This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft File: 21m85hup0qDjVb4B8TQbjfdq69s.mft (raw, json) Hash identifier: mEvrtAdkgvNX3vT3LcVyJuLeT4CaZ12B0tMEWKnHYHA= Subject key identifier: A7:F1:58:DE:EF:9C:69:E7:FA:E5:8C:A8:CF:03:F4:7D:05:E9:F5:11 Authority key identifier: DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB Certificate issuer: /CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb Certificate serial: 019BF79A2D32ACADBE915418A445EE424D48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 00:00:34 +0000 Manifest this update: Mon 26 Jan 2026 00:00:34 +0000 Manifest next update: Tue 27 Jan 2026 00:00:34 +0000 Files and hashes: 1: 21m85hup0qDjVb4B8TQbjfdq69s.crl (hash: kvJsjnNaF66nZLGc+9tU7iHamrFdRneEC3jHEylA7EQ=) 2: 61huzXEr5q5M8J__iIN7IjunhKg.roa (hash: cj477SS4T7qNzSNkI+8mGSK4iNQUtTpYpphXIshKx+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:2d:32:ac:ad:be:91:54:18:a4:45:ee:42:4d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb Validity Not Before: Jan 26 00:00:34 2026 GMT Not After : Jan 27 00:00:34 2026 GMT Subject: CN=a7f158deef9c69e7fae58ca8cf03f47d05e9f511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a0:1e:f6:91:d4:ae:5f:60:ee:c7:ec:ce:c2: c5:cf:d3:4f:e1:9b:e8:8a:81:97:83:b8:db:ea:c1: 0b:ea:cb:7b:9c:d3:13:bd:da:5d:c6:78:7c:af:84: c9:01:c9:08:d5:03:da:b9:31:eb:6e:ca:2a:14:90: c2:89:36:8f:05:1e:46:ac:b9:5c:50:27:0c:ff:2d: d3:5c:cd:44:32:df:46:95:e6:56:3f:0c:38:a5:a3: c6:bf:94:f5:1b:f9:3e:eb:0d:be:90:be:4f:96:6a: a7:c4:5b:18:25:92:6e:8a:ec:82:9d:a9:c0:de:29: 76:34:09:f1:eb:9c:43:bf:1f:ae:3e:fa:a2:84:f1: 9f:48:b5:ac:23:b0:36:5d:e6:d8:58:98:24:05:fd: a9:c4:15:02:8f:20:9a:1f:fa:48:6a:9c:35:c2:0c: 98:eb:88:4e:42:0a:a3:46:2a:33:03:e6:e6:74:82: 57:03:b3:21:98:16:80:65:8a:98:a6:b0:46:63:34: fa:64:f2:b2:7a:34:15:15:1f:c2:30:4b:44:8f:97: 71:92:b3:4f:40:e2:20:d3:29:f8:f6:ba:f5:0c:82: 4d:ef:08:5f:e1:3c:c0:0a:0d:0c:b1:2a:82:fd:c2: 5f:15:86:84:2e:66:a4:82:5f:1c:6f:bb:c9:dc:3e: e7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F1:58:DE:EF:9C:69:E7:FA:E5:8C:A8:CF:03:F4:7D:05:E9:F5:11 X509v3 Authority Key Identifier: keyid:DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:22:75:62:5c:1b:bf:d2:38:eb:05:42:ed:63:0d:21:3c:1b: 37:c1:e9:06:05:4a:82:2e:1e:9b:c2:cc:a3:88:e2:97:3c:e6: 7f:84:a9:b3:94:97:e8:35:01:c2:af:03:0e:47:42:17:44:e7: ad:36:15:d5:3d:c2:96:c5:c2:d6:ad:55:88:cb:05:7d:8a:98: d7:e6:9c:b5:c8:9c:f8:a3:50:84:7f:c9:52:79:bc:43:3a:34: 8e:cb:dd:df:9f:c6:cc:85:8e:b1:f7:ca:8a:92:2b:d8:59:c4: d3:6e:66:6a:af:9f:2f:76:6c:53:fb:14:e8:4a:df:a3:19:11: d2:d8:21:8b:5c:e4:59:7f:02:25:c0:e6:40:8a:fc:29:46:7e: 3f:31:ea:95:d9:7d:c2:b4:37:32:8e:9c:9f:9f:eb:35:b3:09: fb:40:d2:2c:bb:7d:9a:52:a1:d7:1a:38:19:71:6a:56:3e:76: 59:1c:39:6c:1b:8e:01:85:b6:c8:fe:52:b0:06:26:6b:ea:97: 59:4c:b3:3f:a8:3d:03:a9:d0:33:1b:e1:3f:03:d2:11:99:70: 62:74:50:70:f6:55:7a:8e:c6:c8:0d:b6:30:37:d6:54:11:5d: 0a:fb:f1:bf:77:a3:4f:38:cd:cb:20:91:e5:78:8a:21:1d:28: b7:b0:45:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mi0yrK2+kVQYpEXuQk1IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNTliY2U2MWJhOWQyYTBlMzU1YmUwMWYxMzQxYjhkZjc2 YWViZGIwHhcNMjYwMTI2MDAwMDM0WhcNMjYwMTI3MDAwMDM0WjAzMTEwLwYDVQQD EyhhN2YxNThkZWVmOWM2OWU3ZmFlNThjYThjZjAzZjQ3ZDA1ZTlmNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6Ae9pHUrl9g7sfszsLFz9NP4Zvo ioGXg7jb6sEL6st7nNMTvdpdxnh8r4TJAckI1QPauTHrbsoqFJDCiTaPBR5GrLlc UCcM/y3TXM1EMt9GleZWPww4paPGv5T1G/k+6w2+kL5PlmqnxFsYJZJuiuyCnanA 3il2NAnx65xDvx+uPvqihPGfSLWsI7A2XebYWJgkBf2pxBUCjyCaH/pIapw1wgyY 64hOQgqjRiozA+bmdIJXA7MhmBaAZYqYprBGYzT6ZPKyejQVFR/CMEtEj5dxkrNP QOIg0yn49rr1DIJN7whf4TzACg0MsSqC/cJfFYaELmakgl8cb7vJ3D7nVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfxWN7vnGnn+uWMqM8D9H0F6fURMB8GA1UdIwQY MBaAFNtZvOYbqdKg41W+AfE0G433auvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjFtODVodXAwcURqVmI0QjhUUWJqZmRxNjlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85MjA5ZWQtNGI5OC00ODk3LThlOWIt M2EwNDJmNzdiNzM4LzEvMjFtODVodXAwcURqVmI0QjhUUWJqZmRxNjlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85MjA5ZWQtNGI5OC00ODk3LThlOWItM2EwNDJmNzdiNzM4 LzEvMjFtODVodXAwcURqVmI0QjhUUWJqZmRxNjlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwSJ1Ylwb v9I46wVC7WMNITwbN8HpBgVKgi4em8LMo4jilzzmf4Sps5SX6DUBwq8DDkdCF0Tn rTYV1T3ClsXC1q1ViMsFfYqY1+actcic+KNQhH/JUnm8Qzo0jsvd35/GzIWOsffK ipIr2FnE025maq+fL3ZsU/sU6ErfoxkR0tghi1zkWX8CJcDmQIr8KUZ+PzHqldl9 wrQ3Mo6cn5/rNbMJ+0DSLLt9mlKh1xo4GXFqVj52WRw5bBuOAYW2yP5SsAYma+qX WUyzP6g9A6nQMxvhPwPSEZlwYnRQcPZVeo7GyA22MDfWVBFdCvvxv3ejTzjNyyCR 5XiKIR0ot7BFqg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:35 2026 by rpki-client