This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft File: 0lgUed7jtZlPEcnZVkYxv1pATAc.mft (raw, json) Hash identifier: +9IhVI8Oa5eJu466afJAl6ETY6nWE7ZmpRsGBCLWSPc= Subject key identifier: 97:1A:3A:75:63:87:60:B0:6D:1A:95:65:B6:47:42:CE:18:C4:A5:BA Authority key identifier: D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07 Certificate issuer: /CN=d2581479dee3b5994f11c9d9564631bf5a404c07 Certificate serial: 019BF72CE7E9023628B2D843FE823214B549 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft Manifest number: 08F6 Signing time: Sun 25 Jan 2026 22:01:13 +0000 Manifest this update: Sun 25 Jan 2026 22:01:13 +0000 Manifest next update: Mon 26 Jan 2026 22:01:13 +0000 Files and hashes: 1: 0lgUed7jtZlPEcnZVkYxv1pATAc.crl (hash: c5rAqxnH4KonpE16XtrwBfHNENfuBChFWjFqSF1O5xE=) 2: _anBuNNw0qAbfJJyR7NUzCXshEI.roa (hash: u/OzH4PvqgIz0IcQamVppLorgGwznO76WkLllc9zkBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:e7:e9:02:36:28:b2:d8:43:fe:82:32:14:b5:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2581479dee3b5994f11c9d9564631bf5a404c07 Validity Not Before: Jan 25 22:01:13 2026 GMT Not After : Jan 26 22:01:13 2026 GMT Subject: CN=971a3a75638760b06d1a9565b64742ce18c4a5ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:75:cc:a0:3b:71:bf:f0:ea:47:c8:42:8e:08: 58:20:ec:91:86:cb:2d:2c:23:17:aa:9f:4b:c3:01: 47:31:92:aa:ea:2f:31:4c:dd:33:77:cf:b4:28:0f: 3b:ff:21:7e:21:0c:d0:5f:ce:2d:21:8d:45:c4:44: b8:53:22:75:c7:d8:db:4f:06:1e:b7:81:c0:e0:19: df:f2:6d:66:10:b6:1b:3c:12:1e:68:20:00:92:72: 67:99:68:22:9e:54:f4:00:b8:fd:10:b3:28:49:18: 2a:ba:a4:ed:bd:06:d6:8f:45:c0:aa:99:1d:06:b7: ab:5e:da:c7:e1:b5:8d:6e:d6:3f:fc:a0:ed:0c:79: c7:63:43:8f:28:00:be:7c:74:34:e7:46:3c:29:d3: 3d:3b:34:1a:7b:f1:c1:9a:51:17:6a:9a:44:6f:46: 9d:ec:c7:8a:25:39:85:9b:14:66:da:84:2f:8b:ee: 28:12:99:98:ea:e0:22:10:67:9c:76:4b:8a:2d:94: ae:cc:ab:7f:79:c7:6a:1d:6c:85:16:74:ff:76:be: e3:73:50:fd:43:ec:00:9c:36:fc:76:36:ba:57:40: 4a:7f:b0:86:da:f0:37:7b:ac:f2:76:86:8b:61:05: 89:f2:42:7a:5e:a5:a4:69:b8:46:56:6e:de:a2:39: df:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1A:3A:75:63:87:60:B0:6D:1A:95:65:B6:47:42:CE:18:C4:A5:BA X509v3 Authority Key Identifier: keyid:D2:58:14:79:DE:E3:B5:99:4F:11:C9:D9:56:46:31:BF:5A:40:4C:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lgUed7jtZlPEcnZVkYxv1pATAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/336db3-71a8-43ef-9b9f-6a6c6e096071/1/0lgUed7jtZlPEcnZVkYxv1pATAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:22:29:f2:bc:8c:d2:a6:5f:21:46:36:26:48:f5:b4:00:1d: d7:0c:1d:b0:1a:98:16:39:ea:78:63:f8:2a:57:52:18:13:42: 09:ef:3a:80:66:cb:09:5c:eb:bf:56:2a:77:1f:bd:58:e6:82: f8:31:4a:5b:66:eb:aa:19:bb:05:b4:58:6e:f7:57:f8:39:8f: d6:fb:65:85:4d:bd:f9:5c:04:5d:8e:99:c4:ae:39:0a:f9:31: 4a:d2:5b:5a:0d:63:d1:f5:5e:e8:43:ae:42:6e:4d:23:12:00: d8:51:3b:e7:ce:2b:71:c4:99:2a:f2:e0:b6:e0:d6:a7:44:95: 2d:5d:74:44:5d:a1:5f:15:13:de:91:d6:64:eb:1a:cf:82:aa: 8b:8b:c6:87:d1:2a:99:de:37:5e:9d:74:d4:2a:32:50:0b:9b: a0:ed:4c:6a:05:60:bd:e0:5e:2d:9d:c7:86:ba:30:b5:63:7c: 6d:ad:19:48:07:1c:ef:45:59:c4:58:c8:84:17:46:09:bc:1d: 4e:80:69:6c:41:03:6b:81:97:5b:27:0e:da:80:00:3b:7a:07: 36:2f:41:df:cc:cb:97:49:42:f8:51:5e:ff:84:97:73:b7:9f: 12:3a:29:14:52:55:dd:43:77:b5:bb:65:fa:05:50:d7:22:98: fe:92:07:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LOfpAjYosthD/oIyFLVJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNTgxNDc5ZGVlM2I1OTk0ZjExYzlkOTU2NDYzMWJmNWE0 MDRjMDcwHhcNMjYwMTI1MjIwMTEzWhcNMjYwMTI2MjIwMTEzWjAzMTEwLwYDVQQD Eyg5NzFhM2E3NTYzODc2MGIwNmQxYTk1NjViNjQ3NDJjZTE4YzRhNWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HXMoDtxv/DqR8hCjghYIOyRhsst LCMXqp9LwwFHMZKq6i8xTN0zd8+0KA87/yF+IQzQX84tIY1FxES4UyJ1x9jbTwYe t4HA4Bnf8m1mELYbPBIeaCAAknJnmWginlT0ALj9ELMoSRgquqTtvQbWj0XAqpkd BrerXtrH4bWNbtY//KDtDHnHY0OPKAC+fHQ050Y8KdM9OzQae/HBmlEXappEb0ad 7MeKJTmFmxRm2oQvi+4oEpmY6uAiEGecdkuKLZSuzKt/ecdqHWyFFnT/dr7jc1D9 Q+wAnDb8dja6V0BKf7CG2vA3e6zydoaLYQWJ8kJ6XqWkabhGVm7eojnfMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcaOnVjh2CwbRqVZbZHQs4YxKW6MB8GA1UdIwQY MBaAFNJYFHne47WZTxHJ2VZGMb9aQEwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zMzZkYjMtNzFhOC00M2VmLTliOWYt NmE2YzZlMDk2MDcxLzEvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zMzZkYjMtNzFhOC00M2VmLTliOWYtNmE2YzZlMDk2MDcx LzEvMGxnVWVkN2p0WmxQRWNuWlZrWXh2MXBBVEFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCIp8ryM 0qZfIUY2Jkj1tAAd1wwdsBqYFjnqeGP4KldSGBNCCe86gGbLCVzrv1Yqdx+9WOaC +DFKW2brqhm7BbRYbvdX+DmP1vtlhU29+VwEXY6ZxK45CvkxStJbWg1j0fVe6EOu Qm5NIxIA2FE7584rccSZKvLgtuDWp0SVLV10RF2hXxUT3pHWZOsaz4Kqi4vGh9Eq md43Xp101CoyUAuboO1MagVgveBeLZ3HhrowtWN8ba0ZSAcc70VZxFjIhBdGCbwd ToBpbEEDa4GXWycO2oAAO3oHNi9B38zLl0lC+FFe/4SXc7efEjopFFJV3UN3tbtl +gVQ1yKY/pIHMg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:46 2026 by rpki-client