This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft File: 25ebiYwPWDTLyDimmgXjq-jAKQM.mft (raw, json) Hash identifier: oPaGBvx5vt2XZ+R2mf+gRrNwJvPK0Ebhdlb6j2y9WqE= Subject key identifier: 0F:AE:00:37:07:EC:7D:13:5D:60:B0:A5:D7:CA:C5:B5:F7:8C:AE:DA Authority key identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03 Certificate issuer: /CN=db979b898c0f5834cbc838a69a05e3abe8c02903 Certificate serial: 019BF687BA4DB17B08C45407CF34D698252B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft Manifest number: 0B7B Signing time: Sun 25 Jan 2026 19:00:48 +0000 Manifest this update: Sun 25 Jan 2026 19:00:48 +0000 Manifest next update: Mon 26 Jan 2026 19:00:48 +0000 Files and hashes: 1: 25ebiYwPWDTLyDimmgXjq-jAKQM.crl (hash: ng+ZRyVBSXzNe3HnmsiXhLamekVmCFNN9hfUCFjnxpo=) 2: FjKOaSffmodjULE60Uqyds_9UrY.roa (hash: Cvv1kQqsgheFH6HLElDwGFzdf6a+v+I+lfZ3+Gpg/Ko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:ba:4d:b1:7b:08:c4:54:07:cf:34:d6:98:25:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db979b898c0f5834cbc838a69a05e3abe8c02903 Validity Not Before: Jan 25 19:00:48 2026 GMT Not After : Jan 26 19:00:48 2026 GMT Subject: CN=0fae003707ec7d135d60b0a5d7cac5b5f78caeda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:68:18:7a:d5:e2:54:b0:de:3f:41:f5:ed:72: df:54:9a:48:e3:5e:68:99:37:fc:f8:f2:26:be:da: 61:2f:f7:e5:ba:68:b7:03:56:bc:24:a8:fa:d2:b8: 82:f0:35:28:48:55:7f:ec:60:ad:35:d5:85:bd:ba: 15:42:40:34:c5:a1:e4:85:32:42:31:95:c6:06:be: 87:88:eb:d6:f4:c7:48:d6:ac:f5:56:2f:e1:ba:ca: 16:f7:08:84:b5:97:ee:43:4c:18:0e:41:86:f8:bf: 90:2b:d7:29:47:9c:a6:ee:5d:f6:5b:4d:87:e4:8c: be:6e:69:11:60:ea:e7:35:7f:18:12:d9:07:a5:82: 0c:f6:8b:73:73:e7:bb:46:47:a6:5d:62:c5:70:32: 3c:99:47:ea:21:52:1c:34:4b:87:c7:96:c1:56:9c: 38:26:71:e9:c0:5b:77:c5:a6:12:1f:85:d9:e6:a5: 39:d4:49:3d:d9:55:28:08:55:5d:d5:94:70:91:cd: 61:ee:c0:80:dd:f2:b0:36:95:4b:33:73:59:03:a4: 26:54:a3:4b:51:ea:76:d5:6b:9d:24:00:34:c0:c8: 14:36:da:6b:05:fc:af:e9:f4:0e:d9:7d:a4:61:76: 58:2d:cb:10:58:b3:94:4e:1c:9f:3d:2d:dc:7f:df: bf:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AE:00:37:07:EC:7D:13:5D:60:B0:A5:D7:CA:C5:B5:F7:8C:AE:DA X509v3 Authority Key Identifier: keyid:DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:b9:f9:49:49:d6:a7:d1:8a:a0:91:ec:a4:86:4a:39:75:e2: 15:e0:3d:25:7a:e9:95:ca:c6:78:99:e7:e9:43:ba:29:e0:e0: 44:24:b2:21:85:05:3e:2d:82:54:bf:85:d1:9b:40:a5:87:5d: 65:26:eb:3a:52:c2:09:7f:d9:59:85:ae:65:00:e2:97:dd:e2: 24:3d:d2:8f:db:84:f0:ac:9b:01:42:47:d2:b1:74:92:1e:63: b7:cd:b4:49:e6:dd:4d:fa:04:b7:24:20:9a:3a:a1:e1:24:dd: 27:da:c0:21:9f:12:a0:eb:83:9d:b3:bc:0d:18:9b:f8:07:e2: 30:2d:bb:ad:6f:33:c1:bf:84:9c:d8:de:2e:c1:34:37:4b:1a: 3a:af:2b:6b:de:dc:47:dd:e2:d9:4a:f1:6f:3a:6f:6d:c3:41: e8:65:bb:c6:01:3b:0e:ee:af:0a:21:40:84:89:b3:83:ad:c5: 43:b1:9f:37:a6:29:d8:8a:87:57:0f:70:3e:92:f3:b8:ed:c0: 9b:ef:45:6e:ce:44:39:f8:8e:41:35:ef:ac:5b:27:6e:18:e4: 84:0e:c1:e3:3a:13:be:79:38:30:36:bc:e3:fb:c4:db:8b:1f: b3:a6:e2:05:c8:cf:79:a5:4c:09:96:f9:58:f4:d6:26:f7:26: 24:70:ac:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h7pNsXsIxFQHzzTWmCUrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOTc5Yjg5OGMwZjU4MzRjYmM4MzhhNjlhMDVlM2FiZThj MDI5MDMwHhcNMjYwMTI1MTkwMDQ4WhcNMjYwMTI2MTkwMDQ4WjAzMTEwLwYDVQQD EygwZmFlMDAzNzA3ZWM3ZDEzNWQ2MGIwYTVkN2NhYzViNWY3OGNhZWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGgYetXiVLDeP0H17XLfVJpI415o mTf8+PImvtphL/flumi3A1a8JKj60riC8DUoSFV/7GCtNdWFvboVQkA0xaHkhTJC MZXGBr6HiOvW9MdI1qz1Vi/husoW9wiEtZfuQ0wYDkGG+L+QK9cpR5ym7l32W02H 5Iy+bmkRYOrnNX8YEtkHpYIM9otzc+e7RkemXWLFcDI8mUfqIVIcNEuHx5bBVpw4 JnHpwFt3xaYSH4XZ5qU51Ek92VUoCFVd1ZRwkc1h7sCA3fKwNpVLM3NZA6QmVKNL Uep21WudJAA0wMgUNtprBfyv6fQO2X2kYXZYLcsQWLOUThyfPS3cf9+/owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+uADcH7H0TXWCwpdfKxbX3jK7aMB8GA1UdIwQY MBaAFNuXm4mMD1g0y8g4ppoF46vowCkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjVlYmlZd1BXRFRMeURpbW1nWGpxLWpBS1FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kNWZkZTYtMTk1MS00N2I4LWEzMjUt NGNiMjU3ZWUxOTJjLzEvMjVlYmlZd1BXRFRMeURpbW1nWGpxLWpBS1FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kNWZkZTYtMTk1MS00N2I4LWEzMjUtNGNiMjU3ZWUxOTJj LzEvMjVlYmlZd1BXRFRMeURpbW1nWGpxLWpBS1FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApbn5SUnW p9GKoJHspIZKOXXiFeA9JXrplcrGeJnn6UO6KeDgRCSyIYUFPi2CVL+F0ZtApYdd ZSbrOlLCCX/ZWYWuZQDil93iJD3Sj9uE8KybAUJH0rF0kh5jt820SebdTfoEtyQg mjqh4STdJ9rAIZ8SoOuDnbO8DRib+AfiMC27rW8zwb+EnNjeLsE0N0saOq8ra97c R93i2UrxbzpvbcNB6GW7xgE7Du6vCiFAhImzg63FQ7GfN6Yp2IqHVw9wPpLzuO3A m+9Fbs5EOfiOQTXvrFsnbhjkhA7B4zoTvnk4MDa84/vE24sfs6biBcjPeaVMCZb5 WPTWJvcmJHCszg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:39:01 2026 by rpki-client