This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft File: p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft (raw, json) Hash identifier: Bpm4iEn1kPNpb+GooEOdwqBflWbYK3aW5IduKSQK+FE= Subject key identifier: FD:8D:A1:89:4C:C8:A0:84:D0:BF:82:AB:72:27:A0:D2:BD:B1:06:94 Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Certificate serial: 019BF5ABD5F81ED43E25EB9D7D42693F021E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft Manifest number: 1812 Signing time: Sun 25 Jan 2026 15:00:37 +0000 Manifest this update: Sun 25 Jan 2026 15:00:37 +0000 Manifest next update: Mon 26 Jan 2026 15:00:37 +0000 Files and hashes: 1: 7RRyo5mrSZHKaCfweZimJC0UI0A.roa (hash: LQwFNkqaemk7BQFWfMSkrEO4PRaAlztizBh/5pehkzc=) 2: bXeDjlFQZxCvvfoeElvquanHuZA.roa (hash: RDVCaZsRUDJaMXpntgU8V0AZhyelN+TpLVWyUrhvuTY=) 3: bc0mGww2GImeLw53tIRJtqt1goo.asa (hash: sLme9hQtgnCHpEldpCRLHVOEKrZFO2bAZpniqL80jV4=) 4: cduC2GbU6mLXIEEHAt29JqjeJ_c.roa (hash: sBtHQn0mqBf5vLWH/WxAyxQgtkjINRc/CcTzUpuSllU=) 5: p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl (hash: jNRjY+Qmu3BWQzldD82tyAEadvDsQrN/uTJLbmqlvHk=) 6: pkUUzqA3QbThc7oqdUnjxN9QYMU.roa (hash: RswzhGW9W7Aa5lMfftJP3fP15HlpGxcfnXUCf1iUSNg=) 7: uGGHB9Av3_ThaGzwH8xxsyY9IAk.roa (hash: EQLCZ4pDh+GlnlGdR0v0R9xaKh+vfEuApMYZeBAUdys=) 8: zOPM5DQVOuL2gxGFfQ2OogcDlag.roa (hash: TZhWdIY554lkmlZSQhc2076I8ib8niBs3eBXmmFEKfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:d5:f8:1e:d4:3e:25:eb:9d:7d:42:69:3f:02:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Validity Not Before: Jan 25 15:00:37 2026 GMT Not After : Jan 26 15:00:37 2026 GMT Subject: CN=fd8da1894cc8a084d0bf82ab7227a0d2bdb10694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:17:ee:72:4c:cc:28:c2:c4:b2:21:3f:8d: 16:56:19:08:e5:d6:1d:01:84:ce:49:a3:dd:25:8b: 22:78:c6:3f:77:5d:b4:89:b3:79:94:c0:5f:3c:74: 84:9c:d8:15:6f:67:78:3f:bd:fe:a7:c3:16:9c:c3: ad:67:00:40:35:3a:d0:30:ac:d3:79:51:cb:bb:f0: e6:3e:de:7b:76:f1:6d:7c:a2:47:5e:44:43:22:e8: e1:3a:6a:a9:ce:e8:67:09:83:b1:39:37:df:63:d4: b5:7e:c4:26:5d:49:91:7f:be:34:95:79:9d:ef:17: 81:db:20:f7:95:91:9b:ef:bf:6f:d2:ac:c3:e3:77: 37:9c:07:7a:df:24:49:a8:ab:dc:22:37:e2:03:cc: fe:16:d0:fa:49:40:c7:0d:eb:f5:48:46:ea:74:98: 97:8b:e4:5a:70:3d:17:86:df:83:42:3e:e9:f8:ed: e8:9e:64:f4:40:70:6b:93:e2:5a:01:3e:9c:44:43: ee:c2:ce:ad:4b:82:30:14:7d:54:91:2d:b3:87:ad: c7:8b:e9:60:fa:c3:11:43:28:5a:98:57:de:51:2e: 64:32:cb:5f:36:60:90:b2:6f:6f:c6:8a:d9:8d:6b: 6d:f9:61:35:1e:2e:fc:37:bf:be:37:87:87:11:75: e7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:8D:A1:89:4C:C8:A0:84:D0:BF:82:AB:72:27:A0:D2:BD:B1:06:94 X509v3 Authority Key Identifier: keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:b7:6d:44:3e:ab:ca:de:0d:c7:93:c6:76:6e:07:78:d0:4d: ec:71:ba:52:42:93:41:ba:e2:ef:3a:f3:0a:d5:ca:39:9d:39: 17:76:c9:05:d4:a6:d7:ce:aa:9c:e1:87:30:c9:c2:cd:0b:7a: 0c:37:9a:9f:1b:74:72:98:f0:3d:9b:80:5a:34:b8:26:bc:6f: 66:fb:77:21:7c:ef:5c:73:41:29:0c:49:68:da:1f:a0:80:fb: 60:96:a0:70:40:4a:82:7a:b9:32:e9:be:11:83:a4:77:6a:8c: 0f:28:89:36:e7:ec:6b:7a:f0:85:0e:1b:45:81:73:a9:07:f1: 02:75:b3:5f:ac:e4:9e:68:30:ef:d8:55:f3:28:ee:8b:ff:70: c0:90:13:80:ce:8c:4e:6c:a0:68:6f:87:19:85:09:df:46:a1: 58:d6:e2:7a:aa:00:48:c1:a1:e9:e3:64:e5:9a:79:b4:13:29: 05:13:9d:62:70:49:cd:08:68:ce:19:5f:5c:b5:ce:bf:bb:db: cd:51:94:e7:28:30:5b:18:30:2d:2f:fc:84:7f:d7:d8:8f:fa: da:7e:83:f2:f8:96:3d:ca:5f:95:8a:27:27:02:9b:ce:92:a4: 5e:60:fd:0a:41:15:da:31:d7:39:86:e3:57:f5:df:69:59:2a: 04:f8:6c:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q9X4HtQ+JeudfUJpPwIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmRkOWRhZDc1ODc3ZjdkMjhkMTRlMDhkYzU1YjEzMzBi ZDEzYjcwHhcNMjYwMTI1MTUwMDM3WhcNMjYwMTI2MTUwMDM3WjAzMTEwLwYDVQQD EyhmZDhkYTE4OTRjYzhhMDg0ZDBiZjgyYWI3MjI3YTBkMmJkYjEwNjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw98X7nJMzCjCxLIhP40WVhkI5dYd AYTOSaPdJYsieMY/d120ibN5lMBfPHSEnNgVb2d4P73+p8MWnMOtZwBANTrQMKzT eVHLu/DmPt57dvFtfKJHXkRDIujhOmqpzuhnCYOxOTffY9S1fsQmXUmRf740lXmd 7xeB2yD3lZGb779v0qzD43c3nAd63yRJqKvcIjfiA8z+FtD6SUDHDev1SEbqdJiX i+RacD0Xht+DQj7p+O3onmT0QHBrk+JaAT6cREPuws6tS4IwFH1UkS2zh63Hi+lg +sMRQyhamFfeUS5kMstfNmCQsm9vxorZjWtt+WE1Hi78N7++N4eHEXXnCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2NoYlMyKCE0L+Cq3InoNK9sQaUMB8GA1UdIwQY MBaAFKdt2drXWHf30o0U4I3FWxMwvRO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQt MmFjNmZmNzViZWIwLzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQtMmFjNmZmNzViZWIw LzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbdtRD6r yt4Nx5PGdm4HeNBN7HG6UkKTQbri7zrzCtXKOZ05F3bJBdSm186qnOGHMMnCzQt6 DDeanxt0cpjwPZuAWjS4JrxvZvt3IXzvXHNBKQxJaNofoID7YJagcEBKgnq5Mum+ EYOkd2qMDyiJNufsa3rwhQ4bRYFzqQfxAnWzX6zknmgw79hV8yjui/9wwJATgM6M TmygaG+HGYUJ30ahWNbieqoASMGh6eNk5Zp5tBMpBROdYnBJzQhozhlfXLXOv7vb zVGU5ygwWxgwLS/8hH/X2I/62n6D8viWPcpflYonJwKbzpKkXmD9CkEV2jHXOYbj V/XfaVkqBPhsaw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:53:02 2026 by rpki-client