This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft File: 0CDxCDLEm61vFalgWMW6GFcqxSo.mft (raw, json) Hash identifier: /10ng/98OxZwYhV0PdZCGjCYixugItcXrnEGlC5FcEY= Subject key identifier: 7A:A1:16:5A:FE:E5:C3:52:8D:7E:90:51:53:C0:94:AC:D1:99:D1:8E Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A Certificate issuer: /CN=d020f10832c49bad6f15a96058c5ba18572ac52a Certificate serial: 019BF3503BE1B7E61A919C9CDD0F55B3F9D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft Manifest number: 0B40 Signing time: Sun 25 Jan 2026 04:01:20 +0000 Manifest this update: Sun 25 Jan 2026 04:01:20 +0000 Manifest next update: Mon 26 Jan 2026 04:01:20 +0000 Files and hashes: 1: 0CDxCDLEm61vFalgWMW6GFcqxSo.crl (hash: X55lG9vinkWsbaG4TOVDD4Zffnxg3LL/tfvZbNFBlqA=) 2: 7Qx48EmBn-OawWJSPpRThxXxGsw.roa (hash: vJn+IO3r8KyMcEh7oBKpoGl8tmbKCsu+EUXynkIKhkQ=) 3: lbl2pQkR5Gt2zpZZ9Jh22oLkisQ.roa (hash: x9+pd0aqdgxunGrrCWfBRzAZtvQjFOaQn2oOsjiZkVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:3b:e1:b7:e6:1a:91:9c:9c:dd:0f:55:b3:f9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a Validity Not Before: Jan 25 04:01:20 2026 GMT Not After : Jan 26 04:01:20 2026 GMT Subject: CN=7aa1165afee5c3528d7e905153c094acd199d18e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ec:3d:7f:dc:a1:b2:0e:c6:98:73:0d:23:ad: 3a:15:96:ae:b7:76:75:07:20:67:3a:f2:e6:09:b2: 94:1c:fb:35:cd:46:e7:69:e1:00:8f:2d:9b:0c:f8: f1:51:e5:91:75:93:ca:83:0d:c2:a0:c4:cb:99:7c: 4c:66:b0:54:75:6e:35:76:3d:46:37:39:97:44:b1: 49:f7:66:27:13:a7:2d:18:87:83:b5:36:7d:19:89: 84:1a:4f:58:95:e4:a3:6c:c0:73:c4:93:85:5a:52: 4a:0c:7f:81:de:60:1d:39:8f:99:64:6e:23:ee:71: 0c:30:d5:b3:3e:1c:e5:53:17:d0:31:c7:05:05:5f: bd:58:ff:c4:cb:29:55:1b:a2:9b:a6:19:89:e9:cc: 44:76:44:5d:b0:a0:97:dd:6e:9e:2f:f7:38:bd:e9: fe:80:d4:ad:55:a8:00:73:e2:02:ae:07:50:c4:79: 05:42:04:b4:3a:2c:fa:78:aa:32:52:ec:bc:e2:29: 38:47:f1:df:6b:69:58:2b:cc:b0:f4:6e:d8:af:07: 06:16:82:c6:b1:51:e9:da:0e:6a:b4:63:1a:d8:0f: 9c:3e:6d:e9:77:01:29:61:c9:3b:d5:e5:f7:03:2e: bc:e1:cc:b4:d6:a5:aa:69:3b:96:f1:89:d3:b2:eb: 1f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A1:16:5A:FE:E5:C3:52:8D:7E:90:51:53:C0:94:AC:D1:99:D1:8E X509v3 Authority Key Identifier: keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:65:40:84:24:34:d2:0d:f2:b7:31:3e:6c:7f:6b:b4:63:45: d1:9f:df:79:b8:f2:e0:00:61:55:15:cc:d8:a2:4c:45:9e:48: 1f:66:4f:62:ae:fc:85:b0:50:9c:d5:4a:0a:a2:33:cb:41:84: 67:b5:a9:68:56:9b:d8:96:34:aa:67:a6:e3:3a:56:ca:58:75: 3a:d9:08:c1:dd:87:73:9b:6d:0f:25:4c:18:77:8e:a0:d0:f0: ba:62:35:db:89:9d:68:e0:e2:21:cf:cf:a0:b7:4a:eb:33:2a: d6:03:3a:1d:ea:c8:f6:ae:69:e1:1e:58:88:9d:1c:95:4c:a3: 4c:fc:f4:32:dd:02:9c:88:7e:c8:de:b4:83:08:67:2b:7a:06: a4:2a:92:b8:2f:ec:9c:4d:d0:a9:a8:c0:b6:35:be:fa:97:fc: 25:3b:8a:98:9e:f6:4b:d3:49:e2:9e:b9:e7:84:30:a6:41:07: 9d:1c:b2:27:e8:e2:db:85:00:39:23:f0:d9:7d:aa:9d:7e:d3: f2:53:14:0e:a8:71:ac:42:2d:73:fa:48:50:9e:dc:80:10:cf: bb:b9:a1:35:9d:72:c8:24:c4:71:2a:f7:2e:3d:ff:ca:04:9c: d5:ba:09:70:56:41:d5:02:02:22:2c:27:56:2a:f1:ae:55:d1: ef:51:d2:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUDvht+YakZyc3Q9Vs/nQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMjBmMTA4MzJjNDliYWQ2ZjE1YTk2MDU4YzViYTE4NTcy YWM1MmEwHhcNMjYwMTI1MDQwMTIwWhcNMjYwMTI2MDQwMTIwWjAzMTEwLwYDVQQD Eyg3YWExMTY1YWZlZTVjMzUyOGQ3ZTkwNTE1M2MwOTRhY2QxOTlkMThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOw9f9yhsg7GmHMNI606FZaut3Z1 ByBnOvLmCbKUHPs1zUbnaeEAjy2bDPjxUeWRdZPKgw3CoMTLmXxMZrBUdW41dj1G NzmXRLFJ92YnE6ctGIeDtTZ9GYmEGk9YleSjbMBzxJOFWlJKDH+B3mAdOY+ZZG4j 7nEMMNWzPhzlUxfQMccFBV+9WP/EyylVG6KbphmJ6cxEdkRdsKCX3W6eL/c4ven+ gNStVagAc+ICrgdQxHkFQgS0Oiz6eKoyUuy84ik4R/Hfa2lYK8yw9G7YrwcGFoLG sVHp2g5qtGMa2A+cPm3pdwEpYck71eX3Ay684cy01qWqaTuW8YnTsusfkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqhFlr+5cNSjX6QUVPAlKzRmdGOMB8GA1UdIwQY MBaAFNAg8QgyxJutbxWpYFjFuhhXKsUqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMENEeENETEVtNjF2RmFsZ1dNVzZHRmNxeFNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8yYzExYzEtNDI1MC00Mzg3LWE0ZGIt MjcwMWQ1OTFkZWFlLzEvMENEeENETEVtNjF2RmFsZ1dNVzZHRmNxeFNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8yYzExYzEtNDI1MC00Mzg3LWE0ZGItMjcwMWQ1OTFkZWFl LzEvMENEeENETEVtNjF2RmFsZ1dNVzZHRmNxeFNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGVAhCQ0 0g3ytzE+bH9rtGNF0Z/febjy4ABhVRXM2KJMRZ5IH2ZPYq78hbBQnNVKCqIzy0GE Z7WpaFab2JY0qmem4zpWylh1OtkIwd2Hc5ttDyVMGHeOoNDwumI124mdaODiIc/P oLdK6zMq1gM6HerI9q5p4R5YiJ0clUyjTPz0Mt0CnIh+yN60gwhnK3oGpCqSuC/s nE3QqajAtjW++pf8JTuKmJ72S9NJ4p6554QwpkEHnRyyJ+ji24UAOSPw2X2qnX7T 8lMUDqhxrEItc/pIUJ7cgBDPu7mhNZ1yyCTEcSr3Lj3/ygSc1boJcFZB1QICIiwn VirxrlXR71HS7w== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:16 2026 by rpki-client