This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft File: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft (raw, json) Hash identifier: 0/jwhtYPMrvsU2nxOudZ951HHR+hQUHW28cDnLual7A= Subject key identifier: F3:AF:8C:5E:3B:3A:00:DB:4B:9B:E4:73:10:41:BC:DB:F8:4F:D9:9E Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56 Certificate issuer: /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756 Certificate serial: 019BF72CC6F6DA981AAC6A9E3936DA50DCB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 22:01:05 +0000 Manifest this update: Sun 25 Jan 2026 22:01:05 +0000 Manifest next update: Mon 26 Jan 2026 22:01:05 +0000 Files and hashes: 1: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl (hash: 9qRV7sVLgm09gz8jO4TUPRNL8AEzDJj5scjpXu7psbc=) 2: DCqk_IhQ4FSiE_K9oD22DV8FaxY.roa (hash: NtlKgarvCVLW792kP4u1993m8xjj7hSbfL1JoLagIyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:c6:f6:da:98:1a:ac:6a:9e:39:36:da:50:dc:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756 Validity Not Before: Jan 25 22:01:05 2026 GMT Not After : Jan 26 22:01:05 2026 GMT Subject: CN=f3af8c5e3b3a00db4b9be4731041bcdbf84fd99e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c0:8d:8c:75:30:03:0a:89:af:e6:dd:51:ca: 35:4a:c7:8d:93:3a:30:0d:3e:69:7d:8c:6a:5a:f4: f9:dd:4c:43:8f:8a:f2:7b:98:0b:e4:cb:11:0f:00: 12:3d:01:3e:d6:99:4e:f7:c6:ea:db:eb:b3:3e:2c: 6f:79:2d:90:f8:dc:f5:b8:4b:f7:ac:16:d3:2a:69: a1:10:61:d0:ca:3a:00:9e:34:d8:a1:ca:6d:c9:b5: 92:01:9e:83:0d:57:52:5b:18:7e:0c:1c:8a:ec:3e: dd:c4:12:81:0c:d0:ba:3a:70:f0:49:a3:32:84:4b: 43:74:03:21:a4:27:0c:47:11:e2:70:f1:f0:5d:b3: ff:a6:2c:a1:34:f8:28:72:03:ed:28:98:63:80:65: 93:3e:fa:72:73:81:77:16:e9:01:d2:f1:e1:96:dc: fb:f5:f3:19:8f:76:46:d4:24:90:b2:81:9a:dd:d4: 4d:97:4e:33:52:b5:5f:99:0a:f8:11:81:2b:eb:80: a5:19:7c:37:64:71:11:b7:86:80:59:10:1c:5a:5c: b2:35:ea:43:9f:eb:cc:6b:6d:4c:3c:ad:9e:12:58: c2:0d:b7:3f:c6:df:2d:b8:04:88:56:5c:2d:41:ec: dd:50:80:b4:1a:6c:92:a3:87:5b:22:62:13:5b:f0: 70:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AF:8C:5E:3B:3A:00:DB:4B:9B:E4:73:10:41:BC:DB:F8:4F:D9:9E X509v3 Authority Key Identifier: keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:dd:85:4f:4f:2b:fe:7d:5f:e8:be:4c:ad:23:53:2a:4f:cf: a4:a9:7d:d6:e0:3c:f1:f4:d5:64:61:46:02:c1:cc:d7:66:16: 76:5f:6a:d4:78:aa:d8:f1:d3:b2:dd:69:92:93:0e:63:64:d4: a1:f3:e1:ff:6c:3f:e0:64:58:9a:4d:09:b9:80:22:23:6b:8a: e9:39:7c:a1:17:57:f8:8c:0c:d5:dd:9d:21:24:1e:48:2b:21: 01:ac:c8:4c:c8:de:0d:10:ee:aa:da:fa:d6:27:18:8e:ee:d1: ce:74:93:b6:3b:05:12:dd:e3:e4:52:25:24:01:78:a7:81:7d: 6d:bf:33:b7:7b:78:60:0f:9a:2d:67:7a:e0:ac:21:da:c5:ef: f7:db:5f:f2:72:96:8d:fd:cb:ed:9c:d0:45:9b:8a:f1:62:8e: 8e:14:b8:76:6b:7c:95:36:3b:93:55:54:b7:04:be:44:6a:91: 65:21:da:55:a5:ce:bd:11:20:94:a7:99:c3:d7:2c:d9:38:c0: 5b:19:09:3a:85:8b:83:34:bf:53:5c:4e:76:fb:0d:e1:e5:1e: 34:e7:a2:08:f2:8f:33:a3:8f:3a:35:85:d8:64:b9:8d:7d:2e: 00:6a:d9:ad:91:41:f3:62:3c:28:7d:ed:0c:64:eb:c5:5f:49: 72:6a:6d:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LMb22pgarGqeOTbaUNy3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMmU5NWM0NTE5ZGU5MjA4ZTNkMjIzMzJhYWJlYzZiMWEy ZWE3NTYwHhcNMjYwMTI1MjIwMTA1WhcNMjYwMTI2MjIwMTA1WjAzMTEwLwYDVQQD EyhmM2FmOGM1ZTNiM2EwMGRiNGI5YmU0NzMxMDQxYmNkYmY4NGZkOTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8CNjHUwAwqJr+bdUco1SseNkzow DT5pfYxqWvT53UxDj4rye5gL5MsRDwASPQE+1plO98bq2+uzPixveS2Q+Nz1uEv3 rBbTKmmhEGHQyjoAnjTYocptybWSAZ6DDVdSWxh+DByK7D7dxBKBDNC6OnDwSaMy hEtDdAMhpCcMRxHicPHwXbP/piyhNPgocgPtKJhjgGWTPvpyc4F3FukB0vHhltz7 9fMZj3ZG1CSQsoGa3dRNl04zUrVfmQr4EYEr64ClGXw3ZHERt4aAWRAcWlyyNepD n+vMa21MPK2eEljCDbc/xt8tuASIVlwtQezdUIC0GmySo4dbImITW/Bw9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOvjF47OgDbS5vkcxBBvNv4T9meMB8GA1UdIwQY MBaAFNIulcRRnekgjj0iMyqr7GsaLqdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85OTE1M2QtNDcwMi00Mzc1LThlNDQt ZjJlNTRkZGVhM2IzLzEvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC85OTE1M2QtNDcwMi00Mzc1LThlNDQtZjJlNTRkZGVhM2Iz LzEvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAet2FT08r /n1f6L5MrSNTKk/PpKl91uA88fTVZGFGAsHM12YWdl9q1Hiq2PHTst1pkpMOY2TU ofPh/2w/4GRYmk0JuYAiI2uK6Tl8oRdX+IwM1d2dISQeSCshAazITMjeDRDuqtr6 1icYju7RznSTtjsFEt3j5FIlJAF4p4F9bb8zt3t4YA+aLWd64Kwh2sXv99tf8nKW jf3L7ZzQRZuK8WKOjhS4dmt8lTY7k1VUtwS+RGqRZSHaVaXOvREglKeZw9cs2TjA WxkJOoWLgzS/U1xOdvsN4eUeNOeiCPKPM6OPOjWF2GS5jX0uAGrZrZFB82I8KH3t DGTrxV9JcmptPA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:41 2026 by rpki-client