This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json) Hash identifier: GERp8/O4EIQnZcRBoz9u2/5BBtDjvtrS3DXYmzkeuX8= Subject key identifier: C6:F4:A8:11:C7:B1:3E:12:93:54:5B:5C:41:A6:AA:D4:6B:1A:F1:00 Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56 Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256 Certificate serial: 019BF27482E66D3C23CAD12F192A1D3AD803 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft Manifest number: 14AD Signing time: Sun 25 Jan 2026 00:01:20 +0000 Manifest this update: Sun 25 Jan 2026 00:01:20 +0000 Manifest next update: Mon 26 Jan 2026 00:01:20 +0000 Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: 34My5Ecev8VxnNQOP2iCa0wQPT689P5EVuhAzpzF07w=) 2: M-JitlZPwH3B4L15UahiMiPcXJU.roa (hash: 4RiWtub4WAwqHrInKNmCDo8FWSLIgaxWGSn3qZtvWp4=) 3: raO9iQAhVCpP5b8-hfSy9qJarpk.roa (hash: 7TlVHnrM0tbsuCT/4folmrO+nyFLI9cWJJ9Gute0iZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:74:82:e6:6d:3c:23:ca:d1:2f:19:2a:1d:3a:d8:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256 Validity Not Before: Jan 25 00:01:20 2026 GMT Not After : Jan 26 00:01:20 2026 GMT Subject: CN=c6f4a811c7b13e1293545b5c41a6aad46b1af100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ee:8c:0c:18:60:1c:56:78:1e:47:7a:ea:1b: c4:53:94:85:91:2e:e4:64:3c:2b:ee:c7:34:59:ed: 4f:41:ac:dc:81:f7:58:d1:e0:c7:47:9c:e4:7a:fe: df:ee:0f:7a:bb:f3:cb:29:e2:9b:54:1b:de:13:51: 1a:78:0f:27:0c:34:82:f0:85:57:f5:49:38:d5:1f: c2:69:38:a4:8f:a5:30:31:b9:01:89:be:48:97:2c: 96:3e:d4:43:33:4e:0d:47:0f:57:19:51:dc:e2:9a: 17:df:7f:de:a7:bc:13:59:39:97:03:84:79:9a:1e: 54:ed:15:ba:e7:75:51:5b:67:56:a3:15:6e:83:63: 9d:db:d8:fd:ae:98:66:af:b9:63:3a:79:60:a8:84: 6e:f6:32:9b:2a:76:9e:5a:45:9e:7d:7a:c2:4d:02: a9:41:23:d7:23:1b:69:83:4e:a1:a2:d1:b8:02:13: f1:f1:04:95:a8:fd:06:24:62:63:89:3a:c4:4c:b9: b2:03:58:1d:49:c7:6d:bb:42:c2:9a:30:92:0a:64: b3:42:50:3d:d7:08:37:4b:3d:89:6a:f2:f7:3b:88: 59:1e:33:41:f8:d5:29:1b:26:36:83:f9:20:28:bb: 13:7d:59:0a:9e:b0:4f:bc:02:a7:31:07:d0:f3:6d: 5c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F4:A8:11:C7:B1:3E:12:93:54:5B:5C:41:A6:AA:D4:6B:1A:F1:00 X509v3 Authority Key Identifier: keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:36:5a:db:b6:2a:ab:fa:43:e0:6a:89:01:86:85:be:fc:8c: 91:28:43:74:72:17:24:30:18:8c:78:93:df:87:c5:7c:a8:8e: dd:88:00:06:e2:de:e8:3b:53:32:89:46:16:8d:99:f9:e3:b6: 28:28:ba:82:75:b2:52:c6:60:10:64:47:1d:05:23:3c:ef:51: 75:10:51:59:95:5f:2c:a3:df:03:73:3d:7f:1f:48:97:94:14: 05:1b:53:98:96:7d:45:0c:8b:a7:d1:bb:67:68:60:35:6c:af: 2f:0b:bf:0c:1e:63:8e:e6:fc:13:b6:30:5c:cf:d7:4d:07:b7: 0f:67:6a:90:81:2c:27:14:8f:99:da:d8:4e:46:f9:23:4f:4e: f0:f4:5e:14:a0:f8:7a:d8:a9:4b:5f:03:17:2a:81:e4:e9:1a: 9d:02:bf:03:86:ab:b8:f1:13:36:a7:57:bb:2b:67:8e:3d:19: 41:43:dd:ea:38:09:a6:65:d8:c8:fc:15:0b:f8:57:42:8a:0d: 15:df:9a:1a:45:28:8d:86:a9:e8:ee:63:83:8e:66:8b:80:a4: 4c:3c:21:6c:b1:6e:3f:d6:6b:05:19:80:a2:97:da:62:39:0f: c0:f1:62:13:61:fc:e6:ed:1c:8d:5e:13:cc:8a:24:46:b3:b4: 5f:1f:02:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvydILmbTwjytEvGSodOtgDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhMWE1MjFlYzEzMDMxNTI3ZDJmMmNhY2ZjODVlYjk5ZTQ4 NDEyNTYwHhcNMjYwMTI1MDAwMTIwWhcNMjYwMTI2MDAwMTIwWjAzMTEwLwYDVQQD EyhjNmY0YTgxMWM3YjEzZTEyOTM1NDViNWM0MWE2YWFkNDZiMWFmMTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO6MDBhgHFZ4Hkd66hvEU5SFkS7k ZDwr7sc0We1PQazcgfdY0eDHR5zkev7f7g96u/PLKeKbVBveE1EaeA8nDDSC8IVX 9Uk41R/CaTikj6UwMbkBib5IlyyWPtRDM04NRw9XGVHc4poX33/ep7wTWTmXA4R5 mh5U7RW653VRW2dWoxVug2Od29j9rphmr7ljOnlgqIRu9jKbKnaeWkWefXrCTQKp QSPXIxtpg06hotG4AhPx8QSVqP0GJGJjiTrETLmyA1gdScdtu0LCmjCSCmSzQlA9 1wg3Sz2JavL3O4hZHjNB+NUpGyY2g/kgKLsTfVkKnrBPvAKnMQfQ821cdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMb0qBHHsT4Sk1RbXEGmqtRrGvEAMB8GA1UdIwQY MBaAFNoaUh7BMDFSfS8srPyF65nkhBJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMt NWQ1YWVjMjBmYzlhLzEvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMtNWQ1YWVjMjBmYzlh LzEvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljZa27Yq q/pD4GqJAYaFvvyMkShDdHIXJDAYjHiT34fFfKiO3YgABuLe6DtTMolGFo2Z+eO2 KCi6gnWyUsZgEGRHHQUjPO9RdRBRWZVfLKPfA3M9fx9Il5QUBRtTmJZ9RQyLp9G7 Z2hgNWyvLwu/DB5jjub8E7YwXM/XTQe3D2dqkIEsJxSPmdrYTkb5I09O8PReFKD4 etipS18DFyqB5OkanQK/A4aruPETNqdXuytnjj0ZQUPd6jgJpmXYyPwVC/hXQooN Fd+aGkUojYap6O5jg45mi4CkTDwhbLFuP9ZrBRmAopfaYjkPwPFiE2H85u0cjV4T zIokRrO0Xx8Ckw== -----END CERTIFICATE-----Generated at Sun Jan 25 06:08:36 2026 by rpki-client