This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft File: cr2D9Sdb0J6NM7QpiB6y-WttneE.mft (raw, json) Hash identifier: ZWJV6biO7NXsMaN3ByVhc5G+g77pdjrWKHNszoD8968= Subject key identifier: DB:04:A8:1B:27:3F:4E:5B:16:B2:F0:5B:01:30:25:19:5D:D5:71:1A Authority key identifier: 72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1 Certificate issuer: /CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1 Certificate serial: 019BF6F57CA9524908CCEB867EDEAEECB745 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft Manifest number: 011A Signing time: Sun 25 Jan 2026 21:00:41 +0000 Manifest this update: Sun 25 Jan 2026 21:00:41 +0000 Manifest next update: Mon 26 Jan 2026 21:00:41 +0000 Files and hashes: 1: ZzpicKaWHBurh0e4X0ZDIWNkcE4.roa (hash: 6kr876ns89mpp5ShZ/UXz/K/xiX9GT4sofpkzvGfKa8=) 2: cr2D9Sdb0J6NM7QpiB6y-WttneE.crl (hash: yeooxHbQ44B/eNPgbikGbR7aBFSa/t3JDM/4G1+UrG0=) 3: hhz-m34uLzjhktM1lB36_JlRofM.roa (hash: gPvyGogxiYizJYlqU8yPpF4NVk93PwCVo40E9WfEeBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:7c:a9:52:49:08:cc:eb:86:7e:de:ae:ec:b7:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1 Validity Not Before: Jan 25 21:00:41 2026 GMT Not After : Jan 26 21:00:41 2026 GMT Subject: CN=db04a81b273f4e5b16b2f05b013025195dd5711a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:15:92:ea:3f:1d:5a:a5:4c:ac:ac:78:b1:a8: b2:75:df:6e:fd:bb:33:39:d6:c1:37:6e:c2:b4:9a: 96:f3:04:8f:c4:1e:86:a2:88:2b:fc:1c:14:ba:09: b9:e3:6a:b2:b3:0f:24:83:25:e1:b2:1b:a2:93:cc: 36:64:ec:38:21:3f:3e:b8:eb:4d:aa:9e:0f:d3:e3: 04:10:0d:43:0d:84:5b:76:73:43:88:e5:9c:21:79: 01:04:00:88:ea:02:8f:5b:03:ae:b5:2d:60:56:0e: 0e:6d:4e:9f:36:3f:05:80:ae:26:c1:12:5a:ad:d1: 42:51:67:b7:19:f1:8f:b3:8e:97:6e:d6:31:ca:12: e3:2d:5d:82:26:9b:a1:7c:0d:67:d6:8e:26:56:db: 37:8e:6e:6f:62:0e:da:d1:7b:12:d4:ab:87:71:5b: 9d:14:b0:76:ec:1d:3e:f5:87:46:53:1b:ed:06:bd: de:cf:b4:39:2d:ed:d7:fc:4b:71:ae:82:50:f1:70: 33:8d:62:b7:df:83:0a:31:fd:6d:50:13:99:1a:e5: 7e:d9:20:1e:77:e8:fd:22:93:e0:6f:35:16:91:39: 27:3b:80:99:30:d1:b3:62:1d:b5:a2:80:99:1d:a1: 77:87:3d:20:2b:d8:a4:35:0c:59:bd:1e:88:d9:3f: 69:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:04:A8:1B:27:3F:4E:5B:16:B2:F0:5B:01:30:25:19:5D:D5:71:1A X509v3 Authority Key Identifier: keyid:72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ad:19:bc:8e:c6:0a:6d:dd:aa:62:ac:0f:01:5e:2e:6a:03: ec:60:be:41:50:b1:38:e5:b0:82:51:ac:88:2e:33:e7:8f:c1: 44:3e:c7:00:d3:cb:67:e1:55:c2:f9:c9:23:5e:32:54:56:b0: 7e:c8:47:34:35:ac:b3:e4:ab:8d:76:9a:4a:1f:61:ef:f1:ff: 03:30:5c:86:9e:72:65:82:d9:de:84:dc:67:a6:be:c1:18:10: 8b:64:cb:01:11:61:1e:4f:7d:70:c0:ca:ba:39:e5:7b:3a:fa: 8b:86:1d:7f:16:0b:a5:7b:55:d2:c3:82:d1:b8:d9:26:33:c1: 52:fe:80:a9:c9:f7:a0:7d:51:66:6b:09:c7:b9:94:ee:b5:8a: 9f:33:49:68:68:c8:c4:fd:be:54:f1:29:36:22:5b:04:b5:c6: 9c:cd:6c:38:28:7b:d9:b3:22:38:49:1c:6e:0b:0e:43:55:24: 56:13:3e:17:d1:7a:02:4c:fb:ec:a7:7e:b2:01:b1:24:a6:99: 7c:c9:e0:f0:bb:23:1d:ff:21:76:bb:f8:50:c8:9b:a7:2a:3a: a7:af:4e:da:f1:c6:a4:fc:5a:5b:29:b0:ef:0f:20:cf:69:a4: ef:53:9b:3f:68:d2:46:a9:27:6e:3a:95:73:1f:cb:c9:4c:3d: 71:38:ec:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29XypUkkIzOuGft6u7LdFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYmQ4M2Y1Mjc1YmQwOWU4ZDMzYjQyOTg4MWViMmY5NmI2 ZDlkZTEwHhcNMjYwMTI1MjEwMDQxWhcNMjYwMTI2MjEwMDQxWjAzMTEwLwYDVQQD EyhkYjA0YTgxYjI3M2Y0ZTViMTZiMmYwNWIwMTMwMjUxOTVkZDU3MTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hWS6j8dWqVMrKx4saiydd9u/bsz OdbBN27CtJqW8wSPxB6Googr/BwUugm542qysw8kgyXhshuik8w2ZOw4IT8+uOtN qp4P0+MEEA1DDYRbdnNDiOWcIXkBBACI6gKPWwOutS1gVg4ObU6fNj8FgK4mwRJa rdFCUWe3GfGPs46XbtYxyhLjLV2CJpuhfA1n1o4mVts3jm5vYg7a0XsS1KuHcVud FLB27B0+9YdGUxvtBr3ez7Q5Le3X/EtxroJQ8XAzjWK334MKMf1tUBOZGuV+2SAe d+j9IpPgbzUWkTknO4CZMNGzYh21ooCZHaF3hz0gK9ikNQxZvR6I2T9pvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsEqBsnP05bFrLwWwEwJRld1XEaMB8GA1UdIwQY MBaAFHK9g/UnW9CejTO0KYgesvlrbZ3hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3IyRDlTZGIwSjZOTTdRcGlCNnktV3R0bmVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xOGM2YmEtN2I3MS00NDY2LWJiMzMt MDA1ODc3ZGE4MDI2LzEvY3IyRDlTZGIwSjZOTTdRcGlCNnktV3R0bmVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8xOGM2YmEtN2I3MS00NDY2LWJiMzMtMDA1ODc3ZGE4MDI2 LzEvY3IyRDlTZGIwSjZOTTdRcGlCNnktV3R0bmVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe60ZvI7G Cm3dqmKsDwFeLmoD7GC+QVCxOOWwglGsiC4z54/BRD7HANPLZ+FVwvnJI14yVFaw fshHNDWss+SrjXaaSh9h7/H/AzBchp5yZYLZ3oTcZ6a+wRgQi2TLARFhHk99cMDK ujnlezr6i4YdfxYLpXtV0sOC0bjZJjPBUv6Aqcn3oH1RZmsJx7mU7rWKnzNJaGjI xP2+VPEpNiJbBLXGnM1sOCh72bMiOEkcbgsOQ1UkVhM+F9F6Akz77Kd+sgGxJKaZ fMng8LsjHf8hdrv4UMibpyo6p69O2vHGpPxaWymw7w8gz2mk71ObP2jSRqknbjqV cx/LyUw9cTjsGw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:01:29 2026 by rpki-client