This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft File: rRfnAW-VOg5izKRWb_nRBSww8lo.mft (raw, json) Hash identifier: gOIvp9uE+tO4M4K2E6fyTof3PzbFl8Dg/vzrNX+I5/w= Subject key identifier: 35:EB:E8:F7:1F:C2:01:EA:1B:36:80:50:14:69:C1:42:63:47:FE:E8 Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a Certificate serial: 019BF42BAE7D8F1340173547B923010B5D4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft Manifest number: 071D Signing time: Sun 25 Jan 2026 08:01:01 +0000 Manifest this update: Sun 25 Jan 2026 08:01:01 +0000 Manifest next update: Mon 26 Jan 2026 08:01:01 +0000 Files and hashes: 1: 69yOYQhcSzVteXbmSSuXjdooyOA.roa (hash: 2ZA47QSgmHPBZuYu1sYyxVw+wEl4vjMSOZuQJyxjjcA=) 2: DaNzl7w617W61WMkK2mhl8jN5wU.roa (hash: KfPIGqY3EVhRc2Ytnf57ChmISLtMr8fTABQiZHidkaM=) 3: rRfnAW-VOg5izKRWb_nRBSww8lo.crl (hash: kg/VruqLpIb0swJ6nQqQmr/jlLwI/IbNU41QudZ5v1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:ae:7d:8f:13:40:17:35:47:b9:23:01:0b:5d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a Validity Not Before: Jan 25 08:01:01 2026 GMT Not After : Jan 26 08:01:01 2026 GMT Subject: CN=35ebe8f71fc201ea1b3680501469c1426347fee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:18:3f:54:31:73:de:3e:0f:2c:8a:b9:1c:1d: e2:76:52:61:2c:dc:ed:fc:5d:11:81:85:56:20:7c: 16:5b:88:dd:7e:e4:f7:8f:eb:7d:fc:52:4e:44:ee: da:83:47:4c:64:7b:4c:6d:20:68:57:5f:c0:05:84: 14:50:62:1e:2a:95:75:e5:58:17:bd:ab:02:59:9f: e9:62:3f:0b:9d:0c:ca:21:0c:c7:53:39:09:a4:7a: ce:68:15:38:0f:ac:26:89:c8:dd:fe:2c:0f:4d:5d: 9d:51:52:e4:e9:c5:b9:e9:e5:c3:de:93:4c:7b:32: f6:02:ec:8e:36:85:40:06:d5:2b:f2:bf:bc:52:62: 76:30:0e:5e:0c:f7:07:d5:1a:31:ad:6d:04:dd:29: c0:ae:06:7b:43:73:b7:9e:fc:83:65:b4:0c:b1:49: 92:c1:cc:f7:5b:93:11:c9:e6:6e:52:d0:91:28:2f: 3a:0f:52:98:42:01:03:a9:a5:67:99:f3:31:4c:25: 0f:89:bb:64:ca:4f:8f:f9:57:fa:f2:01:3d:a4:42: 18:22:6b:41:4c:90:7d:e9:df:31:b9:57:f2:56:c9: b8:14:db:28:f5:81:e8:93:4a:d4:0d:58:25:83:bc: 5e:7a:6e:d8:a8:1b:fa:df:0f:42:b0:bd:b2:d4:f0: 80:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EB:E8:F7:1F:C2:01:EA:1B:36:80:50:14:69:C1:42:63:47:FE:E8 X509v3 Authority Key Identifier: keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:36:c6:a5:64:5d:f2:9a:6e:95:48:d5:bd:98:22:3e:03:a2: 99:f6:6f:45:91:91:19:38:a2:bb:82:cf:25:8c:36:7e:2e:7a: cc:ed:0d:26:8b:15:23:6d:2a:73:1a:7a:61:61:2f:97:04:3a: ac:71:46:26:2d:ab:7d:9e:69:83:94:b8:8b:10:25:0e:5c:1e: df:e1:b9:01:59:58:f0:fa:11:63:7b:e5:05:d7:61:cb:f1:4d: 11:2e:25:d8:60:f2:3d:8d:0a:74:65:7d:da:32:f4:01:11:13: 7f:78:62:6c:f9:dc:c2:ab:30:27:6f:b9:6b:d0:d7:7e:3e:df: f8:29:2e:07:3f:8d:1c:49:39:4f:ea:3c:c1:5d:92:17:56:8a: a6:30:35:4d:01:56:01:d5:2f:b7:3e:80:fc:52:28:6a:51:0b: f8:ba:fd:bf:c7:69:94:a4:c9:5f:35:d4:92:50:e5:48:2c:3b: 80:a3:9d:e6:b0:16:3c:eb:c2:e5:46:61:22:1a:21:9e:85:79: 1b:2b:42:0e:ce:e6:e6:12:bf:be:e7:01:0e:6c:b5:67:f9:8c: ce:b4:44:ec:42:62:f7:b7:5d:f8:27:ff:b0:f3:f9:83:e6:28: de:39:5a:6a:5c:73:6b:3b:73:04:0e:ad:77:36:c6:28:a5:96: 9f:98:f9:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K659jxNAFzVHuSMBC11PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMTdlNzAxNmY5NTNhMGU2MmNjYTQ1NjZmZjlkMTA1MmMz MGYyNWEwHhcNMjYwMTI1MDgwMTAxWhcNMjYwMTI2MDgwMTAxWjAzMTEwLwYDVQQD EygzNWViZThmNzFmYzIwMWVhMWIzNjgwNTAxNDY5YzE0MjYzNDdmZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhg/VDFz3j4PLIq5HB3idlJhLNzt /F0RgYVWIHwWW4jdfuT3j+t9/FJORO7ag0dMZHtMbSBoV1/ABYQUUGIeKpV15VgX vasCWZ/pYj8LnQzKIQzHUzkJpHrOaBU4D6wmicjd/iwPTV2dUVLk6cW56eXD3pNM ezL2AuyONoVABtUr8r+8UmJ2MA5eDPcH1RoxrW0E3SnArgZ7Q3O3nvyDZbQMsUmS wcz3W5MRyeZuUtCRKC86D1KYQgEDqaVnmfMxTCUPibtkyk+P+Vf68gE9pEIYImtB TJB96d8xuVfyVsm4FNso9YHok0rUDVglg7xeem7YqBv63w9CsL2y1PCAlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXr6PcfwgHqGzaAUBRpwUJjR/7oMB8GA1UdIwQY MBaAFK0X5wFvlToOYsykVm/50QUsMPJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84M2M4ODEtYmVmNy00Zjc5LTkwYmEt NTU5MDc2OGRlMmNmLzEvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84M2M4ODEtYmVmNy00Zjc5LTkwYmEtNTU5MDc2OGRlMmNm LzEvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTbGpWRd 8ppulUjVvZgiPgOimfZvRZGRGTiiu4LPJYw2fi56zO0NJosVI20qcxp6YWEvlwQ6 rHFGJi2rfZ5pg5S4ixAlDlwe3+G5AVlY8PoRY3vlBddhy/FNES4l2GDyPY0KdGV9 2jL0ARETf3hibPncwqswJ2+5a9DXfj7f+CkuBz+NHEk5T+o8wV2SF1aKpjA1TQFW AdUvtz6A/FIoalEL+Lr9v8dplKTJXzXUklDlSCw7gKOd5rAWPOvC5UZhIhohnoV5 GytCDs7m5hK/vucBDmy1Z/mMzrRE7EJi97dd+Cf/sPP5g+Yo3jlaalxzaztzBA6t dzbGKKWWn5j56Q== -----END CERTIFICATE-----Generated at Sun Jan 25 16:24:18 2026 by rpki-client