This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft File: 96oDm4hrImV4vbakJ4G_WQRLsTg.mft (raw, json) Hash identifier: y2Pj9gRA730VAATpq16y1fZs12aICmE5EQqEFpKD4QI= Subject key identifier: B9:51:5D:8A:E9:32:EA:D3:28:E5:BA:86:21:54:39:21:D6:2B:F6:BF Authority key identifier: F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38 Certificate issuer: /CN=f7aa039b886b226578bdb6a42781bf59044bb138 Certificate serial: 019BF3F57F70143241130204B203806638EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 07:01:50 +0000 Manifest this update: Sun 25 Jan 2026 07:01:50 +0000 Manifest next update: Mon 26 Jan 2026 07:01:50 +0000 Files and hashes: 1: 96oDm4hrImV4vbakJ4G_WQRLsTg.crl (hash: hHqXGIaI2u3zJXTPTpzsdLo6Qu6Kw3S6TJhI5wAFaCM=) 2: AdZDptogFPfZkzR5C2w7ewUy5fM.roa (hash: eY6m5Pfp09t+29CrdJcppfTJAkMyMsubBMzfDZuh9Pg=) 3: Mhow_zubVnvAcwQbBcXt37SkVbo.roa (hash: 6hC28liE87/PAEstEfDeR9v3wr68y7o5n3aUzo7i9jo=) 4: lyKU2cRz1rwVy67EiMdpJEVU-uw.roa (hash: MyEdGCpP2vsnLyoMOlKjt9pc63D/h3XJBUfmhnb515g=) 5: qS5aITzh8bm2lSNZ9w-1v_OwEkM.roa (hash: nyRJgnJF5E43/9qDPBbeFHXa4kSfjJ0ENxyk0mTysYQ=) 6: uBEokvW7aAgryoMWD6Cv0elcFmo.roa (hash: H/a3hMppgWLont3KdCAnRpO2zISV9Otu71OhQuyZUU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f5:7f:70:14:32:41:13:02:04:b2:03:80:66:38:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7aa039b886b226578bdb6a42781bf59044bb138 Validity Not Before: Jan 25 07:01:50 2026 GMT Not After : Jan 26 07:01:50 2026 GMT Subject: CN=b9515d8ae932ead328e5ba8621543921d62bf6bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:82:9b:b3:2d:40:51:d6:1f:e8:6e:b8:99:dc: 97:3e:8f:d8:b6:b4:8a:07:0d:35:eb:25:d8:b5:08: a6:a1:96:e3:45:e6:70:65:36:aa:4c:eb:e7:33:1e: dd:b8:2e:4c:79:46:99:1c:7c:b7:95:25:b8:1d:9b: 58:94:98:9b:59:fb:3a:13:b4:8a:93:f7:4c:83:7f: 82:89:8a:66:f0:a9:48:95:a4:66:30:4d:14:a6:32: fb:32:64:c8:23:59:37:c3:ff:79:02:ad:08:94:f4: 4f:6f:72:f2:9a:10:d3:db:22:73:b7:85:5f:ce:c5: 43:69:6b:10:61:c0:86:60:2a:96:d5:b1:dd:fc:40: 09:7b:fb:92:85:84:c4:f9:6c:ad:b4:c6:ca:5f:ff: c1:f3:7b:ef:d9:67:5d:8e:7a:e5:fd:1e:96:e8:29: e6:5c:b8:51:84:7e:23:0b:c0:e4:4f:2a:b6:7b:29: c9:81:27:39:98:d0:39:08:ef:43:ed:d8:2c:d6:8f: c9:54:2e:fb:27:dd:4d:8c:1f:4c:94:f1:53:b3:d2: 6b:8a:28:a1:d9:64:10:46:72:33:d8:53:f0:a7:f4: 33:3d:88:58:77:e2:1f:22:0f:52:5c:16:04:38:f3: 9b:68:bf:7c:d4:cd:c2:ad:41:46:61:9d:93:e9:2d: 03:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:51:5D:8A:E9:32:EA:D3:28:E5:BA:86:21:54:39:21:D6:2B:F6:BF X509v3 Authority Key Identifier: keyid:F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:ce:4c:e0:15:f4:1f:38:bb:6a:87:1d:dd:9b:35:b4:b4:57: a2:19:3d:c2:3e:cb:4a:a8:16:f6:1c:06:6f:7c:bf:7b:e6:92: fe:97:1e:d2:f6:6f:d6:dc:1f:62:5f:da:dd:19:04:3a:04:dd: 47:42:83:92:08:17:14:8a:34:bb:5e:60:bf:99:46:17:c8:56: ae:fc:9b:39:89:a7:02:51:fe:af:59:8b:8a:cc:36:63:77:da: de:2b:5a:8e:fe:08:b4:97:1f:11:60:0b:9c:bf:e7:81:40:08: 00:79:86:f2:ef:09:a2:9c:b4:d5:e3:87:f7:2e:dd:51:b0:56: db:2c:13:74:35:7f:a3:1c:ed:83:98:ce:61:71:db:28:f6:d2: 6f:67:6d:e8:de:55:c6:60:91:d4:97:87:46:b6:98:bf:a9:a1: 60:3d:ce:f7:2d:d5:8d:60:b6:d9:8b:b9:1f:8d:95:75:34:0b: d7:ca:3c:3e:5d:8a:df:17:05:72:36:7e:eb:30:b6:0b:08:ed: cc:72:5f:32:78:25:0b:82:d4:e8:d9:58:df:68:79:5f:13:e6: 57:97:e5:5e:10:e4:e1:57:46:d8:2f:7c:e8:30:0b:a2:67:36: a7:3b:9e:e6:40:8d:f6:fa:04:2e:c7:02:00:89:1d:61:c2:27: d2:f6:b1:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9X9wFDJBEwIEsgOAZjjqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YWEwMzliODg2YjIyNjU3OGJkYjZhNDI3ODFiZjU5MDQ0 YmIxMzgwHhcNMjYwMTI1MDcwMTUwWhcNMjYwMTI2MDcwMTUwWjAzMTEwLwYDVQQD EyhiOTUxNWQ4YWU5MzJlYWQzMjhlNWJhODYyMTU0MzkyMWQ2MmJmNmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIKbsy1AUdYf6G64mdyXPo/YtrSK Bw016yXYtQimoZbjReZwZTaqTOvnMx7duC5MeUaZHHy3lSW4HZtYlJibWfs6E7SK k/dMg3+CiYpm8KlIlaRmME0UpjL7MmTII1k3w/95Aq0IlPRPb3LymhDT2yJzt4Vf zsVDaWsQYcCGYCqW1bHd/EAJe/uShYTE+WyttMbKX//B83vv2Wddjnrl/R6W6Cnm XLhRhH4jC8DkTyq2eynJgSc5mNA5CO9D7dgs1o/JVC77J91NjB9MlPFTs9Jriiih 2WQQRnIz2FPwp/QzPYhYd+IfIg9SXBYEOPObaL981M3CrUFGYZ2T6S0DFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlRXYrpMurTKOW6hiFUOSHWK/a/MB8GA1UdIwQY MBaAFPeqA5uIayJleL22pCeBv1kES7E4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTZvRG00aHJJbVY0dmJha0o0R19XUVJMc1RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80YmJkNmMtOTFlZi00NDYxLTgyMWIt NmY2MjFkNzM2YWZmLzEvOTZvRG00aHJJbVY0dmJha0o0R19XUVJMc1RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS80YmJkNmMtOTFlZi00NDYxLTgyMWItNmY2MjFkNzM2YWZm LzEvOTZvRG00aHJJbVY0dmJha0o0R19XUVJMc1RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs85M4BX0 Hzi7aocd3Zs1tLRXohk9wj7LSqgW9hwGb3y/e+aS/pce0vZv1twfYl/a3RkEOgTd R0KDkggXFIo0u15gv5lGF8hWrvybOYmnAlH+r1mLisw2Y3fa3itajv4ItJcfEWAL nL/ngUAIAHmG8u8Jopy01eOH9y7dUbBW2ywTdDV/oxztg5jOYXHbKPbSb2dt6N5V xmCR1JeHRraYv6mhYD3O9y3VjWC22Yu5H42VdTQL18o8Pl2K3xcFcjZ+6zC2Cwjt zHJfMnglC4LU6NlY32h5XxPmV5flXhDk4VdG2C986DALomc2pzue5kCN9voELscC AIkdYcIn0vaxPw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:21:10 2026 by rpki-client