This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft File: 2e_p029fiP3wR0LEFAx1MgkKt3A.mft (raw, json) Hash identifier: d6U0K7rh89CvzPLoQvxkAUP98S9jJf2oQLEZSBrCaJI= Subject key identifier: E8:D6:43:47:9C:B2:76:41:E4:39:01:18:C8:E8:1A:DB:80:D8:18:BC Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70 Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770 Certificate serial: 019BF53E225DAD28137A581323E69878AB32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft Manifest number: 0F3E Signing time: Sun 25 Jan 2026 13:00:48 +0000 Manifest this update: Sun 25 Jan 2026 13:00:48 +0000 Manifest next update: Mon 26 Jan 2026 13:00:48 +0000 Files and hashes: 1: 1Szjzw2KvVCy0V1IKnCQlhzw36U.roa (hash: 0vNmVEVumOksaePQAHWYBW9xdfQM3+N4dhZcAektxxA=) 2: 2Ijce7koIphf5jpD6dtt4ux1VIs.roa (hash: xXW3d8652og82PwcjTeZHa3yQuYtriDzUNEHcVL0bY4=) 3: 2e_p029fiP3wR0LEFAx1MgkKt3A.crl (hash: DLG5mlOSKJoAg/FEyk+qLRm4/s+0CRSsm+nB0vC2z0E=) 4: bsYgzcPZezJ2gYbc8PKOspEFG4c.roa (hash: MpgIeeEXTiyIocenUfFnFL+sMDiBogWiOdN5+ESRb/E=) 5: e-YXzSqo-diMNWfq4Z-TzhdMAKc.roa (hash: oC+ocV09AXnxKxFBaBEAaFvyphxKhACRBYHFRB7YC5U=) 6: g6sf18n3xZl1TALCvAHdOtQxRg4.roa (hash: xF4qc4vWFwiPiBXPNEqALg9dNoI0YkOYJ4CNgjIGAJ4=) 7: jZ-HAFHoEaDuBKep-75Ui8JNmsU.roa (hash: FONWYkgA1dLto5X/Omv5HI8QNgMouzq0GwMPGBqkdRM=) 8: zyd8uSkjKcRLHzmFPeh-k40bdgw.roa (hash: Z+xUSGJvLfcezS9srOZIqvbsKOYqYqGNXUZ1rB4SeYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:22:5d:ad:28:13:7a:58:13:23:e6:98:78:ab:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770 Validity Not Before: Jan 25 13:00:48 2026 GMT Not After : Jan 26 13:00:48 2026 GMT Subject: CN=e8d643479cb27641e4390118c8e81adb80d818bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:50:75:65:fa:f8:c5:e6:93:3a:5b:95:41:9a: 17:f6:2d:37:0e:cc:59:f3:29:d9:3c:0e:dc:0f:1f: fb:6c:02:47:49:31:e5:1a:e7:2f:b4:52:b9:79:d8: fe:39:4b:12:83:dc:da:3f:df:db:ae:13:2c:ff:95: b1:05:51:b3:a7:c4:84:3e:cd:5f:39:f6:81:a1:68: 5a:b2:29:61:81:0a:34:d7:7d:0a:f4:0a:4f:2c:2c: ca:fa:4e:f4:cc:64:4b:a8:dd:58:4a:61:f5:c8:c3: 36:f6:2f:a9:b6:1b:03:7c:76:7f:52:e4:f6:4c:b4: 50:5a:27:11:5c:20:82:47:d8:32:5a:cd:bb:ec:6b: de:de:77:81:20:c9:23:88:4c:89:ba:10:b5:b4:04: de:e0:e2:03:d3:58:72:b9:5e:51:ca:29:09:df:97: 73:be:d8:26:06:e9:ec:85:90:c4:7d:d2:4b:ff:fd: 83:db:f3:2e:40:59:0c:03:74:69:be:29:b8:8f:c4: 87:8c:b7:ee:a7:59:03:46:fe:4a:93:02:0d:4f:78: 87:af:a0:91:1f:3c:f2:c4:2a:95:6d:b7:10:e0:bc: 27:f6:25:f8:be:00:39:20:2c:bb:1e:a9:a9:0e:7c: e7:7a:23:b3:47:4a:c9:7d:19:4a:78:66:21:23:17: fb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D6:43:47:9C:B2:76:41:E4:39:01:18:C8:E8:1A:DB:80:D8:18:BC X509v3 Authority Key Identifier: keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b0:e7:c7:32:6d:51:e9:13:69:49:62:23:e2:52:83:4a:0f: b8:f4:ac:f0:10:2f:2f:1c:40:9a:b8:6d:82:33:0e:8b:b2:9f: 7f:b8:c6:e4:e9:7f:97:b1:72:8c:1b:98:5b:46:7b:fd:a2:20: 0f:f0:f8:3d:b7:86:61:5d:ef:22:1c:e2:e0:2d:2d:2a:73:9c: 79:60:d9:3d:56:6e:6d:f1:03:1f:4f:f3:c5:e0:6f:0e:23:88: 6d:6b:57:f4:e6:4f:aa:6f:34:83:c3:81:33:ed:06:5d:dc:34: 54:1a:9b:1e:f4:5c:01:92:f1:ac:fb:32:4b:27:e3:45:2a:43: b6:0b:1c:7b:28:1f:8e:ce:d4:9c:43:3b:da:83:42:fd:4b:fc: e4:8c:67:a1:ac:77:9f:ac:32:81:dd:20:7f:ad:de:3e:61:e8: e1:81:5f:04:e0:81:fa:c4:5a:bf:d0:09:3b:5d:36:30:c4:ae: 6f:0e:9f:fe:c0:e7:b0:ad:ae:8c:91:09:43:68:fd:7e:de:10: 0e:bc:15:87:93:b4:fe:2f:b4:d3:ca:21:28:7d:12:c2:dd:51: e6:4b:34:15:57:aa:c5:d6:4e:f5:e1:a5:a7:9e:47:a6:23:17: 12:f2:cc:f6:1f:b2:86:a0:96:24:ad:d0:c7:42:e5:c6:e0:b2: 19:b5:71:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PiJdrSgTelgTI+aYeKsyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZWZlOWQzNmY1Zjg4ZmRmMDQ3NDJjNDE0MGM3NTMyMDkw YWI3NzAwHhcNMjYwMTI1MTMwMDQ4WhcNMjYwMTI2MTMwMDQ4WjAzMTEwLwYDVQQD EyhlOGQ2NDM0NzljYjI3NjQxZTQzOTAxMThjOGU4MWFkYjgwZDgxOGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1B1Zfr4xeaTOluVQZoX9i03DsxZ 8ynZPA7cDx/7bAJHSTHlGucvtFK5edj+OUsSg9zaP9/brhMs/5WxBVGzp8SEPs1f OfaBoWhasilhgQo0130K9ApPLCzK+k70zGRLqN1YSmH1yMM29i+pthsDfHZ/UuT2 TLRQWicRXCCCR9gyWs277Gve3neBIMkjiEyJuhC1tATe4OID01hyuV5RyikJ35dz vtgmBunshZDEfdJL//2D2/MuQFkMA3Rpvim4j8SHjLfup1kDRv5KkwINT3iHr6CR HzzyxCqVbbcQ4Lwn9iX4vgA5ICy7HqmpDnzneiOzR0rJfRlKeGYhIxf7vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjWQ0ecsnZB5DkBGMjoGtuA2Bi8MB8GA1UdIwQY MBaAFNnv6dNvX4j98EdCxBQMdTIJCrdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1Yzkt MzlmNmQ2NDI1MzM4LzEvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1YzktMzlmNmQ2NDI1MzM4 LzEvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrDnxzJt UekTaUliI+JSg0oPuPSs8BAvLxxAmrhtgjMOi7Kff7jG5Ol/l7FyjBuYW0Z7/aIg D/D4PbeGYV3vIhzi4C0tKnOceWDZPVZubfEDH0/zxeBvDiOIbWtX9OZPqm80g8OB M+0GXdw0VBqbHvRcAZLxrPsySyfjRSpDtgsceygfjs7UnEM72oNC/Uv85Ixnoax3 n6wygd0gf63ePmHo4YFfBOCB+sRav9AJO102MMSubw6f/sDnsK2ujJEJQ2j9ft4Q DrwVh5O0/i+008ohKH0Swt1R5ks0FVeqxdZO9eGlp55HpiMXEvLM9h+yhqCWJK3Q x0LlxuCyGbVxfA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:38:06 2026 by rpki-client