This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft File: 2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft (raw, json) Hash identifier: AdxJ8Nl+VbpLFdGFB3kmnhfq9zUJoPIy0QXzlijQMxs= Subject key identifier: CA:85:21:6D:35:D5:F8:48:4E:B9:9A:3A:CB:5A:2E:F3:FA:1E:4E:B1 Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96 Certificate issuer: /CN=d8fc6e45181d839fd10e4a902762f26c9a646796 Certificate serial: 019BF6F56B04CD716EBC324AAA45BA2F3581 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 21:00:37 +0000 Manifest this update: Sun 25 Jan 2026 21:00:37 +0000 Manifest next update: Mon 26 Jan 2026 21:00:37 +0000 Files and hashes: 1: 1-X9f31YmOI6sGDiMsygwz3v06EQ.roa (hash: lBKrn9OkfPE6uE/SW8MJqqSzuyUTtFebuy/HpzOS5Gw=) 2: 2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl (hash: A1+TeigVd+QwVZKnI9hxwoJsOkcGRHBs/+ydoH/XOkc=) 3: FQiwWBBeK_EJ4ljVhzzdU_kvYhE.roa (hash: HY7azWr+1lDIeYP4uBd4A0p2MAT8AwHdslPwrQq6vgY=) 4: SBQ_xqUrpNzgYwAsOKFWEfBcWKU.roa (hash: r7gescwog8g3OhaT+uiQpA9jU7IQngckD+CGfZrI6kY=) 5: dr0WTbKAOdZCmM023BVBdPDWRk8.roa (hash: QpYxSWr/vVLdYe2PKpH5AUkh/HBsOurm0FmWy5lE2hA=) 6: sKoA1J6rxnysEZ_v3zwMo7Z67TY.roa (hash: mG9f/0+7q2d/QWjgfY6kLzwp92/dXDDFf1IO0cmQvoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:6b:04:cd:71:6e:bc:32:4a:aa:45:ba:2f:35:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796 Validity Not Before: Jan 25 21:00:37 2026 GMT Not After : Jan 26 21:00:37 2026 GMT Subject: CN=ca85216d35d5f8484eb99a3acb5a2ef3fa1e4eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:91:4b:16:75:0f:7b:32:fb:09:b7:cc:44:e4: 55:8f:d1:c6:db:0b:0a:48:e8:ae:40:0b:f7:da:e7: b4:09:ea:2d:4a:fa:5d:92:00:51:95:19:1f:0f:f2: 43:31:c6:29:76:dd:fc:0a:b8:43:8c:f6:6c:6a:53: e6:f5:15:37:ee:c3:98:d8:d0:63:ed:44:51:a2:1f: 1e:6b:fe:8c:f1:d7:19:f0:db:f4:17:3d:2f:fe:38: 38:e1:c8:f3:62:64:2c:b7:44:f4:fe:1a:81:79:66: 69:67:0f:3e:55:a0:5d:39:cc:e1:3a:12:b6:fb:4e: d6:0f:d1:23:80:df:1f:9f:f3:cd:5d:1a:c7:f6:60: 8a:3f:28:bb:ff:88:9d:d7:da:1c:10:a1:2e:01:41: 72:ff:49:80:4e:ae:2f:be:0c:54:80:4f:35:a9:a8: d4:43:f7:2c:e3:b5:8f:1a:7b:6c:2f:f4:87:9e:fe: 54:12:83:fb:31:4d:a0:e1:67:42:24:42:0f:9e:b2: 0e:e4:3e:17:63:76:9b:35:44:fc:07:4b:d1:f1:38: 93:71:d3:30:2d:e3:29:a1:63:3c:50:1e:fc:a6:ed: 1c:97:62:59:ba:c9:a5:eb:30:dc:30:d9:4f:04:6d: c0:d9:20:65:7c:45:8d:2e:48:01:6c:45:f0:88:a3: 9f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:85:21:6D:35:D5:F8:48:4E:B9:9A:3A:CB:5A:2E:F3:FA:1E:4E:B1 X509v3 Authority Key Identifier: keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:69:92:c5:22:50:9c:14:8f:9a:09:05:c5:e5:7f:23:07:6e: 15:ba:43:64:58:14:4f:94:a7:e3:b6:62:50:27:b7:c9:d6:73: ec:2f:f9:25:bb:be:d8:df:83:11:57:c9:eb:11:95:53:66:bc: 7d:28:46:bd:28:0b:98:f5:d0:b5:ab:a5:4d:01:5b:42:4e:7b: 93:5f:2a:46:3f:36:22:74:a7:df:7f:4d:f5:0c:2e:d8:07:da: 33:05:48:b3:4d:27:38:85:c5:33:a5:19:7c:ed:d0:ca:2f:73: 98:f2:b5:89:41:69:32:a7:5f:40:98:82:88:fc:52:90:e2:bf: a3:59:7c:f7:8d:77:0f:3b:5f:c1:97:45:08:e6:b6:79:ba:8e: c3:a9:7e:3e:53:34:5b:ca:c9:57:ff:09:42:4e:c6:ce:52:fb: ea:58:12:24:e6:3b:d9:26:4b:8d:8d:f2:30:47:1d:ee:dd:f1: 7f:8c:39:0b:34:f8:3c:d0:73:0b:28:9c:47:58:63:7a:55:da: e8:1a:77:27:23:a8:88:0d:a0:35:de:c6:1d:ce:41:01:8e:03: 8d:85:3a:63:d9:7f:2c:66:03:dc:31:e5:0f:3f:78:ed:2a:21: e4:80:57:66:92:81:39:ca:1e:3c:b0:89:49:ac:82:82:7f:19: 99:3e:fe:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29WsEzXFuvDJKqkW6LzWBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZmM2ZTQ1MTgxZDgzOWZkMTBlNGE5MDI3NjJmMjZjOWE2 NDY3OTYwHhcNMjYwMTI1MjEwMDM3WhcNMjYwMTI2MjEwMDM3WjAzMTEwLwYDVQQD EyhjYTg1MjE2ZDM1ZDVmODQ4NGViOTlhM2FjYjVhMmVmM2ZhMWU0ZWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJFLFnUPezL7CbfMRORVj9HG2wsK SOiuQAv32ue0CeotSvpdkgBRlRkfD/JDMcYpdt38CrhDjPZsalPm9RU37sOY2NBj 7URRoh8ea/6M8dcZ8Nv0Fz0v/jg44cjzYmQst0T0/hqBeWZpZw8+VaBdOczhOhK2 +07WD9EjgN8fn/PNXRrH9mCKPyi7/4id19ocEKEuAUFy/0mATq4vvgxUgE81qajU Q/cs47WPGntsL/SHnv5UEoP7MU2g4WdCJEIPnrIO5D4XY3abNUT8B0vR8TiTcdMw LeMpoWM8UB78pu0cl2JZusml6zDcMNlPBG3A2SBlfEWNLkgBbEXwiKOfZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqFIW011fhITrmaOstaLvP6Hk6xMB8GA1UdIwQY MBaAFNj8bkUYHYOf0Q5KkCdi8myaZGeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlB4dVJSZ2RnNV9SRGtxUUoyTHliSnBrWjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82MjM0M2MtZWRiZS00YThhLTg0ZjIt N2ViMmViODViODRhLzEvMlB4dVJSZ2RnNV9SRGtxUUoyTHliSnBrWjVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi82MjM0M2MtZWRiZS00YThhLTg0ZjItN2ViMmViODViODRh LzEvMlB4dVJSZ2RnNV9SRGtxUUoyTHliSnBrWjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2mSxSJQ nBSPmgkFxeV/IwduFbpDZFgUT5Sn47ZiUCe3ydZz7C/5Jbu+2N+DEVfJ6xGVU2a8 fShGvSgLmPXQtaulTQFbQk57k18qRj82InSn339N9Qwu2AfaMwVIs00nOIXFM6UZ fO3Qyi9zmPK1iUFpMqdfQJiCiPxSkOK/o1l89413DztfwZdFCOa2ebqOw6l+PlM0 W8rJV/8JQk7GzlL76lgSJOY72SZLjY3yMEcd7t3xf4w5CzT4PNBzCyicR1hjelXa 6Bp3JyOoiA2gNd7GHc5BAY4DjYU6Y9l/LGYD3DHlDz947Soh5IBXZpKBOcoePLCJ SayCgn8ZmT7+iw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:15:18 2026 by rpki-client