This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json) Hash identifier: j+C1i4nad4e4hSvxgMa7P/kv3fG7xyNQX1nwjvf5Ej0= Subject key identifier: BC:6F:C5:D1:3C:64:D7:0F:84:72:AE:26:B2:3A:CF:E6:F7:59:EC:93 Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71 Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671 Certificate serial: 019BF61A1BC44F16C3508CC5EBC4F2817961 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft Manifest number: 0C92 Signing time: Sun 25 Jan 2026 17:01:04 +0000 Manifest this update: Sun 25 Jan 2026 17:01:04 +0000 Manifest next update: Mon 26 Jan 2026 17:01:04 +0000 Files and hashes: 1: Lz876iU0xtfcqSVTekYcUEB8rNY.roa (hash: P7Dx6/I7M7mFS8oU5u2ZG2WFIIDRuSNAyOVWgF0FkSI=) 2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: 8LoWcZcxwk5RlaNACkg+oH1285ZZyqBao4BeFL7BENA=) 3: QzXLtRSL_Wpb4KzFVTKsOifLvN0.roa (hash: hX/2W21N6m8TCgCCktzdp/ieCUoz0M7Pa5wx/tC+JN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:1b:c4:4f:16:c3:50:8c:c5:eb:c4:f2:81:79:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671 Validity Not Before: Jan 25 17:01:04 2026 GMT Not After : Jan 26 17:01:04 2026 GMT Subject: CN=bc6fc5d13c64d70f8472ae26b23acfe6f759ec93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fe:e6:30:88:12:98:c1:71:6a:c0:0f:e8:da: 05:3a:c3:8d:d7:01:7a:df:58:a1:55:21:1b:8a:e4: 06:1f:99:12:df:9f:10:2c:ee:27:7e:f4:17:cc:1c: d3:cf:72:3b:ec:19:86:55:c8:64:4b:c9:af:a5:97: a0:ae:b2:f5:f2:b3:b8:55:93:a4:44:99:cf:0c:07: b2:49:d6:99:aa:58:84:70:ce:f6:21:66:58:18:22: 3a:48:1c:76:4b:48:67:b3:68:2e:b2:ff:ce:cf:12: 22:d6:b7:ad:52:98:3a:71:e9:d9:12:14:7c:b4:29: 63:96:e3:f1:0c:87:f3:6d:10:bc:43:a9:79:14:5a: 0c:40:4d:f9:7c:9a:b7:93:c8:5a:84:c0:b2:03:bb: 31:e1:c9:df:61:51:71:10:91:ed:65:30:95:74:3f: d6:dd:e6:61:52:ab:99:7a:a1:d7:8c:39:b9:b2:92: da:c6:68:b2:4b:df:79:73:12:a0:c5:d8:cc:34:19: 4a:ab:99:17:02:f1:27:1e:8f:c3:00:99:92:73:ed: c3:fc:0f:b3:fd:f3:78:f7:c7:87:46:38:19:02:0c: 3f:8b:c5:ce:ff:9b:57:49:92:33:0b:a0:4d:cb:d8: 0c:21:e0:d5:35:84:fe:b4:d3:e4:dc:94:79:12:a1: 99:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6F:C5:D1:3C:64:D7:0F:84:72:AE:26:B2:3A:CF:E6:F7:59:EC:93 X509v3 Authority Key Identifier: keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:e3:49:a3:93:61:c4:81:55:7c:36:ae:dc:9f:7b:e7:04:e3: 40:cb:ce:31:d9:6d:8b:44:10:a5:00:25:1f:59:5a:71:d1:99: 84:da:8c:5d:56:3c:39:3f:1c:c5:c8:3a:d1:7a:81:da:06:b1: 61:9e:bc:7e:2b:73:a3:63:05:41:9b:32:9c:ef:8c:23:a1:2d: a3:0b:bb:d9:3e:68:4a:3e:fd:51:16:a5:51:e2:6a:b2:3a:d1: c3:41:85:0f:ef:a4:e7:41:aa:2e:f2:0e:ea:61:a9:18:f3:e0: a9:76:49:db:6d:dd:f3:eb:30:cf:0a:7b:70:54:b1:77:ee:ca: b5:19:05:6d:c7:72:e4:6b:af:0c:61:34:13:c3:a6:a9:cc:f8: 17:96:6d:ca:8c:8f:da:b1:fe:f3:96:91:52:d5:88:b9:e2:59: 23:f2:7d:56:50:3f:85:e6:83:61:e9:91:40:6b:a6:5a:04:9b: d6:77:5e:15:09:c0:19:2e:1a:9c:30:73:76:6a:c5:97:12:e1: c0:74:1b:ce:e4:fb:ba:4d:1a:30:6d:85:ef:44:fe:74:70:a9: 8b:cd:e3:6f:3b:dd:0d:06:ef:00:15:90:6a:7f:88:3e:22:a4: 4a:ab:e1:34:81:99:ef:5f:49:1e:44:c3:47:d7:68:56:fd:81: b0:96:49:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GhvETxbDUIzF68TygXlhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZWExZWE4ODdkY2VmZWU2MTM2MTU1YjhiZDgzMzkyOTM3 YzE2NzEwHhcNMjYwMTI1MTcwMTA0WhcNMjYwMTI2MTcwMTA0WjAzMTEwLwYDVQQD EyhiYzZmYzVkMTNjNjRkNzBmODQ3MmFlMjZiMjNhY2ZlNmY3NTllYzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5f7mMIgSmMFxasAP6NoFOsON1wF6 31ihVSEbiuQGH5kS358QLO4nfvQXzBzTz3I77BmGVchkS8mvpZegrrL18rO4VZOk RJnPDAeySdaZqliEcM72IWZYGCI6SBx2S0hns2gusv/OzxIi1retUpg6cenZEhR8 tCljluPxDIfzbRC8Q6l5FFoMQE35fJq3k8hahMCyA7sx4cnfYVFxEJHtZTCVdD/W 3eZhUquZeqHXjDm5spLaxmiyS995cxKgxdjMNBlKq5kXAvEnHo/DAJmSc+3D/A+z /fN498eHRjgZAgw/i8XO/5tXSZIzC6BNy9gMIeDVNYT+tNPk3JR5EqGZ7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxvxdE8ZNcPhHKuJrI6z+b3WeyTMB8GA1UdIwQY MBaAFDzqHqiH3O/uYTYVW4vYM5KTfBZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgt YjY0Y2FiNGJiZGZmLzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgtYjY0Y2FiNGJiZGZm LzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIeNJo5Nh xIFVfDau3J975wTjQMvOMdlti0QQpQAlH1lacdGZhNqMXVY8OT8cxcg60XqB2gax YZ68fitzo2MFQZsynO+MI6Etowu72T5oSj79URalUeJqsjrRw0GFD++k50GqLvIO 6mGpGPPgqXZJ223d8+swzwp7cFSxd+7KtRkFbcdy5GuvDGE0E8Omqcz4F5ZtyoyP 2rH+85aRUtWIueJZI/J9VlA/heaDYemRQGumWgSb1ndeFQnAGS4anDBzdmrFlxLh wHQbzuT7uk0aMG2F70T+dHCpi83jbzvdDQbvABWQan+IPiKkSqvhNIGZ719JHkTD R9doVv2BsJZJNg== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:44 2026 by rpki-client