This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft File: a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft (raw, json) Hash identifier: QgFk2Fn4xy7LQpJ4HUSo4jmhCcs+6+VAg2LtNm0dcSo= Subject key identifier: B4:D5:FB:61:EA:53:FD:8C:9E:A5:A2:69:DE:53:97:39:BF:77:3F:0A Authority key identifier: 6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84 Certificate issuer: /CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84 Certificate serial: 019BF72D45127F10867D59D0E62EDE50C100 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft Manifest number: 67 Signing time: Sun 25 Jan 2026 22:01:37 +0000 Manifest this update: Sun 25 Jan 2026 22:01:37 +0000 Manifest next update: Mon 26 Jan 2026 22:01:37 +0000 Files and hashes: 1: T__G1Ca-eMsMLPhR2fqq6jZzabE.roa (hash: /YNdonFxgiuSJ7bSBLLw5KHpjMZ1mWh/QAHnXBlZOVY=) 2: a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl (hash: wouvJMQM5X94pPJN5eTttP6rTmqRYCIY63mTVI2Ch38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:45:12:7f:10:86:7d:59:d0:e6:2e:de:50:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84 Validity Not Before: Jan 25 22:01:37 2026 GMT Not After : Jan 26 22:01:37 2026 GMT Subject: CN=b4d5fb61ea53fd8c9ea5a269de539739bf773f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:87:77:5e:8f:47:77:4b:78:22:73:c2:9c:25: 5a:ef:96:91:4d:f4:33:3d:45:a6:cb:ef:92:0f:21: df:9d:36:f2:1d:63:20:ca:14:2b:5a:ab:92:88:d0: be:40:08:66:2a:ca:cb:ef:6b:64:ad:8f:c1:e9:a5: 06:7e:b2:bc:36:4b:2e:d4:a4:72:ff:3e:3e:8c:ff: 81:1f:bc:7c:bd:c9:df:ac:ad:a4:70:13:33:f8:d3: 9c:bf:7d:d1:41:db:3e:ae:23:12:a2:14:6b:c9:a1: 66:0e:f8:87:6a:40:fd:20:19:fe:6a:af:07:2c:b0: ec:5d:2d:99:bd:be:35:90:0a:23:4f:33:85:ab:d0: 75:f8:93:a1:fd:22:af:1d:e9:68:b8:ae:22:de:d9: 7e:c1:3c:64:3d:04:62:74:90:d6:6d:fb:be:24:a3: b5:9b:3c:2c:f4:c0:3e:d8:45:19:c9:7e:c1:0a:31: 00:86:54:80:4c:68:f9:0a:3f:c4:33:5b:84:47:96: cf:67:5f:1d:45:ac:f2:eb:e1:74:4b:62:11:e3:df: 6c:c5:2e:fe:b0:78:08:22:ac:81:f4:88:9e:7c:54: 83:7f:2f:34:11:f9:49:bc:47:d5:6e:11:a5:28:86: 18:8c:39:e3:c1:cd:80:62:ea:74:74:dc:05:45:66: 60:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D5:FB:61:EA:53:FD:8C:9E:A5:A2:69:DE:53:97:39:BF:77:3F:0A X509v3 Authority Key Identifier: keyid:6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c7:15:2c:e3:e5:36:ce:d6:89:99:3c:16:22:1d:b3:f7:b9: fe:b4:68:b9:c2:af:31:56:92:55:6e:a5:72:dc:3f:0f:da:53: 66:10:ac:22:89:df:ac:79:5e:b1:7f:56:c3:d6:5a:5e:35:08: c7:29:11:23:1e:52:e7:7b:4f:d5:e7:17:e4:18:36:0b:50:d9: b7:67:df:95:28:16:53:71:7b:d1:6e:56:91:5b:e3:7f:50:e4: a0:fa:26:56:2f:d2:e1:2e:bd:35:0b:94:ee:ba:61:26:38:27: 37:15:62:0d:a6:6c:4e:39:5a:6c:a8:b6:2f:cd:3a:51:6e:37: 40:d2:be:93:b1:0c:85:6e:9d:3d:af:04:27:f9:b0:90:77:d0: f1:07:26:2e:c5:5a:24:fe:33:69:14:f5:f2:c9:fa:05:7a:23: 89:5c:b8:66:b4:ca:95:4b:9c:32:67:d4:e4:b9:b5:41:44:b7: 03:ab:cd:35:50:77:d3:e7:9f:2e:39:da:ec:5a:55:35:50:3f: 5d:14:8d:78:55:a1:12:fb:d0:77:51:49:77:99:33:a7:c4:fe: 36:64:ff:3c:a4:48:a1:2f:70:d4:53:ec:d2:ee:ca:e0:14:bf: 68:5e:25:dc:04:08:07:a4:fc:26:5a:4b:8f:98:03:0d:4d:f2: 7b:08:e1:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LUUSfxCGfVnQ5i7eUMEAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2QwMWRkZTNjMmFiN2ZhN2I1ODhlY2FkNGQxY2QzMTM5 N2JkODQwHhcNMjYwMTI1MjIwMTM3WhcNMjYwMTI2MjIwMTM3WjAzMTEwLwYDVQQD EyhiNGQ1ZmI2MWVhNTNmZDhjOWVhNWEyNjlkZTUzOTczOWJmNzczZjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyod3Xo9Hd0t4InPCnCVa75aRTfQz PUWmy++SDyHfnTbyHWMgyhQrWquSiNC+QAhmKsrL72tkrY/B6aUGfrK8Nksu1KRy /z4+jP+BH7x8vcnfrK2kcBMz+NOcv33RQds+riMSohRryaFmDviHakD9IBn+aq8H LLDsXS2Zvb41kAojTzOFq9B1+JOh/SKvHelouK4i3tl+wTxkPQRidJDWbfu+JKO1 mzws9MA+2EUZyX7BCjEAhlSATGj5Cj/EM1uER5bPZ18dRazy6+F0S2IR499sxS7+ sHgIIqyB9IiefFSDfy80EflJvEfVbhGlKIYYjDnjwc2AYup0dNwFRWZgPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTV+2HqU/2MnqWiad5Tlzm/dz8KMB8GA1UdIwQY MBaAFGt9Ad3jwqt/p7WI7K1NHNMTl72EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTMwQjNlUENxMy1udFlqc3JVMGMweE9YdllRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yMGYyM2QtMWZjOS00NzFhLTgyYmQt ZmU4YWY5YTZlZmQyLzEvYTMwQjNlUENxMy1udFlqc3JVMGMweE9YdllRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8yMGYyM2QtMWZjOS00NzFhLTgyYmQtZmU4YWY5YTZlZmQy LzEvYTMwQjNlUENxMy1udFlqc3JVMGMweE9YdllRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO8cVLOPl Ns7WiZk8FiIds/e5/rRoucKvMVaSVW6lctw/D9pTZhCsIonfrHlesX9Ww9ZaXjUI xykRIx5S53tP1ecX5Bg2C1DZt2fflSgWU3F70W5WkVvjf1DkoPomVi/S4S69NQuU 7rphJjgnNxViDaZsTjlabKi2L806UW43QNK+k7EMhW6dPa8EJ/mwkHfQ8QcmLsVa JP4zaRT18sn6BXojiVy4ZrTKlUucMmfU5Lm1QUS3A6vNNVB30+efLjna7FpVNVA/ XRSNeFWhEvvQd1FJd5kzp8T+NmT/PKRIoS9w1FPs0u7K4BS/aF4l3AQIB6T8JlpL j5gDDU3yewjh3Q== -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:45 2026 by rpki-client