This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft File: 2s4o8ixufkRLsKflKhUzuA3ueBg.mft (raw, json) Hash identifier: lH0af8U9HGb9you8s/vV1yTzczhCCFOnwcxmu+ALVpA= Subject key identifier: AB:B5:DD:31:85:2F:7A:08:B3:6F:3E:03:1C:4C:6F:90:D2:05:23:C4 Authority key identifier: DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18 Certificate issuer: /CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818 Certificate serial: 019BF50748400407CEE89D4F62217A5AC3D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft Manifest number: 0255 Signing time: Sun 25 Jan 2026 12:00:53 +0000 Manifest this update: Sun 25 Jan 2026 12:00:53 +0000 Manifest next update: Mon 26 Jan 2026 12:00:53 +0000 Files and hashes: 1: 2s4o8ixufkRLsKflKhUzuA3ueBg.crl (hash: rRTouhI7lSECS6j6CM+fygtDptZt13TUhuPpFHqVTLw=) 2: uzwRSecIzXXYWfgJfZsJeESUkdo.roa (hash: F/+k7rYQfNtdvgAZPkZ7IVUpCs68QRZv55pPhKsqLbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:48:40:04:07:ce:e8:9d:4f:62:21:7a:5a:c3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818 Validity Not Before: Jan 25 12:00:53 2026 GMT Not After : Jan 26 12:00:53 2026 GMT Subject: CN=abb5dd31852f7a08b36f3e031c4c6f90d20523c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d2:ab:b9:87:8f:0e:55:79:c9:75:a6:71:64: 0c:9b:ae:e9:80:36:62:30:03:e3:d9:e2:13:e1:a6: d0:8f:0c:79:3f:18:73:5f:0d:bf:de:70:85:d2:a6: 43:1a:3d:de:d1:c0:8a:c4:5d:26:5c:c1:e7:11:5e: 32:05:2a:d0:b0:36:89:92:8b:34:d1:f2:3c:be:d3: 50:e5:c9:4c:77:1d:39:7a:ce:b7:02:f1:38:b9:91: ae:6a:01:3d:2a:1e:6e:7a:1b:53:f2:a9:1e:9f:ad: 02:5b:ef:f6:d5:c0:1f:35:61:4f:b0:bc:6e:08:3b: f1:c7:d4:92:f5:c2:69:35:96:78:21:d1:34:3d:65: fd:01:2f:0a:b2:83:38:b0:e6:0a:15:60:69:be:ad: fa:f0:7d:89:f8:2a:2a:b1:9d:d5:5a:9f:28:c7:f3: 94:31:6a:ff:2b:b5:64:68:f4:e3:43:76:61:77:1d: 0a:a8:ef:0b:60:e9:eb:2d:36:1b:49:e3:47:da:35: 9f:3c:8b:55:b0:06:91:c4:9f:4f:9e:be:49:db:2f: 4f:1a:a7:92:3f:ea:ce:97:67:45:3f:21:36:69:2d: e6:d0:96:81:89:87:52:b3:b7:07:64:c9:c2:1f:9f: 3d:bf:b7:93:66:53:8b:d3:5b:aa:1d:89:5c:90:51: 50:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B5:DD:31:85:2F:7A:08:B3:6F:3E:03:1C:4C:6F:90:D2:05:23:C4 X509v3 Authority Key Identifier: keyid:DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:e0:8e:33:29:ac:7a:69:a6:94:f9:8d:41:7b:06:ad:5f:7d: 7a:0b:ce:c4:33:6d:75:2e:90:36:4b:22:9b:9a:f3:08:2a:b6: 24:63:23:47:1b:63:24:f2:db:c7:5a:28:6a:d7:d7:aa:55:ea: 0b:a3:fd:e0:56:9c:de:a0:7c:f6:82:c1:39:76:68:89:2f:b1: ff:c5:04:43:00:dc:5a:85:83:06:64:d5:c0:24:03:49:13:88: f7:50:d6:76:db:74:5b:e0:83:41:bc:7d:f6:69:e7:b6:49:57: 85:75:17:e8:f4:ea:43:8d:22:08:63:d8:3b:26:1a:75:62:55: c6:e6:6d:23:2a:d7:19:a2:1c:dc:ef:fd:66:b7:52:b8:2b:c9: 8b:82:35:94:2d:04:b9:22:62:95:58:a6:d4:fc:92:04:f5:9b: f2:93:d6:80:a9:0b:46:aa:26:97:38:72:e8:f9:b4:26:e5:84: 7e:eb:08:3f:93:56:11:c2:8c:bd:10:e4:27:79:46:51:2e:2e: 3c:f1:57:12:6a:e6:b5:b0:78:8f:9c:23:dc:d8:ae:74:9b:45: 5d:05:19:90:be:25:6a:59:d6:00:7b:43:70:23:e2:cf:0a:f4: a6:5c:df:ab:8e:f3:ea:c1:c4:81:c1:b4:23:87:16:44:60:49: af:a5:ea:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B0hABAfO6J1PYiF6WsPQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhY2UyOGYyMmM2ZTdlNDQ0YmIwYTdlNTJhMTUzM2I4MGRl ZTc4MTgwHhcNMjYwMTI1MTIwMDUzWhcNMjYwMTI2MTIwMDUzWjAzMTEwLwYDVQQD EyhhYmI1ZGQzMTg1MmY3YTA4YjM2ZjNlMDMxYzRjNmY5MGQyMDUyM2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dKruYePDlV5yXWmcWQMm67pgDZi MAPj2eIT4abQjwx5PxhzXw2/3nCF0qZDGj3e0cCKxF0mXMHnEV4yBSrQsDaJkos0 0fI8vtNQ5clMdx05es63AvE4uZGuagE9Kh5uehtT8qken60CW+/21cAfNWFPsLxu CDvxx9SS9cJpNZZ4IdE0PWX9AS8KsoM4sOYKFWBpvq368H2J+CoqsZ3VWp8ox/OU MWr/K7VkaPTjQ3Zhdx0KqO8LYOnrLTYbSeNH2jWfPItVsAaRxJ9Pnr5J2y9PGqeS P+rOl2dFPyE2aS3m0JaBiYdSs7cHZMnCH589v7eTZlOL01uqHYlckFFQMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKu13TGFL3oIs28+AxxMb5DSBSPEMB8GA1UdIwQY MBaAFNrOKPIsbn5ES7Cn5SoVM7gN7ngYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnM0bzhpeHVma1JMc0tmbEtoVXp1QTN1ZUJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hOTZjOWMtYjg1NS00ZmRhLWE1Zjct NzVjOWIyNDc4ZTNlLzEvMnM0bzhpeHVma1JMc0tmbEtoVXp1QTN1ZUJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hOTZjOWMtYjg1NS00ZmRhLWE1ZjctNzVjOWIyNDc4ZTNl LzEvMnM0bzhpeHVma1JMc0tmbEtoVXp1QTN1ZUJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWOCOMyms emmmlPmNQXsGrV99egvOxDNtdS6QNksim5rzCCq2JGMjRxtjJPLbx1ooatfXqlXq C6P94Fac3qB89oLBOXZoiS+x/8UEQwDcWoWDBmTVwCQDSROI91DWdtt0W+CDQbx9 9mnntklXhXUX6PTqQ40iCGPYOyYadWJVxuZtIyrXGaIc3O/9ZrdSuCvJi4I1lC0E uSJilVim1PySBPWb8pPWgKkLRqomlzhy6Pm0JuWEfusIP5NWEcKMvRDkJ3lGUS4u PPFXEmrmtbB4j5wj3NiudJtFXQUZkL4lalnWAHtDcCPizwr0plzfq47z6sHEgcG0 I4cWRGBJr6XqzQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:44:46 2026 by rpki-client