This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft File: _rhNn4-eMxVliaXr9yIgOomeClE.mft (raw, json) Hash identifier: 3TOhNUXIJUP6+7qv4VzWIScGedE1q3xdSG5fXU8BaL8= Subject key identifier: 73:C5:F2:75:B5:58:AF:E5:7B:69:CD:3F:3D:5E:3A:F3:9C:0F:27:B6 Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51 Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51 Certificate serial: 019BF2E19C9F400EEF9B7F41C5FE6F15B970 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft Manifest number: 11AB Signing time: Sun 25 Jan 2026 02:00:30 +0000 Manifest this update: Sun 25 Jan 2026 02:00:30 +0000 Manifest next update: Mon 26 Jan 2026 02:00:30 +0000 Files and hashes: 1: 1-s2FwRU1cILMfQySWQfwcbHn_7o.roa (hash: UgSoVXkhi39b02jH0/DTm5YU1hz+Ulacw53OQOOrWw0=) 2: 2IHxfDPgXpqFUuW2HHMtTesRlVk.roa (hash: 6i0KTZ22dHSsBD0sAIXWyUQ8dif7FeqnVvrlTF59RFs=) 3: 4QIYNLjhyvhK4DwD1cHr9Pj0R58.roa (hash: XPr5OKAgKFKe1eZm26Sq5h71zoMCowi3Bq7tv1xOx7I=) 4: IxunR-Pdcuvk1jm6CIfNmD9FR0A.roa (hash: /ZeIN8hMhU2WBWfg67KgPG/YjL9Vb0bRB9lW2bQsIk8=) 5: _rhNn4-eMxVliaXr9yIgOomeClE.crl (hash: YkdsKwd6xkp0jqx5PEsD7aczkWLcISWSKXf9Xek4RYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e1:9c:9f:40:0e:ef:9b:7f:41:c5:fe:6f:15:b9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51 Validity Not Before: Jan 25 02:00:30 2026 GMT Not After : Jan 26 02:00:30 2026 GMT Subject: CN=73c5f275b558afe57b69cd3f3d5e3af39c0f27b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a4:76:89:b4:99:1d:78:0b:71:19:12:c3:33: 5c:21:8a:f0:a7:eb:a1:d7:e0:bb:bb:d5:b0:a5:95: e6:21:8d:12:50:bc:64:39:16:7e:c1:60:5b:1e:82: 00:bc:e4:37:fd:be:cb:63:ee:aa:df:7b:b6:fb:2f: d2:5d:90:41:00:df:1c:95:26:51:d9:dd:79:07:9e: 44:b6:5b:54:57:d9:19:06:fb:a7:4a:ac:da:c9:ef: 65:bb:08:09:4a:4a:da:d0:87:94:67:81:34:e5:30: 64:59:e5:25:7a:ef:31:f4:7c:b8:8b:69:c8:33:d8: 19:8c:23:0e:58:65:de:72:5f:f7:1c:1d:47:75:9a: 3b:90:7b:b4:0e:8c:74:e4:0a:79:0c:5c:58:7f:f4: 32:fb:f9:bf:96:2a:33:fb:3f:b4:02:08:fc:6f:24: e6:b5:ac:45:0a:fe:2e:ad:22:88:e4:d3:ff:a4:d0: db:21:ba:d9:d2:63:f0:5a:b2:5d:a2:ef:6f:91:33: 95:aa:c6:30:db:14:03:d3:61:bf:f9:bc:26:9e:4d: c1:e9:30:92:98:55:37:4b:e7:71:80:4c:2f:95:c4: 58:7c:67:eb:2c:15:87:39:5c:f1:1d:ab:2a:a5:91: 24:76:b0:b1:be:9d:da:c9:9a:7d:95:4a:8a:ea:b5: 3e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C5:F2:75:B5:58:AF:E5:7B:69:CD:3F:3D:5E:3A:F3:9C:0F:27:B6 X509v3 Authority Key Identifier: keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:7e:80:f1:8a:31:cb:b5:38:05:f8:bf:b9:ab:fb:d6:3b:53: 81:64:7c:33:3c:79:0d:0b:45:4f:f5:ba:a3:1b:1b:90:4e:a2: c7:19:7e:f1:bc:74:31:62:1b:dc:6f:02:59:d5:d0:ec:7d:41: c2:99:66:3d:73:bc:41:24:62:50:88:ce:bb:f3:f2:76:fa:3e: c7:36:e6:40:2a:4e:36:3a:49:ee:92:3c:84:cb:b3:1e:3c:b9: bf:8e:49:3b:1e:f2:84:77:2e:37:a4:cf:62:fb:73:88:21:16: 30:8c:0a:93:5e:55:14:a9:40:b4:59:d8:13:40:b6:84:f0:f8: ed:8b:e1:c7:1e:c7:ce:73:dc:0c:44:97:d7:2a:0b:73:c3:1b: 85:8c:ad:28:5b:ae:70:fe:6c:35:79:d6:88:2a:2d:1e:36:8f: b6:52:05:15:ee:3a:ff:19:f6:b8:49:d6:b2:e6:42:db:e5:7e: 1e:da:e2:d0:7e:8e:b8:e2:8a:d6:10:07:0b:29:6b:ea:e4:74: 2c:11:86:d7:cf:d3:1c:71:f4:47:8c:d3:78:16:a3:72:c2:df: 92:33:81:39:4a:89:35:8e:20:ca:91:b5:ef:17:33:55:42:08: 22:6f:ac:4e:0b:27:c2:8d:f4:e9:63:e7:b3:cb:60:44:9f:79: 3a:a0:8f:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4ZyfQA7vm39Bxf5vFblwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYjg0ZDlmOGY5ZTMzMTU2NTg5YTVlYmY3MjIyMDNhODk5 ZTBhNTEwHhcNMjYwMTI1MDIwMDMwWhcNMjYwMTI2MDIwMDMwWjAzMTEwLwYDVQQD Eyg3M2M1ZjI3NWI1NThhZmU1N2I2OWNkM2YzZDVlM2FmMzljMGYyN2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6R2ibSZHXgLcRkSwzNcIYrwp+uh 1+C7u9WwpZXmIY0SULxkORZ+wWBbHoIAvOQ3/b7LY+6q33u2+y/SXZBBAN8clSZR 2d15B55EtltUV9kZBvunSqzaye9luwgJSkra0IeUZ4E05TBkWeUleu8x9Hy4i2nI M9gZjCMOWGXecl/3HB1HdZo7kHu0Dox05Ap5DFxYf/Qy+/m/lioz+z+0Agj8byTm taxFCv4urSKI5NP/pNDbIbrZ0mPwWrJdou9vkTOVqsYw2xQD02G/+bwmnk3B6TCS mFU3S+dxgEwvlcRYfGfrLBWHOVzxHasqpZEkdrCxvp3ayZp9lUqK6rU+OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPF8nW1WK/le2nNPz1eOvOcDye2MB8GA1UdIwQY MBaAFP64TZ+PnjMVZYml6/ciIDqJngpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82MTRlNWMtMjk5Yi00ZmQ0LWEwYmMt YWYxY2MyMzE3ZTM5LzEvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi82MTRlNWMtMjk5Yi00ZmQ0LWEwYmMtYWYxY2MyMzE3ZTM5 LzEvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiH6A8Yox y7U4Bfi/uav71jtTgWR8Mzx5DQtFT/W6oxsbkE6ixxl+8bx0MWIb3G8CWdXQ7H1B wplmPXO8QSRiUIjOu/Pydvo+xzbmQCpONjpJ7pI8hMuzHjy5v45JOx7yhHcuN6TP YvtziCEWMIwKk15VFKlAtFnYE0C2hPD47Yvhxx7HznPcDESX1yoLc8MbhYytKFuu cP5sNXnWiCotHjaPtlIFFe46/xn2uEnWsuZC2+V+Htri0H6OuOKK1hAHCylr6uR0 LBGG18/THHH0R4zTeBajcsLfkjOBOUqJNY4gypG17xczVUIIIm+sTgsnwo306WPn s8tgRJ95OqCP5Q== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:35 2026 by rpki-client