This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json) Hash identifier: AJXByZL99YnH5Aywt2WPjAjNnSahGM+cZz0KwIBOqzw= Subject key identifier: 09:E4:25:07:11:5B:7A:2F:46:0E:12:C5:07:97:D5:81:0C:59:CD:2D Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2 Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2 Certificate serial: 019BF61A1825901AF2E6963B3641BA038522 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 17:01:03 +0000 Manifest this update: Sun 25 Jan 2026 17:01:03 +0000 Manifest next update: Mon 26 Jan 2026 17:01:03 +0000 Files and hashes: 1: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: FenlmeNERFrgMo9N60kOz8K0+f1T5pxyGsiF0ZscHWs=) 2: X22P1NloWugtV33VklnsZASB77I.roa (hash: RELi8S+QmS5zizjTXUSelucOgYS8Q6L5FGNYX0riiUs=) 3: qZ8lYrTAES5IWyxZQZaEefS3YC0.roa (hash: TigOEyk/IxeMvvOho4DCoJ6pinlkySdim2c4kDHjteo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:18:25:90:1a:f2:e6:96:3b:36:41:ba:03:85:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2 Validity Not Before: Jan 25 17:01:03 2026 GMT Not After : Jan 26 17:01:03 2026 GMT Subject: CN=09e42507115b7a2f460e12c50797d5810c59cd2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b0:c4:9f:40:2b:39:1d:1c:ab:5e:4d:2a:90: 13:c9:97:16:35:7f:d9:ab:d8:bc:e5:75:58:f0:dd: c5:80:e2:71:57:0f:e6:78:4e:2f:78:da:43:48:c8: 01:d9:9e:77:0f:0a:de:05:ab:7a:fb:a9:06:c3:21: 49:b8:c2:e0:83:3f:21:d4:81:79:33:ef:8b:10:29: ee:d8:17:48:cf:62:21:33:ec:20:02:2d:07:fb:68: d0:92:dc:f2:c8:6b:d1:ca:bb:5e:68:1b:19:e8:d1: 49:6d:05:6a:76:0c:80:bf:30:c1:1c:a8:64:85:6e: c6:ca:0a:36:59:1a:78:ac:6c:6b:0f:8a:e1:8a:25: 8c:ce:c4:a1:f2:2b:00:37:d3:4f:7b:8a:7f:67:aa: 37:23:2e:6c:2e:a3:f8:6b:63:19:01:1a:34:55:9c: dc:66:6e:aa:7c:a1:5f:89:c0:0f:eb:1e:32:8d:70: 1e:a3:02:c2:b2:07:86:89:91:b3:6e:b3:f4:7f:58: e1:dc:25:01:2e:0b:69:4f:2b:5a:b5:96:ef:1d:e3: fc:9d:dc:e3:68:48:d4:51:21:7d:79:c9:35:15:0a: b7:92:88:9a:04:4d:f7:63:9e:2d:cb:ba:76:de:11: eb:7f:4e:0f:20:00:1f:af:73:22:1b:2e:22:83:5a: 8a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E4:25:07:11:5B:7A:2F:46:0E:12:C5:07:97:D5:81:0C:59:CD:2D X509v3 Authority Key Identifier: keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:e6:0e:30:51:43:21:d0:0b:5d:a9:1a:51:f8:a7:de:84:42: 86:cc:6a:6d:f1:4e:e8:a0:42:81:31:08:12:c0:64:df:5b:64: 4a:6a:98:9c:52:14:60:04:6c:cb:04:24:a4:3c:9c:7e:b8:12: 88:3a:d3:54:a1:43:88:fc:e5:6e:1d:3f:6a:45:62:89:cf:0f: b4:ce:e7:2a:74:33:80:5f:7c:58:83:50:51:f3:5c:5b:17:b9: e8:84:f9:14:ec:b9:2b:6c:50:44:90:70:ce:f0:08:3d:ce:9a: 52:26:26:5a:90:5f:00:8f:fd:85:66:3f:30:47:f0:83:0d:2c: 4f:ca:9b:dc:8f:f7:a3:16:08:09:be:cf:30:4a:ff:d4:ce:13: 65:88:39:28:c0:2d:64:0c:78:29:69:a3:32:13:13:e8:09:5d: a4:88:b4:60:15:60:89:de:61:af:29:1a:42:bf:88:fa:26:2c: 6a:e7:2b:40:fc:92:57:68:3e:73:cd:67:40:23:b1:72:fb:87: ea:29:c0:41:21:b9:f8:a7:e4:08:b1:25:a8:21:cc:29:f3:d0: 26:15:9b:5f:52:3c:9a:32:99:fc:d1:a9:16:9d:8e:d6:26:e9: 0d:0f:17:d8:71:5d:a1:d5:2f:c5:85:75:4c:85:ff:d8:96:8f: 73:ee:af:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GhglkBry5pY7NkG6A4UiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NGE4OGJjNmU5ZTEwYmJhZjE1MGYwMTliYmY4YTYxNWEy YjAzYzIwHhcNMjYwMTI1MTcwMTAzWhcNMjYwMTI2MTcwMTAzWjAzMTEwLwYDVQQD EygwOWU0MjUwNzExNWI3YTJmNDYwZTEyYzUwNzk3ZDU4MTBjNTljZDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7DEn0ArOR0cq15NKpATyZcWNX/Z q9i85XVY8N3FgOJxVw/meE4veNpDSMgB2Z53DwreBat6+6kGwyFJuMLggz8h1IF5 M++LECnu2BdIz2IhM+wgAi0H+2jQktzyyGvRyrteaBsZ6NFJbQVqdgyAvzDBHKhk hW7Gygo2WRp4rGxrD4rhiiWMzsSh8isAN9NPe4p/Z6o3Iy5sLqP4a2MZARo0VZzc Zm6qfKFficAP6x4yjXAeowLCsgeGiZGzbrP0f1jh3CUBLgtpTytatZbvHeP8ndzj aEjUUSF9eck1FQq3koiaBE33Y54ty7p23hHrf04PIAAfr3MiGy4ig1qKgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnkJQcRW3ovRg4SxQeX1YEMWc0tMB8GA1UdIwQY MBaAFEdKiLxunhC7rxUPAZu/imFaKwPCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjBxSXZHNmVFTHV2RlE4Qm03LUtZVm9yQThJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iYWQxYzEtMzY1ZC00MWRlLWFkN2Mt Y2U4ZmM5M2FkYjIxLzEvUjBxSXZHNmVFTHV2RlE4Qm03LUtZVm9yQThJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9iYWQxYzEtMzY1ZC00MWRlLWFkN2MtY2U4ZmM5M2FkYjIx LzEvUjBxSXZHNmVFTHV2RlE4Qm03LUtZVm9yQThJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwuYOMFFD IdALXakaUfin3oRChsxqbfFO6KBCgTEIEsBk31tkSmqYnFIUYARsywQkpDycfrgS iDrTVKFDiPzlbh0/akViic8PtM7nKnQzgF98WINQUfNcWxe56IT5FOy5K2xQRJBw zvAIPc6aUiYmWpBfAI/9hWY/MEfwgw0sT8qb3I/3oxYICb7PMEr/1M4TZYg5KMAt ZAx4KWmjMhMT6AldpIi0YBVgid5hrykaQr+I+iYsaucrQPySV2g+c81nQCOxcvuH 6inAQSG5+KfkCLElqCHMKfPQJhWbX1I8mjKZ/NGpFp2O1ibpDQ8X2HFdodUvxYV1 TIX/2JaPc+6vDQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:05 2026 by rpki-client