This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json) Hash identifier: td9NawvxIRAQweRJxY8vPaFBdOHXomFYyRzBQ7e+rWk= Subject key identifier: A7:3E:39:6A:D2:AF:0F:10:6A:9D:20:9F:C6:34:26:05:7E:70:62:4C Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11 Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311 Certificate serial: 019BF4D0140BEF5554C0B02350474C978AA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft Manifest number: 0EB8 Signing time: Sun 25 Jan 2026 11:00:35 +0000 Manifest this update: Sun 25 Jan 2026 11:00:35 +0000 Manifest next update: Mon 26 Jan 2026 11:00:35 +0000 Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: wO2e2x+zj2ifgvxGUqNb2G1rfS0wWJleaxGNHbsg0XY=) 2: 4P2zKrJn8fJZm56Y9XqGYrJfv1c.roa (hash: bGrWybjz1GP/3q4xpY+GzJUbvxSwoXS7Hg+ro0Fji/g=) 3: l8OJDxOWK_P6tGw3DzBmeW303FQ.roa (hash: oXIpjnFkS1fFSgDZNaFsFyIEm+ATqEEz53svdsFA63g=) 4: wdKGQPE-JO5dbISL5xL1WwZtJko.roa (hash: /jaf6c+DnCQc27SZJHRnst+WZgqBd/3gU6TxVmX0Ovs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:14:0b:ef:55:54:c0:b0:23:50:47:4c:97:8a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df798581e73704ee38c9be15e72370f176c60311 Validity Not Before: Jan 25 11:00:35 2026 GMT Not After : Jan 26 11:00:35 2026 GMT Subject: CN=a73e396ad2af0f106a9d209fc63426057e70624c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9f:5f:4a:92:6c:1b:af:62:7d:37:30:98:ab: d0:e7:b3:da:f7:94:a3:8a:aa:75:1c:34:f8:00:4c: 5c:f5:cf:4b:8c:66:85:2c:f2:19:79:c4:1a:08:18: ba:a9:ae:5f:5e:c8:7f:8b:f0:77:d9:0c:6e:dc:88: af:5b:51:db:f4:08:f4:60:bf:0a:29:22:00:43:fb: dc:f2:67:41:69:72:96:02:f8:42:ee:56:15:ed:11: cd:f9:73:48:68:bd:2c:22:35:d8:04:e3:3c:26:2f: 2f:9c:91:7a:01:f8:23:77:43:d6:47:d8:c0:4b:d1: ef:02:8e:74:c1:48:da:b8:52:af:1d:f5:af:b2:3a: f5:8a:be:d9:dc:2f:60:11:5d:26:92:4d:3a:5a:e7: 6f:14:e7:db:36:d3:9a:14:be:bb:e7:dd:66:6f:73: 95:c6:f8:af:aa:d8:69:2d:a0:81:7c:de:44:3b:a1: 52:97:f9:a0:b2:99:21:7f:8d:19:e1:30:d3:2e:37: 2c:4c:3e:09:2f:44:44:44:09:27:07:9a:7a:33:ec: 85:6a:ea:ce:58:d4:94:52:33:e6:71:4a:56:7a:37: eb:bf:4a:44:05:19:2c:dd:f0:52:fa:77:05:65:93: 69:28:4f:7f:ac:2e:c3:6d:c8:4d:95:c1:b6:d3:4a: 47:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3E:39:6A:D2:AF:0F:10:6A:9D:20:9F:C6:34:26:05:7E:70:62:4C X509v3 Authority Key Identifier: keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b2:2d:05:41:31:53:10:db:95:28:33:b5:24:16:84:c2:cc: b4:b8:43:c5:b3:6e:d6:63:9e:05:15:b2:24:90:5a:06:66:4a: b7:2b:e5:17:f2:19:6f:a2:17:da:fa:86:4e:95:18:d5:9b:6a: 78:79:96:93:42:c6:0b:16:66:b7:b3:19:49:a7:f6:3f:2d:61: 2b:35:43:95:9c:c7:05:06:07:1a:ca:0d:68:c9:09:22:ba:1b: d1:59:72:cb:c5:2c:94:00:b9:ac:74:5e:82:56:b5:cb:09:1f: df:ca:c5:1e:b4:86:03:fe:6b:cd:8a:d4:be:f6:03:69:7a:9f: c6:83:9a:28:a9:cf:90:b8:7f:ee:94:56:45:33:85:59:84:45: 54:0e:67:d9:6c:b8:22:75:58:a8:00:9f:b9:88:10:57:46:6c: 3c:54:0d:17:94:22:89:84:af:9a:9a:9a:f1:8c:05:f3:2e:df: a1:d8:05:99:e0:18:8c:ed:32:a7:d9:41:03:86:0f:3f:15:54: ec:09:bd:4b:97:9a:41:60:1f:09:1c:1e:f4:28:9d:78:e5:c2: ac:0a:3c:ab:b6:5a:2b:cc:88:43:61:a2:78:13:ba:c6:a3:87: bb:3f:3e:d2:e7:2c:71:74:8f:db:4a:b0:86:14:55:91:59:71: 90:1e:34:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00BQL71VUwLAjUEdMl4qiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNzk4NTgxZTczNzA0ZWUzOGM5YmUxNWU3MjM3MGYxNzZj NjAzMTEwHhcNMjYwMTI1MTEwMDM1WhcNMjYwMTI2MTEwMDM1WjAzMTEwLwYDVQQD EyhhNzNlMzk2YWQyYWYwZjEwNmE5ZDIwOWZjNjM0MjYwNTdlNzA2MjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Z9fSpJsG69ifTcwmKvQ57Pa95Sj iqp1HDT4AExc9c9LjGaFLPIZecQaCBi6qa5fXsh/i/B32Qxu3IivW1Hb9Aj0YL8K KSIAQ/vc8mdBaXKWAvhC7lYV7RHN+XNIaL0sIjXYBOM8Ji8vnJF6Afgjd0PWR9jA S9HvAo50wUjauFKvHfWvsjr1ir7Z3C9gEV0mkk06WudvFOfbNtOaFL67591mb3OV xvivqthpLaCBfN5EO6FSl/mgspkhf40Z4TDTLjcsTD4JL0RERAknB5p6M+yFaurO WNSUUjPmcUpWejfrv0pEBRks3fBS+ncFZZNpKE9/rC7DbchNlcG200pHqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKc+OWrSrw8Qap0gn8Y0JgV+cGJMMB8GA1UdIwQY MBaAFN95hYHnNwTuOMm+FecjcPF2xgMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9hODAwN2ItMDhjZS00YWY0LWEzODMt YzRhNTJkY2VlMjNkLzEvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9hODAwN2ItMDhjZS00YWY0LWEzODMtYzRhNTJkY2VlMjNk LzEvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLItBUEx UxDblSgztSQWhMLMtLhDxbNu1mOeBRWyJJBaBmZKtyvlF/IZb6IX2vqGTpUY1Ztq eHmWk0LGCxZmt7MZSaf2Py1hKzVDlZzHBQYHGsoNaMkJIrob0Vlyy8UslAC5rHRe gla1ywkf38rFHrSGA/5rzYrUvvYDaXqfxoOaKKnPkLh/7pRWRTOFWYRFVA5n2Wy4 InVYqACfuYgQV0ZsPFQNF5QiiYSvmpqa8YwF8y7fodgFmeAYjO0yp9lBA4YPPxVU 7Am9S5eaQWAfCRwe9CideOXCrAo8q7ZaK8yIQ2GieBO6xqOHuz8+0ucscXSP20qw hhRVkVlxkB40Tw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:19:33 2026 by rpki-client