This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft File: 81TlIOe7fhP1Ms7PBagtK3l5UqI.mft (raw, json) Hash identifier: SeWxiABADvT+VoAzCtgmruCRFlxf+ZSU2Ks6OX2wLA8= Subject key identifier: EA:BC:F0:6C:50:C2:9F:95:53:C8:C0:E2:76:2E:6B:D5:4D:6B:D4:3B Authority key identifier: F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2 Certificate issuer: /CN=f354e520e7bb7e13f532cecf05a82d2b797952a2 Certificate serial: 019BF6BF1724F2A43D015E5B7E1D949C70BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft Manifest number: 0D41 Signing time: Sun 25 Jan 2026 20:01:16 +0000 Manifest this update: Sun 25 Jan 2026 20:01:16 +0000 Manifest next update: Mon 26 Jan 2026 20:01:16 +0000 Files and hashes: 1: 28zXLFeRXoHKQibLR_FN7To5SA4.roa (hash: 0h5lbt3CG3w27XHBcRA+PH1NQ7TLUhzbv0Xa/y3+zNw=) 2: 81TlIOe7fhP1Ms7PBagtK3l5UqI.crl (hash: onfxMHQC2LhbSmK5WwanPJzyjzPj59qGosN4PB1ExN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:17:24:f2:a4:3d:01:5e:5b:7e:1d:94:9c:70:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f354e520e7bb7e13f532cecf05a82d2b797952a2 Validity Not Before: Jan 25 20:01:16 2026 GMT Not After : Jan 26 20:01:16 2026 GMT Subject: CN=eabcf06c50c29f9553c8c0e2762e6bd54d6bd43b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:43:ce:59:9a:9e:0e:6e:eb:bf:e8:ca:9d:18: 8a:07:3d:5d:96:a6:8d:5a:30:91:86:9e:66:45:b9: de:6d:09:2f:e8:d2:96:51:5c:3f:20:2d:13:2d:1c: db:bd:43:bb:11:09:33:ca:8e:ab:94:82:c3:2c:2e: 11:28:da:df:70:40:5b:db:91:19:ba:de:fe:47:35: c5:2a:85:d4:2a:33:77:11:c9:16:37:a9:52:80:14: e0:8d:13:16:91:c5:e3:f0:2f:fa:3b:02:bf:88:fa: 1b:72:42:ab:2d:8e:76:30:a0:99:de:19:b7:86:62: 62:45:c4:06:38:01:bf:f4:ff:c3:b8:53:30:87:df: ac:3d:b4:4d:65:cc:f0:aa:c3:79:c1:3a:77:2b:37: 4d:a5:98:d8:41:b1:a5:df:aa:a9:5a:44:14:9d:58: e1:d2:c3:69:be:2e:89:fb:62:1a:ef:e4:b1:f1:46: 8c:e1:3f:2e:93:e0:b3:81:dd:74:c0:78:1d:3b:25: ec:e7:57:4c:7a:b2:8e:60:13:31:df:7a:0d:e7:80: 0b:31:57:a8:f4:96:7b:a8:88:7f:68:3f:9d:c6:f0: 20:ad:34:c6:8c:98:c4:00:9b:7d:c7:c8:53:0a:f4: d6:a0:28:c5:6e:23:6e:c9:c1:d3:67:c7:18:1f:32: 5e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BC:F0:6C:50:C2:9F:95:53:C8:C0:E2:76:2E:6B:D5:4D:6B:D4:3B X509v3 Authority Key Identifier: keyid:F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a0:72:55:2d:e3:e2:a4:45:a0:e0:15:4e:7e:bf:50:45:02: 26:8d:27:87:56:5f:09:b6:48:eb:65:b9:dd:5b:3d:48:11:b9: d0:d8:7b:62:f6:ab:a5:0f:b2:7b:77:0e:20:75:09:6b:a6:f5: f4:6d:7e:b1:ad:bf:d9:01:28:e3:c9:0b:71:6d:02:b2:d9:da: f4:6b:6a:05:ce:00:a5:02:7e:bf:d0:f7:fd:43:52:8a:62:da: ef:46:81:c5:a7:db:53:ac:96:6a:80:a3:c0:46:fd:c1:6f:36: f9:52:73:05:e2:e6:1c:07:6e:55:40:d3:46:39:72:f4:cf:41: b7:3f:70:6c:e9:ad:b7:5e:45:6c:71:38:a4:b6:e8:49:52:a1: 5f:8a:50:ae:66:d3:17:de:cb:29:72:a9:5d:7e:28:26:a1:bf: 5a:60:10:d3:f2:02:9a:12:20:de:71:c0:43:bc:1e:f3:fe:14: 45:89:17:0a:2b:e7:0a:e4:6f:06:19:a3:1b:5c:45:55:65:70: d1:45:64:4a:6d:2e:a2:96:45:66:5a:d2:ab:4c:22:2b:65:d2: 90:34:a0:23:a0:26:04:1f:dc:0d:d5:fb:b7:11:ed:1b:fc:14: fc:7a:69:2f:c3:4a:56:b4:83:9c:6b:20:81:f4:1c:4d:03:5c: c9:f0:73:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vxck8qQ9AV5bfh2UnHC+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNTRlNTIwZTdiYjdlMTNmNTMyY2VjZjA1YTgyZDJiNzk3 OTUyYTIwHhcNMjYwMTI1MjAwMTE2WhcNMjYwMTI2MjAwMTE2WjAzMTEwLwYDVQQD EyhlYWJjZjA2YzUwYzI5Zjk1NTNjOGMwZTI3NjJlNmJkNTRkNmJkNDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEPOWZqeDm7rv+jKnRiKBz1dlqaN WjCRhp5mRbnebQkv6NKWUVw/IC0TLRzbvUO7EQkzyo6rlILDLC4RKNrfcEBb25EZ ut7+RzXFKoXUKjN3EckWN6lSgBTgjRMWkcXj8C/6OwK/iPobckKrLY52MKCZ3hm3 hmJiRcQGOAG/9P/DuFMwh9+sPbRNZczwqsN5wTp3KzdNpZjYQbGl36qpWkQUnVjh 0sNpvi6J+2Ia7+Sx8UaM4T8uk+Czgd10wHgdOyXs51dMerKOYBMx33oN54ALMVeo 9JZ7qIh/aD+dxvAgrTTGjJjEAJt9x8hTCvTWoCjFbiNuycHTZ8cYHzJeewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOq88GxQwp+VU8jA4nYua9VNa9Q7MB8GA1UdIwQY MBaAFPNU5SDnu34T9TLOzwWoLSt5eVKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODFUbElPZTdmaFAxTXM3UEJhZ3RLM2w1VXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9jMmY2OWYtZWU4ZS00NzVhLTkwNzkt Y2E1MWZiMzBlZGRmLzEvODFUbElPZTdmaFAxTXM3UEJhZ3RLM2w1VXFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9jMmY2OWYtZWU4ZS00NzVhLTkwNzktY2E1MWZiMzBlZGRm LzEvODFUbElPZTdmaFAxTXM3UEJhZ3RLM2w1VXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKByVS3j 4qRFoOAVTn6/UEUCJo0nh1ZfCbZI62W53Vs9SBG50Nh7YvarpQ+ye3cOIHUJa6b1 9G1+sa2/2QEo48kLcW0Cstna9GtqBc4ApQJ+v9D3/UNSimLa70aBxafbU6yWaoCj wEb9wW82+VJzBeLmHAduVUDTRjly9M9Btz9wbOmtt15FbHE4pLboSVKhX4pQrmbT F97LKXKpXX4oJqG/WmAQ0/ICmhIg3nHAQ7we8/4URYkXCivnCuRvBhmjG1xFVWVw 0UVkSm0uopZFZlrSq0wiK2XSkDSgI6AmBB/cDdX7txHtG/wU/HppL8NKVrSDnGsg gfQcTQNcyfBz1Q== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:39 2026 by rpki-client