This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft File: 2rU_myHRPgeOPoRNZF7qhYDxzOE.mft (raw, json) Hash identifier: MpjEITCGSC/aRr0sWbsAbLSMc2B3nA09pOdtK2aoOZk= Subject key identifier: 83:09:6B:86:0E:CE:A4:A1:A1:F6:73:A2:76:4B:84:3C:52:28:E4:34 Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1 Certificate issuer: /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1 Certificate serial: 019BF68852115D3C9269B6446760B081891C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 19:01:27 +0000 Manifest this update: Sun 25 Jan 2026 19:01:27 +0000 Manifest next update: Mon 26 Jan 2026 19:01:27 +0000 Files and hashes: 1: 2rU_myHRPgeOPoRNZF7qhYDxzOE.crl (hash: 1gk53y6AePa7qMLLhic9ufy8fuBHGBPDP4HQDYC2O1g=) 2: pZ9C3CmkxrOGsoj0mtQVOZi53qw.roa (hash: sgsuQe2msoFiMDKKrbbPAUnLjdv7QmZ0qLU2RSe/3FQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:52:11:5d:3c:92:69:b6:44:67:60:b0:81:89:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1 Validity Not Before: Jan 25 19:01:27 2026 GMT Not After : Jan 26 19:01:27 2026 GMT Subject: CN=83096b860ecea4a1a1f673a2764b843c5228e434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8e:05:40:63:34:67:13:0f:6f:a5:b5:16:4b: 0b:1a:73:f0:34:fe:70:47:bb:42:f8:cf:20:5d:ab: ad:4f:18:c9:fd:3b:3a:bd:b5:d4:6b:21:10:2a:3a: 50:71:7d:f2:25:0d:3a:35:e3:32:23:ad:dd:58:32: 3b:37:20:76:d5:3a:02:46:98:72:74:50:e3:71:a6: 95:94:75:8f:01:0e:93:6f:54:67:e1:36:20:5b:d9: 16:56:e1:a9:4f:52:11:1b:67:f6:66:e2:7b:a1:d7: 4d:d7:ce:ce:af:31:a1:18:02:f3:0f:b7:60:2d:92: 87:2b:23:13:f0:d7:88:fb:5a:46:93:6a:93:02:f8: a3:d7:c9:6e:72:cb:46:d9:b9:78:da:80:7a:91:2e: 8e:d2:f8:9b:df:33:e7:75:eb:bd:a8:2d:50:bf:15: 87:5d:60:8f:8a:b7:7a:fc:0a:66:e3:71:4d:46:32: e7:77:a6:41:06:9e:33:f6:7f:3e:78:ab:3d:e4:4e: 46:8d:cb:07:cf:24:54:55:68:b2:94:cc:b0:7c:92: 28:35:13:1d:53:08:af:82:27:d5:05:c6:56:dd:25: 10:32:26:3a:43:05:d1:37:9a:e2:26:7f:d8:13:08: 29:c1:d9:71:78:b7:12:9d:ed:c5:92:1c:0a:60:80: 99:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:09:6B:86:0E:CE:A4:A1:A1:F6:73:A2:76:4B:84:3C:52:28:E4:34 X509v3 Authority Key Identifier: keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:b8:7a:7f:a9:2d:ad:ba:49:30:ff:6d:ae:3e:f1:7f:31:c2: b3:60:f3:bb:1d:51:0e:93:17:41:4c:c1:f0:cf:cd:57:f6:45: 80:fe:e8:e9:a1:f2:de:ba:39:16:05:25:0c:d1:e7:6e:ed:c6: 63:27:e5:83:a3:a8:cc:e2:b0:c1:f2:61:4e:04:29:4c:8e:c7: cf:a6:59:89:47:3d:42:c9:79:6f:a7:80:0f:d7:42:e5:b3:82: 48:04:d2:1c:cd:75:38:36:ac:1f:a6:a7:ed:62:6d:73:7a:62: 96:a3:5c:f9:3c:b0:f7:11:11:d0:d4:a9:bb:da:60:2a:0d:ef: 7b:51:8b:75:3e:a9:2f:15:e1:53:b5:26:7e:9b:a8:8e:11:f6: 81:83:da:c7:43:58:6a:62:80:f0:82:ea:14:29:80:0b:76:5c: 7a:8c:5f:7e:75:a5:21:7d:9f:3c:11:63:d9:e5:02:31:0c:fd: 5f:0b:0c:fb:48:c6:3c:cc:a4:1c:18:7e:fd:f2:16:c9:56:5f: 56:e2:f2:e8:5f:81:c8:77:b6:b7:de:ef:50:e8:e1:4a:b5:4c: 79:97:4d:e4:0e:1f:ce:87:64:0a:8a:3d:cb:e7:b1:aa:9a:a1: 74:01:6a:5a:47:56:47:75:27:54:71:fb:00:c7:91:60:0e:9b: f3:34:26:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iFIRXTySabZEZ2CwgYkcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYjUzZjliMjFkMTNlMDc4ZTNlODQ0ZDY0NWVlYTg1ODBm MWNjZTEwHhcNMjYwMTI1MTkwMTI3WhcNMjYwMTI2MTkwMTI3WjAzMTEwLwYDVQQD Eyg4MzA5NmI4NjBlY2VhNGExYTFmNjczYTI3NjRiODQzYzUyMjhlNDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY4FQGM0ZxMPb6W1FksLGnPwNP5w R7tC+M8gXautTxjJ/Ts6vbXUayEQKjpQcX3yJQ06NeMyI63dWDI7NyB21ToCRphy dFDjcaaVlHWPAQ6Tb1Rn4TYgW9kWVuGpT1IRG2f2ZuJ7oddN187OrzGhGALzD7dg LZKHKyMT8NeI+1pGk2qTAvij18lucstG2bl42oB6kS6O0vib3zPndeu9qC1QvxWH XWCPird6/Apm43FNRjLnd6ZBBp4z9n8+eKs95E5GjcsHzyRUVWiylMywfJIoNRMd UwivgifVBcZW3SUQMiY6QwXRN5riJn/YEwgpwdlxeLcSne3FkhwKYICZxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMJa4YOzqShofZzonZLhDxSKOQ0MB8GA1UdIwQY MBaAFNq1P5sh0T4Hjj6ETWRe6oWA8czhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi83ZjlhYjEtYmM3Yy00ZDBkLWE5NzAt NWI4YmM1OTBiMTk3LzEvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi83ZjlhYjEtYmM3Yy00ZDBkLWE5NzAtNWI4YmM1OTBiMTk3 LzEvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7h6f6kt rbpJMP9trj7xfzHCs2Dzux1RDpMXQUzB8M/NV/ZFgP7o6aHy3ro5FgUlDNHnbu3G Yyflg6OozOKwwfJhTgQpTI7Hz6ZZiUc9Qsl5b6eAD9dC5bOCSATSHM11ODasH6an 7WJtc3pilqNc+Tyw9xER0NSpu9pgKg3ve1GLdT6pLxXhU7UmfpuojhH2gYPax0NY amKA8ILqFCmAC3ZceoxffnWlIX2fPBFj2eUCMQz9XwsM+0jGPMykHBh+/fIWyVZf VuLy6F+ByHe2t97vUOjhSrVMeZdN5A4fzodkCoo9y+exqpqhdAFqWkdWR3UnVHH7 AMeRYA6b8zQmzA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:57:03 2026 by rpki-client