/Am1PK3gS31rRrANhNAvIokBHvTph/tjpiOTXF8K9dxyPaAVVEOzKQpkcnh GWdS5XFy0GQgsY2M/KOU69H/NHMcJ9VnWNjJKXXt6FmnXkHIBHgq/IEgGmRRBEbA Bm+SvkMg6U+lbGCQhfZQjFgFVnHkHkZ+pEoMLVcWj03iVr3tJ4xoSo4aa9Ge044X si9TnNPIHPnjut4BK3zyf+oM+Tgj4XuI28KgHZKQKJ1X2e7Q4L1hFRKDyXx5EtEI e6FU3h/y1LExTg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:38 2026 by rpki-client