This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft File: 0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json) Hash identifier: N/8xrHivwXQC04OoTnT34PaCVLoBme2nsstXQNUe9vk= Subject key identifier: E9:49:92:E7:57:AD:84:F7:46:1F:C4:C8:A1:02:18:B5:7A:9E:69:E5 Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd Certificate serial: 019BF79A21AB19C5E5C646203DEE3C449E0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft Manifest number: 137F Signing time: Mon 26 Jan 2026 00:00:31 +0000 Manifest this update: Mon 26 Jan 2026 00:00:31 +0000 Manifest next update: Tue 27 Jan 2026 00:00:31 +0000 Files and hashes: 1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: d/MjbBTBTc0rCrcRzPvP9nmQV+AK9+VhknDKo94oCf4=) 2: 6AcW6a22cinoLIymW2byGAd7uWo.roa (hash: RoxEP6kBPzD8q8xHwCRknSTvIS7/SOyyVCFWMK8wKF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:21:ab:19:c5:e5:c6:46:20:3d:ee:3c:44:9e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd Validity Not Before: Jan 26 00:00:31 2026 GMT Not After : Jan 27 00:00:31 2026 GMT Subject: CN=e94992e757ad84f7461fc4c8a10218b57a9e69e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cf:8d:86:a0:48:f6:0e:d5:6d:2f:b6:ab:33: f0:e4:d7:5b:17:a3:02:c6:9e:b1:e1:e5:25:c6:72: 58:f3:e1:60:e6:7e:d4:ec:d9:6b:a6:f3:4d:5c:a9: 26:46:56:27:f0:8e:24:3e:79:3f:32:85:b2:8e:42: c5:1d:18:2f:0e:1e:58:ff:10:67:21:6d:cc:8b:8e: 62:63:69:86:d7:46:33:e1:2c:f4:e9:d9:6b:1d:0c: 73:52:da:2d:c1:02:2b:3e:57:86:ad:f1:7c:ed:47: 6a:2a:46:4b:7b:49:65:85:94:c0:3f:43:e4:f9:2a: 51:60:d9:b1:f5:70:ad:2a:a3:71:5f:3c:91:72:89: 84:f8:87:cd:30:8d:39:f0:38:26:ca:ad:10:3c:2c: 93:77:cf:b5:e9:00:57:6c:b8:0e:b7:a8:bf:fe:b1: b1:d4:b7:ba:cd:84:6b:5d:dc:d5:35:49:f2:25:07: 8f:0b:b3:0b:db:2f:3b:23:e8:be:1d:ca:e7:12:1c: 55:22:22:65:45:6f:2c:94:8a:74:f3:b4:0b:ac:81: 8d:c4:19:da:9b:d4:33:78:98:17:d2:58:da:bd:a2: bd:75:2c:99:c1:9c:b5:ca:d8:ed:a5:1b:0f:1b:4d: 89:26:24:95:28:7d:ef:be:62:9b:dc:c4:cb:d0:6b: 73:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:49:92:E7:57:AD:84:F7:46:1F:C4:C8:A1:02:18:B5:7A:9E:69:E5 X509v3 Authority Key Identifier: keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:07:cd:d4:7f:00:10:f5:98:86:6c:b7:1e:4d:a8:7b:e5:86: 3a:28:32:bf:53:e1:dc:3f:8c:56:b9:e5:a8:ca:ca:c3:33:40: be:98:fd:77:f5:c6:a0:35:7c:f7:19:c8:a5:77:51:b9:3e:92: 5e:d6:83:22:e1:e6:53:aa:d0:30:4d:56:01:1c:77:84:52:9a: ac:78:a5:94:5e:a6:c2:25:76:18:e5:aa:04:89:54:2c:64:12: 43:96:e7:87:fc:09:19:ac:c2:5f:bf:2d:5b:15:1f:d1:fb:df: 8b:80:0d:88:ca:22:84:29:0d:84:90:5e:3e:f4:88:66:2c:a0: 81:13:80:80:44:fa:62:79:f1:bc:f5:06:d8:0a:6a:08:1c:f9: d0:c7:cd:31:e2:c4:f6:78:b1:03:b7:04:ba:62:7e:5b:96:de: e8:fd:40:ae:3d:1c:ae:bc:62:7c:17:d7:66:e5:ce:28:19:76: 1a:fe:a7:eb:9a:bd:b9:ba:88:7d:88:44:59:be:73:cb:49:c2: 77:00:4d:1e:6a:b3:a7:c6:9b:a5:f6:0c:09:6f:01:70:0d:2e: e8:01:f1:aa:8c:fd:19:c2:97:e5:45:8f:f5:8e:73:ac:90:f4: e8:1c:f7:80:b7:4e:de:d3:6d:6c:23:e5:8c:ac:0e:4e:7c:fd: c7:96:26:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3miGrGcXlxkYgPe48RJ4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGUwN2ExYTFmNjViZDExNmUxMWY5ZjExMDg2MDRiNmU5 NWNjZmQwHhcNMjYwMTI2MDAwMDMxWhcNMjYwMTI3MDAwMDMxWjAzMTEwLwYDVQQD EyhlOTQ5OTJlNzU3YWQ4NGY3NDYxZmM0YzhhMTAyMThiNTdhOWU2OWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M+NhqBI9g7VbS+2qzPw5NdbF6MC xp6x4eUlxnJY8+Fg5n7U7NlrpvNNXKkmRlYn8I4kPnk/MoWyjkLFHRgvDh5Y/xBn IW3Mi45iY2mG10Yz4Sz06dlrHQxzUtotwQIrPleGrfF87UdqKkZLe0llhZTAP0Pk +SpRYNmx9XCtKqNxXzyRcomE+IfNMI058Dgmyq0QPCyTd8+16QBXbLgOt6i//rGx 1Le6zYRrXdzVNUnyJQePC7ML2y87I+i+HcrnEhxVIiJlRW8slIp087QLrIGNxBna m9QzeJgX0ljavaK9dSyZwZy1ytjtpRsPG02JJiSVKH3vvmKb3MTL0GtzjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlJkudXrYT3Rh/EyKECGLV6nmnlMB8GA1UdIwQY MBaAFNHeB6Gh9lvRFuEfnxEIYEtulcz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80OTYzZWMtNTc2Zi00MTY3LTk5M2Mt OTlmMTgyMjEzZDRmLzEvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy80OTYzZWMtNTc2Zi00MTY3LTk5M2MtOTlmMTgyMjEzZDRm LzEvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAugfN1H8A EPWYhmy3Hk2oe+WGOigyv1Ph3D+MVrnlqMrKwzNAvpj9d/XGoDV89xnIpXdRuT6S XtaDIuHmU6rQME1WARx3hFKarHillF6mwiV2GOWqBIlULGQSQ5bnh/wJGazCX78t WxUf0fvfi4ANiMoihCkNhJBePvSIZiyggROAgET6YnnxvPUG2ApqCBz50MfNMeLE 9nixA7cEumJ+W5be6P1Arj0crrxifBfXZuXOKBl2Gv6n65q9ubqIfYhEWb5zy0nC dwBNHmqzp8abpfYMCW8BcA0u6AHxqoz9GcKX5UWP9Y5zrJD06Bz3gLdO3tNtbCPl jKwOTnz9x5Ym8A== -----END CERTIFICATE-----Generated at Mon Jan 26 06:07:28 2026 by rpki-client