This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft File: r0b7jUGkckKuPujOHw-o74EWmLU.mft (raw, json) Hash identifier: BOaoPESjpep0LpX8UclAf6Qi+Nt3D2+JhJKHCUBEfj0= Subject key identifier: 8B:ED:3D:F9:5D:16:2A:D2:7F:70:C3:20:04:23:7C:51:47:D2:88:0F Authority key identifier: AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5 Certificate issuer: /CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5 Certificate serial: 019BF4CFFF72ECFDDA483E06EB75A26788E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 11:00:30 +0000 Manifest this update: Sun 25 Jan 2026 11:00:30 +0000 Manifest next update: Mon 26 Jan 2026 11:00:30 +0000 Files and hashes: 1: WBZ4Ns1KlqrebDqaMN4GOQg5rUw.roa (hash: yOstMXBtzsYtaixKzlv1YIAu5cES+ZEO3HPCVKprX3s=) 2: r0b7jUGkckKuPujOHw-o74EWmLU.crl (hash: V41tqT2tz1zRRBGJfYyy7nNemDURVmFoxRcbGj65l3k=) 3: y_vc6s_Py2qwffoPUemYyQ3C93I.roa (hash: jTDTDDTAp7a9jlbajKDV/IreUhiB7BfxphmCimNa3V0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:cf:ff:72:ec:fd:da:48:3e:06:eb:75:a2:67:88:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5 Validity Not Before: Jan 25 11:00:30 2026 GMT Not After : Jan 26 11:00:30 2026 GMT Subject: CN=8bed3df95d162ad27f70c32004237c5147d2880f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bf:99:5d:8a:49:69:78:4d:d7:c4:bd:95:5b: f1:13:39:48:9f:99:d1:cd:24:67:49:cc:1b:ad:0d: e6:33:e6:66:b7:a1:8b:33:45:50:96:6c:d9:ac:a4: 2c:26:21:70:c7:a2:63:7c:2f:7a:00:fb:43:fc:72: 26:5e:96:8b:9c:80:99:42:10:5c:a9:ba:75:4b:ad: 63:6b:5e:f7:c3:c2:74:73:6b:e0:7d:5e:fb:69:7e: 3f:fa:fa:f0:17:46:11:e2:9d:bd:99:69:80:88:9a: 3b:e8:96:d2:18:96:ab:35:ed:fb:b7:5a:85:5c:c3: 53:a4:91:bf:3a:c3:96:ff:6e:1b:ce:f1:0f:6e:08: 52:2a:5a:f9:ee:02:72:44:69:d9:6a:1a:50:15:be: 6b:ed:c4:d3:26:bb:c9:40:69:0d:37:64:e3:04:33: 08:aa:fc:4f:c4:89:c6:c8:12:06:12:18:ae:5e:9c: f9:38:ea:1f:b3:e8:43:60:44:d8:b5:da:5f:40:1a: d1:58:97:ef:cc:d3:92:a4:ee:ef:7e:60:c9:9e:d6: db:1d:4d:ca:67:ee:be:2b:67:de:44:be:e3:73:76: b3:a4:d8:6f:0a:de:11:b5:9f:b9:9d:90:40:43:51: 98:cb:a5:47:4c:91:c7:ef:70:e3:a5:20:02:a5:32: 38:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:ED:3D:F9:5D:16:2A:D2:7F:70:C3:20:04:23:7C:51:47:D2:88:0F X509v3 Authority Key Identifier: keyid:AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:2a:56:6a:f9:9f:1e:ad:9b:18:b8:97:b2:56:4b:b3:f4:7a: 7a:14:7c:45:0d:bd:f1:b9:cc:ac:d7:66:87:8e:b4:e8:30:2c: c4:bb:84:64:b4:65:92:5f:87:dc:9e:02:b0:0b:0b:a5:82:51: 1d:7c:5a:a4:c4:8a:5c:c1:e1:4b:62:e8:62:26:a5:01:45:a0: 21:f2:18:3a:08:c3:16:9b:82:52:fd:f6:49:fe:ef:4f:e9:09: 5f:16:31:b5:92:2d:29:a4:bf:ba:10:d9:4b:cf:3a:99:a3:a1: 13:e0:95:29:cb:25:44:49:8c:86:20:3d:ea:5a:dc:94:8d:2f: 67:83:73:dc:c5:0a:8f:17:12:e4:4e:31:27:06:b8:7b:32:4d: a6:dc:99:46:fc:9b:c4:fa:73:a5:4a:35:c1:8e:57:24:ee:aa: 6c:ac:49:7a:2a:44:9f:7b:df:4f:69:c9:0e:f3:98:35:1e:2f: 67:8e:ee:e9:00:1c:ec:bd:8a:3c:ff:13:50:04:ff:a2:d0:51: 17:12:e7:f4:1b:e1:7c:bb:8b:10:de:ab:db:fb:47:7f:7a:61: f4:b9:9e:e5:d9:d3:d4:d2:ce:74:0b:db:aa:82:b0:15:48:6f: 54:61:9f:e9:2b:86:bd:23:8a:f2:45:d8:f8:5d:95:a6:89:1e: 80:31:fc:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0z/9y7P3aSD4G63WiZ4jiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNDZmYjhkNDFhNDcyNDJhZTNlZThjZTFmMGZhOGVmODEx Njk4YjUwHhcNMjYwMTI1MTEwMDMwWhcNMjYwMTI2MTEwMDMwWjAzMTEwLwYDVQQD Eyg4YmVkM2RmOTVkMTYyYWQyN2Y3MGMzMjAwNDIzN2M1MTQ3ZDI4ODBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb+ZXYpJaXhN18S9lVvxEzlIn5nR zSRnScwbrQ3mM+Zmt6GLM0VQlmzZrKQsJiFwx6JjfC96APtD/HImXpaLnICZQhBc qbp1S61ja173w8J0c2vgfV77aX4/+vrwF0YR4p29mWmAiJo76JbSGJarNe37t1qF XMNTpJG/OsOW/24bzvEPbghSKlr57gJyRGnZahpQFb5r7cTTJrvJQGkNN2TjBDMI qvxPxInGyBIGEhiuXpz5OOofs+hDYETYtdpfQBrRWJfvzNOSpO7vfmDJntbbHU3K Z+6+K2feRL7jc3azpNhvCt4RtZ+5nZBAQ1GYy6VHTJHH73DjpSACpTI4WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvtPfldFirSf3DDIAQjfFFH0ogPMB8GA1UdIwQY MBaAFK9G+41BpHJCrj7ozh8PqO+BFpi1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kODI3NWUtYzQ3OS00ZWQ4LWJlZWEt ZGE4OWVkMmViNTVlLzEvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9kODI3NWUtYzQ3OS00ZWQ4LWJlZWEtZGE4OWVkMmViNTVl LzEvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCpWavmf Hq2bGLiXslZLs/R6ehR8RQ298bnMrNdmh4606DAsxLuEZLRlkl+H3J4CsAsLpYJR HXxapMSKXMHhS2LoYialAUWgIfIYOgjDFpuCUv32Sf7vT+kJXxYxtZItKaS/uhDZ S886maOhE+CVKcslREmMhiA96lrclI0vZ4Nz3MUKjxcS5E4xJwa4ezJNptyZRvyb xPpzpUo1wY5XJO6qbKxJeipEn3vfT2nJDvOYNR4vZ47u6QAc7L2KPP8TUAT/otBR FxLn9BvhfLuLEN6r2/tHf3ph9Lme5dnT1NLOdAvbqoKwFUhvVGGf6SuGvSOK8kXY +F2VpokegDH86w== -----END CERTIFICATE-----Generated at Sun Jan 25 20:53:05 2026 by rpki-client