This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft File: _0t7padsE3FS0NDzUk_WIBuBW-8.mft (raw, json) Hash identifier: bO2BRQG8n90xbwQT6efinu13zn5YsS8DsAhfMESdP8o= Subject key identifier: 54:8A:1E:A4:AA:45:45:8E:25:8A:3A:A0:2E:40:63:B9:F6:6E:FE:79 Authority key identifier: FF:4B:7B:A5:A7:6C:13:71:52:D0:D0:F3:52:4F:D6:20:1B:81:5B:EF Certificate issuer: /CN=ff4b7ba5a76c137152d0d0f3524fd6201b815bef Certificate serial: 019BF72CACC5EE8F23ECD3953A3D6E658124 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft Manifest number: 031A Signing time: Sun 25 Jan 2026 22:00:58 +0000 Manifest this update: Sun 25 Jan 2026 22:00:58 +0000 Manifest next update: Mon 26 Jan 2026 22:00:58 +0000 Files and hashes: 1: 6DAFoolDl25b6CeU13ABi1gaKVY.roa (hash: hkQzlBV/4pKV31+WoeG1LCaAMIQqD6rzwMSDD2TcPzw=) 2: _0t7padsE3FS0NDzUk_WIBuBW-8.crl (hash: SmDrhI/yPPMVy671uAHxR1HQK4GWWqUIFurys+iMakE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:ac:c5:ee:8f:23:ec:d3:95:3a:3d:6e:65:81:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff4b7ba5a76c137152d0d0f3524fd6201b815bef Validity Not Before: Jan 25 22:00:58 2026 GMT Not After : Jan 26 22:00:58 2026 GMT Subject: CN=548a1ea4aa45458e258a3aa02e4063b9f66efe79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:83:d0:67:5b:7b:c1:2f:72:96:dd:7e:90:37: 94:e9:9e:14:09:d0:b6:c4:dd:e4:bc:0f:a2:7f:42: df:02:9a:eb:03:d2:29:bf:dc:e9:c1:f6:dc:dd:92: dc:07:b3:8e:bc:7c:11:85:c5:6e:f2:86:a7:95:f8: 7a:df:ea:1d:ba:9b:f2:a7:fa:88:50:e1:7a:b4:8d: 19:4d:ea:d8:d2:d1:f4:8c:9d:25:b7:2a:13:e5:6e: 5b:a4:cf:48:35:bb:d1:da:b1:3d:98:ad:03:91:2a: 6a:7d:79:7d:11:ef:42:a0:9f:10:b0:fc:b4:f4:63: c6:b4:6e:c7:a0:74:66:44:22:b2:92:e5:35:bd:1c: 7f:8f:a8:81:dc:23:6d:f1:a1:8d:5a:b2:ab:3f:4a: a1:51:84:45:e3:41:14:62:a3:b3:57:45:ff:75:16: cd:73:a8:b6:4e:e7:3d:06:67:26:67:56:dd:12:74: 20:b4:3c:fb:6d:bc:59:b9:9c:71:e6:f1:ab:f3:c0: 8f:9f:25:8d:c4:9e:f3:83:89:85:b9:92:93:c6:07: 84:40:2a:fa:9f:f6:8d:74:05:39:d3:d5:b8:c7:42: 85:cb:f8:68:9a:76:61:be:1e:b8:f7:22:d6:69:4d: 0e:e2:6c:ce:e4:30:e7:5b:ab:49:54:6a:6b:40:23: df:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:8A:1E:A4:AA:45:45:8E:25:8A:3A:A0:2E:40:63:B9:F6:6E:FE:79 X509v3 Authority Key Identifier: keyid:FF:4B:7B:A5:A7:6C:13:71:52:D0:D0:F3:52:4F:D6:20:1B:81:5B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:56:6d:03:12:cc:2b:2a:9b:43:ef:bf:21:05:cb:07:2d:80: 57:d2:15:51:e6:0e:95:7d:5b:0a:9a:ba:3f:c4:0c:b4:0b:ae: 90:07:3d:1a:fc:b5:55:ff:46:71:29:a4:f8:85:a5:e9:b4:7b: 2c:4d:16:22:e4:81:a3:2a:7a:5c:8d:4c:8e:67:b8:9c:14:b9: 89:49:6b:0a:d0:e8:1b:cb:ec:ff:7c:d9:bd:ba:79:5a:68:5d: 35:a3:8a:d4:d5:5d:85:2e:b4:3e:43:aa:f4:31:0a:ac:04:11: 0d:9e:b2:10:f3:69:d6:50:ac:8a:0a:fb:ba:19:31:84:11:0e: b9:65:2c:97:3d:ef:61:40:ed:a5:41:d1:d2:2f:19:a8:16:9f: f4:5f:b8:50:05:1c:8d:bf:e0:f1:61:ac:50:6c:6f:f5:c3:78: af:1e:b6:68:99:01:24:9e:32:2d:cf:4e:ef:05:72:5b:34:59: 52:af:6e:62:09:02:83:2c:5f:7d:c2:8e:f3:ac:d6:fa:3e:a6: ea:cc:dc:8e:ca:b4:19:17:1a:05:3f:df:47:6f:ac:48:fd:cb: be:5f:8f:27:ce:55:4d:54:a7:e6:13:5d:44:ff:c7:3c:76:48: 45:28:da:be:81:48:6b:78:71:2d:06:9a:e6:54:10:23:c8:6b: d2:6d:33:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LKzF7o8j7NOVOj1uZYEkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNGI3YmE1YTc2YzEzNzE1MmQwZDBmMzUyNGZkNjIwMWI4 MTViZWYwHhcNMjYwMTI1MjIwMDU4WhcNMjYwMTI2MjIwMDU4WjAzMTEwLwYDVQQD Eyg1NDhhMWVhNGFhNDU0NThlMjU4YTNhYTAyZTQwNjNiOWY2NmVmZTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloPQZ1t7wS9ylt1+kDeU6Z4UCdC2 xN3kvA+if0LfAprrA9Ipv9zpwfbc3ZLcB7OOvHwRhcVu8oanlfh63+odupvyp/qI UOF6tI0ZTerY0tH0jJ0ltyoT5W5bpM9INbvR2rE9mK0DkSpqfXl9Ee9CoJ8QsPy0 9GPGtG7HoHRmRCKykuU1vRx/j6iB3CNt8aGNWrKrP0qhUYRF40EUYqOzV0X/dRbN c6i2Tuc9BmcmZ1bdEnQgtDz7bbxZuZxx5vGr88CPnyWNxJ7zg4mFuZKTxgeEQCr6 n/aNdAU509W4x0KFy/homnZhvh649yLWaU0O4mzO5DDnW6tJVGprQCPfMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSKHqSqRUWOJYo6oC5AY7n2bv55MB8GA1UdIwQY MBaAFP9Le6WnbBNxUtDQ81JP1iAbgVvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzB0N3BhZHNFM0ZTME5EelVrX1dJQnVCVy04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85NWIxODYtZjJiYS00YzgzLWI2MzAt OGY5NWI4NTI0YzM1LzEvXzB0N3BhZHNFM0ZTME5EelVrX1dJQnVCVy04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS85NWIxODYtZjJiYS00YzgzLWI2MzAtOGY5NWI4NTI0YzM1 LzEvXzB0N3BhZHNFM0ZTME5EelVrX1dJQnVCVy04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVZtAxLM KyqbQ++/IQXLBy2AV9IVUeYOlX1bCpq6P8QMtAuukAc9Gvy1Vf9GcSmk+IWl6bR7 LE0WIuSBoyp6XI1Mjme4nBS5iUlrCtDoG8vs/3zZvbp5WmhdNaOK1NVdhS60PkOq 9DEKrAQRDZ6yEPNp1lCsigr7uhkxhBEOuWUslz3vYUDtpUHR0i8ZqBaf9F+4UAUc jb/g8WGsUGxv9cN4rx62aJkBJJ4yLc9O7wVyWzRZUq9uYgkCgyxffcKO86zW+j6m 6szcjsq0GRcaBT/fR2+sSP3Lvl+PJ85VTVSn5hNdRP/HPHZIRSjavoFIa3hxLQaa 5lQQI8hr0m0zyg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:30:53 2026 by rpki-client