This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft File: rdJhytDf8tm7L4x60Nsm7Vcw090.mft (raw, json) Hash identifier: eoC4/6FdG2eEvXfxUGe2AZSOrSNh3z5axtR/HGXwvIk= Subject key identifier: B1:CC:0E:27:3B:44:2A:D5:A9:61:60:3E:B3:E4:15:A0:3D:65:1C:20 Authority key identifier: AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD Certificate issuer: /CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd Certificate serial: 019BF5AC569433E0F453F567637CB6F4FB07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft Manifest number: 0EBA Signing time: Sun 25 Jan 2026 15:01:10 +0000 Manifest this update: Sun 25 Jan 2026 15:01:10 +0000 Manifest next update: Mon 26 Jan 2026 15:01:10 +0000 Files and hashes: 1: RGmbCKVggdFaEV2n5n5vWdFRCzM.roa (hash: SS7nRzfO0dBngHu3IsLgcGfjod0pNS0O7g/l/TaVaqk=) 2: rdJhytDf8tm7L4x60Nsm7Vcw090.crl (hash: 3dVTSkhUpZzTVGGSmjuSiFnThKZONx8igFwawFNQy8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.crl rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:56:94:33:e0:f4:53:f5:67:63:7c:b6:f4:fb:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd Validity Not Before: Jan 25 15:01:10 2026 GMT Not After : Jan 26 15:01:10 2026 GMT Subject: CN=b1cc0e273b442ad5a961603eb3e415a03d651c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:87:3d:f3:94:78:9d:46:17:4e:fd:af:f1:68: 12:05:33:18:fe:73:70:b6:b8:e4:20:aa:a3:eb:5c: 66:e8:80:e0:bd:0d:ad:b4:bf:d6:e2:12:ad:d8:f3: 4d:84:a4:75:22:56:34:3e:48:79:cb:f0:5d:d6:fe: 86:7a:ad:c4:36:18:82:b9:8d:0e:5c:9f:b4:ce:d9: fe:43:80:f3:3c:e9:35:b8:0c:00:b3:11:c9:6d:91: 22:07:51:31:b7:c4:c0:83:43:36:f1:7e:e6:fd:94: 29:c0:60:56:c2:64:df:48:2b:0b:bf:67:9f:88:47: d1:67:53:d6:05:49:17:69:8f:7a:a0:51:3d:6c:85: ee:86:da:1e:b0:9b:c4:47:ae:a2:ae:f6:87:ce:0f: dc:f8:e0:54:ea:fc:16:2c:42:5b:ca:bc:60:3b:c1: f6:e4:db:ae:05:a6:df:0f:4b:7e:7f:8a:21:75:da: 64:0e:05:ed:cf:9d:af:22:c5:71:63:5a:10:88:4b: a3:c1:b3:e1:dc:c1:fd:e0:de:b5:2c:3e:8c:38:a0: 25:44:8a:a1:06:0d:62:5c:54:da:50:a1:76:50:95: df:fc:b4:c9:9f:c7:70:74:7f:0f:8a:34:ea:36:34: 9c:4a:ac:fc:73:cb:41:d2:6d:07:18:ce:07:1f:11: 2d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CC:0E:27:3B:44:2A:D5:A9:61:60:3E:B3:E4:15:A0:3D:65:1C:20 X509v3 Authority Key Identifier: keyid:AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:94:88:22:0c:39:5d:f6:e5:9f:54:e9:61:9c:af:42:a6:a2: 92:d6:d4:2d:e0:8b:85:4a:78:de:f2:1b:06:3a:71:3e:97:bd: fb:7c:53:f4:e0:26:bf:1d:b7:8a:61:47:55:4f:76:f9:82:bc: 02:57:34:30:e4:c5:23:9d:c3:19:1d:9a:d4:0f:3c:91:32:29: ed:75:bc:cd:88:ce:c1:17:65:c4:1a:1b:57:da:43:94:6d:c7: f9:8b:51:27:0e:5f:a9:ee:1e:e5:f6:82:9a:98:37:8b:ea:43: f3:2c:2b:dd:96:42:74:9d:29:94:67:62:d7:13:c5:88:22:08: 64:fd:48:f5:1d:b1:4f:86:32:99:e3:98:2d:c3:35:83:c9:f0: 8a:39:f1:c7:da:d5:a2:03:e6:54:b6:18:fe:39:f2:8c:45:d1: 98:d6:d9:4c:ab:59:3f:f7:15:02:1d:65:6e:80:30:bc:94:b0: c6:f2:10:2f:31:43:28:b5:8a:59:bb:66:de:56:e6:0d:15:47: 02:86:d3:15:eb:3f:16:23:57:d6:ca:b1:f7:ac:ab:ff:2e:2a: 79:06:2e:8f:ea:32:0f:d3:8e:e5:d9:cc:c3:df:dd:ae:84:b9: 58:83:09:0e:7e:bd:7a:ee:69:cd:ee:fc:09:3e:97:53:77:d2: 85:81:07:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rFaUM+D0U/VnY3y29PsHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZDI2MWNhZDBkZmYyZDliYjJmOGM3YWQwZGIyNmVkNTcz MGQzZGQwHhcNMjYwMTI1MTUwMTEwWhcNMjYwMTI2MTUwMTEwWjAzMTEwLwYDVQQD EyhiMWNjMGUyNzNiNDQyYWQ1YTk2MTYwM2ViM2U0MTVhMDNkNjUxYzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYc985R4nUYXTv2v8WgSBTMY/nNw trjkIKqj61xm6IDgvQ2ttL/W4hKt2PNNhKR1IlY0Pkh5y/Bd1v6Geq3ENhiCuY0O XJ+0ztn+Q4DzPOk1uAwAsxHJbZEiB1Ext8TAg0M28X7m/ZQpwGBWwmTfSCsLv2ef iEfRZ1PWBUkXaY96oFE9bIXuhtoesJvER66irvaHzg/c+OBU6vwWLEJbyrxgO8H2 5NuuBabfD0t+f4ohddpkDgXtz52vIsVxY1oQiEujwbPh3MH94N61LD6MOKAlRIqh Bg1iXFTaUKF2UJXf/LTJn8dwdH8PijTqNjScSqz8c8tB0m0HGM4HHxEteQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHMDic7RCrVqWFgPrPkFaA9ZRwgMB8GA1UdIwQY MBaAFK3SYcrQ3/LZuy+MetDbJu1XMNPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmRKaHl0RGY4dG03TDR4NjBOc203VmN3MDkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wYTQzNGEtZWIyZi00MDI2LWJjYzgt N2JjNDJkNWQ0MDcyLzEvcmRKaHl0RGY4dG03TDR4NjBOc203VmN3MDkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8wYTQzNGEtZWIyZi00MDI2LWJjYzgtN2JjNDJkNWQ0MDcy LzEvcmRKaHl0RGY4dG03TDR4NjBOc203VmN3MDkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJSIIgw5 Xfbln1TpYZyvQqaiktbULeCLhUp43vIbBjpxPpe9+3xT9OAmvx23imFHVU92+YK8 Alc0MOTFI53DGR2a1A88kTIp7XW8zYjOwRdlxBobV9pDlG3H+YtRJw5fqe4e5faC mpg3i+pD8ywr3ZZCdJ0plGdi1xPFiCIIZP1I9R2xT4YymeOYLcM1g8nwijnxx9rV ogPmVLYY/jnyjEXRmNbZTKtZP/cVAh1lboAwvJSwxvIQLzFDKLWKWbtm3lbmDRVH AobTFes/FiNX1sqx96yr/y4qeQYuj+oyD9OO5dnMw9/droS5WIMJDn69eu5pze78 CT6XU3fShYEHaA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:20 2026 by rpki-client