This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft File: pOeg0vxXpnuyt-hcPo14GSvKDxg.mft (raw, json) Hash identifier: 93vN8+o3vWtqIWG65nZfn6WJI40e/f3YH1wzI0KG0J4= Subject key identifier: 06:E1:21:F8:E3:74:BD:5B:2B:E5:FB:5D:2C:FD:08:BA:3F:0B:9C:1C Authority key identifier: A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18 Certificate issuer: /CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18 Certificate serial: 019BF23D570AFA10709F5CD6187148F34806 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft Manifest number: 0C6A Signing time: Sat 24 Jan 2026 23:01:04 +0000 Manifest this update: Sat 24 Jan 2026 23:01:04 +0000 Manifest next update: Sun 25 Jan 2026 23:01:04 +0000 Files and hashes: 1: Bl3mQJLo6QKNL3wv2g2LT4Q-5M0.roa (hash: ff2pO6lqKtNRUUCSbOJc5+AZduH9jyQWddIlmRJigdQ=) 2: pOeg0vxXpnuyt-hcPo14GSvKDxg.crl (hash: u+5VKL+8N/K1LSioSLSpc6h5yyLWdCgp6N6HOEtkUho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:3d:57:0a:fa:10:70:9f:5c:d6:18:71:48:f3:48:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18 Validity Not Before: Jan 24 23:01:04 2026 GMT Not After : Jan 25 23:01:04 2026 GMT Subject: CN=06e121f8e374bd5b2be5fb5d2cfd08ba3f0b9c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f7:68:06:24:69:ef:1d:6a:4f:08:1b:cd:0d: 1a:b7:ca:8a:05:8c:6f:19:cd:d6:12:45:01:08:31: 75:16:a0:aa:12:29:30:72:6f:c9:4d:3f:75:8f:8b: 1d:37:67:0b:f3:cd:98:b8:ff:93:3a:52:cd:b1:c8: 98:56:43:86:e0:7b:d4:4e:10:d7:85:7e:3e:ed:64: fd:19:2b:c7:06:12:8b:ea:00:98:6d:41:b1:4d:02: a9:98:62:b0:66:b5:a5:91:0e:89:b7:6e:bb:c2:c7: 0e:12:ec:8b:87:69:a0:0f:8d:2a:27:75:1d:bb:82: 57:7a:3d:1d:7e:34:97:06:52:1b:84:3e:64:29:4e: 45:2a:ed:84:dd:13:8c:7b:ae:5f:ee:08:02:2e:3c: 96:0c:af:0b:00:8b:8e:5b:d5:bf:e9:ed:a5:6c:56: 71:92:0b:9a:28:62:c7:b6:55:7a:6e:0a:54:3c:78: 7d:bf:5d:b4:8f:68:83:87:1d:e6:1c:f1:29:b3:bb: 9e:41:63:fe:93:e8:d1:e2:b3:ef:e9:fd:07:cb:ee: 16:f5:a6:fc:f3:db:a1:7c:18:30:e4:7d:2f:51:66: b9:dd:81:9e:0c:57:40:b9:d7:77:57:37:0e:e7:06: eb:19:62:c2:a8:b3:01:09:5a:a3:2a:ed:2d:a9:ad: 2a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E1:21:F8:E3:74:BD:5B:2B:E5:FB:5D:2C:FD:08:BA:3F:0B:9C:1C X509v3 Authority Key Identifier: keyid:A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:26:3d:ae:61:68:04:48:49:de:e6:53:b8:6a:68:3c:2f:1c: ad:c1:ea:ab:5d:f7:ea:86:7c:18:a6:9d:58:62:60:9a:ba:4b: fc:07:e7:c5:a7:ad:8b:b1:8d:dd:87:e0:aa:59:fc:d0:eb:68: 96:9e:cf:ce:c0:a0:2d:b6:4b:84:ed:c5:ea:cb:7c:d0:1f:cf: 20:24:31:46:82:c4:09:db:90:4e:aa:6a:93:ed:a8:18:09:4b: 25:90:87:71:cb:b2:79:0e:4f:85:d1:81:d6:74:17:0e:2d:52: 1b:d4:0a:cc:1b:0d:ac:f7:04:70:2d:13:e4:bc:b3:62:c0:14: 5a:0c:87:cf:70:8d:e8:a8:bb:91:dd:bb:64:4e:de:98:48:10: 1f:1b:90:38:f7:f5:5f:c6:6e:7b:01:e7:fc:a0:fb:f8:3c:03: 32:6f:97:43:30:c9:08:8f:04:bc:25:0f:a2:e1:bc:a1:7b:d5: 49:8f:46:68:85:5e:94:a8:93:20:11:bd:99:27:2e:a0:b6:73: 28:91:e6:cc:60:c7:ff:62:a4:20:94:ac:df:38:1e:32:3d:2e: 15:e2:35:cf:8b:93:29:6b:c3:56:2c:27:8d:90:07:ea:4e:37: 67:02:a5:92:6c:d2:31:14:8d:15:c4:ff:c7:67:4a:fd:3f:36: 70:4f:70:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyPVcK+hBwn1zWGHFI80gGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZTdhMGQyZmM1N2E2N2JiMmI3ZTg1YzNlOGQ3ODE5MmJj YTBmMTgwHhcNMjYwMTI0MjMwMTA0WhcNMjYwMTI1MjMwMTA0WjAzMTEwLwYDVQQD EygwNmUxMjFmOGUzNzRiZDViMmJlNWZiNWQyY2ZkMDhiYTNmMGI5YzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PdoBiRp7x1qTwgbzQ0at8qKBYxv Gc3WEkUBCDF1FqCqEikwcm/JTT91j4sdN2cL882YuP+TOlLNsciYVkOG4HvUThDX hX4+7WT9GSvHBhKL6gCYbUGxTQKpmGKwZrWlkQ6Jt267wscOEuyLh2mgD40qJ3Ud u4JXej0dfjSXBlIbhD5kKU5FKu2E3ROMe65f7ggCLjyWDK8LAIuOW9W/6e2lbFZx kguaKGLHtlV6bgpUPHh9v120j2iDhx3mHPEps7ueQWP+k+jR4rPv6f0Hy+4W9ab8 89uhfBgw5H0vUWa53YGeDFdAudd3VzcO5wbrGWLCqLMBCVqjKu0tqa0qEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbhIfjjdL1bK+X7XSz9CLo/C5wcMB8GA1UdIwQY MBaAFKTnoNL8V6Z7srfoXD6NeBkryg8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE9lZzB2eFhwbnV5dC1oY1BvMTRHU3ZLRHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny85NmMyNzItZjc0Ni00NjI4LTk1YmMt YTYxMjZiNTQwOTRkLzEvcE9lZzB2eFhwbnV5dC1oY1BvMTRHU3ZLRHhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny85NmMyNzItZjc0Ni00NjI4LTk1YmMtYTYxMjZiNTQwOTRk LzEvcE9lZzB2eFhwbnV5dC1oY1BvMTRHU3ZLRHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGiY9rmFo BEhJ3uZTuGpoPC8crcHqq1336oZ8GKadWGJgmrpL/Afnxaeti7GN3Yfgqln80Oto lp7PzsCgLbZLhO3F6st80B/PICQxRoLECduQTqpqk+2oGAlLJZCHccuyeQ5PhdGB 1nQXDi1SG9QKzBsNrPcEcC0T5LyzYsAUWgyHz3CN6Ki7kd27ZE7emEgQHxuQOPf1 X8ZuewHn/KD7+DwDMm+XQzDJCI8EvCUPouG8oXvVSY9GaIVelKiTIBG9mScuoLZz KJHmzGDH/2KkIJSs3zgeMj0uFeI1z4uTKWvDViwnjZAH6k43ZwKlkmzSMRSNFcT/ x2dK/T82cE9wmg== -----END CERTIFICATE-----Generated at Sun Jan 25 05:42:39 2026 by rpki-client