This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json) Hash identifier: plAxWm7bXueryGYIMxOnMX40r00l7PJRH4bITNI8OuM= Subject key identifier: E4:5E:D8:F6:1D:D2:E7:27:63:EA:0C:DF:A7:1D:18:FA:62:F2:6D:F1 Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e Certificate serial: 019BF688212A6627EF863ABAD18F9B1A5D5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft Manifest number: 04D5 Signing time: Sun 25 Jan 2026 19:01:14 +0000 Manifest this update: Sun 25 Jan 2026 19:01:14 +0000 Manifest next update: Mon 26 Jan 2026 19:01:14 +0000 Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: YRjPif9f4WPaIjzOegtiEz68mlo5p9MKx45NOJ7IzgI=) 2: a_JeuiZjb_A9jIUoJNFCsdyE2LU.roa (hash: 1t3bwzQMJzq4XFVJW9/kvGIHOhZEhjPqK7BQuk4SeFA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:21:2a:66:27:ef:86:3a:ba:d1:8f:9b:1a:5d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e Validity Not Before: Jan 25 19:01:14 2026 GMT Not After : Jan 26 19:01:14 2026 GMT Subject: CN=e45ed8f61dd2e72763ea0cdfa71d18fa62f26df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:59:35:be:ea:0b:e1:ef:4e:5c:04:bb:7a:8d: f1:05:60:6b:10:b5:23:07:2f:b1:7c:29:c8:0b:38: c6:22:49:06:89:aa:c5:73:e6:99:e7:90:bf:9b:79: 78:3b:9a:14:09:d1:1e:40:02:9b:ff:0c:47:35:8e: 9f:9c:e8:ad:63:8e:d0:94:be:7b:f6:fa:a0:11:c3: 9d:f1:3f:eb:b7:9d:d8:96:82:1f:ac:f8:8f:12:dc: 72:7e:9a:44:c3:67:24:87:a1:7b:b2:fc:71:71:e1: b8:5d:b1:f1:d2:df:c7:d3:3d:27:ed:f3:45:ef:a1: 03:0b:f2:d4:cd:24:7f:8a:cc:2e:bb:8d:35:ff:f0: cc:be:8d:b7:c1:0b:0a:d2:3e:6e:fa:36:8c:d2:e4: 36:0f:b9:9c:7c:dd:c7:cd:7a:60:26:e4:d6:56:30: ac:a7:50:6e:f5:8a:53:3d:a1:12:94:b6:a3:a1:5e: ae:91:fe:ea:43:2d:9d:0d:ed:0e:a9:34:35:60:9d: f5:ac:d6:88:83:0e:6e:ca:b8:f5:d8:f5:87:a8:05: b5:b8:e7:88:a6:7c:b8:fc:40:bb:2d:e4:22:08:9b: 6f:4f:07:2c:53:ed:4a:fd:42:90:11:91:bf:a9:4a: 51:46:e6:ec:73:27:fb:38:a8:7d:b7:23:79:b8:a2: 4c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5E:D8:F6:1D:D2:E7:27:63:EA:0C:DF:A7:1D:18:FA:62:F2:6D:F1 X509v3 Authority Key Identifier: keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:ae:2c:1b:5a:fc:22:ba:55:1c:bd:32:2b:3f:70:8b:78:06: 2b:05:d3:1b:56:2e:5a:a9:60:bc:68:3a:52:0a:0c:af:67:b5: f8:8c:a3:56:79:1d:b0:10:3d:1a:4c:0e:da:da:d4:e7:5c:19: c4:13:5a:25:19:c0:38:65:57:01:7a:ff:22:f6:c3:28:af:b5: 2d:35:37:60:d9:fe:e8:39:84:65:10:d3:e2:f0:46:84:c4:11: be:ad:68:c7:bd:7d:3d:a3:b4:42:5a:b5:06:53:db:ec:5b:7a: f0:dd:3e:b7:d0:01:3e:68:dc:38:d1:bc:d4:62:5b:4d:4e:f1: 60:47:a1:c5:a6:84:70:16:13:94:74:f4:ce:69:db:4f:68:0f: bb:ab:00:e4:9b:ee:1a:11:4e:39:37:86:ed:2b:a2:75:49:f6: 7d:5b:08:48:b9:b5:85:e0:0d:dc:2a:93:b9:36:14:d5:8f:4e: 44:f9:95:63:0f:9c:99:a7:11:90:53:bd:ad:51:5b:cc:86:7b: b0:1e:11:dd:17:2a:c3:58:74:a0:14:73:33:fc:b8:0d:eb:5f: 28:5e:14:4a:90:70:24:cb:6e:04:21:fa:84:75:f9:90:5e:8d: d6:77:43:7f:66:b1:1f:68:a6:c5:20:fd:93:b6:a2:c6:5d:56: b4:6a:34:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iCEqZifvhjq60Y+bGl1bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNmU1ZDcwOTM1YjhjYmMzN2NmMjE2YzQ0NjY5N2Q0YzI3 YTk5M2UwHhcNMjYwMTI1MTkwMTE0WhcNMjYwMTI2MTkwMTE0WjAzMTEwLwYDVQQD EyhlNDVlZDhmNjFkZDJlNzI3NjNlYTBjZGZhNzFkMThmYTYyZjI2ZGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFk1vuoL4e9OXAS7eo3xBWBrELUj By+xfCnICzjGIkkGiarFc+aZ55C/m3l4O5oUCdEeQAKb/wxHNY6fnOitY47QlL57 9vqgEcOd8T/rt53YloIfrPiPEtxyfppEw2ckh6F7svxxceG4XbHx0t/H0z0n7fNF 76EDC/LUzSR/iswuu401//DMvo23wQsK0j5u+jaM0uQ2D7mcfN3HzXpgJuTWVjCs p1Bu9YpTPaESlLajoV6ukf7qQy2dDe0OqTQ1YJ31rNaIgw5uyrj12PWHqAW1uOeI pny4/EC7LeQiCJtvTwcsU+1K/UKQEZG/qUpRRubscyf7OKh9tyN5uKJMcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORe2PYd0ucnY+oM36cdGPpi8m3xMB8GA1UdIwQY MBaAFNNuXXCTW4y8N88hbERml9TCepk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wYjA2YzAtZDg5MC00OWJkLWEyOWYt ZjA3ZWZhYzRlMmRlLzEvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8wYjA2YzAtZDg5MC00OWJkLWEyOWYtZjA3ZWZhYzRlMmRl LzEvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANq4sG1r8 IrpVHL0yKz9wi3gGKwXTG1YuWqlgvGg6UgoMr2e1+IyjVnkdsBA9GkwO2trU51wZ xBNaJRnAOGVXAXr/IvbDKK+1LTU3YNn+6DmEZRDT4vBGhMQRvq1ox719PaO0Qlq1 BlPb7Ft68N0+t9ABPmjcONG81GJbTU7xYEehxaaEcBYTlHT0zmnbT2gPu6sA5Jvu GhFOOTeG7SuidUn2fVsISLm1heAN3CqTuTYU1Y9ORPmVYw+cmacRkFO9rVFbzIZ7 sB4R3Rcqw1h0oBRzM/y4DetfKF4USpBwJMtuBCH6hHX5kF6N1ndDf2axH2imxSD9 k7aixl1WtGo04g== -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:39 2026 by rpki-client