This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft File: 0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json) Hash identifier: UGac5QHElOkbjO5YJgAKpl+/OWuzuyuKqbGSaWCzKys= Subject key identifier: C5:B2:76:A1:E9:3A:80:B0:6A:79:2C:DE:CD:B9:09:93:CC:D3:13:34 Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15 Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715 Certificate serial: 019BF5752084A8BA3DDF43D4251800ACCD69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft Manifest number: 17F3 Signing time: Sun 25 Jan 2026 14:00:52 +0000 Manifest this update: Sun 25 Jan 2026 14:00:52 +0000 Manifest next update: Mon 26 Jan 2026 14:00:52 +0000 Files and hashes: 1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: 0RUp6xsRKwGPS3s/WVRFpW+3zyIdYCCgyjFbSG45FJs=) 2: 48XlQQk7zLyObitRBott5O0TEZc.roa (hash: 0iveZkv2QdOfuGHu5qZcDP2k1JFUITllYLIt0mS1hLw=) 3: JXkrwkvLZXqvLpWo6GIqE9djHow.roa (hash: pvxp7edBiYpg9R4WGN/sBmyvZQpHSdt5YdDqPGYyoLU=) 4: Jb48XUzprHRQSa7zDmEwkm8bHB8.roa (hash: UeQ11+qXjfNfzNk6IX1DTTmTHuYUChCRYnGGfuhQmW8=) 5: M4MI8IskioFX_GL9An1slOnzOXk.roa (hash: +6v5Ea5o3E61ySsVOGY9En91TXxPv4H1t9U0YnMleQI=) 6: cFUEIWQu7qe64nrzejsq3hzv3fw.roa (hash: Y5DG1bnBMtUo7Z76/zjvm84VdL7RwBfBAjPP2M8PD/c=) 7: hkFrsNhiq0TnoVB5lv6ukrym9kU.roa (hash: Lpo1dIydhWwC2a6odejRAjq7zYy9EyLkYPWh1THs0As=) 8: svxysR0fryYPn1ckppavIVkehYU.roa (hash: 8MNRRTqy3XlQo1M7+GUmMiXWjPTZpOon/19BgW0t8Jc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:20:84:a8:ba:3d:df:43:d4:25:18:00:ac:cd:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715 Validity Not Before: Jan 25 14:00:52 2026 GMT Not After : Jan 26 14:00:52 2026 GMT Subject: CN=c5b276a1e93a80b06a792cdecdb90993ccd31334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9a:d0:9d:c5:ff:e6:20:20:68:16:21:c7:48: ab:39:55:11:00:3c:ea:b6:dd:f2:b2:8f:34:47:82: b9:1d:0f:04:6d:17:98:54:3a:6c:23:88:b3:58:a3: 3c:c9:da:64:d6:b1:8b:ae:b1:0a:d2:75:5d:91:4c: e5:6a:39:68:89:c5:29:13:66:37:c6:7f:38:ce:d0: bb:87:2f:fa:63:a8:59:db:7e:8c:f4:ce:24:45:ec: 9a:de:33:e0:7d:bf:79:af:ce:ea:36:2f:dc:6f:84: 8f:8e:ae:ff:17:43:6a:cb:72:a8:3d:14:3b:6b:f3: 5e:ff:82:df:2b:38:06:b8:3d:d8:d1:36:06:9f:15: 24:4f:6d:bd:88:9e:34:d6:2a:9e:20:65:02:58:02: 0f:10:59:31:5f:f6:a8:ee:f4:32:30:26:44:66:52: f0:77:c4:35:dd:e0:a5:c6:fa:0e:6e:0d:1a:e3:7d: 8f:d9:65:06:2a:ca:6f:59:61:95:64:19:41:7e:11: 88:5c:57:e6:13:1d:25:b0:ed:04:da:92:23:da:8a: a6:a2:ac:26:b7:e2:b7:6d:d8:0c:f5:78:52:c9:ab: d6:23:63:7d:9a:c5:ee:13:62:14:1e:f2:e4:c7:d6: 9f:23:c5:52:5c:b6:2b:87:ad:3b:f1:67:c4:09:ba: f2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B2:76:A1:E9:3A:80:B0:6A:79:2C:DE:CD:B9:09:93:CC:D3:13:34 X509v3 Authority Key Identifier: keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:37:93:91:03:29:a7:95:ab:01:74:13:86:4c:d5:21:2e:2c: a5:c2:b9:33:f8:8a:77:de:ca:8d:b2:6f:65:a1:d1:56:55:92: eb:af:d0:9d:6c:59:72:0a:bc:9a:b1:e5:27:58:45:ac:47:c7: 66:0e:5e:ac:eb:b9:66:9c:29:6c:f7:9d:a9:b6:f5:ce:d4:2a: bf:21:00:a6:7e:95:32:b8:c9:ad:4c:0b:4c:26:e1:f6:64:24: cc:a0:d1:12:7a:50:b7:df:b1:cf:c2:22:ed:c2:09:30:41:0a: 9e:a6:15:84:27:e2:9d:c8:43:80:42:2e:a2:4a:6d:db:3b:ce: 4a:cf:03:56:d7:fb:54:17:a5:a0:a1:eb:07:83:0f:ab:67:5b: 1d:b7:a3:aa:17:e3:b7:2f:3d:20:26:9f:38:9c:ce:7d:a8:e4: 19:56:cb:c9:c0:8e:dc:54:35:48:40:5e:c3:ac:f0:23:ec:db: 6e:39:f5:01:76:a3:06:f0:45:d0:2d:e6:30:77:38:c2:c2:cf: 85:4e:18:cc:7d:18:39:54:e6:c6:83:99:87:1e:37:a3:c4:8d: 37:a0:6d:27:a3:0e:e4:cc:82:95:d6:e9:ad:31:9f:74:84:e9: 74:19:46:40:f2:7a:ef:db:d6:2c:39:70:aa:2e:a6:ec:d5:3a: 1b:66:02:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dSCEqLo930PUJRgArM1pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNjIyZmRlYzhmYWRmY2E1OGU3NTc1YzI5ZjEwZTczYWU3 NzU3MTUwHhcNMjYwMTI1MTQwMDUyWhcNMjYwMTI2MTQwMDUyWjAzMTEwLwYDVQQD EyhjNWIyNzZhMWU5M2E4MGIwNmE3OTJjZGVjZGI5MDk5M2NjZDMxMzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyprQncX/5iAgaBYhx0irOVURADzq tt3yso80R4K5HQ8EbReYVDpsI4izWKM8ydpk1rGLrrEK0nVdkUzlajloicUpE2Y3 xn84ztC7hy/6Y6hZ236M9M4kReya3jPgfb95r87qNi/cb4SPjq7/F0Nqy3KoPRQ7 a/Ne/4LfKzgGuD3Y0TYGnxUkT229iJ401iqeIGUCWAIPEFkxX/ao7vQyMCZEZlLw d8Q13eClxvoObg0a432P2WUGKspvWWGVZBlBfhGIXFfmEx0lsO0E2pIj2oqmoqwm t+K3bdgM9XhSyavWI2N9msXuE2IUHvLkx9afI8VSXLYrh6078WfECbrymwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWydqHpOoCwanks3s25CZPM0xM0MB8GA1UdIwQY MBaAFNJiL97I+t/KWOdXXCnxDnOud1cVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG1JdjNzajYzOHBZNTFkY0tmRU9jNjUzVnhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NWYwMmUtZjFhYy00NGZiLTkyZWIt ZjA1YWEyMjlkNjM4LzEvMG1JdjNzajYzOHBZNTFkY0tmRU9jNjUzVnhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NWYwMmUtZjFhYy00NGZiLTkyZWItZjA1YWEyMjlkNjM4 LzEvMG1JdjNzajYzOHBZNTFkY0tmRU9jNjUzVnhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzeTkQMp p5WrAXQThkzVIS4spcK5M/iKd97KjbJvZaHRVlWS66/QnWxZcgq8mrHlJ1hFrEfH Zg5erOu5ZpwpbPedqbb1ztQqvyEApn6VMrjJrUwLTCbh9mQkzKDREnpQt9+xz8Ii 7cIJMEEKnqYVhCfinchDgEIuokpt2zvOSs8DVtf7VBeloKHrB4MPq2dbHbejqhfj ty89ICafOJzOfajkGVbLycCO3FQ1SEBew6zwI+zbbjn1AXajBvBF0C3mMHc4wsLP hU4YzH0YOVTmxoOZhx43o8SNN6BtJ6MO5MyCldbprTGfdITpdBlGQPJ679vWLDlw qi6m7NU6G2YCdw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:25:50 2026 by rpki-client