This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft File: 66jbO1TQgcML9Rvcexnk9kgLf1M.mft (raw, json) Hash identifier: 3XJY7tFr4NYvUbt1F8Zaj5j6ngo0RShZ5ZCwWQ6MDcg= Subject key identifier: 5B:08:0C:88:46:0B:23:1E:21:0E:0B:4E:D5:09:9A:B3:63:BA:78:53 Authority key identifier: EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53 Certificate issuer: /CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53 Certificate serial: 019BF462B408113548AE061CFABE2F26BA75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft Manifest number: 12C7 Signing time: Sun 25 Jan 2026 09:01:07 +0000 Manifest this update: Sun 25 Jan 2026 09:01:07 +0000 Manifest next update: Mon 26 Jan 2026 09:01:07 +0000 Files and hashes: 1: 66jbO1TQgcML9Rvcexnk9kgLf1M.crl (hash: D+SQfeoW/r5966SdK4GbiHc1hsmKfGaTNx4kK2b0sAA=) 2: JTmHSniL19sfbMbH8Ye17j9afA0.roa (hash: NJ1K/kjPj+5282ppidKGTbSxnlHWPqBZ+E9JpQMjbSA=) 3: _gDnsGaDxX5qfjhTgT91rNbt8PQ.roa (hash: chKbqu7AGPQnm2cfa+TKPacAMDJqQQv70h7pTEPw45U=) 4: gDmNfyo2pwQXQHNPMBhDcPR1ut8.roa (hash: e/eKhQXOYdcX2mvHX19L23nQ2fqxt3RSAqyp2KP3N3o=) 5: nbBdckUEspBVGSHKC4SpFpPe-2o.roa (hash: GNVJtI2mfDROc5AVzq7KuYAoChVGFURdFa/LW7JWb7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:b4:08:11:35:48:ae:06:1c:fa:be:2f:26:ba:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53 Validity Not Before: Jan 25 09:01:07 2026 GMT Not After : Jan 26 09:01:07 2026 GMT Subject: CN=5b080c88460b231e210e0b4ed5099ab363ba7853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f7:0f:f2:ea:b5:9c:b3:20:83:e6:75:cf:5b: fe:37:30:67:3d:54:39:44:86:9a:76:e2:b0:07:fc: 79:fc:4e:7f:23:9d:f1:ce:d7:7e:22:95:1f:e8:25: b2:2f:52:80:c2:ac:1e:7a:2b:59:a7:07:04:f4:6c: 05:00:31:6d:95:57:6a:34:39:44:30:6c:8e:f4:fa: 1c:1e:1c:69:d6:b0:be:ed:27:22:f1:22:7e:d1:9e: ca:dc:62:27:e6:d5:3f:86:56:f2:71:f6:9e:1e:3f: 7a:34:25:ea:ff:05:6a:93:e1:43:ff:5c:ae:fb:f8: 2b:0e:3d:7d:56:28:76:78:22:f9:60:58:c0:25:fc: d0:4a:7c:a0:7a:2d:ba:fd:4d:3c:81:f4:b4:17:0b: 65:f8:20:bd:d9:fc:dd:71:4c:2b:0c:28:58:ab:7c: 5a:93:e2:04:10:c9:23:3c:5b:6e:85:b7:40:0e:6f: 73:01:4e:a5:5e:56:f0:b6:4b:ec:27:ee:15:99:16: f2:09:12:ce:3d:2b:3a:4d:8b:ae:9d:63:a2:b8:85: 77:d1:0a:6d:4f:f6:29:93:e9:1c:e3:da:d1:9f:ec: 87:0d:1e:06:96:37:22:13:51:5a:28:49:73:85:37: 2d:85:4c:2e:39:e1:1d:35:9c:e7:85:52:1b:68:07: c4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:08:0C:88:46:0B:23:1E:21:0E:0B:4E:D5:09:9A:B3:63:BA:78:53 X509v3 Authority Key Identifier: keyid:EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:97:a7:70:bd:1e:ef:86:0c:bb:cc:af:83:81:aa:7e:35:4a: 8c:c7:9e:a8:3c:8e:3f:56:e2:50:bc:7b:04:64:fd:17:30:93: c4:42:6f:3d:51:6a:ec:dd:72:54:e0:84:26:90:3b:a2:bc:28: 03:68:bc:d5:25:93:7f:f5:57:8d:bc:ef:16:0f:0e:cb:e7:4a: a4:24:d3:ca:b2:16:7d:37:ed:35:6b:3e:a7:93:86:98:d5:8d: 05:b9:e8:11:fe:6f:ac:d2:85:10:99:a2:0c:30:ba:91:31:7b: 48:a2:ae:06:36:c6:04:e8:d1:69:c1:77:c3:42:9d:75:a6:af: 26:a7:66:97:87:60:da:7c:25:c7:1b:c4:b4:98:8b:d6:94:6b: 0a:43:ba:10:0a:b8:8d:a5:9e:22:a8:ce:05:ad:5c:c0:39:55: 39:18:5f:b0:89:77:cf:b7:bd:50:42:37:b5:a9:de:1b:57:88: cc:90:c3:b9:64:b9:31:f3:c5:14:c1:76:2e:2c:8f:e7:31:fc: d9:2d:23:0e:27:8a:eb:b2:3e:56:9b:9f:5e:99:5f:7c:59:de: 03:a1:5a:c7:19:d2:ec:82:5a:45:d6:bd:f7:8d:00:f1:b4:2d: 42:5c:4a:a1:01:18:c8:96:c3:15:ca:2f:32:47:1c:5f:6e:97: c7:ad:f8:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YrQIETVIrgYc+r4vJrp1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYThkYjNiNTRkMDgxYzMwYmY1MWJkYzdiMTllNGY2NDgw YjdmNTMwHhcNMjYwMTI1MDkwMTA3WhcNMjYwMTI2MDkwMTA3WjAzMTEwLwYDVQQD Eyg1YjA4MGM4ODQ2MGIyMzFlMjEwZTBiNGVkNTA5OWFiMzYzYmE3ODUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/cP8uq1nLMgg+Z1z1v+NzBnPVQ5 RIaaduKwB/x5/E5/I53xztd+IpUf6CWyL1KAwqweeitZpwcE9GwFADFtlVdqNDlE MGyO9PocHhxp1rC+7Sci8SJ+0Z7K3GIn5tU/hlbycfaeHj96NCXq/wVqk+FD/1yu +/grDj19Vih2eCL5YFjAJfzQSnygei26/U08gfS0Fwtl+CC92fzdcUwrDChYq3xa k+IEEMkjPFtuhbdADm9zAU6lXlbwtkvsJ+4VmRbyCRLOPSs6TYuunWOiuIV30Qpt T/Ypk+kc49rRn+yHDR4GljciE1FaKElzhTcthUwuOeEdNZznhVIbaAfEgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsIDIhGCyMeIQ4LTtUJmrNjunhTMB8GA1UdIwQY MBaAFOuo2ztU0IHDC/Ub3HsZ5PZIC39TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjZqYk8xVFFnY01MOVJ2Y2V4bms5a2dMZjFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82Y2NmMDMtMDkwZC00MTZlLTg2Y2Yt ZTlkYzNmMWNmODI0LzEvNjZqYk8xVFFnY01MOVJ2Y2V4bms5a2dMZjFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi82Y2NmMDMtMDkwZC00MTZlLTg2Y2YtZTlkYzNmMWNmODI0 LzEvNjZqYk8xVFFnY01MOVJ2Y2V4bms5a2dMZjFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5encL0e 74YMu8yvg4GqfjVKjMeeqDyOP1biULx7BGT9FzCTxEJvPVFq7N1yVOCEJpA7orwo A2i81SWTf/VXjbzvFg8Oy+dKpCTTyrIWfTftNWs+p5OGmNWNBbnoEf5vrNKFEJmi DDC6kTF7SKKuBjbGBOjRacF3w0KddaavJqdml4dg2nwlxxvEtJiL1pRrCkO6EAq4 jaWeIqjOBa1cwDlVORhfsIl3z7e9UEI3taneG1eIzJDDuWS5MfPFFMF2LiyP5zH8 2S0jDieK67I+VpufXplffFneA6FaxxnS7IJaRda9940A8bQtQlxKoQEYyJbDFcov MkccX26Xx634yw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:41 2026 by rpki-client