This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json) Hash identifier: m2xzWuHAKSRwI8r1B9ZXYMQuaWb5ZI4I1/o7tr4bTNE= Subject key identifier: AD:60:21:6C:72:08:AE:14:4E:B0:31:A4:A7:93:80:00:9D:12:28:80 Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27 Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127 Certificate serial: 019BF4D0B503D546BA5883C582BE0AB80208 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft Manifest number: 0BFF Signing time: Sun 25 Jan 2026 11:01:17 +0000 Manifest this update: Sun 25 Jan 2026 11:01:17 +0000 Manifest next update: Mon 26 Jan 2026 11:01:17 +0000 Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: Q1sqn+bjCNRvm1tTAHyIOnxPJ538QeiTI8YtX3HmCM0=) 2: GxXxtmytTeePZFqMmjKewv0phDk.roa (hash: DQNMt4Qmq5pWK/m+65wngsoZgA7+I6etgVuEFLBf9P8=) 3: hrfVvtnK2yUD8q8kqhgwgxBrIWA.roa (hash: knPxWaldCF2NZQN6BPLTcSuiJLTa63/Ehra1OYIbZUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:b5:03:d5:46:ba:58:83:c5:82:be:0a:b8:02:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127 Validity Not Before: Jan 25 11:01:17 2026 GMT Not After : Jan 26 11:01:17 2026 GMT Subject: CN=ad60216c7208ae144eb031a4a79380009d122880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:39:36:15:17:7b:65:f4:e6:a9:6f:b2:c6:a8: d5:7a:a9:6c:43:d3:cc:32:ef:e2:64:b1:14:9b:7c: 63:d0:44:5f:11:c4:d2:da:88:9f:54:8c:5a:b1:78: ab:7a:d6:78:49:5f:c6:ab:98:c5:ee:8b:66:f0:e7: 3a:8c:55:a9:ea:3e:9a:a1:75:90:bb:e8:b1:85:1e: 0c:15:13:4c:5a:b7:40:b2:08:c7:14:3b:af:52:35: e4:cd:a0:1c:8b:99:46:6a:27:77:0d:77:15:32:50: 2e:15:d3:de:e3:f2:3f:cd:d6:00:ec:b2:ac:d9:de: d5:57:d8:5c:50:f1:e1:37:aa:5c:0d:f1:76:57:95: d5:5b:f3:1f:ed:c9:cc:8b:6a:6b:df:bd:9b:15:0d: 1e:34:6f:d6:91:68:6e:d9:10:51:26:bd:ac:f9:75: 1a:75:d3:b3:9f:06:42:b0:63:62:44:7e:f7:9a:9d: 07:66:4d:ac:59:bb:42:56:e2:08:48:bf:a6:e9:f4: 29:cc:f5:37:e6:25:95:c0:39:77:fc:33:11:8c:3c: 1f:72:4a:fb:25:51:8f:9f:06:67:85:3c:7d:e7:3e: b0:74:e0:56:83:87:5e:af:76:58:c0:fa:6c:0d:99: f5:65:f8:de:b7:ab:d3:0f:c6:4e:b9:70:1f:a9:3f: b7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:60:21:6C:72:08:AE:14:4E:B0:31:A4:A7:93:80:00:9D:12:28:80 X509v3 Authority Key Identifier: keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:95:76:d5:63:5e:77:ba:97:27:89:bc:f3:3c:b4:ee:d1:1a: 19:b3:1f:bf:cf:b3:07:df:66:54:82:8e:98:33:c6:3a:11:0e: 22:4a:85:73:7a:b3:77:49:e8:17:04:04:19:49:92:79:a2:d6: a1:12:0c:44:65:be:96:a9:2a:25:10:5d:8f:0d:b3:cb:ac:7f: 93:09:ea:1b:70:7d:96:92:0b:b5:05:0a:2b:3b:91:30:90:da: 52:83:80:ea:8c:6f:60:7e:e5:1c:ec:f5:3c:44:b6:b6:ac:0d: ef:d8:7a:18:a1:16:ac:3c:d7:2b:57:01:b2:61:34:b2:cd:3c: a9:aa:e5:a4:cc:28:af:f3:24:82:db:fb:5c:c5:0b:70:22:fd: 76:80:a1:b2:c3:62:55:9c:d6:04:a7:20:dd:05:83:97:d4:c6: 71:0e:34:e7:23:0d:a8:38:dc:c1:cf:a3:26:00:fd:41:92:6c: 45:ca:f8:c5:e0:23:f0:9e:28:4c:fe:53:17:ce:3c:8b:94:c5: db:4e:fb:2f:ea:d7:64:11:b0:ff:b5:a5:c4:57:63:2b:21:5e: 01:3a:f0:bc:91:dd:32:20:de:f2:a1:72:46:ce:a7:47:6f:25: 03:b7:de:d4:07:aa:a5:e6:13:e4:e8:5d:9a:c7:1d:16:c6:05: be:00:c7:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00LUD1Ua6WIPFgr4KuAIIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMTY4MzVkMDM3Nzg2NjIwYTllOWY3YTBlMzYwNDk4YmI2 NTQxMjcwHhcNMjYwMTI1MTEwMTE3WhcNMjYwMTI2MTEwMTE3WjAzMTEwLwYDVQQD EyhhZDYwMjE2YzcyMDhhZTE0NGViMDMxYTRhNzkzODAwMDlkMTIyODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDk2FRd7ZfTmqW+yxqjVeqlsQ9PM Mu/iZLEUm3xj0ERfEcTS2oifVIxasXiretZ4SV/Gq5jF7otm8Oc6jFWp6j6aoXWQ u+ixhR4MFRNMWrdAsgjHFDuvUjXkzaAci5lGaid3DXcVMlAuFdPe4/I/zdYA7LKs 2d7VV9hcUPHhN6pcDfF2V5XVW/Mf7cnMi2pr372bFQ0eNG/WkWhu2RBRJr2s+XUa ddOznwZCsGNiRH73mp0HZk2sWbtCVuIISL+m6fQpzPU35iWVwDl3/DMRjDwfckr7 JVGPnwZnhTx95z6wdOBWg4der3ZYwPpsDZn1Zfjet6vTD8ZOuXAfqT+3/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1gIWxyCK4UTrAxpKeTgACdEiiAMB8GA1UdIwQY MBaAFNEWg10Dd4ZiCp6feg42BJi7ZUEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9mNTA3Y2ItNzM3MS00YWQxLWI3ZTMt MTZhN2Q2MGQ1YmVhLzEvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9mNTA3Y2ItNzM3MS00YWQxLWI3ZTMtMTZhN2Q2MGQ1YmVh LzEvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5V21WNe d7qXJ4m88zy07tEaGbMfv8+zB99mVIKOmDPGOhEOIkqFc3qzd0noFwQEGUmSeaLW oRIMRGW+lqkqJRBdjw2zy6x/kwnqG3B9lpILtQUKKzuRMJDaUoOA6oxvYH7lHOz1 PES2tqwN79h6GKEWrDzXK1cBsmE0ss08qarlpMwor/Mkgtv7XMULcCL9doChssNi VZzWBKcg3QWDl9TGcQ405yMNqDjcwc+jJgD9QZJsRcr4xeAj8J4oTP5TF848i5TF 2077L+rXZBGw/7WlxFdjKyFeATrwvJHdMiDe8qFyRs6nR28lA7fe1AeqpeYT5Ohd mscdFsYFvgDHRw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:38 2026 by rpki-client