This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft File: 0yJ36jBLKESnhomzqg2SGeM2Z3M.mft (raw, json) Hash identifier: ECJl11vaS5V9i04yw/FZKzGyMqHeeBtUrS6xDjwLXj4= Subject key identifier: AB:88:9F:62:AD:75:DB:2C:A6:54:EF:E7:05:D5:11:16:AE:6F:88:C3 Authority key identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73 Certificate issuer: /CN=d32277ea304b2844a78689b3aa0d9219e3366773 Certificate serial: 019BF687E056D27E77840D10E7B97825F5FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft Manifest number: 1719 Signing time: Sun 25 Jan 2026 19:00:58 +0000 Manifest this update: Sun 25 Jan 2026 19:00:58 +0000 Manifest next update: Mon 26 Jan 2026 19:00:58 +0000 Files and hashes: 1: 0yJ36jBLKESnhomzqg2SGeM2Z3M.crl (hash: ZaHV3puh2XtWfF4B6nIZK0+FXosj6Bjvj+zpTFy0X8g=) 2: _hM3H1qZ9X2c4qZvxbmxIdT7K78.roa (hash: OwXX274c7WiCLwDlzUWHfVwNDY75hqlVdtdPyNCFPX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:e0:56:d2:7e:77:84:0d:10:e7:b9:78:25:f5:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d32277ea304b2844a78689b3aa0d9219e3366773 Validity Not Before: Jan 25 19:00:58 2026 GMT Not After : Jan 26 19:00:58 2026 GMT Subject: CN=ab889f62ad75db2ca654efe705d51116ae6f88c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:20:80:ad:67:76:fb:38:60:62:c9:15:09:0a: 9d:6a:e6:3c:51:d9:9a:cd:2b:bc:e9:a3:0a:38:51: 92:6d:d4:03:ba:d0:6d:75:23:77:ef:32:8b:d9:18: db:25:9f:59:7b:f1:1c:9c:c0:06:d2:e8:4a:95:08: 77:e1:ef:e8:23:4e:52:ca:15:c4:dd:ea:42:82:96: 98:f8:66:5d:6c:f0:40:86:a8:6e:0e:32:41:3f:dd: a4:b8:fb:0c:ee:4e:7d:03:5b:e0:38:71:53:5c:bc: 0c:a6:2e:b5:2f:88:48:30:12:29:71:39:93:84:93: 62:88:1f:e1:e2:bf:98:26:b3:a5:a9:9a:95:3d:46: b8:2b:89:bb:b0:ac:c4:b9:ac:e5:c5:57:b0:69:aa: 6d:04:41:63:ba:0c:ab:3d:a0:2e:84:cc:90:5e:a6: f1:69:2a:f3:98:79:e7:5c:4e:cb:c3:0d:b0:58:7b: 8b:78:e0:ed:4d:16:34:bf:d6:77:bf:a0:5a:7a:17: 89:1f:47:9d:33:e6:3f:44:51:b3:a6:9d:27:f9:75: 5f:62:d7:f6:54:4e:40:87:25:71:fc:74:4b:e4:cf: aa:31:31:e9:c9:7b:9b:25:68:55:5e:f1:9b:53:cb: f9:2d:fc:7b:fc:f4:f0:f9:fb:f9:0f:5b:ee:43:d5: ad:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:88:9F:62:AD:75:DB:2C:A6:54:EF:E7:05:D5:11:16:AE:6F:88:C3 X509v3 Authority Key Identifier: keyid:D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:e1:8d:4f:7b:9f:6c:da:5f:ea:eb:c7:ad:50:c6:47:0f:46: 4f:18:63:38:d3:32:2a:1e:d8:29:3d:e5:e7:ed:de:ca:d1:f5: d5:3c:58:65:3c:b0:c2:20:60:94:1e:22:f9:f9:1c:3b:b4:35: 95:a0:d4:38:a6:14:0b:98:ce:2f:30:0f:56:34:3d:74:47:da: 37:76:84:5a:14:d6:99:5b:08:0b:82:61:d2:2d:78:28:3f:b5: c1:40:9b:6f:e8:9a:41:fd:00:81:99:8a:51:fe:5b:e4:49:c6: cb:dd:bb:b3:b0:63:9e:e4:f7:ba:97:de:3f:df:4b:40:14:0b: 98:46:f4:61:94:5c:38:d6:8d:7b:43:34:13:c8:76:2d:71:5e: 49:49:77:9a:cd:e2:45:38:5b:99:8b:11:88:a7:d8:bf:13:8a: b3:71:af:66:88:55:b0:c4:de:4c:44:bc:c0:ab:73:5c:d3:f6: f3:d7:39:2c:7d:68:a5:f8:4f:10:42:1d:f9:7f:64:26:92:7d: b7:53:d5:00:e3:48:d4:00:0d:5a:f4:d9:3d:88:35:18:1e:36: 8d:a0:8a:48:63:40:b8:56:ed:31:46:72:68:b6:b8:d2:ba:e7: 63:a5:f9:e6:d5:6d:c7:aa:d5:2e:61:63:e1:2d:b5:48:c7:63: d9:4d:e5:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h+BW0n53hA0Q57l4JfX6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMjI3N2VhMzA0YjI4NDRhNzg2ODliM2FhMGQ5MjE5ZTMz NjY3NzMwHhcNMjYwMTI1MTkwMDU4WhcNMjYwMTI2MTkwMDU4WjAzMTEwLwYDVQQD EyhhYjg4OWY2MmFkNzVkYjJjYTY1NGVmZTcwNWQ1MTExNmFlNmY4OGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiCArWd2+zhgYskVCQqdauY8Udma zSu86aMKOFGSbdQDutBtdSN37zKL2RjbJZ9Ze/EcnMAG0uhKlQh34e/oI05SyhXE 3epCgpaY+GZdbPBAhqhuDjJBP92kuPsM7k59A1vgOHFTXLwMpi61L4hIMBIpcTmT hJNiiB/h4r+YJrOlqZqVPUa4K4m7sKzEuazlxVewaaptBEFjugyrPaAuhMyQXqbx aSrzmHnnXE7Lww2wWHuLeODtTRY0v9Z3v6BaeheJH0edM+Y/RFGzpp0n+XVfYtf2 VE5AhyVx/HRL5M+qMTHpyXubJWhVXvGbU8v5Lfx7/PTw+fv5D1vuQ9WtQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKuIn2KtddssplTv5wXVERaub4jDMB8GA1UdIwQY MBaAFNMid+owSyhEp4aJs6oNkhnjNmdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NTMzYzMtMjllMC00NTA2LWIwMGQt MzZjODczOTY5MjNhLzEvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy84NTMzYzMtMjllMC00NTA2LWIwMGQtMzZjODczOTY5MjNh LzEvMHlKMzZqQkxLRVNuaG9tenFnMlNHZU0yWjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaeGNT3uf bNpf6uvHrVDGRw9GTxhjONMyKh7YKT3l5+3eytH11TxYZTywwiBglB4i+fkcO7Q1 laDUOKYUC5jOLzAPVjQ9dEfaN3aEWhTWmVsIC4Jh0i14KD+1wUCbb+iaQf0AgZmK Uf5b5EnGy927s7BjnuT3upfeP99LQBQLmEb0YZRcONaNe0M0E8h2LXFeSUl3ms3i RThbmYsRiKfYvxOKs3GvZohVsMTeTES8wKtzXNP289c5LH1opfhPEEId+X9kJpJ9 t1PVAONI1AANWvTZPYg1GB42jaCKSGNAuFbtMUZyaLa40rrnY6X55tVtx6rVLmFj 4S21SMdj2U3l+A== -----END CERTIFICATE-----Generated at Mon Jan 26 02:41:02 2026 by rpki-client