This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft File: 2ChPGM1EYEvdbQj02HjcYUVsQP0.mft (raw, json) Hash identifier: v8uIu1S0GntNBtyOnTGarbMNOUkIvFwm/aO83EgVba8= Subject key identifier: 02:B1:F9:F1:29:55:85:FB:37:EA:27:6B:78:1D:C8:CC:CF:68:C4:5E Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd Certificate serial: 019BF5078C1DF2A6DDB3601F755499AD9CA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft Manifest number: 17F9 Signing time: Sun 25 Jan 2026 12:01:11 +0000 Manifest this update: Sun 25 Jan 2026 12:01:11 +0000 Manifest next update: Mon 26 Jan 2026 12:01:11 +0000 Files and hashes: 1: 1tMhwz7KE8o9HGi1XERUlx-tIdY.roa (hash: W97bDT/RSA5be4fQKA6RSGAhSe3TMElDjwqiTHQoDoE=) 2: 2ChPGM1EYEvdbQj02HjcYUVsQP0.crl (hash: ZnStZ/3iqASeyO8f1YPBoBN3xMTHJCg10Mz8koNMhs8=) 3: 3mS5hMWhKlnGO3h-ssMwusOTMaM.roa (hash: f29QqM6z7OhHISNe7rHupfilJIPnryz8YS8+zsLSDfs=) 4: 50O5gbvFN5Br5PFCZ0m5Epfpvv0.roa (hash: fg+fIATIpZ9606ZSveJEyeNQUDVlB2iQjr4YCU2TQXw=) 5: N3iKduG1KyGp7acBh2WOJ0MD0zU.roa (hash: jQXzbIYq6Zxo8qPqawC1/jXuZoeWXKzx3rtmVr5KlSs=) 6: ZiRnzXkcSpJurhu_MyLUWMF4fjw.roa (hash: wqIirvJk9KhRbYG9hrmkySthdI26YxcHRINCM7935BQ=) 7: dh_dM1Q__KObsaKsgasBYaz1gyo.roa (hash: GY7xesyfU+gqGkJYAJ4MHZlVcXESZ6jYpENdGF3wOCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:8c:1d:f2:a6:dd:b3:60:1f:75:54:99:ad:9c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd Validity Not Before: Jan 25 12:01:11 2026 GMT Not After : Jan 26 12:01:11 2026 GMT Subject: CN=02b1f9f1295585fb37ea276b781dc8cccf68c45e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ea:7f:b3:32:f0:ba:88:5c:8c:ec:4a:82:1b: ee:e1:88:1e:13:a7:f4:78:2a:4d:44:ac:5b:f1:89: 40:59:b7:57:40:a0:b9:61:0c:43:b5:be:25:d3:13: 19:1e:c1:80:a1:82:db:8a:f6:f4:31:eb:d8:8f:82: 90:07:3a:90:d6:bc:45:27:7d:a0:28:cc:29:88:b6: fd:80:98:f8:63:c0:73:16:f5:ff:8c:64:fe:8f:25: a4:04:e8:42:27:cc:b0:ef:24:d4:2e:ca:76:8a:25: 14:bf:1c:01:c3:59:99:51:5f:d2:fe:f2:11:11:03: 45:79:f0:b3:b4:d6:1f:9a:bf:ce:1c:3c:93:b6:bb: ad:1e:82:a4:5e:cd:0e:a9:76:51:bd:12:2f:cd:05: c8:8c:5b:ad:c0:97:aa:a8:fb:4d:a6:94:3a:69:13: 4d:2a:fd:a4:5a:c5:bc:36:31:c2:cf:d2:e8:ad:2f: 93:e1:ba:39:e0:6c:62:50:52:20:1d:52:73:98:5f: ac:4f:e9:28:e3:d9:af:54:c5:2d:3f:8e:8a:08:2e: ca:86:b5:2c:e6:07:f1:e3:0b:b0:5b:90:b7:9c:65: 15:c4:cd:f5:44:58:39:99:e3:f7:37:cc:48:60:28: 4a:3f:97:24:c4:4e:9f:a4:2f:28:af:f3:e0:95:5b: be:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B1:F9:F1:29:55:85:FB:37:EA:27:6B:78:1D:C8:CC:CF:68:C4:5E X509v3 Authority Key Identifier: keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:4d:9e:4a:44:ef:ed:0b:74:28:bb:66:ce:00:b3:a4:2a:17: 0f:7e:51:b3:36:85:ed:b2:71:b6:f5:dc:cc:c6:a6:db:e2:e6: ec:85:b3:4f:f7:33:92:7d:bb:4d:1d:3b:f0:47:0f:8e:dc:4d: d1:ce:cc:a3:93:0f:e7:c7:af:56:a1:20:b8:28:65:bf:e1:ab: 69:50:c7:7e:c7:1e:7f:e7:84:e0:f8:34:ec:43:74:c2:9a:66: 73:cd:e9:12:f2:00:ca:71:47:c0:6d:9b:40:b3:bf:a4:ed:9a: ee:f5:c5:d6:34:b5:68:5c:77:9d:5a:aa:52:0f:c2:97:50:21: 88:9d:c0:52:ca:79:e6:21:fb:94:d9:0f:52:cf:7d:98:bc:d3: b6:6c:df:d3:b2:f5:db:1b:92:36:c3:d4:ca:3c:fc:57:03:e0: 36:b7:9d:3f:5a:51:b3:56:c2:36:38:93:83:70:27:35:d7:40: f1:c4:d3:c5:56:a0:55:09:c3:14:9a:e8:8e:a1:0e:50:07:d9: 4e:e6:25:ae:51:ab:e5:c0:1a:5d:36:52:6d:5f:b5:06:50:6f: c2:4f:86:68:75:60:0a:43:9b:3e:09:84:50:d7:f8:5f:df:7b: cb:a9:6d:c6:f0:ed:b2:d6:09:83:49:2e:1b:54:00:5b:6f:34: 10:60:3d:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B4wd8qbds2AfdVSZrZygMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4Mjg0ZjE4Y2Q0NDYwNGJkZDZkMDhmNGQ4NzhkYzYxNDU2 YzQwZmQwHhcNMjYwMTI1MTIwMTExWhcNMjYwMTI2MTIwMTExWjAzMTEwLwYDVQQD EygwMmIxZjlmMTI5NTU4NWZiMzdlYTI3NmI3ODFkYzhjY2NmNjhjNDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOp/szLwuohcjOxKghvu4YgeE6f0 eCpNRKxb8YlAWbdXQKC5YQxDtb4l0xMZHsGAoYLbivb0MevYj4KQBzqQ1rxFJ32g KMwpiLb9gJj4Y8BzFvX/jGT+jyWkBOhCJ8yw7yTULsp2iiUUvxwBw1mZUV/S/vIR EQNFefCztNYfmr/OHDyTtrutHoKkXs0OqXZRvRIvzQXIjFutwJeqqPtNppQ6aRNN Kv2kWsW8NjHCz9LorS+T4bo54GxiUFIgHVJzmF+sT+ko49mvVMUtP46KCC7KhrUs 5gfx4wuwW5C3nGUVxM31RFg5meP3N8xIYChKP5ckxE6fpC8or/PglVu+QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKx+fEpVYX7N+ona3gdyMzPaMReMB8GA1UdIwQY MBaAFNgoTxjNRGBL3W0I9Nh43GFFbED9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkNoUEdNMUVZRXZkYlFqMDJIamNZVVZzUVAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yNjUyY2QtN2VjZi00OWU4LWE0Zjgt Yzc4NjkxMjg1ODJjLzEvMkNoUEdNMUVZRXZkYlFqMDJIamNZVVZzUVAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8yNjUyY2QtN2VjZi00OWU4LWE0ZjgtYzc4NjkxMjg1ODJj LzEvMkNoUEdNMUVZRXZkYlFqMDJIamNZVVZzUVAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ02eSkTv 7Qt0KLtmzgCzpCoXD35RszaF7bJxtvXczMam2+Lm7IWzT/czkn27TR078EcPjtxN 0c7Mo5MP58evVqEguChlv+GraVDHfscef+eE4Pg07EN0wppmc83pEvIAynFHwG2b QLO/pO2a7vXF1jS1aFx3nVqqUg/Cl1AhiJ3AUsp55iH7lNkPUs99mLzTtmzf07L1 2xuSNsPUyjz8VwPgNredP1pRs1bCNjiTg3AnNddA8cTTxVagVQnDFJrojqEOUAfZ TuYlrlGr5cAaXTZSbV+1BlBvwk+GaHVgCkObPgmEUNf4X997y6ltxvDtstYJg0ku G1QAW280EGA9lA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:29 2026 by rpki-client