This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft File: d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft (raw, json) Hash identifier: 8Yz0lH0wtUzzdBvkWBMvYiJlPIeTKcmTQqleOVycMlo= Subject key identifier: FE:3A:3E:97:E4:DD:CF:F4:1D:DF:36:6E:1F:78:17:C6:DC:95:AE:A7 Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b Certificate serial: 019BF2E218DE3E522FCD8CAB89C707DBC9D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft Manifest number: 0FC0 Signing time: Sun 25 Jan 2026 02:01:02 +0000 Manifest this update: Sun 25 Jan 2026 02:01:02 +0000 Manifest next update: Mon 26 Jan 2026 02:01:02 +0000 Files and hashes: 1: 4M2FZJ_malg21FggGlSZSd1W8P0.roa (hash: F8TuWYRz6uOK+UBaBz3FW9/6TCuZtRQDI5xUdN8xfwk=) 2: 91KPHlggwTaeQm7B9Z-AqzP9EBQ.roa (hash: IkXK2vJL4pQnTxIekZE8OSCq0z8UL2BTuoyyjhTkN4c=) 3: AOSmkpfSOFbjllRlkR-Fn2Na0J8.roa (hash: R7ujwir+23h2sfZusY8cXn1txSjNrZOQvbvn6Spqcws=) 4: SOoKX4cNuYJIPao636suM6QbecU.roa (hash: AmP+tcOlMZhqBPlPO/PnVy1DrGZoadzcvOYUXfRfWD8=) 5: XcYNBEw5dI4P7WTbqRWSPyRybiI.roa (hash: E4xzF5lwUKPn995lmHotzwtaddtV5FgAyRurLOmyZe8=) 6: d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl (hash: /bBOAb6tNHT6zohZMqwSRTnCxQ+Q98r+o33IUOlBhnk=) 7: ve-jf9EP-jZkCjaun2Gx06psfDo.roa (hash: 5muddW+OaJvatwuoYErV6aaVeMSYh2Ga8iL+J5a6G3k=) 8: xdAaexAUdUDttJM21F7tUlAz2vs.roa (hash: VedRkQ44jOEPcPIUd0dHiyi/hpTJ8KF1xUzmzLpT6Aw=) 9: zqP1vyWLDjvVNdqwed1bkObGG6A.roa (hash: j6evToeWCAWj3WCNLWp+qsnH494XqRvy37QXgbtw5Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e2:18:de:3e:52:2f:cd:8c:ab:89:c7:07:db:c9:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b Validity Not Before: Jan 25 02:01:02 2026 GMT Not After : Jan 26 02:01:02 2026 GMT Subject: CN=fe3a3e97e4ddcff41ddf366e1f7817c6dc95aea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a7:15:c1:36:86:15:f0:4e:4a:fe:ec:00:10: b6:ee:94:78:a0:7c:5b:9e:28:55:fb:88:63:1a:97: c2:92:df:17:a9:34:38:bd:55:2e:1b:1c:17:cb:ca: e6:8f:a1:5c:f2:fc:58:d8:9b:19:5f:b9:10:f0:89: bf:5c:4f:d6:36:30:77:cf:2e:f1:7f:ea:ec:fa:5f: cd:73:e2:0b:9a:29:a5:3d:a2:2c:41:89:f8:4c:00: 1c:6e:5e:45:85:04:18:5c:b4:74:4a:33:c6:ec:b9: 58:a1:fd:2f:f6:bf:67:f3:0f:e0:c8:ed:e6:b3:de: 50:13:e1:93:b3:0b:c4:d8:56:0d:bc:e2:50:c9:3a: 02:34:9f:da:27:7f:d7:3d:ee:ab:45:47:7e:8d:36: 6c:f9:eb:7a:bf:60:d6:5a:f5:b1:b7:26:1e:74:84: fe:4d:01:b8:b2:2c:84:f9:7d:cc:29:84:01:db:cc: 45:47:64:99:a2:25:f6:84:14:bb:21:bf:34:1d:f3: a3:aa:6e:ed:ef:65:b2:a0:b7:5c:c4:5c:b8:30:ae: b9:96:61:c0:c5:e0:e4:b5:2d:7e:4d:f7:20:50:c3: 8d:b7:fc:9e:bb:fa:42:5b:32:9c:44:7d:34:d5:1c: 8a:0f:ff:e7:80:af:4e:aa:21:77:34:5b:0e:e0:8b: 91:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:3A:3E:97:E4:DD:CF:F4:1D:DF:36:6E:1F:78:17:C6:DC:95:AE:A7 X509v3 Authority Key Identifier: keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:cf:58:e4:a6:0b:82:84:29:ed:a9:14:a2:9a:cf:1a:b3:a9: 86:70:9b:a4:40:a8:3e:68:de:59:eb:b1:d0:38:1d:58:f9:b3: d8:35:cf:25:3c:f4:d9:13:cf:51:51:01:c8:bd:55:99:c9:25: d6:9c:81:ba:5a:07:33:6b:0b:d4:ca:6a:1a:0f:4d:25:96:95: af:fa:5d:82:70:39:c8:cd:cf:e4:9c:6b:71:03:88:32:28:18: b8:0e:1c:28:7f:b7:bd:58:fa:f0:ad:b1:13:44:12:25:73:05: 2e:4c:90:de:2a:97:bc:cc:5a:10:c2:f6:da:f4:7b:c2:50:12: 70:74:95:d6:af:c4:5e:26:e0:4c:d7:cd:16:d8:c1:fb:96:30: 30:28:fe:91:d4:3f:66:2c:16:3f:0e:ce:b4:a7:8f:49:ca:1f: 62:b7:c3:eb:7f:e5:eb:07:a2:ec:48:38:c2:de:48:32:76:df: e9:cd:6a:a4:c6:ec:a5:c2:c4:6b:23:ed:2b:1b:b2:e7:21:06: 25:55:87:9a:e0:8c:31:32:1c:a1:ab:86:a1:49:59:09:99:c7: b0:2e:e8:01:c8:75:c8:63:51:46:fd:0d:4a:73:1e:0c:85:00: 23:64:6b:be:b0:db:b3:89:19:ae:20:99:fd:0c:05:6a:67:dd: 84:13:15:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4hjePlIvzYyriccH28nRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZWRhOGY3MjZhNjliNTA0ZGU5OTQ5NDNiMGE1ZjIzMDhj MmE5NmIwHhcNMjYwMTI1MDIwMTAyWhcNMjYwMTI2MDIwMTAyWjAzMTEwLwYDVQQD EyhmZTNhM2U5N2U0ZGRjZmY0MWRkZjM2NmUxZjc4MTdjNmRjOTVhZWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qcVwTaGFfBOSv7sABC27pR4oHxb nihV+4hjGpfCkt8XqTQ4vVUuGxwXy8rmj6Fc8vxY2JsZX7kQ8Im/XE/WNjB3zy7x f+rs+l/Nc+ILmimlPaIsQYn4TAAcbl5FhQQYXLR0SjPG7LlYof0v9r9n8w/gyO3m s95QE+GTswvE2FYNvOJQyToCNJ/aJ3/XPe6rRUd+jTZs+et6v2DWWvWxtyYedIT+ TQG4siyE+X3MKYQB28xFR2SZoiX2hBS7Ib80HfOjqm7t72WyoLdcxFy4MK65lmHA xeDktS1+TfcgUMONt/yeu/pCWzKcRH001RyKD//ngK9OqiF3NFsO4IuRbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP46Ppfk3c/0Hd82bh94F8bcla6nMB8GA1UdIwQY MBaAFHftqPcmpptQTemUlDsKXyMIwqlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTkt NjA4NGNmYzZlNGM0LzEvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTktNjA4NGNmYzZlNGM0 LzEvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACM9Y5KYL goQp7akUoprPGrOphnCbpECoPmjeWeux0DgdWPmz2DXPJTz02RPPUVEByL1Vmckl 1pyBuloHM2sL1MpqGg9NJZaVr/pdgnA5yM3P5JxrcQOIMigYuA4cKH+3vVj68K2x E0QSJXMFLkyQ3iqXvMxaEML22vR7wlAScHSV1q/EXibgTNfNFtjB+5YwMCj+kdQ/ ZiwWPw7OtKePScofYrfD63/l6wei7Eg4wt5IMnbf6c1qpMbspcLEayPtKxuy5yEG JVWHmuCMMTIcoauGoUlZCZnHsC7oAch1yGNRRv0NSnMeDIUAI2RrvrDbs4kZriCZ /QwFamfdhBMVEg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:24:08 2026 by rpki-client