This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft File: rS044g8k0OMLhszYJhrAAX8XpaQ.mft (raw, json) Hash identifier: tGT7QnSAJM0Cwf+feYTrduig6hVLjac6SE/d0z7gtDA= Subject key identifier: B0:33:50:FD:0C:DC:6D:0C:27:6A:B8:8B:45:E9:97:50:30:32:D7:AE Authority key identifier: AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4 Certificate issuer: /CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4 Certificate serial: 019BF61A3131A03D388005EE9BCAB5AE136F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft Manifest number: 0AB6 Signing time: Sun 25 Jan 2026 17:01:10 +0000 Manifest this update: Sun 25 Jan 2026 17:01:10 +0000 Manifest next update: Mon 26 Jan 2026 17:01:10 +0000 Files and hashes: 1: 9tGzK-FCrgGlyf8btSGObHH6Jkw.roa (hash: NlammvVp7/v8P1KUtxpc69bkMW7FgZFFOJxxoLecI3k=) 2: NJAtBEz3Ixv_CCYeRvRJJECYvnk.roa (hash: 8VY+OH2qENoVZQA8QBMe/XGjN1hAsUDKuWI2emaWxMU=) 3: rS044g8k0OMLhszYJhrAAX8XpaQ.crl (hash: 5E8HT849/UsA8wmvHO3PFge2giAKQcfnYiSb2UfNfzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:31:31:a0:3d:38:80:05:ee:9b:ca:b5:ae:13:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4 Validity Not Before: Jan 25 17:01:10 2026 GMT Not After : Jan 26 17:01:10 2026 GMT Subject: CN=b03350fd0cdc6d0c276ab88b45e997503032d7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a8:45:8b:ff:4c:cd:73:d7:b2:a4:ea:12:d6: ec:0c:6a:28:0a:27:49:c8:40:d2:86:b1:72:a9:2f: 2d:58:ea:73:10:39:0b:43:7e:1d:71:2d:a0:60:39: c1:b4:46:83:7a:c8:c9:d5:33:3c:d5:00:11:1c:f5: 3e:c5:3a:1a:d3:1d:e4:d4:dd:1f:13:41:0a:3b:79: 51:45:1f:cc:fa:a4:90:de:06:64:65:8e:67:3d:9c: 2d:c9:81:0f:db:21:f3:06:5d:c7:a7:ba:2a:62:45: 66:e6:fa:eb:22:d4:6e:f5:3f:83:10:43:c9:c4:46: ee:55:66:2e:a8:af:9b:d5:eb:45:9a:bb:4b:d8:ab: 20:fc:4b:f1:7f:3b:6c:5a:a3:f3:c9:d7:ab:73:e8: 8e:0c:20:b3:ee:c5:46:91:bc:18:c9:4a:f8:e3:c2: c5:ab:e3:52:dd:84:a0:46:d5:f6:6b:ed:e3:fe:d9: 6e:5d:6d:3a:2e:1d:b3:64:4d:56:09:44:93:dd:e2: 2f:ae:a0:ec:56:29:e7:32:30:ea:62:dc:97:3e:80: 02:df:04:2e:79:89:71:1d:1f:9e:b4:20:4c:66:ed: 18:39:bf:64:d4:e6:bb:d2:7b:31:95:d5:92:96:39: 30:39:e8:c8:26:84:53:23:7e:f8:ff:e1:e0:c0:48: 62:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:33:50:FD:0C:DC:6D:0C:27:6A:B8:8B:45:E9:97:50:30:32:D7:AE X509v3 Authority Key Identifier: keyid:AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:19:87:02:3b:f6:8d:42:86:82:72:ae:d1:a9:bc:5d:da:bd: e4:94:48:da:b1:65:35:15:76:c4:f4:e6:c8:b3:a2:5c:70:39: 71:c6:2e:cc:d0:56:f7:82:0c:98:96:b8:0f:cf:f5:cf:f2:1e: dc:c2:11:04:e6:2e:2a:5b:fd:cc:db:57:0d:c8:48:c2:77:8f: f3:cc:fe:66:43:17:91:fc:4c:e0:e5:7e:d7:81:e8:3d:86:eb: 4e:5d:74:13:aa:b5:53:b6:b9:09:24:43:94:0a:e6:79:b6:31: b7:3e:c2:9a:e3:16:8a:75:dc:da:1f:86:b3:41:7a:68:87:26: df:8b:ec:5b:14:ac:f0:c8:16:4d:77:68:78:42:cb:6c:89:94: cd:65:18:c9:cd:9f:dc:97:04:aa:9a:a8:2e:09:33:14:8d:83: 2a:f1:5c:68:dd:b1:62:7d:35:1c:98:f7:91:af:a6:5e:34:f4: ee:60:74:98:ff:4d:55:70:d6:a5:90:3d:2f:4e:95:47:54:2c: a8:fd:d6:a2:fe:46:3a:35:ab:7b:ff:68:dd:09:24:08:0b:62: f2:bf:fb:82:32:41:52:e1:a6:9b:8c:cd:51:64:59:f5:ad:d6: 5f:d4:11:cd:61:fa:c1:e5:ef:e9:52:a4:f7:64:de:69:ff:1d: 0f:a0:11:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GjExoD04gAXum8q1rhNvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMmQzOGUyMGYyNGQwZTMwYjg2Y2NkODI2MWFjMDAxN2Yx N2E1YTQwHhcNMjYwMTI1MTcwMTEwWhcNMjYwMTI2MTcwMTEwWjAzMTEwLwYDVQQD EyhiMDMzNTBmZDBjZGM2ZDBjMjc2YWI4OGI0NWU5OTc1MDMwMzJkN2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqhFi/9MzXPXsqTqEtbsDGooCidJ yEDShrFyqS8tWOpzEDkLQ34dcS2gYDnBtEaDesjJ1TM81QARHPU+xToa0x3k1N0f E0EKO3lRRR/M+qSQ3gZkZY5nPZwtyYEP2yHzBl3Hp7oqYkVm5vrrItRu9T+DEEPJ xEbuVWYuqK+b1etFmrtL2Ksg/EvxfztsWqPzyderc+iODCCz7sVGkbwYyUr448LF q+NS3YSgRtX2a+3j/tluXW06Lh2zZE1WCUST3eIvrqDsVinnMjDqYtyXPoAC3wQu eYlxHR+etCBMZu0YOb9k1Oa70nsxldWSljkwOejIJoRTI374/+HgwEhiQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAzUP0M3G0MJ2q4i0Xpl1AwMteuMB8GA1UdIwQY MBaAFK0tOOIPJNDjC4bM2CYawAF/F6WkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclMwNDRnOGswT01MaHN6WUpockFBWDhYcGFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yZDg3NjEtMjI5Zi00YTM3LTg3YjEt NDI5OTUzMjNjMDNkLzEvclMwNDRnOGswT01MaHN6WUpockFBWDhYcGFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yZDg3NjEtMjI5Zi00YTM3LTg3YjEtNDI5OTUzMjNjMDNk LzEvclMwNDRnOGswT01MaHN6WUpockFBWDhYcGFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxmHAjv2 jUKGgnKu0am8Xdq95JRI2rFlNRV2xPTmyLOiXHA5ccYuzNBW94IMmJa4D8/1z/Ie 3MIRBOYuKlv9zNtXDchIwneP88z+ZkMXkfxM4OV+14HoPYbrTl10E6q1U7a5CSRD lArmebYxtz7CmuMWinXc2h+Gs0F6aIcm34vsWxSs8MgWTXdoeELLbImUzWUYyc2f 3JcEqpqoLgkzFI2DKvFcaN2xYn01HJj3ka+mXjT07mB0mP9NVXDWpZA9L06VR1Qs qP3Wov5GOjWre/9o3QkkCAti8r/7gjJBUuGmm4zNUWRZ9a3WX9QRzWH6weXv6VKk 92Teaf8dD6ARnw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:36:55 2026 by rpki-client