This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.mft File: 49CoS6s970HWqqkCjeekddMtEr0.mft (raw, json) Hash identifier: Tm27c8bOKEo6xlBzSDksaZyMbvj9iFXJi2vEZqAUl5w= Subject key identifier: 64:14:16:DD:BB:CF:7E:3F:14:3A:12:6A:2E:BA:9D:81:DA:70:12:1C Authority key identifier: E3:D0:A8:4B:AB:3D:EF:41:D6:AA:A9:02:8D:E7:A4:75:D3:2D:12:BD Certificate issuer: /CN=e3d0a84bab3def41d6aaa9028de7a475d32d12bd Certificate serial: 019BF6F5650434A0A951E7FA8417ED649A04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.mft Manifest number: 09AB Signing time: Sun 25 Jan 2026 21:00:35 +0000 Manifest this update: Sun 25 Jan 2026 21:00:35 +0000 Manifest next update: Mon 26 Jan 2026 21:00:35 +0000 Files and hashes: 1: 49CoS6s970HWqqkCjeekddMtEr0.crl (hash: sn8pNvY9GBrWPtR05B1ZMy0hp+PA44syEgBDV06m5S8=) 2: B0MLkq51N2DB1BgdY1eQ56es0fs.roa (hash: V/PvhApArnjFZZY5kt89Eh8Mg1SnorBBms+yQHl9/1Y=) 3: U38H1DqbOLfyhC9vUlS7CE-eqkY.roa (hash: hih9v2/80+GAK3ew382sMvVyZE3RudyzOvC7wWTs/S4=) 4: zNJS94Qg6zJgG0ukhEJxGF_OMC0.roa (hash: aV6TdV9v9sN+i6/OTAbHJF/itl6jRzuUd0kDdhEhu30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.mft rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:65:04:34:a0:a9:51:e7:fa:84:17:ed:64:9a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3d0a84bab3def41d6aaa9028de7a475d32d12bd Validity Not Before: Jan 25 21:00:35 2026 GMT Not After : Jan 26 21:00:35 2026 GMT Subject: CN=641416ddbbcf7e3f143a126a2eba9d81da70121c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2f:59:e5:08:16:e4:2e:b7:92:ec:ef:47:21: 10:be:8a:f9:7d:74:be:c1:27:db:25:5d:1b:0b:2c: c4:f1:ce:86:ba:57:29:03:22:30:9b:d7:a7:20:e7: 3e:85:da:42:05:e4:21:b0:12:09:be:dd:ff:31:b8: 46:da:8e:dd:fe:dc:d6:e7:d1:b7:2c:91:5d:6e:46: 0e:66:20:73:ef:d3:29:93:98:48:25:87:73:dc:8b: 9f:09:65:ac:de:f3:ef:65:3a:db:c2:4f:13:07:89: dd:8a:4e:f2:83:16:34:9b:b4:3d:0e:14:0f:48:a8: c6:cd:e3:cc:1c:45:0b:0c:95:47:7d:34:63:ab:0c: 3b:0c:27:72:af:d0:86:d6:1f:0c:d5:5a:12:42:80: 2a:82:ba:8e:a7:24:71:2d:97:8c:f2:c8:d7:9e:68: 46:a3:b4:a2:43:24:1c:1d:a7:4f:a4:c3:6e:7a:50: 40:cf:59:1d:d3:f2:90:c1:58:20:5e:b5:31:4b:28: 6b:91:8a:a4:dd:ad:48:43:67:64:d6:68:33:67:df: 54:93:d9:88:a7:05:bf:0b:55:1a:7c:0a:e9:4f:f0: 95:93:86:89:0b:40:cd:b9:5a:15:1d:b1:18:2f:0a: b3:6e:fc:bc:39:9a:66:81:3a:8f:1c:d5:db:1a:80: 46:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:14:16:DD:BB:CF:7E:3F:14:3A:12:6A:2E:BA:9D:81:DA:70:12:1C X509v3 Authority Key Identifier: keyid:E3:D0:A8:4B:AB:3D:EF:41:D6:AA:A9:02:8D:E7:A4:75:D3:2D:12:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49CoS6s970HWqqkCjeekddMtEr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cb51f5-a843-49c4-9f19-10eb8adfea7e/1/49CoS6s970HWqqkCjeekddMtEr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b9:25:18:a0:15:da:e8:f1:7e:23:3c:77:e8:f3:3c:dd:83: 30:88:46:7e:40:32:88:05:44:75:ec:81:1c:33:82:aa:9d:d3: b3:cc:a3:db:5b:24:db:3a:2b:99:8a:4a:5e:bd:c7:98:23:ab: 3e:7e:33:e9:3c:cd:4b:0b:3d:df:07:41:bb:3f:7e:93:d3:a1: 64:9e:33:c6:90:19:fe:b3:1d:cc:05:83:2d:73:04:dd:43:34: 93:e2:c2:af:bf:2c:00:6f:96:a0:d7:e2:c9:23:5e:56:48:8c: 64:31:fc:4e:bb:a9:35:46:bb:58:24:f2:2a:d6:93:dd:d8:53: e5:e7:71:39:94:74:77:68:8a:56:d2:ff:3f:4b:07:df:af:8a: 08:2a:26:d8:c7:d6:1c:a0:64:32:b9:44:ee:ca:e3:46:b0:ec: 35:ba:ec:16:33:8e:6e:a1:ff:63:de:fa:97:ab:50:37:9a:ee: 56:38:d6:1e:cc:a1:a3:51:98:85:03:ce:62:10:13:ff:a0:5c: 5b:d3:3c:30:f4:d2:35:fe:ac:85:be:b0:51:8b:d1:6f:2e:3b: c3:ee:9e:fb:cf:58:8e:6e:fa:26:de:ba:2d:bc:e3:0c:f4:c0: 8b:df:7f:70:15:35:17:de:f1:50:2f:22:c6:f8:7e:17:ef:96: 5b:4e:2c:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29WUENKCpUef6hBftZJoEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzZDBhODRiYWIzZGVmNDFkNmFhYTkwMjhkZTdhNDc1ZDMy ZDEyYmQwHhcNMjYwMTI1MjEwMDM1WhcNMjYwMTI2MjEwMDM1WjAzMTEwLwYDVQQD Eyg2NDE0MTZkZGJiY2Y3ZTNmMTQzYTEyNmEyZWJhOWQ4MWRhNzAxMjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC9Z5QgW5C63kuzvRyEQvor5fXS+ wSfbJV0bCyzE8c6GulcpAyIwm9enIOc+hdpCBeQhsBIJvt3/MbhG2o7d/tzW59G3 LJFdbkYOZiBz79Mpk5hIJYdz3IufCWWs3vPvZTrbwk8TB4ndik7ygxY0m7Q9DhQP SKjGzePMHEULDJVHfTRjqww7DCdyr9CG1h8M1VoSQoAqgrqOpyRxLZeM8sjXnmhG o7SiQyQcHadPpMNuelBAz1kd0/KQwVggXrUxSyhrkYqk3a1IQ2dk1mgzZ99Uk9mI pwW/C1UafArpT/CVk4aJC0DNuVoVHbEYLwqzbvy8OZpmgTqPHNXbGoBGZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQUFt27z34/FDoSai66nYHacBIcMB8GA1UdIwQY MBaAFOPQqEurPe9B1qqpAo3npHXTLRK9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDlDb1M2czk3MEhXcXFrQ2plZWtkZE10RXIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jYjUxZjUtYTg0My00OWM0LTlmMTkt MTBlYjhhZGZlYTdlLzEvNDlDb1M2czk3MEhXcXFrQ2plZWtkZE10RXIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jYjUxZjUtYTg0My00OWM0LTlmMTktMTBlYjhhZGZlYTdl LzEvNDlDb1M2czk3MEhXcXFrQ2plZWtkZE10RXIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLklGKAV 2ujxfiM8d+jzPN2DMIhGfkAyiAVEdeyBHDOCqp3Ts8yj21sk2zormYpKXr3HmCOr Pn4z6TzNSws93wdBuz9+k9OhZJ4zxpAZ/rMdzAWDLXME3UM0k+LCr78sAG+WoNfi ySNeVkiMZDH8TrupNUa7WCTyKtaT3dhT5edxOZR0d2iKVtL/P0sH36+KCCom2MfW HKBkMrlE7srjRrDsNbrsFjOObqH/Y976l6tQN5ruVjjWHsyho1GYhQPOYhAT/6Bc W9M8MPTSNf6shb6wUYvRby47w+6e+89Yjm76Jt66LbzjDPTAi99/cBU1F97xUC8i xvh+F++WW04sVw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:54 2026 by rpki-client