This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft File: 0H3DXrzYjdDiqNs6WghlS8O-AmI.mft (raw, json) Hash identifier: SB6SuKKIz/S1i2YYDZSFyHI7W3qr4L6/4m2fjLXDTLE= Subject key identifier: CE:8F:97:82:D4:1B:64:CF:0D:14:BD:1F:FD:80:6C:5A:1B:54:52:68 Authority key identifier: D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62 Certificate issuer: /CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262 Certificate serial: 019BF6F5E3BD18AE38E047B4152362430206 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 21:01:08 +0000 Manifest this update: Sun 25 Jan 2026 21:01:08 +0000 Manifest next update: Mon 26 Jan 2026 21:01:08 +0000 Files and hashes: 1: 0H3DXrzYjdDiqNs6WghlS8O-AmI.crl (hash: 739xYg8XaANTP0HUrzOGO6zveH0JbCFQ9LpXYSli0qk=) 2: 5S9zgsI7YdgCuLrcxrJgJGgaXio.roa (hash: 0SOHInOOcBkpkEBjrdDgxxRvZ1Vm8a53UcIVrdFkYco=) 3: 6rWLYcpP7TzQKUSgMq9oQds6Kqo.roa (hash: m4nWZTQSZpBwm2N4gNE+CRW9B3H0JjT5K3DxWrPCn/E=) 4: 7gj3qwzFulpZ74m7sX-j6kpzvWg.roa (hash: CZUn6B9GSjHpISyR7znrv7W2c0uiMaQCOD7zBfEJXUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:e3:bd:18:ae:38:e0:47:b4:15:23:62:43:02:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262 Validity Not Before: Jan 25 21:01:08 2026 GMT Not After : Jan 26 21:01:08 2026 GMT Subject: CN=ce8f9782d41b64cf0d14bd1ffd806c5a1b545268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:02:ab:e0:64:14:e8:fc:c4:6a:86:22:23:d7: ca:b3:07:ba:72:ff:6f:0f:4d:7b:07:8a:53:a2:c5: 4c:16:11:e1:dc:b7:38:f3:b4:b1:13:5f:ba:8b:73: bd:e4:6e:30:b8:e5:2b:99:3b:df:e5:54:73:9c:49: 0b:44:c2:9b:b8:a2:f2:86:47:9b:23:67:65:df:71: b2:f2:0a:28:4d:7d:b1:20:6e:3a:dc:60:df:29:63: 0a:eb:d6:12:47:38:39:80:09:ae:d5:79:7a:81:33: 43:1b:be:83:9b:ff:8f:c2:3a:bd:2a:38:d6:6b:bd: 4a:35:6f:38:8a:82:f0:29:25:3e:bb:0d:ef:61:e3: 61:1f:ab:da:75:dd:bf:31:05:38:ee:8e:48:05:e9: 90:72:19:a8:64:86:13:c7:a3:4e:f0:2a:a0:81:3d: 13:53:91:85:af:42:54:51:9d:89:80:64:5a:c7:ca: 1e:2d:7d:34:2d:c6:85:c5:fa:a5:8e:e2:3d:0e:bf: 59:a1:3a:80:49:fd:a2:67:af:ba:b6:c2:3a:dc:cb: bb:91:ec:71:ae:51:de:c9:ed:b1:9a:87:6e:88:93: 46:d5:fd:ff:ea:62:85:b7:56:1a:78:ba:df:40:9e: 73:a5:31:a5:54:f7:1d:28:ab:8c:3a:9b:33:b4:1b: de:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8F:97:82:D4:1B:64:CF:0D:14:BD:1F:FD:80:6C:5A:1B:54:52:68 X509v3 Authority Key Identifier: keyid:D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:9f:5d:d5:0f:b5:50:42:91:7f:5f:77:59:f0:df:7c:4d:e4: f5:35:66:5c:ee:bd:db:31:f0:e7:68:da:58:32:43:6c:2c:94: 2f:02:04:9e:f1:a1:e3:f4:f6:be:d2:03:b3:a9:d3:37:c1:b7: b7:6b:2e:b5:d7:04:48:c1:b3:a0:da:35:8b:b1:8a:48:fe:04: c5:19:6e:56:f5:9e:61:b4:7c:df:c4:8f:3f:b7:7f:05:ee:55: 50:30:c3:5d:d5:9f:c7:b3:5f:40:15:16:09:cb:ac:5f:99:33: d9:8d:a4:28:86:33:36:76:05:e0:d9:63:80:17:a8:69:1e:fc: 52:a2:16:bb:82:e5:60:8d:6d:b6:54:a8:82:16:ef:b2:6f:51: eb:b1:cc:f9:fd:b0:24:cd:63:03:c6:6c:fa:dc:93:46:47:f3: 72:1a:0b:a4:76:14:62:8c:c1:73:5d:7a:aa:20:b7:4c:41:35: 48:9c:dc:30:9d:7e:c5:c7:5c:0b:b8:11:63:a6:81:f9:1e:20: 8a:2b:ac:23:f4:b1:ec:22:6c:fd:ca:a4:c7:99:a8:97:76:e1: 0c:b0:26:56:be:fd:c0:1c:6e:e5:6c:c2:89:ee:21:24:c7:c4: 62:c4:2e:1a:8c:37:af:4a:e9:7e:9a:1a:05:c6:e4:3b:2b:8f: dc:3b:54:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29eO9GK444Ee0FSNiQwIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwN2RjMzVlYmNkODhkZDBlMmE4ZGIzYTVhMDg2NTRiYzNi ZTAyNjIwHhcNMjYwMTI1MjEwMTA4WhcNMjYwMTI2MjEwMTA4WjAzMTEwLwYDVQQD EyhjZThmOTc4MmQ0MWI2NGNmMGQxNGJkMWZmZDgwNmM1YTFiNTQ1MjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AKr4GQU6PzEaoYiI9fKswe6cv9v D017B4pTosVMFhHh3Lc487SxE1+6i3O95G4wuOUrmTvf5VRznEkLRMKbuKLyhkeb I2dl33Gy8gooTX2xIG463GDfKWMK69YSRzg5gAmu1Xl6gTNDG76Dm/+Pwjq9KjjW a71KNW84ioLwKSU+uw3vYeNhH6vadd2/MQU47o5IBemQchmoZIYTx6NO8CqggT0T U5GFr0JUUZ2JgGRax8oeLX00LcaFxfqljuI9Dr9ZoTqASf2iZ6+6tsI63Mu7kexx rlHeye2xmoduiJNG1f3/6mKFt1YaeLrfQJ5zpTGlVPcdKKuMOpsztBveVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6Pl4LUG2TPDRS9H/2AbFobVFJoMB8GA1UdIwQY MBaAFNB9w1682I3Q4qjbOloIZUvDvgJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEgzRFhyellqZERpcU5zNldnaGxTOE8tQW1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8xYzcxOGQtZTdhMC00MGFjLWExODEt Y2JhYTQyYTYyNzI3LzEvMEgzRFhyellqZERpcU5zNldnaGxTOE8tQW1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8xYzcxOGQtZTdhMC00MGFjLWExODEtY2JhYTQyYTYyNzI3 LzEvMEgzRFhyellqZERpcU5zNldnaGxTOE8tQW1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACp9d1Q+1 UEKRf193WfDffE3k9TVmXO692zHw52jaWDJDbCyULwIEnvGh4/T2vtIDs6nTN8G3 t2sutdcESMGzoNo1i7GKSP4ExRluVvWeYbR838SPP7d/Be5VUDDDXdWfx7NfQBUW CcusX5kz2Y2kKIYzNnYF4NljgBeoaR78UqIWu4LlYI1ttlSoghbvsm9R67HM+f2w JM1jA8Zs+tyTRkfzchoLpHYUYozBc116qiC3TEE1SJzcMJ1+xcdcC7gRY6aB+R4g iiusI/Sx7CJs/cqkx5mol3bhDLAmVr79wBxu5WzCie4hJMfEYsQuGow3r0rpfpoa BcbkOyuP3DtUdA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:30 2026 by rpki-client