This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft File: pB97t76hWBYk_LZQOrWnD0IMmz4.mft (raw, json) Hash identifier: 2Ay82ebOTuGUofkLEbiQxIA4A0F8iSo3/yvZDMDfMq4= Subject key identifier: 51:84:E4:43:0D:45:32:47:6B:C5:0C:BE:F1:CF:10:72:AF:7F:86:1C Authority key identifier: A4:1F:7B:B7:BE:A1:58:16:24:FC:B6:50:3A:B5:A7:0F:42:0C:9B:3E Certificate issuer: /CN=a41f7bb7bea1581624fcb6503ab5a70f420c9b3e Certificate serial: 019BF31952338DA5282F3CE6A115126B4835 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft Manifest number: 029A Signing time: Sun 25 Jan 2026 03:01:21 +0000 Manifest this update: Sun 25 Jan 2026 03:01:21 +0000 Manifest next update: Mon 26 Jan 2026 03:01:21 +0000 Files and hashes: 1: VWRnL-QChZydlewFf4m0W5IwI7I.roa (hash: 20xjUehHV+vdMcLMkiiK7TR0WGC8wZacMlPvbIysBJk=) 2: _8VJWkXr3bzkwgkhCXmclje7ivw.roa (hash: zaM4bElEDCzEKiBqEWYy0K32aC7wXL/fnEdwKNc1ylk=) 3: pB97t76hWBYk_LZQOrWnD0IMmz4.crl (hash: yHaaT8yspwk/GWnrbCbXkH2TTnIj+4Ad7pDIJYnA6+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:19:52:33:8d:a5:28:2f:3c:e6:a1:15:12:6b:48:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a41f7bb7bea1581624fcb6503ab5a70f420c9b3e Validity Not Before: Jan 25 03:01:21 2026 GMT Not After : Jan 26 03:01:21 2026 GMT Subject: CN=5184e4430d4532476bc50cbef1cf1072af7f861c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2c:e5:55:6f:fe:66:57:4b:d6:be:8f:0a:da: 09:37:e7:bd:77:59:bf:af:18:34:83:56:93:b1:b3: 59:5a:db:f9:d2:60:d1:e4:dc:89:a0:90:9c:66:74: 00:1e:70:b0:51:50:c1:5c:27:28:37:19:45:09:b1: 78:e0:aa:52:bf:95:3e:25:38:cf:5f:aa:e7:87:61: d8:74:2d:ba:9a:67:01:05:f0:53:42:42:71:f3:75: 1a:fd:52:0b:a3:f7:32:2e:5d:21:30:e6:2a:e2:aa: cf:cd:9d:75:80:68:2b:fc:ed:00:09:e3:2d:f0:8c: 0e:a8:5b:fb:84:fc:b2:cf:8b:93:9e:3a:bf:5e:e6: 77:33:b1:cb:1f:b8:b1:5b:f8:95:b6:64:97:ab:47: 3c:f5:c0:a0:d5:ab:a1:16:c3:f3:2d:72:97:a5:1a: f0:c0:4d:c6:2e:7b:1d:7f:26:00:28:f5:e9:c6:97: c4:ff:01:53:12:3e:43:36:bf:7f:e3:90:8c:e6:30: cb:b0:88:77:1c:f2:70:0e:04:4f:0b:21:30:27:2c: 77:bb:b2:e3:c7:42:eb:70:c1:59:6d:16:4f:61:94: 50:85:36:e4:18:a3:8c:a5:b5:35:e2:9c:b7:80:a5: 2a:7c:9e:c9:0f:04:85:4f:a6:68:bf:bc:4b:17:f8: 1d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:84:E4:43:0D:45:32:47:6B:C5:0C:BE:F1:CF:10:72:AF:7F:86:1C X509v3 Authority Key Identifier: keyid:A4:1F:7B:B7:BE:A1:58:16:24:FC:B6:50:3A:B5:A7:0F:42:0C:9B:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:dd:c9:86:79:ba:1e:36:c9:4e:d5:26:e8:a4:1d:03:c8:6e: 64:9b:b2:09:05:e6:b2:f3:89:c8:a0:f9:3f:f3:3e:9f:0e:5e: a0:ed:08:6d:e8:1d:d8:d4:fe:c8:73:26:a5:91:27:c1:13:6e: 11:ce:3d:52:dd:50:4c:58:a8:41:08:d2:46:09:15:35:9d:5a: 13:bb:8f:c5:70:76:aa:12:2a:32:c3:4a:f3:d5:9f:0c:3d:a6: 4e:29:97:53:4b:23:64:0e:be:83:ad:62:87:b5:bb:5f:68:ec: 31:75:a3:fc:b8:20:f9:1f:c7:98:b9:b3:47:c4:ea:78:28:35: 24:8b:3f:e5:6a:43:72:d3:a8:56:b3:c5:80:d1:08:24:df:f8: 39:c0:6d:c8:80:82:17:43:96:8f:88:30:e1:c9:01:53:fa:98: 7a:83:d2:09:67:c1:7b:28:bc:6d:3a:34:0e:fa:54:17:ba:75: e2:16:68:6e:d9:d6:97:e5:cf:25:a9:0a:c0:53:37:b9:3b:bc: f3:8d:27:05:48:38:a9:92:33:70:20:c3:0b:b7:3e:d6:2f:b9: 21:24:14:09:2e:6f:c7:9f:0f:82:8c:1e:7e:e1:1f:29:35:e5: 68:c9:38:dd:6a:f7:bf:29:a7:64:ec:bf:c1:ea:7e:f2:16:95: f1:ce:7a:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGVIzjaUoLzzmoRUSa0g1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MWY3YmI3YmVhMTU4MTYyNGZjYjY1MDNhYjVhNzBmNDIw YzliM2UwHhcNMjYwMTI1MDMwMTIxWhcNMjYwMTI2MDMwMTIxWjAzMTEwLwYDVQQD Eyg1MTg0ZTQ0MzBkNDUzMjQ3NmJjNTBjYmVmMWNmMTA3MmFmN2Y4NjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSzlVW/+ZldL1r6PCtoJN+e9d1m/ rxg0g1aTsbNZWtv50mDR5NyJoJCcZnQAHnCwUVDBXCcoNxlFCbF44KpSv5U+JTjP X6rnh2HYdC26mmcBBfBTQkJx83Ua/VILo/cyLl0hMOYq4qrPzZ11gGgr/O0ACeMt 8IwOqFv7hPyyz4uTnjq/XuZ3M7HLH7ixW/iVtmSXq0c89cCg1auhFsPzLXKXpRrw wE3GLnsdfyYAKPXpxpfE/wFTEj5DNr9/45CM5jDLsIh3HPJwDgRPCyEwJyx3u7Lj x0LrcMFZbRZPYZRQhTbkGKOMpbU14py3gKUqfJ7JDwSFT6Zov7xLF/gdpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGE5EMNRTJHa8UMvvHPEHKvf4YcMB8GA1UdIwQY MBaAFKQfe7e+oVgWJPy2UDq1pw9CDJs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEI5N3Q3NmhXQllrX0xaUU9yV25EMElNbXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yMTYwZjQtN2Q1Ny00YzdjLTg5YWYt OThmMWEyZGZjMzljLzEvcEI5N3Q3NmhXQllrX0xaUU9yV25EMElNbXo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8yMTYwZjQtN2Q1Ny00YzdjLTg5YWYtOThmMWEyZGZjMzlj LzEvcEI5N3Q3NmhXQllrX0xaUU9yV25EMElNbXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ93Jhnm6 HjbJTtUm6KQdA8huZJuyCQXmsvOJyKD5P/M+nw5eoO0Ibegd2NT+yHMmpZEnwRNu Ec49Ut1QTFioQQjSRgkVNZ1aE7uPxXB2qhIqMsNK89WfDD2mTimXU0sjZA6+g61i h7W7X2jsMXWj/Lgg+R/HmLmzR8TqeCg1JIs/5WpDctOoVrPFgNEIJN/4OcBtyICC F0OWj4gw4ckBU/qYeoPSCWfBeyi8bTo0DvpUF7p14hZobtnWl+XPJakKwFM3uTu8 840nBUg4qZIzcCDDC7c+1i+5ISQUCS5vx58PgowefuEfKTXlaMk43Wr3vymnZOy/ wep+8haV8c56sQ== -----END CERTIFICATE-----Generated at Sun Jan 25 06:11:36 2026 by rpki-client