This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft File: RpNQgcd6h0XntiuTuC2iliN5suI.mft (raw, json) Hash identifier: qDAe8kMWR0KdadG3QtbKJtllmERe4rs2ZjsRYY8wRMs= Subject key identifier: D5:9A:B8:07:36:A8:E5:89:B9:3F:18:81:E9:3D:C8:A8:3B:B5:55:BF Authority key identifier: 46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2 Certificate issuer: /CN=46935081c77a8745e7b62b93b82da2962379b2e2 Certificate serial: 019BF72CE4505DA1D4543119300B082A75F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 22:01:12 +0000 Manifest this update: Sun 25 Jan 2026 22:01:12 +0000 Manifest next update: Mon 26 Jan 2026 22:01:12 +0000 Files and hashes: 1: RpNQgcd6h0XntiuTuC2iliN5suI.crl (hash: qT3g6H7GOoOxiYyL/h12bQ8qdwh+mEZLNOT8SFCW4nc=) 2: xUDE19p7SjFfDj10MxGNe3_Ja54.roa (hash: vMVrflsThb97UBO8tlivD+a8vKYPaOtZZKiO7UktvfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:e4:50:5d:a1:d4:54:31:19:30:0b:08:2a:75:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46935081c77a8745e7b62b93b82da2962379b2e2 Validity Not Before: Jan 25 22:01:12 2026 GMT Not After : Jan 26 22:01:12 2026 GMT Subject: CN=d59ab80736a8e589b93f1881e93dc8a83bb555bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1b:d2:e8:25:fd:39:03:a6:f8:4a:93:23:4e: d0:a0:92:e5:9e:68:00:42:de:a3:14:35:38:da:b6: ef:e4:b7:df:56:71:bd:2b:e6:97:11:14:28:14:e4: 79:02:a6:77:ae:b0:85:01:aa:f3:64:f3:1a:1a:dc: 4b:31:de:ea:27:ca:61:bb:06:e3:51:60:3d:23:30: e0:40:ca:17:92:53:b4:96:52:3a:a4:26:d9:8d:07: c3:9b:a7:a7:82:02:dd:3f:ac:0c:f4:4d:f6:1d:58: 91:be:70:18:d4:00:09:d8:bd:21:05:98:10:7a:7a: e7:85:62:a6:3d:57:eb:0a:05:0b:0f:7a:c8:43:07: 41:f2:7d:1f:db:7e:41:3a:48:a0:f4:d4:dd:74:e9: 4b:35:cc:f3:53:68:8a:e8:4b:a3:6a:0f:6c:1c:32: 93:82:94:5c:51:82:f3:b1:85:33:94:55:32:2c:e0: f6:3a:e6:71:64:d5:80:45:63:a9:65:c7:33:13:60: 3b:f8:c1:39:bc:89:50:51:dc:45:6e:44:b8:78:c3: ac:9e:90:fd:4f:d1:3d:22:7a:8d:c9:e7:27:57:92: 4b:4c:28:61:72:2c:8d:e2:2e:70:15:4a:ff:ad:3a: 92:a1:d6:07:36:dc:54:31:30:46:57:d4:63:1d:90: 5d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9A:B8:07:36:A8:E5:89:B9:3F:18:81:E9:3D:C8:A8:3B:B5:55:BF X509v3 Authority Key Identifier: keyid:46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:6c:8b:aa:fc:8b:56:45:12:e9:84:54:0d:65:0e:4a:13:a9: 8e:8c:2f:ec:5b:f6:c2:5e:b2:de:0e:a2:ef:cc:f5:e3:a9:de: 3a:e6:88:73:dd:ac:60:18:8f:82:79:51:9f:ba:5a:6b:b6:13: b9:32:b4:d2:f1:f2:ce:a5:8a:1c:f5:52:44:34:30:f7:f2:f7: 01:f1:38:e9:a6:59:7a:50:7a:7c:a4:07:72:6d:63:34:4b:99: 64:99:98:bc:dd:66:e2:a9:b1:b4:b9:62:39:17:8c:ce:e2:ed: 9d:0f:61:77:fb:e0:02:f0:0d:ec:ea:1b:e9:95:06:2d:84:05: aa:4b:70:99:5f:54:6e:7c:72:76:0b:54:85:2f:47:92:4c:a0: b5:87:46:99:e9:8a:7a:8d:85:2c:bf:c1:c4:47:80:55:c0:34: 1d:94:c2:5a:6b:76:b6:27:1c:b4:90:67:33:45:31:45:71:cb: 84:09:43:b4:35:d4:28:63:56:e9:83:77:cd:32:e5:8c:ab:49: b7:9f:21:2e:49:59:e6:fd:77:c0:d3:13:d4:78:17:96:ef:fc: ef:67:e9:44:4e:58:db:d0:8c:66:4e:c4:74:ae:5a:2a:1a:72: 0a:9b:de:8f:7c:c5:68:c1:cf:7c:ce:88:a8:26:df:da:bb:67: ff:7d:d7:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LORQXaHUVDEZMAsIKnXxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OTM1MDgxYzc3YTg3NDVlN2I2MmI5M2I4MmRhMjk2MjM3 OWIyZTIwHhcNMjYwMTI1MjIwMTEyWhcNMjYwMTI2MjIwMTEyWjAzMTEwLwYDVQQD EyhkNTlhYjgwNzM2YThlNTg5YjkzZjE4ODFlOTNkYzhhODNiYjU1NWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBvS6CX9OQOm+EqTI07QoJLlnmgA Qt6jFDU42rbv5LffVnG9K+aXERQoFOR5AqZ3rrCFAarzZPMaGtxLMd7qJ8phuwbj UWA9IzDgQMoXklO0llI6pCbZjQfDm6enggLdP6wM9E32HViRvnAY1AAJ2L0hBZgQ enrnhWKmPVfrCgULD3rIQwdB8n0f235BOkig9NTddOlLNczzU2iK6Eujag9sHDKT gpRcUYLzsYUzlFUyLOD2OuZxZNWARWOpZcczE2A7+ME5vIlQUdxFbkS4eMOsnpD9 T9E9InqNyecnV5JLTChhciyN4i5wFUr/rTqSodYHNtxUMTBGV9RjHZBdOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWauAc2qOWJuT8Ygek9yKg7tVW/MB8GA1UdIwQY MBaAFEaTUIHHeodF57Yrk7gtopYjebLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnBOUWdjZDZoMFhudGl1VHVDMmlsaU41c3VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85MDYwNmUtOTMxNi00ZWEzLWJjNzQt YTM1YzI3ZDk1MTg2LzEvUnBOUWdjZDZoMFhudGl1VHVDMmlsaU41c3VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85MDYwNmUtOTMxNi00ZWEzLWJjNzQtYTM1YzI3ZDk1MTg2 LzEvUnBOUWdjZDZoMFhudGl1VHVDMmlsaU41c3VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2yLqvyL VkUS6YRUDWUOShOpjowv7Fv2wl6y3g6i78z146neOuaIc92sYBiPgnlRn7paa7YT uTK00vHyzqWKHPVSRDQw9/L3AfE46aZZelB6fKQHcm1jNEuZZJmYvN1m4qmxtLli OReMzuLtnQ9hd/vgAvAN7Oob6ZUGLYQFqktwmV9UbnxydgtUhS9HkkygtYdGmemK eo2FLL/BxEeAVcA0HZTCWmt2ticctJBnM0UxRXHLhAlDtDXUKGNW6YN3zTLljKtJ t58hLklZ5v13wNMT1HgXlu/872fpRE5Y29CMZk7EdK5aKhpyCpvej3zFaMHPfM6I qCbf2rtn/33Xxg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:14 2026 by rpki-client