This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft File: 0stdGBr-pp854XESWTvksA5YS00.mft (raw, json) Hash identifier: L2wIT4tH6SZC4nRGqkMJkwuypTnjQRThtXhP20LdOmA= Subject key identifier: DB:47:7B:71:1A:37:4C:86:B4:0E:1F:A5:DD:6D:B3:B2:9A:D3:97:75 Authority key identifier: D2:CB:5D:18:1A:FE:A6:9F:39:E1:71:12:59:3B:E4:B0:0E:58:4B:4D Certificate issuer: /CN=d2cb5d181afea69f39e17112593be4b00e584b4d Certificate serial: 019BF9C01CA3D6777C25E2867D2A3C8F9CCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft Manifest number: 0657 Signing time: Mon 26 Jan 2026 10:01:15 +0000 Manifest this update: Mon 26 Jan 2026 10:01:15 +0000 Manifest next update: Tue 27 Jan 2026 10:01:15 +0000 Files and hashes: 1: 0ibaNhvkh_ai2Nma-Mqh8s8JKk4.roa (hash: 1HFFSbzbTWw5e/xnBaTxYT53w0nfp8E1BQCPhlrQ8yw=) 2: 0stdGBr-pp854XESWTvksA5YS00.crl (hash: a+WlaeugUjmUudmYHPcCGooI2Z4rjPuu16JqmZhjbuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:c0:1c:a3:d6:77:7c:25:e2:86:7d:2a:3c:8f:9c:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2cb5d181afea69f39e17112593be4b00e584b4d Validity Not Before: Jan 26 10:01:15 2026 GMT Not After : Jan 27 10:01:15 2026 GMT Subject: CN=db477b711a374c86b40e1fa5dd6db3b29ad39775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:75:31:71:3b:fa:16:e2:1a:f8:c4:f1:d7:60: ac:d5:bb:ba:51:d8:a1:9b:41:04:dc:82:89:f6:41: d4:26:ef:35:3d:84:c9:55:00:e3:34:f3:ba:75:87: b4:37:85:9d:c0:8d:de:61:5a:25:e8:10:82:9d:75: 4d:5a:c2:5b:e4:cb:e4:c6:12:68:81:11:75:37:a5: 9c:16:03:5f:8d:82:ba:d4:4a:77:b6:9e:65:02:4b: 37:cf:8d:16:aa:8a:61:2d:6e:d1:63:73:75:98:8c: 84:be:a6:48:16:98:df:66:7b:6e:b0:eb:b3:50:db: c3:8d:6c:3c:55:b5:3d:3a:ee:dd:ee:56:1d:61:e0: 0a:30:2b:64:73:2f:36:5a:9e:d5:d1:95:e3:2f:69: 41:4e:73:ad:0e:57:ae:1e:54:16:19:0b:a8:9f:bf: 2c:c5:15:6a:5d:be:ff:b3:a7:bc:90:f8:4e:76:ff: 6b:73:e5:ad:da:4d:e2:e8:a3:72:16:6a:1d:6f:66: de:1f:b5:ab:1a:99:1c:28:2f:a5:06:50:26:b5:e8: 1e:67:85:89:4e:43:99:f6:50:d8:51:2f:83:47:05: cc:2e:6c:2d:62:d9:84:f7:22:2d:b4:ad:a6:b6:f9: ef:31:e0:3e:e1:6e:4d:33:e8:b6:fc:1c:54:f3:14: 9c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:47:7B:71:1A:37:4C:86:B4:0E:1F:A5:DD:6D:B3:B2:9A:D3:97:75 X509v3 Authority Key Identifier: keyid:D2:CB:5D:18:1A:FE:A6:9F:39:E1:71:12:59:3B:E4:B0:0E:58:4B:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0stdGBr-pp854XESWTvksA5YS00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/aa9e97-4001-48a4-bf80-3d25458b39ee/1/0stdGBr-pp854XESWTvksA5YS00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:0c:7b:de:f2:79:67:5b:aa:d0:cc:2b:c1:4f:55:60:f2:8c: 78:71:ca:fa:f5:c1:84:5d:62:4d:c7:d7:a1:c7:b1:a6:31:f6: 54:ae:73:db:19:d9:17:ea:72:2a:35:25:82:3c:2b:1a:7e:6d: ec:19:85:ad:5b:11:e1:c6:92:51:ee:45:55:58:c3:a4:16:41: 5d:6c:b0:24:74:e0:d8:97:58:88:e6:d4:f0:83:ba:40:4a:49: fc:60:48:05:1f:4f:04:99:00:7a:d6:bc:8b:c0:c8:86:e5:1c: 6b:bd:8c:62:f7:8f:9e:b6:b1:a1:9a:9c:53:62:fe:f5:af:cd: 45:78:41:23:8a:38:98:5c:27:4d:5b:f0:8d:ba:28:67:11:20: 6a:b1:3c:0b:b6:a9:9a:5a:21:42:2d:90:5c:1f:fc:46:bd:73: a0:9b:f0:60:b4:11:14:1c:c7:e6:7e:ec:6f:f2:ea:e2:0a:f3: 9b:0e:53:6b:83:3d:fc:14:26:7e:a5:df:cc:3c:b4:f3:d7:36: 1d:1c:01:e7:dc:8b:b9:8c:21:c7:40:ff:94:0d:74:60:11:51: ae:83:ae:8e:31:20:f7:2b:24:3d:af:76:04:01:25:41:8a:df: 65:2c:c4:3d:b1:be:96:f2:48:f2:9f:8f:b9:1a:b9:a3:43:eb: bf:b6:c3:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5wByj1nd8JeKGfSo8j5zNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyY2I1ZDE4MWFmZWE2OWYzOWUxNzExMjU5M2JlNGIwMGU1 ODRiNGQwHhcNMjYwMTI2MTAwMTE1WhcNMjYwMTI3MTAwMTE1WjAzMTEwLwYDVQQD EyhkYjQ3N2I3MTFhMzc0Yzg2YjQwZTFmYTVkZDZkYjNiMjlhZDM5Nzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3UxcTv6FuIa+MTx12Cs1bu6Udih m0EE3IKJ9kHUJu81PYTJVQDjNPO6dYe0N4WdwI3eYVol6BCCnXVNWsJb5MvkxhJo gRF1N6WcFgNfjYK61Ep3tp5lAks3z40WqophLW7RY3N1mIyEvqZIFpjfZntusOuz UNvDjWw8VbU9Ou7d7lYdYeAKMCtkcy82Wp7V0ZXjL2lBTnOtDleuHlQWGQuon78s xRVqXb7/s6e8kPhOdv9rc+Wt2k3i6KNyFmodb2beH7WrGpkcKC+lBlAmtegeZ4WJ TkOZ9lDYUS+DRwXMLmwtYtmE9yIttK2mtvnvMeA+4W5NM+i2/BxU8xSciQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtHe3EaN0yGtA4fpd1ts7Ka05d1MB8GA1UdIwQY MBaAFNLLXRga/qafOeFxElk75LAOWEtNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHN0ZEdCci1wcDg1NFhFU1dUdmtzQTVZUzAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9hYTllOTctNDAwMS00OGE0LWJmODAt M2QyNTQ1OGIzOWVlLzEvMHN0ZEdCci1wcDg1NFhFU1dUdmtzQTVZUzAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9hYTllOTctNDAwMS00OGE0LWJmODAtM2QyNTQ1OGIzOWVl LzEvMHN0ZEdCci1wcDg1NFhFU1dUdmtzQTVZUzAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQx73vJ5 Z1uq0MwrwU9VYPKMeHHK+vXBhF1iTcfXocexpjH2VK5z2xnZF+pyKjUlgjwrGn5t 7BmFrVsR4caSUe5FVVjDpBZBXWywJHTg2JdYiObU8IO6QEpJ/GBIBR9PBJkAeta8 i8DIhuUca72MYvePnraxoZqcU2L+9a/NRXhBI4o4mFwnTVvwjbooZxEgarE8C7ap mlohQi2QXB/8Rr1zoJvwYLQRFBzH5n7sb/Lq4grzmw5Ta4M9/BQmfqXfzDy089c2 HRwB59yLuYwhx0D/lA10YBFRroOujjEg9yskPa92BAElQYrfZSzEPbG+lvJI8p+P uRq5o0Prv7bDSw== -----END CERTIFICATE-----Generated at Mon Jan 26 18:41:57 2026 by rpki-client