This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft File: RD7UrkP6GQwQ_SxToQ494KvZi3g.mft (raw, json) Hash identifier: cEQFNTwdtvxg4fQ5DvtvJIg//ZwmXtfocYgtCT0Bm3c= Subject key identifier: C4:CD:EE:4C:44:1B:66:58:F7:46:E0:16:78:50:D0:2A:5C:9C:9A:B8 Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78 Certificate issuer: /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78 Certificate serial: 019BF8ACFC3FF5D2B32E5472B0F2D2022274 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft Manifest number: 115F Signing time: Mon 26 Jan 2026 05:00:44 +0000 Manifest this update: Mon 26 Jan 2026 05:00:44 +0000 Manifest next update: Tue 27 Jan 2026 05:00:44 +0000 Files and hashes: 1: RD7UrkP6GQwQ_SxToQ494KvZi3g.crl (hash: paVK06DIOePEG70reiRq6kyddWvHcbJeiE6eBiMGrLo=) 2: xbkHK9BjxqqWppD29--gfkSmovk.roa (hash: hkkQkmlB4qFZaOaawyBYcXjPEkqDqcjHyvxZakCPMVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ac:fc:3f:f5:d2:b3:2e:54:72:b0:f2:d2:02:22:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78 Validity Not Before: Jan 26 05:00:44 2026 GMT Not After : Jan 27 05:00:44 2026 GMT Subject: CN=c4cdee4c441b6658f746e0167850d02a5c9c9ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:47:c4:8d:0d:60:69:37:86:f7:bc:47:89:ee: 74:b4:e9:57:8b:22:fd:a2:2d:3c:d0:22:f3:7a:6f: dc:5a:01:89:fe:5d:af:60:57:da:38:72:e3:bf:8f: 9c:a5:d9:a8:35:60:87:85:d0:89:68:11:85:76:87: 0f:bb:8a:a1:90:3c:24:26:d8:83:78:2e:af:62:52: 64:db:2e:fc:4d:4b:c0:8b:15:b4:e7:7e:b5:46:4d: 21:21:d0:01:17:42:4b:9c:b0:c2:41:75:9d:c2:8d: 57:5d:c1:00:57:43:33:59:f6:e9:09:8e:4e:26:bb: 87:f0:fc:c9:1c:55:45:98:fa:33:30:7c:4d:ad:9c: e1:22:58:a0:2e:ac:ac:a5:b0:39:f6:c8:5b:f2:73: 15:f8:1f:c9:e3:86:dd:5c:9e:7b:b3:7b:81:93:68: 22:ad:00:20:7d:7a:2f:f8:6a:39:5f:30:ac:d2:fd: 77:6c:49:63:5d:90:d0:01:b8:e3:77:85:22:77:9b: d1:48:de:05:4a:f9:89:c2:9a:be:96:31:a3:3d:63: d6:7a:16:d6:dd:e3:c1:4e:3e:2e:16:23:cc:18:fe: b8:79:fa:d8:4b:cb:6f:9c:b1:c1:c7:06:c8:40:2c: 83:63:1a:2b:bb:4c:2b:3b:6d:03:3d:4f:b3:8d:d1: 05:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CD:EE:4C:44:1B:66:58:F7:46:E0:16:78:50:D0:2A:5C:9C:9A:B8 X509v3 Authority Key Identifier: keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:41:4d:9b:ac:8f:5f:0a:86:8d:87:72:f0:76:76:21:9b:fc: 21:35:61:a0:71:a1:54:65:26:2b:3c:a7:8d:57:4b:89:9a:6d: f0:00:83:16:6a:cb:f9:c0:33:a9:3f:20:f0:18:33:8c:4a:55: 79:ec:03:67:d5:51:4b:1e:08:8e:38:79:e4:0c:99:8e:3f:2f: b1:9e:e2:f8:e8:80:55:4e:d1:74:e6:25:a1:42:6e:68:c6:e4: be:18:01:75:71:63:83:10:7f:ea:5c:80:62:aa:da:94:2b:bf: 4b:36:b3:fc:0b:e5:63:48:0c:f7:15:8e:9d:b7:54:a0:5b:cf: ba:e9:8f:21:f2:0d:78:f0:45:5c:29:4c:93:5d:55:17:ca:41: 65:d7:91:4b:9b:41:bc:e1:6c:6d:1a:a0:cd:89:74:10:dc:05: 71:fb:bb:25:13:98:63:a9:44:ca:a2:c5:e7:0e:ad:01:a2:4e: 64:5f:9f:e0:d1:ed:12:d1:a2:97:49:32:1b:47:5b:e6:78:19: ca:0a:70:6c:40:aa:da:3f:94:b3:73:61:78:93:83:c6:05:c5: 9b:73:aa:bd:f2:af:f6:f8:77:b8:eb:07:b3:86:99:bf:c6:e0: ba:a3:ba:6a:f2:cc:5b:5b:95:d9:ec:e9:9c:fb:3e:34:d8:ee: 89:2d:e4:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rPw/9dKzLlRysPLSAiJ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0M2VkNGFlNDNmYTE5MGMxMGZkMmM1M2ExMGUzZGUwYWJk OThiNzgwHhcNMjYwMTI2MDUwMDQ0WhcNMjYwMTI3MDUwMDQ0WjAzMTEwLwYDVQQD EyhjNGNkZWU0YzQ0MWI2NjU4Zjc0NmUwMTY3ODUwZDAyYTVjOWM5YWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA90fEjQ1gaTeG97xHie50tOlXiyL9 oi080CLzem/cWgGJ/l2vYFfaOHLjv4+cpdmoNWCHhdCJaBGFdocPu4qhkDwkJtiD eC6vYlJk2y78TUvAixW05361Rk0hIdABF0JLnLDCQXWdwo1XXcEAV0MzWfbpCY5O JruH8PzJHFVFmPozMHxNrZzhIligLqyspbA59shb8nMV+B/J44bdXJ57s3uBk2gi rQAgfXov+Go5XzCs0v13bEljXZDQAbjjd4Uid5vRSN4FSvmJwpq+ljGjPWPWehbW 3ePBTj4uFiPMGP64efrYS8tvnLHBxwbIQCyDYxoru0wrO20DPU+zjdEFNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTN7kxEG2ZY90bgFnhQ0CpcnJq4MB8GA1UdIwQY MBaAFEQ+1K5D+hkMEP0sU6EOPeCr2Yt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkQ3VXJrUDZHUXdRX1N4VG9RNDk0S3ZaaTNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85ODQxNWEtZjEyZS00YzFlLTg4MDYt MjFmZTVhZTllZjNiLzEvUkQ3VXJrUDZHUXdRX1N4VG9RNDk0S3ZaaTNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy85ODQxNWEtZjEyZS00YzFlLTg4MDYtMjFmZTVhZTllZjNi LzEvUkQ3VXJrUDZHUXdRX1N4VG9RNDk0S3ZaaTNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUFNm6yP XwqGjYdy8HZ2IZv8ITVhoHGhVGUmKzynjVdLiZpt8ACDFmrL+cAzqT8g8BgzjEpV eewDZ9VRSx4Ijjh55AyZjj8vsZ7i+OiAVU7RdOYloUJuaMbkvhgBdXFjgxB/6lyA YqralCu/Szaz/AvlY0gM9xWOnbdUoFvPuumPIfINePBFXClMk11VF8pBZdeRS5tB vOFsbRqgzYl0ENwFcfu7JROYY6lEyqLF5w6tAaJOZF+f4NHtEtGil0kyG0db5ngZ ygpwbECq2j+Us3NheJODxgXFm3OqvfKv9vh3uOsHs4aZv8bguqO6avLMW1uV2ezp nPs+NNjuiS3keQ== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:23 2026 by rpki-client