This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft File: ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft (raw, json) Hash identifier: UjpE8gNB3wP0mC/g/j1rjt0+6AkvxMJUiOHXiBAaWwU= Subject key identifier: C2:8B:1C:60:CA:E4:7A:85:D9:88:27:9E:00:2E:F3:CE:BA:3C:9C:46 Authority key identifier: AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34 Certificate issuer: /CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934 Certificate serial: 019BF53DE2A8DB12C4CE2AC3283F704076C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft Manifest number: 0CE4 Signing time: Sun 25 Jan 2026 13:00:32 +0000 Manifest this update: Sun 25 Jan 2026 13:00:32 +0000 Manifest next update: Mon 26 Jan 2026 13:00:32 +0000 Files and hashes: 1: 3GwgcAPKG43MCPD8y9300VUUE7U.roa (hash: InZ5p01xw0MRhLMDOeL96L2077Wx0d7vpVCiYPBd65g=) 2: IGazZEaa03q0gZwkZa-a01KbsAE.roa (hash: kHgUBuHcjhycij9YJiSSXrr0v5v65zQmDRpctF0dSM8=) 3: YR_Sklpw1rT1jn14ENZmY_YlgSc.roa (hash: a6i5iaFNJsMyMSeoRuHDFzGc9ROq7AMhUx/2K/zffhI=) 4: ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl (hash: ioPc/aupVb/9Nm/CYBufxzKJJaU6YYlr0M312jaFJIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3d:e2:a8:db:12:c4:ce:2a:c3:28:3f:70:40:76:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934 Validity Not Before: Jan 25 13:00:32 2026 GMT Not After : Jan 26 13:00:32 2026 GMT Subject: CN=c28b1c60cae47a85d988279e002ef3ceba3c9c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1c:27:db:41:cf:4a:36:1f:98:43:f3:15:57: 17:d5:96:ee:65:25:e7:a5:b5:42:a6:ad:89:19:e1: a8:26:4c:96:30:1f:f5:3f:19:e4:2b:63:3d:8f:69: 49:da:1c:2f:de:03:62:08:04:1f:55:bb:fb:85:d3: ef:31:18:b6:fb:c1:0c:4d:a7:72:08:6b:83:5d:c3: 17:9b:5f:e8:9f:c4:09:8f:cf:6e:61:50:6f:b5:0f: cd:50:52:9c:84:4c:c2:1e:79:38:5e:fc:f8:8f:4b: e5:5d:e7:de:fb:bf:4e:55:e2:fe:67:c0:90:77:df: 52:e4:74:4b:ce:41:a2:28:22:a2:b4:f4:03:c6:40: 58:ea:4d:09:d6:51:4f:ad:df:d1:f8:ae:ef:1c:83: 92:db:12:48:b2:69:88:02:99:db:43:9a:df:d3:94: 07:3c:f5:6c:09:71:b5:52:6c:19:b4:a6:81:23:11: 89:2e:60:42:60:5f:57:22:6a:63:83:12:85:94:7e: e9:fd:4e:bb:b4:86:c1:e1:46:2e:e3:9a:99:bc:19: 85:99:97:21:1d:78:75:22:58:ff:5d:d1:02:54:47: 52:0a:b1:89:e5:4a:99:97:a4:e9:ee:1b:b3:4c:f8: f4:37:6c:6a:65:1d:a1:3d:f4:83:73:32:e1:60:bc: 68:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:8B:1C:60:CA:E4:7A:85:D9:88:27:9E:00:2E:F3:CE:BA:3C:9C:46 X509v3 Authority Key Identifier: keyid:AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:e6:6c:f2:f2:5f:de:7d:13:f2:76:5a:be:d0:42:dd:17:f6: 5d:b4:f7:d5:ba:f3:c7:d4:35:91:f0:81:2b:57:12:d2:27:5e: 87:3d:7c:10:13:60:e1:99:d3:8c:e2:06:4e:e7:fe:a0:90:9e: 0f:93:1b:42:b8:76:a4:38:3e:01:37:71:96:44:35:6f:08:66: 7b:27:9e:eb:4e:c4:86:ce:ca:2f:14:8e:d2:8e:6c:be:f5:9c: 59:86:cd:87:f7:37:82:6c:78:7e:c2:12:fa:d3:05:96:bd:0a: bc:58:2b:94:0b:01:b8:a2:80:3b:59:3e:70:da:a0:8b:e4:7c: 13:6c:71:d1:4a:8d:f0:76:22:86:7d:d7:fb:e7:aa:2a:8e:f6: 09:a5:f5:87:2d:cf:e4:15:20:a4:c3:b6:1f:1a:5b:b7:22:53: a5:f6:22:ce:0c:07:f5:25:7e:04:4c:a4:28:ff:c3:84:61:6b: c7:d2:df:b8:3c:d9:c0:6d:77:9b:43:64:97:98:80:e5:64:1f: 95:88:f9:0c:2b:37:86:87:6c:e8:31:b4:bc:f8:6e:da:ce:5d: 06:9c:7e:1b:01:d7:59:5c:ed:50:ae:f6:57:df:41:ef:92:09: 4f:35:bb:69:76:5b:81:b4:f8:c4:bc:e2:8c:0a:60:b6:c0:b8: 77:41:4e:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PeKo2xLEzirDKD9wQHbEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlOGVkMzNiNzBiZTZjYzIwYzg5ZmJiYWM3N2E1OWNhM2I0 YzA5MzQwHhcNMjYwMTI1MTMwMDMyWhcNMjYwMTI2MTMwMDMyWjAzMTEwLwYDVQQD EyhjMjhiMWM2MGNhZTQ3YTg1ZDk4ODI3OWUwMDJlZjNjZWJhM2M5YzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Rwn20HPSjYfmEPzFVcX1ZbuZSXn pbVCpq2JGeGoJkyWMB/1PxnkK2M9j2lJ2hwv3gNiCAQfVbv7hdPvMRi2+8EMTady CGuDXcMXm1/on8QJj89uYVBvtQ/NUFKchEzCHnk4Xvz4j0vlXefe+79OVeL+Z8CQ d99S5HRLzkGiKCKitPQDxkBY6k0J1lFPrd/R+K7vHIOS2xJIsmmIApnbQ5rf05QH PPVsCXG1UmwZtKaBIxGJLmBCYF9XImpjgxKFlH7p/U67tIbB4UYu45qZvBmFmZch HXh1Ilj/XdECVEdSCrGJ5UqZl6Tp7huzTPj0N2xqZR2hPfSDczLhYLxoGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKLHGDK5HqF2YgnngAu8866PJxGMB8GA1UdIwQY MBaAFK6O0ztwvmzCDIn7usd6Wco7TAk0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm83VE8zQy1iTUlNaWZ1NngzcFp5anRNQ1RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iNzFkOWYtZjFkYS00MDBhLWI0ODUt MDRkYmM5YWMxNDQ0LzEvcm83VE8zQy1iTUlNaWZ1NngzcFp5anRNQ1RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9iNzFkOWYtZjFkYS00MDBhLWI0ODUtMDRkYmM5YWMxNDQ0 LzEvcm83VE8zQy1iTUlNaWZ1NngzcFp5anRNQ1RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+Zs8vJf 3n0T8nZavtBC3Rf2XbT31brzx9Q1kfCBK1cS0idehz18EBNg4ZnTjOIGTuf+oJCe D5MbQrh2pDg+ATdxlkQ1bwhmeyee607Ehs7KLxSO0o5svvWcWYbNh/c3gmx4fsIS +tMFlr0KvFgrlAsBuKKAO1k+cNqgi+R8E2xx0UqN8HYihn3X++eqKo72CaX1hy3P 5BUgpMO2HxpbtyJTpfYizgwH9SV+BEykKP/DhGFrx9LfuDzZwG13m0Nkl5iA5WQf lYj5DCs3hods6DG0vPhu2s5dBpx+GwHXWVztUK72V99B75IJTzW7aXZbgbT4xLzi jApgtsC4d0FOgw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:46 2026 by rpki-client