This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft File: bI5k4HENMvJqNtaM_3s_hqyCDOs.mft (raw, json) Hash identifier: WIuctGFZU3uQnoTdAyZfBgMMU0dC9HAhbgwOjS8KuxQ= Subject key identifier: 95:86:0B:78:FA:A0:D1:63:3D:0D:87:0B:76:DD:29:60:40:86:CD:58 Authority key identifier: 6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB Certificate issuer: /CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb Certificate serial: 019BF5079EC8CD4748FFE524826840543F11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft Manifest number: 025E Signing time: Sun 25 Jan 2026 12:01:15 +0000 Manifest this update: Sun 25 Jan 2026 12:01:15 +0000 Manifest next update: Mon 26 Jan 2026 12:01:15 +0000 Files and hashes: 1: 03NeIplATFDJWFtEuuQG-JYnRlE.roa (hash: 0PUjM3BFPHGxuy7ESUIjpYFstJbdDCjDTMV4Zmhng7M=) 2: bI5k4HENMvJqNtaM_3s_hqyCDOs.crl (hash: tjp9VOF/phaWUc9/uqf6ljTNr7QB1NFdVSUd+zaL8U4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:9e:c8:cd:47:48:ff:e5:24:82:68:40:54:3f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb Validity Not Before: Jan 25 12:01:15 2026 GMT Not After : Jan 26 12:01:15 2026 GMT Subject: CN=95860b78faa0d1633d0d870b76dd29604086cd58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b1:83:d4:77:c6:c1:dc:46:01:2e:7d:e3:9a: 71:21:f3:16:71:6a:3c:bc:7c:13:82:fd:55:49:70: 79:b3:52:ef:be:74:88:bb:58:e5:11:0c:b1:39:11: 58:83:d0:09:dc:52:cc:1d:4d:ea:40:54:5c:b4:0c: bc:76:f7:ab:b6:9c:b8:6c:b8:1d:c4:c4:c7:f4:2b: 02:09:ab:5d:d3:18:00:13:eb:11:d5:0e:00:07:64: ae:2c:90:fc:65:b1:b2:35:95:ac:b0:dd:41:6d:4a: 9c:8c:44:46:c2:7b:2b:c1:b1:cd:da:54:92:c8:bd: ca:da:c5:18:b1:f2:46:f0:ca:0b:f1:62:fe:5e:04: 45:8d:1f:2d:78:14:38:35:6e:68:ce:a7:13:27:f8: e0:24:b4:0d:c0:d2:a5:4b:8f:0c:c8:01:e0:2f:d1: 4c:4f:88:bc:56:8c:64:d2:30:be:3d:86:0a:94:da: c6:10:7b:c1:7f:36:74:57:7e:51:e2:c4:1e:40:42: d4:85:e4:69:54:c8:12:92:5c:6b:e3:d4:69:ad:8a: 24:d6:d3:ee:7a:6c:f2:1a:41:a4:42:35:0b:de:a9: 3f:04:f4:08:fe:8a:6c:aa:3b:be:bd:16:ec:26:45: e5:38:30:49:a5:cf:95:36:0e:a7:57:32:40:5e:15: 83:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:86:0B:78:FA:A0:D1:63:3D:0D:87:0B:76:DD:29:60:40:86:CD:58 X509v3 Authority Key Identifier: keyid:6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e8:a8:55:c5:f8:c2:d7:cf:3b:a8:b4:25:ae:b1:1f:aa:82: 73:11:df:fb:be:ce:96:8c:92:0f:45:5a:19:b7:5b:ea:62:58: 85:5b:70:9f:f3:67:5a:df:c9:45:54:d3:35:33:1e:ec:d6:43: 29:cf:c8:81:37:48:54:e5:3a:3d:27:3e:82:b9:17:b5:5e:6a: 53:00:20:7f:af:f8:94:9c:ef:5c:1c:63:9e:e2:50:3c:a8:23: 6b:ce:62:ac:b3:e8:85:74:2e:17:52:09:5d:17:bc:9f:f2:9b: 26:91:78:d3:34:2e:70:4a:8a:69:48:f3:ad:46:01:62:05:99: 04:4c:5a:0d:4f:41:ef:61:56:26:ac:b0:32:56:50:00:91:c9: dd:52:e9:58:36:da:70:fb:67:c8:c7:a6:0c:e6:fa:79:39:16: 80:79:5e:d8:fa:5b:d8:74:a6:62:cc:c1:02:46:39:16:3f:d9: 10:bf:b3:fa:10:b8:a0:8b:bb:ab:34:eb:0f:45:83:79:9d:b7: 68:67:3c:ce:27:4c:f3:97:89:b3:af:4b:5b:24:f5:c1:19:d1: b3:ed:3f:b8:37:fd:e4:12:6e:c1:54:12:0c:d9:8d:89:f8:d8: 7c:d1:49:74:56:66:aa:b9:ec:37:1f:41:2f:bf:8c:2c:b0:3d: 3c:18:a8:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B57IzUdI/+UkgmhAVD8RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGU2NGUwNzEwZDMyZjI2YTM2ZDY4Y2ZmN2IzZjg2YWM4 MjBjZWIwHhcNMjYwMTI1MTIwMTE1WhcNMjYwMTI2MTIwMTE1WjAzMTEwLwYDVQQD Eyg5NTg2MGI3OGZhYTBkMTYzM2QwZDg3MGI3NmRkMjk2MDQwODZjZDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLGD1HfGwdxGAS5945pxIfMWcWo8 vHwTgv1VSXB5s1LvvnSIu1jlEQyxORFYg9AJ3FLMHU3qQFRctAy8dvertpy4bLgd xMTH9CsCCatd0xgAE+sR1Q4AB2SuLJD8ZbGyNZWssN1BbUqcjERGwnsrwbHN2lSS yL3K2sUYsfJG8MoL8WL+XgRFjR8teBQ4NW5ozqcTJ/jgJLQNwNKlS48MyAHgL9FM T4i8Voxk0jC+PYYKlNrGEHvBfzZ0V35R4sQeQELUheRpVMgSklxr49RprYok1tPu emzyGkGkQjUL3qk/BPQI/opsqju+vRbsJkXlODBJpc+VNg6nVzJAXhWDeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWGC3j6oNFjPQ2HC3bdKWBAhs1YMB8GA1UdIwQY MBaAFGyOZOBxDTLyajbWjP97P4asggzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkk1azRIRU5NdkpxTnRhTV8zc19ocXlDRE9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83YmUxYWEtNWIwNS00NzUzLWI3ZDgt YjhiYjlkN2RhMmRiLzEvYkk1azRIRU5NdkpxTnRhTV8zc19ocXlDRE9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC83YmUxYWEtNWIwNS00NzUzLWI3ZDgtYjhiYjlkN2RhMmRi LzEvYkk1azRIRU5NdkpxTnRhTV8zc19ocXlDRE9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+ioVcX4 wtfPO6i0Ja6xH6qCcxHf+77OloySD0VaGbdb6mJYhVtwn/NnWt/JRVTTNTMe7NZD Kc/IgTdIVOU6PSc+grkXtV5qUwAgf6/4lJzvXBxjnuJQPKgja85irLPohXQuF1IJ XRe8n/KbJpF40zQucEqKaUjzrUYBYgWZBExaDU9B72FWJqywMlZQAJHJ3VLpWDba cPtnyMemDOb6eTkWgHle2Ppb2HSmYszBAkY5Fj/ZEL+z+hC4oIu7qzTrD0WDeZ23 aGc8zidM85eJs69LWyT1wRnRs+0/uDf95BJuwVQSDNmNifjYfNFJdFZmqrnsNx9B L7+MLLA9PBioJA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:37 2026 by rpki-client