This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft File: 0SIIZtpI4MfP--jHOjUcKkexpNs.mft (raw, json) Hash identifier: yugfdLBvQJ46FHdygoWnC6D+0tHWceqT+GCwNzVrsx0= Subject key identifier: 50:A8:2E:5D:33:19:59:C6:C0:C6:45:97:1E:1A:F1:17:E7:FB:A9:99 Authority key identifier: D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB Certificate issuer: /CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db Certificate serial: 019BF8083CC2DF03DD20CDEBAB9F74F4891E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft Manifest number: 0572 Signing time: Mon 26 Jan 2026 02:00:47 +0000 Manifest this update: Mon 26 Jan 2026 02:00:47 +0000 Manifest next update: Tue 27 Jan 2026 02:00:47 +0000 Files and hashes: 1: 0SIIZtpI4MfP--jHOjUcKkexpNs.crl (hash: /ZJlzhswMULBvkF+hJpZeclPocBai1w9HF7VvKki/aE=) 2: 4TxKwKRDQKF0yF_LCgtDfcD3WbA.roa (hash: Jse6W+LikeQvtYUhUSyUuHEBzEMpr4LWc8qS1sps7Pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:3c:c2:df:03:dd:20:cd:eb:ab:9f:74:f4:89:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db Validity Not Before: Jan 26 02:00:47 2026 GMT Not After : Jan 27 02:00:47 2026 GMT Subject: CN=50a82e5d331959c6c0c645971e1af117e7fba999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:0b:24:4f:39:cc:0b:d3:a5:f3:67:bd:09:c6: 59:dd:5b:a2:41:09:5e:fd:ad:24:51:3b:c9:8d:5e: 6e:b2:ab:57:68:bf:22:ef:2b:10:7f:32:63:1b:70: e4:0f:1d:73:a4:cb:0c:94:1c:3b:23:06:96:78:95: 6d:56:b2:6f:18:23:1b:55:28:62:7c:c0:8d:6d:d5: fd:f5:20:13:7b:f9:79:93:fb:7d:cd:88:65:1e:e0: 0d:a4:40:48:c6:a9:38:4b:cb:82:4e:a2:9a:7e:6c: b7:cc:1a:d7:30:3b:fa:67:9b:99:91:ba:01:44:fd: 4d:4f:ca:0b:e1:ac:eb:e0:f7:5a:24:d1:58:07:f8: 3d:34:49:1a:a6:ae:49:9f:49:40:35:a8:b8:94:e4: 79:1b:26:7b:76:7c:58:bd:26:7f:6e:71:35:25:4f: 83:4e:ea:a9:af:70:44:09:45:ae:72:27:85:9f:2b: 59:1b:8e:bd:bd:77:8c:af:53:e3:47:43:40:a0:55: d4:66:2e:48:d4:bd:dc:34:99:ff:77:3f:2e:b7:37: 63:06:1f:8b:1b:b0:aa:29:5d:b5:62:88:84:a9:5e: 68:63:1d:23:98:07:9d:be:df:59:e0:da:73:b7:04: aa:ee:79:0a:3d:a0:f4:bc:ea:1b:63:63:bd:76:3b: 68:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A8:2E:5D:33:19:59:C6:C0:C6:45:97:1E:1A:F1:17:E7:FB:A9:99 X509v3 Authority Key Identifier: keyid:D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2a:af:2e:b7:e6:a1:0a:01:a6:ab:7d:3e:df:90:8c:95:de: e2:32:f2:f5:1e:1e:3c:70:87:e9:2a:28:e0:55:b5:6f:b6:21: 85:6b:0c:9b:55:0c:b3:b4:23:63:19:2a:de:98:24:8b:ba:69: d3:f7:7d:d1:fd:e9:f5:18:ab:90:18:c7:23:1c:16:3a:fa:9f: e5:05:ba:45:ad:aa:9b:6b:e7:29:b4:ac:23:ba:9b:bb:6c:09: 29:b3:32:08:4c:9c:dd:a7:db:17:7a:22:91:be:ee:a0:40:8e: ff:bb:88:56:b0:5c:44:dd:3a:f2:c4:9d:94:e0:dd:22:db:18: 74:52:1e:9b:5c:68:4e:21:69:64:84:4c:61:a0:ae:27:74:cf: cf:22:52:ef:f4:b9:3a:1c:b3:4a:75:13:a7:99:90:cc:db:d4: 20:c0:bc:05:69:12:3a:89:d3:ac:dd:47:bc:30:02:b8:7b:b9: 1e:6e:10:be:25:e8:3c:9a:ef:4d:1a:8d:0e:9f:88:d1:13:ca: a6:c0:ff:7d:a6:4c:3b:19:bf:2f:2b:05:81:a1:73:1f:78:ff: 0f:83:16:1d:e5:2b:dd:13:f1:bd:99:92:74:0f:2a:f8:89:aa: 1b:6b:3c:3f:de:0c:2c:32:42:8e:49:2c:9f:17:07:66:fc:d1: 3c:56:cb:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CDzC3wPdIM3rq5909IkeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMjIwODY2ZGE0OGUwYzdjZmZiZThjNzNhMzUxYzJhNDdi MWE0ZGIwHhcNMjYwMTI2MDIwMDQ3WhcNMjYwMTI3MDIwMDQ3WjAzMTEwLwYDVQQD Eyg1MGE4MmU1ZDMzMTk1OWM2YzBjNjQ1OTcxZTFhZjExN2U3ZmJhOTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+QskTznMC9Ol82e9CcZZ3VuiQQle /a0kUTvJjV5usqtXaL8i7ysQfzJjG3DkDx1zpMsMlBw7IwaWeJVtVrJvGCMbVShi fMCNbdX99SATe/l5k/t9zYhlHuANpEBIxqk4S8uCTqKafmy3zBrXMDv6Z5uZkboB RP1NT8oL4azr4PdaJNFYB/g9NEkapq5Jn0lANai4lOR5GyZ7dnxYvSZ/bnE1JU+D Tuqpr3BECUWucieFnytZG469vXeMr1PjR0NAoFXUZi5I1L3cNJn/dz8utzdjBh+L G7CqKV21YoiEqV5oYx0jmAedvt9Z4NpztwSq7nkKPaD0vOobY2O9djto3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCoLl0zGVnGwMZFlx4a8Rfn+6mZMB8GA1UdIwQY MBaAFNEiCGbaSODHz/voxzo1HCpHsaTbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFNJSVp0cEk0TWZQLS1qSE9qVWNLa2V4cE5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS82MDk1MWUtN2FiNS00NWQ4LTkwMTUt OTVlY2Q2NzE4ODg3LzEvMFNJSVp0cEk0TWZQLS1qSE9qVWNLa2V4cE5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS82MDk1MWUtN2FiNS00NWQ4LTkwMTUtOTVlY2Q2NzE4ODg3 LzEvMFNJSVp0cEk0TWZQLS1qSE9qVWNLa2V4cE5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyqvLrfm oQoBpqt9Pt+QjJXe4jLy9R4ePHCH6Soo4FW1b7YhhWsMm1UMs7QjYxkq3pgki7pp 0/d90f3p9RirkBjHIxwWOvqf5QW6Ra2qm2vnKbSsI7qbu2wJKbMyCEyc3afbF3oi kb7uoECO/7uIVrBcRN068sSdlODdItsYdFIem1xoTiFpZIRMYaCuJ3TPzyJS7/S5 OhyzSnUTp5mQzNvUIMC8BWkSOonTrN1HvDACuHu5Hm4QviXoPJrvTRqNDp+I0RPK psD/faZMOxm/LysFgaFzH3j/D4MWHeUr3RPxvZmSdA8q+ImqG2s8P94MLDJCjkks nxcHZvzRPFbLEA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:18:45 2026 by rpki-client