This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft File: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft (raw, json) Hash identifier: 8A4sxtDWA5vFNmwU0sQVIl7uvzTb++DNge9PQEorCCE= Subject key identifier: 68:7D:1F:AC:0D:75:34:16:98:3B:3D:58:68:6B:44:50:25:13:C0:51 Authority key identifier: 47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89 Certificate issuer: /CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89 Certificate serial: 019BF91AED65E44D255FB78B2CD72EC639A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 07:00:50 +0000 Manifest this update: Mon 26 Jan 2026 07:00:50 +0000 Manifest next update: Tue 27 Jan 2026 07:00:50 +0000 Files and hashes: 1: 2XedQ5Z42dY_hRwTsKx81Lezyfc.roa (hash: X9ztJb3Rfx+FojOZ+RViUwDKlFgWmcbx151sFFMV0Eg=) 2: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl (hash: H9/PdaS8lgUiU0rxtj8DLyx5nYdwGWo4iaO8OrTIKaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1a:ed:65:e4:4d:25:5f:b7:8b:2c:d7:2e:c6:39:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89 Validity Not Before: Jan 26 07:00:50 2026 GMT Not After : Jan 27 07:00:50 2026 GMT Subject: CN=687d1fac0d753416983b3d58686b44502513c051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:81:30:4e:04:5b:1f:35:1b:67:5f:d0:92:1d: bb:96:da:20:a8:1f:24:72:ed:3c:e3:a3:2e:b7:71: a5:6f:59:f7:71:16:42:a8:5b:bd:cb:96:85:7a:24: d0:ae:dc:3e:89:36:c9:d3:7f:11:f0:41:70:d2:c9: 29:4a:01:cd:d7:30:8b:ef:d6:54:69:c4:47:ee:0a: e9:9f:57:f1:3b:54:9a:31:52:99:53:f7:d6:21:1a: 89:25:2b:d4:0d:d1:78:cc:86:58:02:3a:82:da:17: ca:8f:76:19:d3:af:b0:02:b3:11:d9:08:2e:d1:3c: 17:be:f0:75:2b:b5:6b:68:53:5a:15:34:67:8f:3e: 67:4c:5f:21:17:30:3d:04:a2:cd:2d:0c:a8:d9:f6: 76:85:43:e4:02:b3:51:b4:88:85:ac:3c:85:17:14: 40:3a:51:94:1a:01:c2:ce:ef:0b:25:09:e0:37:e7: d0:74:4a:7a:ca:18:65:2d:08:b3:7a:96:5d:07:6b: f8:a5:9a:93:cf:06:b4:1a:8a:3d:fa:0c:90:59:f0: b9:4a:1e:46:6c:42:8f:47:1f:e3:f1:24:b7:71:64: 56:ea:cc:2a:06:53:31:6b:3a:02:22:64:30:a9:ea: 16:60:bd:15:c6:32:7b:54:39:03:d1:4a:5b:52:be: aa:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7D:1F:AC:0D:75:34:16:98:3B:3D:58:68:6B:44:50:25:13:C0:51 X509v3 Authority Key Identifier: keyid:47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:86:d5:57:42:7f:ff:24:17:69:82:70:da:44:65:92:dc:22: 76:e5:e7:94:07:51:dd:32:5c:9f:c5:0b:a5:9f:a1:cd:a0:05: 86:1f:b8:78:d6:8f:35:83:61:6a:15:a9:7e:b6:18:1e:aa:70: 7f:b6:ea:81:57:5c:15:c8:dc:40:95:4a:b0:7d:a2:40:7d:d9: 95:48:a6:d4:57:dd:22:53:00:84:69:45:30:75:0e:88:3c:dd: e9:43:f5:39:8a:a4:91:84:e6:d2:c8:ed:e3:a4:4b:8e:93:56: 40:8d:4b:04:06:98:93:46:c6:1b:fe:93:1e:c1:ed:89:00:e6: 1d:7d:7e:25:63:81:a3:70:af:74:bb:3b:ba:92:e3:14:f5:83: 2d:9e:d9:c2:f0:43:70:62:7b:2b:d0:3a:1f:41:05:95:8a:2b: 63:8a:e4:5c:11:d4:5d:a9:ce:18:d6:82:11:8f:39:fd:95:f4: 04:33:ba:a9:32:d9:36:dc:a8:cc:8a:bd:19:71:8c:d6:b7:fb: 1b:43:4e:fa:17:a8:0b:61:5c:d3:d6:3d:0d:72:8b:9c:e4:e2: ff:d5:51:7f:ab:ea:7f:5a:d6:c2:58:82:43:9c:34:89:e6:bd: 45:f8:83:8d:60:1a:68:e9:2f:88:51:9d:1f:32:f5:ae:7d:90: cb:b0:a7:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5Gu1l5E0lX7eLLNcuxjmkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MGJlMTg2NWY1MDc5ZTI0YjFhN2FkZmRjYTI3ZWUyZmU1 ZDFmODkwHhcNMjYwMTI2MDcwMDUwWhcNMjYwMTI3MDcwMDUwWjAzMTEwLwYDVQQD Eyg2ODdkMWZhYzBkNzUzNDE2OTgzYjNkNTg2ODZiNDQ1MDI1MTNjMDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4EwTgRbHzUbZ1/Qkh27ltogqB8k cu0846Mut3Glb1n3cRZCqFu9y5aFeiTQrtw+iTbJ038R8EFw0skpSgHN1zCL79ZU acRH7grpn1fxO1SaMVKZU/fWIRqJJSvUDdF4zIZYAjqC2hfKj3YZ06+wArMR2Qgu 0TwXvvB1K7VraFNaFTRnjz5nTF8hFzA9BKLNLQyo2fZ2hUPkArNRtIiFrDyFFxRA OlGUGgHCzu8LJQngN+fQdEp6yhhlLQizepZdB2v4pZqTzwa0Goo9+gyQWfC5Sh5G bEKPRx/j8SS3cWRW6swqBlMxazoCImQwqeoWYL0VxjJ7VDkD0UpbUr6qxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGh9H6wNdTQWmDs9WGhrRFAlE8BRMB8GA1UdIwQY MBaAFEcL4YZfUHniSxp639yifuL+XR+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8wODdmOTktY2I5ZC00MGE4LTk4MzAt MWU2OTVlZjQ5YzEwLzEvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8wODdmOTktY2I5ZC00MGE4LTk4MzAtMWU2OTVlZjQ5YzEw LzEvUnd2aGhsOVFlZUpMR25yZjNLSi00djVkSDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt4bVV0J/ /yQXaYJw2kRlktwiduXnlAdR3TJcn8ULpZ+hzaAFhh+4eNaPNYNhahWpfrYYHqpw f7bqgVdcFcjcQJVKsH2iQH3ZlUim1FfdIlMAhGlFMHUOiDzd6UP1OYqkkYTm0sjt 46RLjpNWQI1LBAaYk0bGG/6THsHtiQDmHX1+JWOBo3CvdLs7upLjFPWDLZ7ZwvBD cGJ7K9A6H0EFlYorY4rkXBHUXanOGNaCEY85/ZX0BDO6qTLZNtyozIq9GXGM1rf7 G0NO+heoC2Fc09Y9DXKLnOTi/9VRf6vqf1rWwliCQ5w0iea9RfiDjWAaaOkviFGd HzL1rn2Qy7CntA== -----END CERTIFICATE-----Generated at Mon Jan 26 09:46:00 2026 by rpki-client