This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft File: p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft (raw, json) Hash identifier: QWoHaZyt+C/tV6pxY8LXh0tKnfuoFZ/Bq6eHjVeQXcc= Subject key identifier: 8A:0A:90:94:8A:B6:AF:E6:00:26:45:55:51:48:92:D7:7A:F9:C1:1A Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3 Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3 Certificate serial: 019BF4D034E9D6998E1D3C78EB6AFDC904EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft Manifest number: 16B7 Signing time: Sun 25 Jan 2026 11:00:44 +0000 Manifest this update: Sun 25 Jan 2026 11:00:44 +0000 Manifest next update: Mon 26 Jan 2026 11:00:44 +0000 Files and hashes: 1: 5xWsJLB1rOrqA4DS2BwAZY-uRwg.roa (hash: JIN7iifBaNIG0jSwJOMYaoCb6Od3dAZF5qeWgFbXbiY=) 2: meAessKCpmwe8fOAgZe9YU9MTiw.roa (hash: 50h4K5YSYsz32EpIZ2NW1nDqeDeoSpSQ6hoQmydaO20=) 3: nSbiFuonVVedtf1Mjw5hb4zONuc.roa (hash: J6+zjZkHNoFOiT1a2hQNHKdZUcl8pIjHWjIqVGiuISk=) 4: p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl (hash: kQJZK6ji4qlqgiSb2X9Qd/E6ulmmWLXoVITfvrmkozs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:34:e9:d6:99:8e:1d:3c:78:eb:6a:fd:c9:04:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3 Validity Not Before: Jan 25 11:00:44 2026 GMT Not After : Jan 26 11:00:44 2026 GMT Subject: CN=8a0a90948ab6afe600264555514892d77af9c11a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:4c:ee:6f:04:2e:7a:a5:48:e7:b2:24:49: 36:27:20:e3:d1:ea:72:8d:35:23:f4:56:3e:82:0c: 12:27:a0:c8:02:a5:a8:f9:b4:6a:13:59:65:3d:e1: 98:10:52:da:6b:bc:84:31:63:9d:e1:3c:38:1f:fb: b5:91:ae:7e:90:b0:a3:28:b5:4c:67:5b:1b:5d:3f: e1:6c:d3:d7:04:e2:6a:20:e1:c7:1e:02:a5:c0:15: af:08:3e:fa:77:43:04:ee:c6:77:15:a4:5f:bc:63: c6:84:a7:0e:cd:aa:af:ea:e7:c2:fe:d2:ea:1c:7b: e4:d3:c1:d1:1c:5a:4a:68:96:6d:e1:d7:bd:94:8f: 27:f6:17:99:63:43:83:61:6e:ad:68:dd:3b:3e:dd: a5:1e:76:f1:56:d9:5b:0f:67:ab:43:c3:e1:7c:27: 0d:ff:6f:9c:4b:2d:e3:4f:a3:a1:7a:22:c3:7f:ce: 79:6c:9f:79:bc:4f:bc:8b:d0:9b:37:fc:b5:f3:8c: bc:f6:42:cc:c9:4e:42:96:ce:23:c8:a8:87:4b:26: 18:2d:c4:45:70:78:71:43:6c:f6:69:4c:08:2a:54: af:42:9b:4d:19:6d:1a:55:29:b5:e5:48:21:9f:7c: 04:8e:ea:32:cc:4a:ee:9e:ac:3e:eb:78:1d:c5:8f: b2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0A:90:94:8A:B6:AF:E6:00:26:45:55:51:48:92:D7:7A:F9:C1:1A X509v3 Authority Key Identifier: keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:75:32:74:4c:80:be:f8:cc:26:45:53:00:57:dc:d4:76:8b: b2:ae:84:46:e3:56:a7:ae:0c:a9:e7:48:26:87:8b:78:09:f1: 95:b8:eb:77:a5:bc:74:2d:ac:89:67:30:de:9d:e3:c0:d8:94: 2b:5d:35:98:44:6d:c6:ec:b6:18:83:14:81:61:7a:af:f0:37: 19:e4:f2:ab:79:f8:c8:ed:58:70:70:47:64:aa:fc:d7:8f:7c: a9:19:c8:8d:61:c5:62:6e:f8:a8:d6:b8:ed:95:c8:1c:75:35: f1:a5:60:41:b2:41:d7:5c:2f:b1:89:a3:47:ec:25:5e:b1:7b: d5:19:7a:78:45:71:77:ab:13:5d:d3:f1:55:22:b8:72:39:ce: c3:4a:39:6c:f4:16:03:0e:af:28:fd:32:b6:54:6a:16:7c:50: 24:44:fe:c5:c9:a0:8c:66:14:d7:59:f4:88:61:71:de:9b:b9: 75:83:3d:5b:71:b0:2c:e9:3f:7e:36:76:07:45:a5:09:51:96: c1:71:07:09:36:0d:81:2c:ac:59:97:ae:4e:84:3f:3d:ed:e7: 7c:de:8c:3f:f6:91:3e:31:bb:ab:0a:e7:bb:06:22:a3:82:71: eb:e3:f1:5c:ad:7a:f2:ee:a0:f3:73:5a:47:ba:1b:98:45:1b: ce:03:9a:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00DTp1pmOHTx462r9yQTqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YWVlNjc2MjBkOWMwYWU2M2QyOTU3ODVjOWQ5NTZmMDYz YzIxYzMwHhcNMjYwMTI1MTEwMDQ0WhcNMjYwMTI2MTEwMDQ0WjAzMTEwLwYDVQQD Eyg4YTBhOTA5NDhhYjZhZmU2MDAyNjQ1NTU1MTQ4OTJkNzdhZjljMTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugZM7m8ELnqlSOeyJEk2JyDj0epy jTUj9FY+ggwSJ6DIAqWo+bRqE1llPeGYEFLaa7yEMWOd4Tw4H/u1ka5+kLCjKLVM Z1sbXT/hbNPXBOJqIOHHHgKlwBWvCD76d0ME7sZ3FaRfvGPGhKcOzaqv6ufC/tLq HHvk08HRHFpKaJZt4de9lI8n9heZY0ODYW6taN07Pt2lHnbxVtlbD2erQ8PhfCcN /2+cSy3jT6OheiLDf855bJ95vE+8i9CbN/y184y89kLMyU5Cls4jyKiHSyYYLcRF cHhxQ2z2aUwIKlSvQptNGW0aVSm15Ughn3wEjuoyzErunqw+63gdxY+yqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIoKkJSKtq/mACZFVVFIktd6+cEaMB8GA1UdIwQY MBaAFKeu5nYg2cCuY9KVeFydlW8GPCHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYmEyNWEtMGFiZC00NTUwLWJjYTQt MGI3ZjE1YjUwOWNiLzEvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8yYmEyNWEtMGFiZC00NTUwLWJjYTQtMGI3ZjE1YjUwOWNi LzEvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHUydEyA vvjMJkVTAFfc1HaLsq6ERuNWp64MqedIJoeLeAnxlbjrd6W8dC2siWcw3p3jwNiU K101mERtxuy2GIMUgWF6r/A3GeTyq3n4yO1YcHBHZKr81498qRnIjWHFYm74qNa4 7ZXIHHU18aVgQbJB11wvsYmjR+wlXrF71Rl6eEVxd6sTXdPxVSK4cjnOw0o5bPQW Aw6vKP0ytlRqFnxQJET+xcmgjGYU11n0iGFx3pu5dYM9W3GwLOk/fjZ2B0WlCVGW wXEHCTYNgSysWZeuToQ/Pe3nfN6MP/aRPjG7qwrnuwYio4Jx6+PxXK168u6g83Na R7obmEUbzgOasw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:15 2026 by rpki-client