This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json) Hash identifier: bntSaJLX+iifnva60vrpQR7hHiOkdAWuxMw+lgmHXEk= Subject key identifier: A2:29:5E:8D:75:B4:28:A8:7A:AA:36:1E:87:E6:D1:25:2D:55:E6:BE Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1 Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1 Certificate serial: 019BF575856E244E90E208D7B82C97C0B298 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft Manifest number: 0A7D Signing time: Sun 25 Jan 2026 14:01:18 +0000 Manifest this update: Sun 25 Jan 2026 14:01:18 +0000 Manifest next update: Mon 26 Jan 2026 14:01:18 +0000 Files and hashes: 1: 47eNEnd2Os7C6QxYIyUWjsK8BKI.roa (hash: bDQzx2pBpkbEKRLQU7MeWz1QEtEvCpVdSiUpwkOWRQM=) 2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: xGzp1Kk3Zx2c0ua0vi76Kk2J+R8+LOMhfUNTNDPZXgQ=) 3: Go8PchMmH9McisfgXlxtAWx-1sM.roa (hash: x553Jvx/smgcuhkg3Q3Px6o0g0MKgX3bIXb9nbTnt8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:85:6e:24:4e:90:e2:08:d7:b8:2c:97:c0:b2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1 Validity Not Before: Jan 25 14:01:18 2026 GMT Not After : Jan 26 14:01:18 2026 GMT Subject: CN=a2295e8d75b428a87aaa361e87e6d1252d55e6be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:50:29:85:37:18:ca:5e:1e:7a:af:64:43: ee:f0:27:f6:35:3a:52:94:fd:10:75:0c:0b:2e:f8: de:2e:c8:16:62:a3:58:ac:55:4e:20:0a:14:c1:7a: ae:5c:27:90:a8:0b:2b:67:f9:5a:71:b9:97:cf:75: bb:8b:e1:2d:e6:d7:dd:f0:02:c0:13:e9:72:f8:19: 92:cc:f5:1e:09:f7:59:af:6e:9b:3a:fb:64:66:2f: bf:d3:01:c3:65:f0:43:b2:48:31:07:a2:1e:fb:aa: 3d:1d:b4:51:02:5a:fc:2a:cd:e3:f3:97:f7:57:23: a1:93:d3:ff:64:c1:e4:15:51:f9:85:ad:3b:5a:90: 5c:12:a2:66:f0:ef:da:7b:19:53:d8:ba:3f:b0:81: d1:b6:e6:fd:be:5f:d2:ef:e7:fc:17:d5:dd:fe:34: 57:37:8d:0f:cc:df:7e:83:fd:eb:d3:2c:0d:c3:fd: 3d:df:bd:ba:db:c0:25:4b:92:8e:2f:d4:f0:c2:0e: 31:37:34:cd:0c:47:d6:51:f6:b5:de:86:96:72:e8: e1:b6:9b:c3:3e:e7:10:5c:32:56:f0:73:61:af:4e: 08:e2:c6:a5:df:fa:65:50:d8:ad:54:3a:a1:5d:14: 38:e7:1e:f6:8a:11:15:4f:9e:5c:95:ad:8b:0c:63: 52:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:29:5E:8D:75:B4:28:A8:7A:AA:36:1E:87:E6:D1:25:2D:55:E6:BE X509v3 Authority Key Identifier: keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:b2:bf:cb:54:49:d4:43:be:b6:74:e0:8e:78:6d:c8:21:75: 80:e8:ad:00:84:b8:8c:88:fb:0c:6b:d6:75:4f:f7:02:dc:51: f9:2c:66:c4:6d:ea:6e:4c:c3:4f:5a:f4:80:88:e8:22:d0:25: 30:4e:6b:55:6b:28:67:1e:5f:4f:c5:7f:93:c8:24:63:20:25: 09:62:72:9e:13:05:44:6f:4e:73:40:68:15:c8:80:78:d9:b2: 7f:3a:0c:26:02:8a:a9:09:0e:1f:de:9e:d4:08:5b:cf:9e:86: 71:9e:7d:ab:46:f6:b9:ac:fc:e5:f9:df:c6:30:b2:b5:b9:b7: 92:56:a5:ec:a2:7b:cd:c5:bd:fb:ca:cd:26:51:f1:fa:53:80: 02:39:7d:df:ee:d3:b7:a3:89:89:7f:1a:fc:5f:23:d3:86:21: 9f:46:c3:0f:e4:71:03:8a:04:c7:be:a8:ed:b6:38:98:b0:dc: 81:12:5b:22:6c:e9:fc:fc:c9:05:94:9b:10:df:ef:d4:aa:09: 32:ab:85:2f:8d:79:e1:16:4b:50:9f:29:10:08:ab:13:05:86: 1e:fe:4f:a7:d5:96:8f:3b:92:d8:a0:bd:42:0a:a8:76:b9:9a: d5:67:ab:12:5d:79:f7:f2:19:ec:c0:28:be:08:91:b1:0d:e6: 5f:f1:9d:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dYVuJE6Q4gjXuCyXwLKYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNmYxZTlmMDk1MGU0ZjM5YzljNWZlZTNmODY4YTI0ZWIz NjFlZjEwHhcNMjYwMTI1MTQwMTE4WhcNMjYwMTI2MTQwMTE4WjAzMTEwLwYDVQQD EyhhMjI5NWU4ZDc1YjQyOGE4N2FhYTM2MWU4N2U2ZDEyNTJkNTVlNmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwpQKYU3GMpeHnqvZEPu8Cf2NTpS lP0QdQwLLvjeLsgWYqNYrFVOIAoUwXquXCeQqAsrZ/lacbmXz3W7i+Et5tfd8ALA E+ly+BmSzPUeCfdZr26bOvtkZi+/0wHDZfBDskgxB6Ie+6o9HbRRAlr8Ks3j85f3 VyOhk9P/ZMHkFVH5ha07WpBcEqJm8O/aexlT2Lo/sIHRtub9vl/S7+f8F9Xd/jRX N40PzN9+g/3r0ywNw/09372628AlS5KOL9Twwg4xNzTNDEfWUfa13oaWcujhtpvD PucQXDJW8HNhr04I4sal3/plUNitVDqhXRQ45x72ihEVT55cla2LDGNS+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIpXo11tCioeqo2Hofm0SUtVea+MB8GA1UdIwQY MBaAFAtvHp8JUOTznJxf7j+GiiTrNh7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lNjliZDMtMjE1ZS00NDIyLTkxNzAt MDgxYmNiYWM0ZGFmLzEvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lNjliZDMtMjE1ZS00NDIyLTkxNzAtMDgxYmNiYWM0ZGFm LzEvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxLK/y1RJ 1EO+tnTgjnhtyCF1gOitAIS4jIj7DGvWdU/3AtxR+SxmxG3qbkzDT1r0gIjoItAl ME5rVWsoZx5fT8V/k8gkYyAlCWJynhMFRG9Oc0BoFciAeNmyfzoMJgKKqQkOH96e 1Ahbz56GcZ59q0b2uaz85fnfxjCytbm3klal7KJ7zcW9+8rNJlHx+lOAAjl93+7T t6OJiX8a/F8j04Yhn0bDD+RxA4oEx76o7bY4mLDcgRJbImzp/PzJBZSbEN/v1KoJ MquFL4154RZLUJ8pEAirEwWGHv5Pp9WWjzuS2KC9Qgqodrma1WerEl159/IZ7MAo vgiRsQ3mX/Gd6A== -----END CERTIFICATE-----Generated at Sun Jan 25 16:46:07 2026 by rpki-client