This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft File: rfRJdaXb2_gjtKCmt-65mxSENn4.mft (raw, json) Hash identifier: Ob/NF6aI26lZmZfYxvuQSW5+IMeAgg5i9z7DTZGyWBg= Subject key identifier: A2:08:21:3B:D3:B3:CB:FB:7F:AA:36:35:8C:91:ED:80:4E:38:47:E0 Authority key identifier: AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E Certificate issuer: /CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e Certificate serial: 019BF79A7C40B284926E124567CD45F2F7A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft Manifest number: 077D Signing time: Mon 26 Jan 2026 00:00:55 +0000 Manifest this update: Mon 26 Jan 2026 00:00:55 +0000 Manifest next update: Tue 27 Jan 2026 00:00:55 +0000 Files and hashes: 1: DhXIhTNHBAE7NvkalrnD2mWPOgc.roa (hash: XkSLod7NkjdHpR6f/sX0hfuPnykt4HOPZbPdtRM87jE=) 2: rfRJdaXb2_gjtKCmt-65mxSENn4.crl (hash: Y38u9s/sGvuHLlCkHDLgMjiptWnrBTv6cE0FrEm+kdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:7c:40:b2:84:92:6e:12:45:67:cd:45:f2:f7:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e Validity Not Before: Jan 26 00:00:55 2026 GMT Not After : Jan 27 00:00:55 2026 GMT Subject: CN=a208213bd3b3cbfb7faa36358c91ed804e3847e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9a:c5:d0:e6:99:73:02:3a:52:12:71:3d:bc: e2:cb:fb:b7:6f:e6:96:06:87:8b:5d:df:a6:30:ed: aa:eb:e6:6c:0f:61:30:38:7c:03:03:80:1e:9f:50: ed:27:c2:c1:50:8d:3c:4b:29:f6:ab:82:9b:40:5b: 22:3d:a3:3d:da:d3:16:b0:71:75:be:39:53:4f:0d: 47:10:08:6e:cd:f5:84:08:5d:83:c9:08:56:25:4f: e0:e7:57:17:3a:26:d1:6f:76:d2:37:2b:fb:5c:72: df:fb:05:61:f7:6e:a9:6c:9e:4c:cd:d6:86:c9:1e: 7f:5a:4d:f6:51:0a:b8:20:55:9f:c5:ee:4c:14:93: 84:80:72:17:5b:3e:bc:60:15:ef:e0:20:25:0c:71: dc:b0:5c:54:f8:0e:b2:f8:6c:4f:03:9f:0c:1f:04: ba:98:29:80:65:5b:0d:5d:15:be:8a:45:03:d4:60: 6c:ab:e8:27:47:84:e6:fc:83:65:99:28:71:b4:23: 2d:9f:92:1c:d1:6a:4e:dd:d5:83:d6:f7:56:50:50: 91:7a:7b:92:08:07:65:04:5d:06:bd:e0:98:37:9d: 95:d7:7b:14:cf:70:48:a5:d2:ec:57:1f:52:32:e3: 2e:be:6b:36:46:0a:39:f7:a6:48:5d:cd:6a:f2:a9: b9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:08:21:3B:D3:B3:CB:FB:7F:AA:36:35:8C:91:ED:80:4E:38:47:E0 X509v3 Authority Key Identifier: keyid:AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f6:14:c7:37:ad:9d:de:40:db:eb:fa:bf:44:69:51:66:c3: bd:84:ce:70:d6:a3:52:30:f1:7c:26:4c:9b:3d:fc:85:b4:cc: fb:98:bf:5b:44:f4:d9:8b:47:4d:8c:86:bb:4f:70:42:97:cf: 6d:2c:99:9b:8c:42:65:b6:94:0c:54:76:fd:4b:1f:13:c9:c8: e3:76:23:49:3b:6d:c6:3e:8d:33:68:ae:4d:67:5e:0a:9a:04: 12:80:64:86:bd:2d:bc:54:00:36:91:43:15:2d:5f:b9:dc:d9: ee:df:ab:f1:59:b9:71:18:4f:94:5e:3a:61:80:1a:7b:1c:fa: 37:e0:13:93:e8:01:8a:4e:01:6c:e2:0c:00:9d:32:f2:c9:31: 07:2e:e5:bd:3b:20:7b:ec:ab:be:90:17:db:21:c2:a8:34:52: 8b:10:df:2f:57:f2:33:0d:23:4c:3d:42:7c:51:f2:dd:7e:99: d9:9b:2b:9a:5f:b5:9e:9c:b7:3d:32:db:76:ea:19:2d:ae:22: 80:a3:be:ec:84:e5:83:f0:df:44:80:56:35:9b:58:86:85:cb: 97:6f:4b:34:3c:1a:6e:72:cb:8c:99:5a:6b:4f:f5:b8:47:1e: a6:9a:32:38:75:68:38:42:d1:b0:54:1c:99:ad:2b:e4:18:bc: b9:ef:31:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mnxAsoSSbhJFZ81F8vejMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ0OTc1YTVkYmRiZjgyM2I0YTBhNmI3ZWViOTliMTQ4 NDM2N2UwHhcNMjYwMTI2MDAwMDU1WhcNMjYwMTI3MDAwMDU1WjAzMTEwLwYDVQQD EyhhMjA4MjEzYmQzYjNjYmZiN2ZhYTM2MzU4YzkxZWQ4MDRlMzg0N2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJrF0OaZcwI6UhJxPbziy/u3b+aW BoeLXd+mMO2q6+ZsD2EwOHwDA4Aen1DtJ8LBUI08Syn2q4KbQFsiPaM92tMWsHF1 vjlTTw1HEAhuzfWECF2DyQhWJU/g51cXOibRb3bSNyv7XHLf+wVh926pbJ5MzdaG yR5/Wk32UQq4IFWfxe5MFJOEgHIXWz68YBXv4CAlDHHcsFxU+A6y+GxPA58MHwS6 mCmAZVsNXRW+ikUD1GBsq+gnR4Tm/INlmShxtCMtn5Ic0WpO3dWD1vdWUFCRenuS CAdlBF0GveCYN52V13sUz3BIpdLsVx9SMuMuvms2Rgo596ZIXc1q8qm5WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIIITvTs8v7f6o2NYyR7YBOOEfgMB8GA1UdIwQY MBaAFK30SXWl29v4I7SgprfuuZsUhDZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZSSmRhWGIyX2dqdEtDbXQtNjVteFNFTm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZWUxNzMtNmMxMi00M2NiLThiMDkt YmJiMGM4MDI4ZTJiLzEvcmZSSmRhWGIyX2dqdEtDbXQtNjVteFNFTm40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9jZWUxNzMtNmMxMi00M2NiLThiMDktYmJiMGM4MDI4ZTJi LzEvcmZSSmRhWGIyX2dqdEtDbXQtNjVteFNFTm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjvYUxzet nd5A2+v6v0RpUWbDvYTOcNajUjDxfCZMmz38hbTM+5i/W0T02YtHTYyGu09wQpfP bSyZm4xCZbaUDFR2/UsfE8nI43YjSTttxj6NM2iuTWdeCpoEEoBkhr0tvFQANpFD FS1fudzZ7t+r8Vm5cRhPlF46YYAaexz6N+ATk+gBik4BbOIMAJ0y8skxBy7lvTsg e+yrvpAX2yHCqDRSixDfL1fyMw0jTD1CfFHy3X6Z2Zsrml+1npy3PTLbduoZLa4i gKO+7ITlg/DfRIBWNZtYhoXLl29LNDwabnLLjJlaa0/1uEceppoyOHVoOELRsFQc ma0r5Bi8ue8xOw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:57 2026 by rpki-client