This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft File: 0deIJuFxfsmT62TdEYeHawZej1g.mft (raw, json) Hash identifier: Cejva6GRrPi88acNO4rOJoO2mJvDelFGEKeWx9yfRkw= Subject key identifier: 87:DA:C9:1D:0E:9A:AB:88:1C:5F:FC:BB:B5:0E:6A:C9:34:8E:06:8D Authority key identifier: D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58 Certificate issuer: /CN=d1d78826e1717ec993eb64dd1187876b065e8f58 Certificate serial: 019BF318D2BD6046EB87B4C213B3C25958F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft Manifest number: 0FAB Signing time: Sun 25 Jan 2026 03:00:48 +0000 Manifest this update: Sun 25 Jan 2026 03:00:48 +0000 Manifest next update: Mon 26 Jan 2026 03:00:48 +0000 Files and hashes: 1: 0deIJuFxfsmT62TdEYeHawZej1g.crl (hash: yJ9BIlhusQkeFznXznI11uHqkc3WPoLGQsuoirugcBY=) 2: 8zWkLs5MayVp3_SzYbBPRAvFDTs.roa (hash: UellUSwtPKZmjJ1D+Fmg+BloHauGtQEDG+FE5/v9Mm8=) 3: OaKg-lG-pzNmRpP7SDCitTlZaNo.roa (hash: 5+9V4WRdjlkj5ldl1qKFN9pvoMnzM+PUFUtZ5jME0PE=) 4: wA-hfRcLQDeGt5CtIuqae7_R8vk.roa (hash: /Y6WA6ClXm7DeMMUhB/vYFyvxO+T8Bk+qE5LtkXuWg8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:18:d2:bd:60:46:eb:87:b4:c2:13:b3:c2:59:58:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1d78826e1717ec993eb64dd1187876b065e8f58 Validity Not Before: Jan 25 03:00:48 2026 GMT Not After : Jan 26 03:00:48 2026 GMT Subject: CN=87dac91d0e9aab881c5ffcbbb50e6ac9348e068d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d1:35:8f:f0:d7:d4:0e:13:1a:cd:37:04:5b: 19:e1:c5:e2:53:b8:03:94:f4:dc:6b:fe:ea:7c:4e: 74:1d:ab:1e:a3:2d:d0:1b:cb:6c:8b:8c:1b:22:ae: 11:e1:ab:4b:38:5f:81:1d:52:7a:1e:b3:88:de:f3: e9:5a:be:bb:1a:b7:ad:70:03:de:13:7e:41:12:95: 13:7e:76:3f:3c:ab:7c:b6:f0:b0:d2:67:80:5f:d7: 91:cc:2a:d7:82:a7:ef:c0:91:c1:aa:43:6c:e0:2a: 58:a2:cb:1b:12:dc:52:71:8a:f7:8e:17:00:14:d4: 5b:40:0f:2e:6e:21:c8:c2:27:9f:83:ba:de:be:9f: 42:a9:18:f0:dd:fa:6c:fb:1a:3d:84:39:6a:af:4f: 6c:c7:69:96:52:6a:55:1f:be:04:e2:27:25:c5:04: 50:a1:4e:9c:df:52:a3:04:5a:be:5d:b5:7f:3f:53: e3:e2:ec:8e:aa:a7:8a:30:35:40:4a:33:59:e8:31: ab:76:1c:84:33:2a:09:7e:0b:9f:2b:28:b9:38:3a: 04:d7:88:3a:54:de:20:5d:18:d3:3c:a1:c3:0b:a9: b1:10:28:71:66:95:d6:0b:0b:fc:8a:78:ec:8d:05: f0:85:82:cd:f0:8b:33:ec:c5:3d:72:13:c0:22:98: 6a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DA:C9:1D:0E:9A:AB:88:1C:5F:FC:BB:B5:0E:6A:C9:34:8E:06:8D X509v3 Authority Key Identifier: keyid:D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:06:88:96:16:45:bc:cb:f5:33:c7:99:d3:dc:21:4b:3d:dd: e1:a7:46:23:4c:77:8f:8e:1d:20:69:22:75:2e:ea:3d:42:c0: da:d3:e2:c6:8e:17:e6:49:e0:ba:04:6b:40:d7:d5:27:1a:e1: 7e:10:68:2a:e5:cc:5d:c3:db:11:6c:46:e9:b5:b1:dd:bf:c9: 0a:c2:0c:6e:fd:bf:7e:a6:9d:6c:4d:45:fe:41:e1:24:a8:b1: 27:02:75:51:77:a9:4e:a7:4b:bc:b9:24:6a:a7:60:23:ec:a7: ca:c4:2a:d2:13:27:d0:d9:b3:b2:69:e9:e7:41:fb:a8:5a:eb: 10:18:86:ed:f3:4d:1b:ce:03:10:29:0f:82:05:7b:ee:f6:ab: c3:05:cf:b1:ed:fa:a9:27:da:6c:fc:e5:7b:58:bc:7a:27:78: 4c:5a:46:3a:24:85:30:56:e8:f4:a1:fb:2b:85:3c:2c:83:f2: c4:14:c8:c3:0d:4b:d0:d6:96:fa:1b:12:fb:2a:1c:5c:d7:6b: c1:81:69:60:bc:88:74:15:de:2b:e8:6e:bd:91:e4:d8:70:3d: 41:2f:ab:a1:d1:85:ad:a6:af:d2:ec:5f:e8:4b:3f:41:7e:71: ca:f9:a1:6d:c5:62:d9:e1:f3:16:e1:82:58:0b:a3:57:d9:c5: db:ce:15:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGNK9YEbrh7TCE7PCWVj5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZDc4ODI2ZTE3MTdlYzk5M2ViNjRkZDExODc4NzZiMDY1 ZThmNTgwHhcNMjYwMTI1MDMwMDQ4WhcNMjYwMTI2MDMwMDQ4WjAzMTEwLwYDVQQD Eyg4N2RhYzkxZDBlOWFhYjg4MWM1ZmZjYmJiNTBlNmFjOTM0OGUwNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9E1j/DX1A4TGs03BFsZ4cXiU7gD lPTca/7qfE50Haseoy3QG8tsi4wbIq4R4atLOF+BHVJ6HrOI3vPpWr67GretcAPe E35BEpUTfnY/PKt8tvCw0meAX9eRzCrXgqfvwJHBqkNs4CpYossbEtxScYr3jhcA FNRbQA8ubiHIwiefg7revp9CqRjw3fps+xo9hDlqr09sx2mWUmpVH74E4iclxQRQ oU6c31KjBFq+XbV/P1Pj4uyOqqeKMDVASjNZ6DGrdhyEMyoJfgufKyi5ODoE14g6 VN4gXRjTPKHDC6mxEChxZpXWCwv8injsjQXwhYLN8Isz7MU9chPAIphqBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfayR0OmquIHF/8u7UOask0jgaNMB8GA1UdIwQY MBaAFNHXiCbhcX7Jk+tk3RGHh2sGXo9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wZWViMmYtMWFhMC00NzYyLWI0ZTgt YjU5YzJhYzk1MWNiLzEvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8wZWViMmYtMWFhMC00NzYyLWI0ZTgtYjU5YzJhYzk1MWNi LzEvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaAaIlhZF vMv1M8eZ09whSz3d4adGI0x3j44dIGkidS7qPULA2tPixo4X5kngugRrQNfVJxrh fhBoKuXMXcPbEWxG6bWx3b/JCsIMbv2/fqadbE1F/kHhJKixJwJ1UXepTqdLvLkk aqdgI+ynysQq0hMn0Nmzsmnp50H7qFrrEBiG7fNNG84DECkPggV77varwwXPse36 qSfabPzle1i8eid4TFpGOiSFMFbo9KH7K4U8LIPyxBTIww1L0NaW+hsS+yocXNdr wYFpYLyIdBXeK+huvZHk2HA9QS+rodGFraav0uxf6Es/QX5xyvmhbcVi2eHzFuGC WAujV9nF284Vbg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:06:19 2026 by rpki-client