This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft File: 240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json) Hash identifier: 62o0C/tGXvDUoulbBcpoM+RtmcDOsht3UcWxNw+790w= Subject key identifier: 19:7C:68:B4:55:26:5E:E5:64:66:9D:0E:5A:FD:FB:64:6C:B3:94:E6 Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a Certificate serial: 019BF42BEE1AAFC12A604C724F3AB3CD7BE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft Manifest number: 14C0 Signing time: Sun 25 Jan 2026 08:01:18 +0000 Manifest this update: Sun 25 Jan 2026 08:01:18 +0000 Manifest next update: Mon 26 Jan 2026 08:01:18 +0000 Files and hashes: 1: 1-r4Lv2Rmvz8PS3uEyqLHDg79e6o.roa (hash: Ynnh/ie5fd1c8AWIp3/nOFWKmHgGwnafc2HeQlk9EJ8=) 2: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: XwNNYeLatNZ6xhyKnEYbrZVmWEil90kDNlNeq4G2noU=) 3: w3Lux0gfeLL5j0FE93SK7EkO-xA.roa (hash: /yS1rew79qv077Dug+2vMb4pmqIyVizWzCEA9rbz10o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:ee:1a:af:c1:2a:60:4c:72:4f:3a:b3:cd:7b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a Validity Not Before: Jan 25 08:01:18 2026 GMT Not After : Jan 26 08:01:18 2026 GMT Subject: CN=197c68b455265ee564669d0e5afdfb646cb394e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:59:26:af:04:e8:6e:08:63:53:fc:a7:f2:ea: 9c:6f:92:2c:f2:f9:5e:be:6a:4d:2e:91:54:47:40: d6:1c:5d:89:f8:66:76:d0:f0:d7:09:e0:4b:a0:99: 1c:f3:df:47:c3:b7:f9:b1:f7:84:91:7a:16:7c:3a: d1:6f:30:48:cc:cf:46:c9:6a:40:07:de:74:22:0e: fb:23:af:d2:3f:c2:e8:04:5c:34:20:f7:76:66:b4: f8:21:08:3a:63:e4:1c:67:f5:3a:d4:5c:91:ea:35: f4:88:f6:31:c9:b5:76:f3:5c:25:99:aa:68:64:26: 31:08:d1:1c:ef:81:73:79:37:56:91:cb:22:d8:27: 45:f3:fb:f8:d7:b4:27:b9:99:3e:c1:01:7c:58:ba: 45:06:bf:73:6b:ec:de:c4:af:89:36:e3:a9:90:c9: 7f:7b:59:df:d9:d6:d8:3e:17:e8:71:ea:dd:8a:1a: 59:ce:5f:d6:94:13:97:02:c2:6a:fd:3f:4c:d6:6b: 38:78:fd:95:ac:8b:0e:23:2d:1b:a6:e8:cc:77:cf: f7:24:4e:c7:c8:23:17:51:d0:13:06:eb:2a:cc:70: 01:ca:bb:bc:95:33:02:b3:f7:fd:f0:b4:2a:75:49: ee:ad:39:88:45:8b:91:c1:ff:13:c2:bf:73:e4:92: de:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7C:68:B4:55:26:5E:E5:64:66:9D:0E:5A:FD:FB:64:6C:B3:94:E6 X509v3 Authority Key Identifier: keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:d4:41:76:07:91:c4:da:13:ab:a1:90:9c:a3:68:f9:ad:1e: 8d:af:fb:33:c4:6b:ed:56:11:82:00:2d:f5:ea:26:31:01:37: 70:da:c6:05:a0:26:42:93:43:35:ba:00:e6:2e:c6:5e:63:12: ff:44:f5:b6:2b:a0:b1:b7:d6:e9:bc:00:2a:34:13:d8:70:4d: b3:5c:d2:b1:a6:70:6e:e1:32:1f:17:90:4e:85:37:3b:b0:f9: 4d:0f:da:bf:23:53:21:29:d8:24:9c:4d:9a:70:89:70:44:c4: e2:52:65:e1:01:f1:34:30:aa:06:2e:b7:d4:9e:ff:be:15:45: e0:d8:37:e3:b5:2d:75:5f:11:6c:23:a0:3c:5d:46:b5:14:bf: 65:b3:cc:f6:83:91:42:16:ba:91:fa:73:b4:ed:58:4a:d9:e1: 7a:83:c8:ab:40:ed:93:70:d9:94:22:d9:a6:20:45:85:6a:49: 2a:af:ae:22:39:eb:3d:7c:90:f7:91:2e:75:db:b6:8e:f1:af: 3e:56:78:88:bc:47:19:7c:6a:10:24:7c:7f:32:0d:9d:43:bc: 83:2d:6e:9a:6d:8f:da:8c:d1:d6:8c:07:fc:7b:09:8f:77:54: 9a:99:7b:68:85:21:55:5a:f3:e6:4a:64:cd:2b:cd:90:5b:3b: 9d:40:b4:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K+4ar8EqYExyTzqzzXvlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOGQwOGVkYzQzOTNhODY3MTI5NmY4ZWFjYmJlY2Y5NGQ3 NjU2MmEwHhcNMjYwMTI1MDgwMTE4WhcNMjYwMTI2MDgwMTE4WjAzMTEwLwYDVQQD EygxOTdjNjhiNDU1MjY1ZWU1NjQ2NjlkMGU1YWZkZmI2NDZjYjM5NGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlkmrwTobghjU/yn8uqcb5Is8vle vmpNLpFUR0DWHF2J+GZ20PDXCeBLoJkc899Hw7f5sfeEkXoWfDrRbzBIzM9GyWpA B950Ig77I6/SP8LoBFw0IPd2ZrT4IQg6Y+QcZ/U61FyR6jX0iPYxybV281wlmapo ZCYxCNEc74FzeTdWkcsi2CdF8/v417QnuZk+wQF8WLpFBr9za+zexK+JNuOpkMl/ e1nf2dbYPhfocerdihpZzl/WlBOXAsJq/T9M1ms4eP2VrIsOIy0bpujMd8/3JE7H yCMXUdATBusqzHAByru8lTMCs/f98LQqdUnurTmIRYuRwf8Twr9z5JLeoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBl8aLRVJl7lZGadDlr9+2Rss5TmMB8GA1UdIwQY MBaAFNuNCO3EOTqGcSlvjqy77PlNdlYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83ZDU2MDctMGE4YS00NDQ3LTg2NTEt YzYzNDlkYjk0OTliLzEvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy83ZDU2MDctMGE4YS00NDQ3LTg2NTEtYzYzNDlkYjk0OTli LzEvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeNRBdgeR xNoTq6GQnKNo+a0eja/7M8Rr7VYRggAt9eomMQE3cNrGBaAmQpNDNboA5i7GXmMS /0T1tiugsbfW6bwAKjQT2HBNs1zSsaZwbuEyHxeQToU3O7D5TQ/avyNTISnYJJxN mnCJcETE4lJl4QHxNDCqBi631J7/vhVF4Ng347UtdV8RbCOgPF1GtRS/ZbPM9oOR Qha6kfpztO1YStnheoPIq0Dtk3DZlCLZpiBFhWpJKq+uIjnrPXyQ95Euddu2jvGv PlZ4iLxHGXxqECR8fzINnUO8gy1umm2P2ozR1owH/HsJj3dUmpl7aIUhVVrz5kpk zSvNkFs7nUC08Q== -----END CERTIFICATE-----Generated at Sun Jan 25 12:36:07 2026 by rpki-client