This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft File: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json) Hash identifier: YjrO+76n3iPREN6YFaZoJ6AZ6snsWJSApT/KoPxsd0k= Subject key identifier: 98:23:62:4B:87:77:A6:6C:7C:BA:E8:DC:FC:C4:78:CA:90:D5:E0:7A Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f Certificate serial: 019BF19847F545B09B86310E13F701851FC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft Manifest number: 151D Signing time: Sat 24 Jan 2026 20:00:47 +0000 Manifest this update: Sat 24 Jan 2026 20:00:47 +0000 Manifest next update: Sun 25 Jan 2026 20:00:47 +0000 Files and hashes: 1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: sZP/uat3Y/4SiCeoROy8mdEUNc7aFfqDh8DaODy3X2Y=) 2: a6NDP_sdQRIyavB-C2u1iT6I1vI.roa (hash: 45VvDyynPZqMh80rBZVmGivQ3m/ZKBBtliCy4kfcaYA=) 3: bMBeJP4kSoTWFEKBQ7ire7C9GmM.roa (hash: DgOfwTafwxtmSdbTDyercNseVLl1yi6nAKrwiwQ4Ggo=) 4: s-r4X6WFzZl_DjwTvg6rx1Dd8H0.roa (hash: jWgwdzxUJDbOjXM/9fnH2+wJvWnEGw4EF7mGjO4+epM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:98:47:f5:45:b0:9b:86:31:0e:13:f7:01:85:1f:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f Validity Not Before: Jan 24 20:00:47 2026 GMT Not After : Jan 25 20:00:47 2026 GMT Subject: CN=9823624b8777a66c7cbae8dcfcc478ca90d5e07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:45:e5:d8:a4:8f:9d:97:3e:8f:3c:6d:e9:66: 5a:4a:45:7a:62:4a:d3:6e:71:f7:a1:df:c5:28:ca: 23:f3:62:86:b9:58:ba:c7:f5:27:51:d9:2b:b1:71: 45:b5:f2:35:4d:85:93:c0:fc:d3:16:db:af:60:b9: 1b:22:aa:57:a3:8f:62:53:e5:14:9f:4c:e3:25:a1: 02:93:63:84:68:75:3e:94:bd:57:cf:98:da:90:62: 90:65:10:f4:8c:ac:51:c1:30:84:17:0f:f8:43:ae: 57:f0:ad:2d:6b:fb:da:dd:ec:ee:7b:41:d4:66:43: c6:20:f0:3d:6e:e7:d8:3d:3e:82:7f:4e:47:3d:7f: 74:b3:69:5d:2e:0a:0d:11:09:b9:61:0b:8f:59:e2: 59:57:f9:a8:56:28:4d:29:f8:b7:7e:4b:0f:24:65: d3:c9:a3:6a:8c:23:11:ff:90:89:a0:53:5c:b4:16: c8:d4:ee:da:2f:0e:57:8c:1b:72:c4:b7:7c:67:29: 79:be:29:97:48:34:bc:95:41:38:19:9f:a1:89:8e: 63:c5:b6:33:5e:3e:16:50:7a:5d:5c:fb:cb:5d:6a: 8b:18:24:74:d9:23:ea:14:4b:a0:6a:bb:42:36:2c: 10:d2:35:62:fa:27:c8:ec:e5:5b:36:53:80:0f:42: 07:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:23:62:4B:87:77:A6:6C:7C:BA:E8:DC:FC:C4:78:CA:90:D5:E0:7A X509v3 Authority Key Identifier: keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:d0:82:05:c2:7c:69:2a:e6:82:1e:61:d9:7a:0a:0c:9f:6c: 33:0a:6c:0c:5b:fe:16:18:b0:86:94:82:72:06:30:fb:62:e4: 49:ee:e7:7d:47:e9:58:cd:98:0d:d5:dd:cb:e4:da:28:d6:22: 2a:e6:f5:2b:d6:23:85:ee:40:34:0c:38:b3:b5:cf:0c:5f:36: 6a:28:04:cd:5f:5c:4b:ed:35:8d:72:79:0a:57:75:c8:bf:d9: 4d:0c:0b:a2:3a:54:2c:f7:c8:4b:e5:a7:77:ed:c0:14:8e:a8: f1:30:c3:28:fb:df:0e:69:51:17:06:ac:b9:f9:b8:37:b6:f0: 43:66:b8:38:34:59:6e:c1:7c:d5:d3:a1:b8:3b:5c:8e:77:21: a5:69:44:f8:73:d9:57:c4:66:22:e8:e9:47:cb:db:4e:22:ab: d1:a3:2d:31:84:5c:10:dc:f1:2b:c1:36:66:6f:1a:6e:d2:cd: b5:35:17:79:7b:b2:a1:6a:29:63:37:43:52:80:fb:2f:2f:75: 3e:3d:91:52:6b:a7:9d:5c:d3:ba:2b:21:50:e4:e3:bd:9d:a7: 2e:7e:1b:f9:7a:88:71:2f:f0:e2:5f:e5:90:e4:be:e1:5a:84: ac:67:82:6e:1b:bd:5c:bc:5a:83:2b:74:f7:75:e7:d5:b9:ac: 4b:c7:12:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvxmEf1RbCbhjEOE/cBhR/GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyODM2MTZmMTM2MmMyNWQ4MmVjMmE3MGM0Yjk3NTA1NjVi MTE5N2YwHhcNMjYwMTI0MjAwMDQ3WhcNMjYwMTI1MjAwMDQ3WjAzMTEwLwYDVQQD Eyg5ODIzNjI0Yjg3NzdhNjZjN2NiYWU4ZGNmY2M0NzhjYTkwZDVlMDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0Xl2KSPnZc+jzxt6WZaSkV6YkrT bnH3od/FKMoj82KGuVi6x/UnUdkrsXFFtfI1TYWTwPzTFtuvYLkbIqpXo49iU+UU n0zjJaECk2OEaHU+lL1Xz5jakGKQZRD0jKxRwTCEFw/4Q65X8K0ta/va3ezue0HU ZkPGIPA9bufYPT6Cf05HPX90s2ldLgoNEQm5YQuPWeJZV/moVihNKfi3fksPJGXT yaNqjCMR/5CJoFNctBbI1O7aLw5XjBtyxLd8Zyl5vimXSDS8lUE4GZ+hiY5jxbYz Xj4WUHpdXPvLXWqLGCR02SPqFEugartCNiwQ0jVi+ifI7OVbNlOAD0IHDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgjYkuHd6ZsfLro3PzEeMqQ1eB6MB8GA1UdIwQY MBaAFNKDYW8TYsJdguwqcMS5dQVlsRl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5Njkt YTZkMjdjNDMxODE4LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5NjktYTZkMjdjNDMxODE4 LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtCCBcJ8 aSrmgh5h2XoKDJ9sMwpsDFv+FhiwhpSCcgYw+2LkSe7nfUfpWM2YDdXdy+TaKNYi Kub1K9Yjhe5ANAw4s7XPDF82aigEzV9cS+01jXJ5Cld1yL/ZTQwLojpULPfIS+Wn d+3AFI6o8TDDKPvfDmlRFwasufm4N7bwQ2a4ODRZbsF81dOhuDtcjnchpWlE+HPZ V8RmIujpR8vbTiKr0aMtMYRcENzxK8E2Zm8abtLNtTUXeXuyoWopYzdDUoD7Ly91 Pj2RUmunnVzTuishUOTjvZ2nLn4b+XqIcS/w4l/lkOS+4VqErGeCbhu9XLxagyt0 93Xn1bmsS8cS1g== -----END CERTIFICATE-----Generated at Sun Jan 25 06:14:50 2026 by rpki-client