This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft File: 2ReGoGnkk0smgbuOmzc4B5sk72U.mft (raw, json) Hash identifier: nzKqEzxf+hO2R62tpren5JzvMXcwjV+8izXQNdeI3GE= Subject key identifier: F4:A1:66:6C:EF:7F:02:5D:08:3D:9B:3F:C9:11:C4:96:E9:26:92:C5 Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65 Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65 Certificate serial: 019BF53EA4B760282D5F8A8CC560EFDA4F23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft Manifest number: 01E7 Signing time: Sun 25 Jan 2026 13:01:21 +0000 Manifest this update: Sun 25 Jan 2026 13:01:21 +0000 Manifest next update: Mon 26 Jan 2026 13:01:21 +0000 Files and hashes: 1: 2ReGoGnkk0smgbuOmzc4B5sk72U.crl (hash: PxhN4NCyqCiNfPAwuFLHif3qNdEKNPKHps62EDflaxs=) 2: mwRdGEd4WRoql9JK1a5PSVnSLxU.roa (hash: sRHWQB29NgjpyQT+asPP0Z1+0SKF0k83xk50WN9aQks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:a4:b7:60:28:2d:5f:8a:8c:c5:60:ef:da:4f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65 Validity Not Before: Jan 25 13:01:21 2026 GMT Not After : Jan 26 13:01:21 2026 GMT Subject: CN=f4a1666cef7f025d083d9b3fc911c496e92692c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:22:35:89:dc:65:74:18:70:4b:e0:88:d1: c3:83:0a:77:89:12:8f:89:c2:ab:53:7a:1c:ee:71: 7b:67:ab:e1:16:aa:d0:20:23:1d:db:30:0f:6d:76: 53:b8:8f:97:99:ce:74:de:00:29:53:17:45:ce:24: 67:ad:d9:f2:61:b5:81:00:a7:63:92:46:59:02:57: df:ac:2d:a5:73:41:c8:b4:ce:5b:ed:8a:be:a0:b8: 98:3b:e4:c1:98:22:da:d6:33:9a:ef:cd:e6:de:ae: a2:b2:94:82:0f:40:0a:5c:9f:50:f3:2a:28:58:95: 7d:f3:77:6c:f9:d7:83:2a:0c:62:70:0f:5a:bf:4c: e1:f9:14:a1:6e:4a:ca:19:01:4a:ef:1e:ac:a4:c2: b5:20:ee:e1:9d:67:6d:62:4f:88:55:6d:ec:b8:b0: ad:4b:0b:20:a3:95:45:18:2f:70:0f:12:e8:f8:2e: 9c:d5:84:6a:bb:53:2b:70:d2:49:a5:d9:87:94:55: 0b:65:a3:79:19:6f:bc:33:e6:72:d7:45:21:39:5b: 55:29:d7:c3:69:83:9b:a7:4f:98:a1:fa:34:44:8b: 9d:7d:47:b7:f3:c9:93:eb:2d:70:59:f3:21:87:7c: ce:bf:1d:44:e5:09:2d:83:95:95:ad:e6:a4:a9:a5: 59:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A1:66:6C:EF:7F:02:5D:08:3D:9B:3F:C9:11:C4:96:E9:26:92:C5 X509v3 Authority Key Identifier: keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b9:e1:15:4f:e9:f8:8f:47:a2:89:43:2e:35:a5:d9:09:93: 25:70:f2:f9:ec:35:28:31:3f:ba:04:35:1f:0d:94:61:57:24: b2:64:73:69:08:d1:64:ae:e1:a4:68:05:c6:a7:f6:0b:83:05: c8:fa:77:90:5b:32:ae:43:c7:07:d4:3e:54:a1:57:12:08:49: 88:96:ce:d8:20:46:94:d0:c0:4a:5f:8d:20:14:3e:fa:46:80: ce:5f:e4:e5:e8:cd:b5:af:69:0a:e9:cb:5e:09:74:fd:8a:33: 5c:9b:11:e7:de:ab:54:09:ec:fc:cb:a7:51:93:5d:9a:15:f8: ad:99:11:ca:7d:d3:d8:09:0b:b2:84:bd:62:6e:f4:a8:44:e1: 2f:a5:1e:b4:76:17:a1:14:4f:8e:ce:0b:30:a2:4f:50:92:6e: d7:78:22:d9:da:8f:82:66:8e:e5:ff:e6:6d:4e:37:f1:3a:94: 34:af:ed:48:54:60:56:59:9f:37:11:ec:c0:ad:5b:c9:86:ee: 6b:bd:5c:4c:20:b4:76:3b:66:48:fc:2d:e4:01:2a:26:f7:24: 77:b0:cc:42:62:4c:dc:1a:69:21:f0:df:19:73:78:6c:63:5f: 13:63:1d:1c:a7:60:08:ac:eb:f3:e0:a4:a5:bb:76:e0:5e:8f: 02:40:3d:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PqS3YCgtX4qMxWDv2k8jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MTc4NmEwNjllNDkzNGIyNjgxYmI4ZTliMzczODA3OWIy NGVmNjUwHhcNMjYwMTI1MTMwMTIxWhcNMjYwMTI2MTMwMTIxWjAzMTEwLwYDVQQD EyhmNGExNjY2Y2VmN2YwMjVkMDgzZDliM2ZjOTExYzQ5NmU5MjY5MmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbgiNYncZXQYcEvgiNHDgwp3iRKP icKrU3oc7nF7Z6vhFqrQICMd2zAPbXZTuI+Xmc503gApUxdFziRnrdnyYbWBAKdj kkZZAlffrC2lc0HItM5b7Yq+oLiYO+TBmCLa1jOa783m3q6ispSCD0AKXJ9Q8yoo WJV983ds+deDKgxicA9av0zh+RShbkrKGQFK7x6spMK1IO7hnWdtYk+IVW3suLCt Swsgo5VFGC9wDxLo+C6c1YRqu1MrcNJJpdmHlFULZaN5GW+8M+Zy10UhOVtVKdfD aYObp0+Yofo0RIudfUe388mT6y1wWfMhh3zOvx1E5Qktg5WVreakqaVZFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPShZmzvfwJdCD2bP8kRxJbpJpLFMB8GA1UdIwQY MBaAFNkXhqBp5JNLJoG7jps3OAebJO9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iY2U5MTUtMDc4My00YTU0LThjNDUt NTJjYmE5N2Q5YjllLzEvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9iY2U5MTUtMDc4My00YTU0LThjNDUtNTJjYmE5N2Q5Yjll LzEvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarnhFU/p +I9HoolDLjWl2QmTJXDy+ew1KDE/ugQ1Hw2UYVcksmRzaQjRZK7hpGgFxqf2C4MF yPp3kFsyrkPHB9Q+VKFXEghJiJbO2CBGlNDASl+NIBQ++kaAzl/k5ejNta9pCunL Xgl0/YozXJsR596rVAns/MunUZNdmhX4rZkRyn3T2AkLsoS9Ym70qEThL6UetHYX oRRPjs4LMKJPUJJu13gi2dqPgmaO5f/mbU438TqUNK/tSFRgVlmfNxHswK1byYbu a71cTCC0djtmSPwt5AEqJvckd7DMQmJM3BppIfDfGXN4bGNfE2MdHKdgCKzr8+Ck pbt24F6PAkA9OA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:07 2026 by rpki-client