This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft File: 67Ulb-PgcwKrcye3R7jfOCRcTt8.mft (raw, json) Hash identifier: ceVfrWj6JzyQsn8keZjR3QbxtBJIPMX7MbgjFQ6p41Q= Subject key identifier: F0:B2:2A:FB:6E:EA:B1:AF:81:92:5B:04:9C:F8:54:AB:36:03:05:A2 Authority key identifier: EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF Certificate issuer: /CN=ebb5256fe3e07302ab7327b747b8df38245c4edf Certificate serial: 019BF8ADB5BF967E7352539E81EC522E549F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft Manifest number: 030E Signing time: Mon 26 Jan 2026 05:01:32 +0000 Manifest this update: Mon 26 Jan 2026 05:01:32 +0000 Manifest next update: Tue 27 Jan 2026 05:01:32 +0000 Files and hashes: 1: 67Ulb-PgcwKrcye3R7jfOCRcTt8.crl (hash: efBVDExyYnD3NmQtz56sqt8Z1Sa7YZP5kydWo8cFSRQ=) 2: tz3awoZeBMuIdw8HRL7O9-b0MUY.roa (hash: a14NZqfBHqVj9Mn2LuS27VMbtbzXHlfv3zf5CSLerJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:b5:bf:96:7e:73:52:53:9e:81:ec:52:2e:54:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebb5256fe3e07302ab7327b747b8df38245c4edf Validity Not Before: Jan 26 05:01:32 2026 GMT Not After : Jan 27 05:01:32 2026 GMT Subject: CN=f0b22afb6eeab1af81925b049cf854ab360305a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a0:6e:f4:a4:d4:72:a0:c8:47:4d:19:8d:04: 92:11:a8:cc:25:02:ba:b4:75:05:d6:31:cf:9c:ba: ef:44:29:44:b0:4c:fa:fa:9c:1f:e6:38:2f:c2:c4: 20:36:b0:db:e2:58:cc:db:c9:2b:c1:59:a7:e6:13: c5:09:15:8d:23:f2:da:b3:cb:4e:e5:ab:c9:1a:1a: 61:6b:ee:d7:72:7e:07:bd:c9:63:82:c8:75:78:13: 23:37:33:2b:90:81:46:57:57:25:2f:a1:40:bb:cd: 9f:e0:39:97:3f:2a:c1:68:8d:d2:4d:ce:e2:b8:36: 14:74:26:6c:af:ff:d2:70:91:58:c0:8c:52:c8:6b: 76:0a:8e:7f:1e:37:dc:10:c6:c8:78:9b:47:58:ad: 5f:d5:c9:eb:63:c9:f8:6c:3c:c0:49:e7:03:72:80: 4d:77:58:b3:c1:97:44:0d:fb:b4:44:aa:2c:40:9e: a9:4a:d9:11:eb:a7:e1:0b:b8:3f:f0:d6:38:73:67: e8:2c:e9:df:92:68:f1:49:5c:fb:0f:b2:1c:e6:a1: 0a:82:19:16:5d:b1:10:81:9a:f2:fb:b1:64:db:16: 09:00:44:f0:1e:bf:5b:94:25:74:70:b4:da:6f:d3: 3e:76:3e:82:48:72:28:80:22:5b:66:16:d0:83:bb: 65:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B2:2A:FB:6E:EA:B1:AF:81:92:5B:04:9C:F8:54:AB:36:03:05:A2 X509v3 Authority Key Identifier: keyid:EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:3f:21:c3:6e:84:a6:d9:44:21:8e:1c:c5:b3:a9:b9:f5:dd: 8f:71:1e:53:b7:e4:e7:be:11:b2:f2:21:ff:26:d9:be:a5:96: 67:4f:63:a1:d3:39:35:4e:42:dd:f6:73:02:24:b4:48:a4:02: 32:d9:7f:e2:97:ec:b2:ea:29:58:ea:bb:42:db:68:eb:e8:05: 9b:89:47:ac:24:97:e1:2a:70:cd:f6:9c:33:7a:5b:3e:30:c5: 31:9a:6d:5a:5b:d1:d1:09:bb:bf:1b:7d:84:33:b8:ab:cf:50: bd:17:7b:f2:1d:2e:38:45:38:30:ae:98:c0:e0:9b:34:14:52: dd:41:16:ae:74:7c:5e:c1:24:46:16:27:eb:d3:dc:f3:d2:7e: b1:58:7a:ad:bd:4b:93:1d:24:3b:09:1f:16:71:89:ac:02:5b: a7:10:78:fb:6a:20:12:8d:02:89:87:69:11:c2:62:4a:80:18: 27:70:2b:51:a7:bd:64:1a:91:e8:5e:50:cc:9c:9a:71:91:eb: 57:5f:9c:14:a7:9f:95:98:78:43:c8:6c:32:17:e6:7e:9e:c1: f7:12:be:e6:b7:c4:9c:a2:2c:a5:07:bf:04:be:f3:a4:ed:70: 83:56:f9:26:26:86:d2:da:44:11:b9:9f:f0:dc:d1:d8:d8:1f: c3:f4:ed:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rbW/ln5zUlOegexSLlSfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYjUyNTZmZTNlMDczMDJhYjczMjdiNzQ3YjhkZjM4MjQ1 YzRlZGYwHhcNMjYwMTI2MDUwMTMyWhcNMjYwMTI3MDUwMTMyWjAzMTEwLwYDVQQD EyhmMGIyMmFmYjZlZWFiMWFmODE5MjViMDQ5Y2Y4NTRhYjM2MDMwNWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6Bu9KTUcqDIR00ZjQSSEajMJQK6 tHUF1jHPnLrvRClEsEz6+pwf5jgvwsQgNrDb4ljM28krwVmn5hPFCRWNI/Las8tO 5avJGhpha+7Xcn4Hvcljgsh1eBMjNzMrkIFGV1clL6FAu82f4DmXPyrBaI3STc7i uDYUdCZsr//ScJFYwIxSyGt2Co5/HjfcEMbIeJtHWK1f1cnrY8n4bDzASecDcoBN d1izwZdEDfu0RKosQJ6pStkR66fhC7g/8NY4c2foLOnfkmjxSVz7D7Ic5qEKghkW XbEQgZry+7Fk2xYJAETwHr9blCV0cLTab9M+dj6CSHIogCJbZhbQg7tlcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCyKvtu6rGvgZJbBJz4VKs2AwWiMB8GA1UdIwQY MBaAFOu1JW/j4HMCq3Mnt0e43zgkXE7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjdVbGItUGdjd0tyY3llM1I3amZPQ1JjVHQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS80MGIyYTktYjJjNy00MjIzLTg4NDgt MGQyZTQyMDU2ODZmLzEvNjdVbGItUGdjd0tyY3llM1I3amZPQ1JjVHQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS80MGIyYTktYjJjNy00MjIzLTg4NDgtMGQyZTQyMDU2ODZm LzEvNjdVbGItUGdjd0tyY3llM1I3amZPQ1JjVHQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfz8hw26E ptlEIY4cxbOpufXdj3EeU7fk574RsvIh/ybZvqWWZ09jodM5NU5C3fZzAiS0SKQC Mtl/4pfssuopWOq7Qtto6+gFm4lHrCSX4SpwzfacM3pbPjDFMZptWlvR0Qm7vxt9 hDO4q89QvRd78h0uOEU4MK6YwOCbNBRS3UEWrnR8XsEkRhYn69Pc89J+sVh6rb1L kx0kOwkfFnGJrAJbpxB4+2ogEo0CiYdpEcJiSoAYJ3ArUae9ZBqR6F5QzJyacZHr V1+cFKeflZh4Q8hsMhfmfp7B9xK+5rfEnKIspQe/BL7zpO1wg1b5JiaG0tpEEbmf 8NzR2Ngfw/Tt0A== -----END CERTIFICATE-----Generated at Mon Jan 26 10:57:41 2026 by rpki-client