This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft File: 0dI-JBGcupM36DRmSFv7EGsuJLY.mft (raw, json) Hash identifier: S1rSiKQDg62st2vXYD7RMlsgTd6lIgHyAtxss9aUZoI= Subject key identifier: 07:5D:D3:C4:BE:AA:15:6F:78:3C:0C:1B:E0:7B:2B:1D:AF:63:B3:54 Authority key identifier: D1:D2:3E:24:11:9C:BA:93:37:E8:34:66:48:5B:FB:10:6B:2E:24:B6 Certificate issuer: /CN=d1d23e24119cba9337e83466485bfb106b2e24b6 Certificate serial: 019BF951A35A3C69282273AE613BD500AD37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft Manifest number: 0232 Signing time: Mon 26 Jan 2026 08:00:35 +0000 Manifest this update: Mon 26 Jan 2026 08:00:35 +0000 Manifest next update: Tue 27 Jan 2026 08:00:35 +0000 Files and hashes: 1: 0dI-JBGcupM36DRmSFv7EGsuJLY.crl (hash: mi4irVv6IGDL8uYed9B9RSB8hDRoPvCkcyscdUHSEfE=) 2: GBJ2X2TfbSwmmzgVVsME19XqtSw.roa (hash: 8eDDx0cI0Ia4YPWxch5djmmuUUa69P9GBwa1jUZnCWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.crl rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft rsync://rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:a3:5a:3c:69:28:22:73:ae:61:3b:d5:00:ad:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1d23e24119cba9337e83466485bfb106b2e24b6 Validity Not Before: Jan 26 08:00:35 2026 GMT Not After : Jan 27 08:00:35 2026 GMT Subject: CN=075dd3c4beaa156f783c0c1be07b2b1daf63b354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:51:04:e8:f3:e7:e3:89:94:35:97:e3:76:81: 84:84:71:8d:f8:a0:e4:22:f0:ef:58:92:4f:f7:8b: 02:9f:6d:bd:81:7f:be:32:23:49:13:82:40:3e:93: b6:14:cc:c9:bb:63:13:e0:c2:6d:f2:a1:26:ae:f4: 3e:b6:36:cb:07:91:fa:f9:85:50:43:96:3f:c3:3e: ed:cd:46:1c:87:b3:1d:9a:c9:70:49:18:dc:cd:d5: 6a:e2:3d:03:fc:75:e4:13:1a:04:99:9f:28:80:d7: f5:9c:a9:87:8d:0e:ed:90:ce:b9:3b:b9:cb:4d:f5: 51:06:61:c3:a8:4d:e8:4b:20:fe:df:71:c1:4d:48: d7:ca:7b:be:a2:fb:f2:d8:1a:9a:18:73:bb:aa:af: a2:96:d3:cf:76:97:da:0e:85:b7:09:18:9b:27:f6: 0a:e6:11:45:9b:c5:cf:72:59:42:7b:2e:54:7e:92: 9c:d2:f5:25:35:e6:1f:d5:6a:46:0a:4f:6d:ed:0b: ca:a6:8c:2b:77:25:b4:e8:06:7d:2e:1a:ee:09:5b: 66:f6:bd:0f:0d:3c:7a:28:1a:cf:52:f4:94:c5:c7: 3d:c6:4d:68:9e:f3:9e:d6:29:ee:53:7a:e3:26:5b: d4:a5:be:02:ae:e2:a4:4a:94:7f:21:e5:98:95:87: 80:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5D:D3:C4:BE:AA:15:6F:78:3C:0C:1B:E0:7B:2B:1D:AF:63:B3:54 X509v3 Authority Key Identifier: keyid:D1:D2:3E:24:11:9C:BA:93:37:E8:34:66:48:5B:FB:10:6B:2E:24:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dI-JBGcupM36DRmSFv7EGsuJLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/0dI-JBGcupM36DRmSFv7EGsuJLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:90:9e:f6:03:00:3a:9b:df:01:92:92:f4:15:a3:a6:41:94: a8:1a:aa:c8:ab:df:fc:94:f3:a0:ba:3a:8b:5a:78:cc:cf:d7: 6d:d9:f7:8c:ff:02:d6:d3:53:c6:d8:83:ed:99:77:f8:5e:43: b6:6f:80:b6:de:f2:18:11:05:c6:eb:b5:13:6c:2a:aa:c3:09: 22:bd:0d:19:ca:ef:d5:14:d4:bf:89:b7:c5:c5:d6:75:69:44: 2e:b1:d7:44:7c:06:54:ec:d4:06:bd:80:54:b9:7d:f0:68:32: 80:0e:ee:ce:e5:2d:6f:69:a6:90:a4:80:23:9d:0b:60:fd:85: c2:2f:29:23:ac:f6:9d:d7:3e:e6:43:4e:54:43:3d:aa:c4:f0: b1:3a:fe:1a:2f:07:89:eb:07:62:85:ef:e2:96:79:a9:49:a5: 92:1a:d4:a3:b1:48:cb:fe:1c:d8:2e:f5:24:b3:c0:4a:db:da: 45:c6:5a:9f:b3:60:81:5e:20:8e:19:cf:bb:02:38:52:63:c2: 62:63:86:35:ea:c3:23:0a:75:d5:3e:38:53:26:27:8d:00:8a: 8d:ba:7d:ca:d0:62:75:a0:33:36:a3:3b:89:06:04:11:15:1f: 68:92:8f:26:48:67:18:0e:e7:61:70:9c:4c:de:2f:81:ac:37: 4b:5a:f3:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UaNaPGkoInOuYTvVAK03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZDIzZTI0MTE5Y2JhOTMzN2U4MzQ2NjQ4NWJmYjEwNmIy ZTI0YjYwHhcNMjYwMTI2MDgwMDM1WhcNMjYwMTI3MDgwMDM1WjAzMTEwLwYDVQQD EygwNzVkZDNjNGJlYWExNTZmNzgzYzBjMWJlMDdiMmIxZGFmNjNiMzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVEE6PPn44mUNZfjdoGEhHGN+KDk IvDvWJJP94sCn229gX++MiNJE4JAPpO2FMzJu2MT4MJt8qEmrvQ+tjbLB5H6+YVQ Q5Y/wz7tzUYch7MdmslwSRjczdVq4j0D/HXkExoEmZ8ogNf1nKmHjQ7tkM65O7nL TfVRBmHDqE3oSyD+33HBTUjXynu+ovvy2BqaGHO7qq+iltPPdpfaDoW3CRibJ/YK 5hFFm8XPcllCey5UfpKc0vUlNeYf1WpGCk9t7QvKpowrdyW06AZ9LhruCVtm9r0P DTx6KBrPUvSUxcc9xk1onvOe1inuU3rjJlvUpb4CruKkSpR/IeWYlYeAiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdd08S+qhVveDwMG+B7Kx2vY7NUMB8GA1UdIwQY MBaAFNHSPiQRnLqTN+g0Zkhb+xBrLiS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGRJLUpCR2N1cE0zNkRSbVNGdjdFR3N1SkxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82YzQwNjQtODUwMy00ZDE2LTkzNTQt NzRkNGU1YjAxYzM1LzEvMGRJLUpCR2N1cE0zNkRSbVNGdjdFR3N1SkxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy82YzQwNjQtODUwMy00ZDE2LTkzNTQtNzRkNGU1YjAxYzM1 LzEvMGRJLUpCR2N1cE0zNkRSbVNGdjdFR3N1SkxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJCe9gMA OpvfAZKS9BWjpkGUqBqqyKvf/JTzoLo6i1p4zM/Xbdn3jP8C1tNTxtiD7Zl3+F5D tm+Att7yGBEFxuu1E2wqqsMJIr0NGcrv1RTUv4m3xcXWdWlELrHXRHwGVOzUBr2A VLl98GgygA7uzuUtb2mmkKSAI50LYP2Fwi8pI6z2ndc+5kNOVEM9qsTwsTr+Gi8H iesHYoXv4pZ5qUmlkhrUo7FIy/4c2C71JLPAStvaRcZan7NggV4gjhnPuwI4UmPC YmOGNerDIwp11T44UyYnjQCKjbp9ytBidaAzNqM7iQYEERUfaJKPJkhnGA7nYXCc TN4vgaw3S1rzWQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:18:41 2026 by rpki-client