This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft File: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft (raw, json) Hash identifier: xUSmIGHaGhbgvT+sDJbNmh5IqEdT3QaZ8zwV+Ei6iDo= Subject key identifier: 90:3F:2E:99:24:40:99:0D:35:AA:A1:85:21:F6:9E:47:CA:AA:9D:A0 Authority key identifier: D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B Certificate issuer: /CN=d2c17db099bd419eba552a37704deeed3b2e303b Certificate serial: 019BF7D14D7ADF67C5C48A0A6EA0B6EE2897 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft Manifest number: 05D6 Signing time: Mon 26 Jan 2026 01:00:47 +0000 Manifest this update: Mon 26 Jan 2026 01:00:47 +0000 Manifest next update: Tue 27 Jan 2026 01:00:47 +0000 Files and hashes: 1: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl (hash: ZNYJ8Yp4FPDuZWuZqqmKnPr8m5sEAcilPm/p7VYD+R4=) 2: 1-MrxZrcPXM7BvaVdVabElQiwAhg.roa (hash: 5Yrq+V+8IPQZLxO9mgzwmCCXtczV+ZsgweXRxHjq37Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:4d:7a:df:67:c5:c4:8a:0a:6e:a0:b6:ee:28:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2c17db099bd419eba552a37704deeed3b2e303b Validity Not Before: Jan 26 01:00:47 2026 GMT Not After : Jan 27 01:00:47 2026 GMT Subject: CN=903f2e992440990d35aaa18521f69e47caaa9da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:29:8a:45:ce:95:b4:8c:02:63:55:39:96:9f: b7:bb:2e:8e:92:1d:03:d3:17:98:9d:9b:3d:82:4c: a4:74:6e:da:95:44:9b:ec:7f:80:8f:95:0a:bd:b0: 0a:04:ca:e4:09:8a:3c:e8:8b:cc:5f:ce:9c:2a:7f: c3:ef:5c:ba:ff:a6:8b:1b:e4:86:92:1d:80:f9:69: a0:cf:71:64:99:6f:f1:7f:ef:bc:01:80:46:3d:4f: 40:11:bf:7a:7c:1f:d2:59:ac:f3:bd:80:0c:53:85: 59:36:cc:9b:59:c5:07:f5:3e:0a:00:bf:b6:69:20: 10:20:b0:d4:bd:a7:01:df:7a:c8:6c:c9:00:c8:94: 6d:64:e3:47:43:03:b4:3e:01:1a:93:87:c5:2d:ee: e6:ef:d1:aa:09:ca:c1:56:94:78:0e:d5:33:a5:78: cc:b5:02:ef:b9:d1:46:2b:2d:29:4d:c8:1d:6b:77: 8c:2e:40:dd:6f:8b:a0:ba:0a:82:54:91:e4:1f:24: b9:08:11:a6:b2:19:7a:bd:78:23:35:50:28:b8:92: d1:b2:b6:85:b5:16:05:fe:3e:b2:19:e8:18:e2:2f: 87:e7:ec:fc:eb:f4:7c:fe:85:e1:b7:84:4e:cb:26: d1:a2:16:e3:c1:67:6d:18:a4:f5:41:d5:2b:7c:63: 4a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3F:2E:99:24:40:99:0D:35:AA:A1:85:21:F6:9E:47:CA:AA:9D:A0 X509v3 Authority Key Identifier: keyid:D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:fe:30:51:43:2a:da:e5:d6:72:a9:8d:96:73:38:8f:7a:90: 2d:cc:f3:d2:ed:1f:43:38:8d:bb:8e:8f:f8:9a:ca:85:d0:9a: 49:74:a4:90:ed:b0:cb:a5:d6:94:68:40:f2:23:98:aa:3f:06: c6:6b:6a:25:2b:01:17:42:93:ba:d4:59:1b:66:1c:00:52:df: 16:dc:07:79:fe:61:3e:56:49:dd:7e:15:f9:23:b8:56:dc:6e: 93:a0:1e:d9:74:49:ee:97:b2:4a:24:a0:56:75:b5:a2:0f:73: 1b:30:80:3d:ec:65:90:96:d6:08:54:11:a0:69:b1:2b:ab:2e: b9:8f:44:6c:84:ae:cb:79:35:6c:ff:fc:4e:31:2d:b7:96:89: 36:37:5b:47:64:04:3d:e5:4a:8a:31:08:45:df:40:7b:3e:17: 3b:04:82:79:a7:5c:7e:ec:c5:74:8d:c5:ee:2e:95:64:58:26: c5:69:8b:7c:04:0a:55:8e:a9:e1:b1:dc:e6:a7:c5:01:12:df: 13:54:dc:84:28:03:4e:ba:fe:b7:2e:39:16:e6:35:28:bf:dc: 4b:de:0d:58:bf:ea:f3:f4:92:9b:bd:94:06:2a:15:97:7f:4d: aa:9b:1d:43:25:d1:d9:7a:4f:a9:ac:2d:f7:b6:8e:db:d3:27: d7:c7:43:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30U1632fFxIoKbqC27iiXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYzE3ZGIwOTliZDQxOWViYTU1MmEzNzcwNGRlZWVkM2Iy ZTMwM2IwHhcNMjYwMTI2MDEwMDQ3WhcNMjYwMTI3MDEwMDQ3WjAzMTEwLwYDVQQD Eyg5MDNmMmU5OTI0NDA5OTBkMzVhYWExODUyMWY2OWU0N2NhYWE5ZGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArymKRc6VtIwCY1U5lp+3uy6Okh0D 0xeYnZs9gkykdG7alUSb7H+Aj5UKvbAKBMrkCYo86IvMX86cKn/D71y6/6aLG+SG kh2A+Wmgz3FkmW/xf++8AYBGPU9AEb96fB/SWazzvYAMU4VZNsybWcUH9T4KAL+2 aSAQILDUvacB33rIbMkAyJRtZONHQwO0PgEak4fFLe7m79GqCcrBVpR4DtUzpXjM tQLvudFGKy0pTcgda3eMLkDdb4ugugqCVJHkHyS5CBGmshl6vXgjNVAouJLRsraF tRYF/j6yGegY4i+H5+z86/R8/oXht4ROyybRohbjwWdtGKT1QdUrfGNKXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJA/LpkkQJkNNaqhhSH2nkfKqp2gMB8GA1UdIwQY MBaAFNLBfbCZvUGeulUqN3BN7u07LjA7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHNGOXNKbTlRWjY2VlNvM2NFM3U3VHN1TURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83Y2JhNjItNzdkMC00MTE4LWE0YzUt YTEwNzZkMTI3ZWM2LzEvMHNGOXNKbTlRWjY2VlNvM2NFM3U3VHN1TURzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83Y2JhNjItNzdkMC00MTE4LWE0YzUtYTEwNzZkMTI3ZWM2 LzEvMHNGOXNKbTlRWjY2VlNvM2NFM3U3VHN1TURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGf4wUUMq 2uXWcqmNlnM4j3qQLczz0u0fQziNu46P+JrKhdCaSXSkkO2wy6XWlGhA8iOYqj8G xmtqJSsBF0KTutRZG2YcAFLfFtwHef5hPlZJ3X4V+SO4Vtxuk6Ae2XRJ7peySiSg VnW1og9zGzCAPexlkJbWCFQRoGmxK6suuY9EbISuy3k1bP/8TjEtt5aJNjdbR2QE PeVKijEIRd9Aez4XOwSCeadcfuzFdI3F7i6VZFgmxWmLfAQKVY6p4bHc5qfFARLf E1TchCgDTrr+ty45FuY1KL/cS94NWL/q8/SSm72UBioVl39NqpsdQyXR2XpPqawt 97aO29Mn18dDAg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:35 2026 by rpki-client