This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft File: 48hcN60lJ0xxLCRHPgeK3Ocywd0.mft (raw, json) Hash identifier: hWvL3b7rZtD3ozWT0hbf1WiI52aBW2dW5zv9BqYHJ4E= Subject key identifier: A9:28:10:91:2B:64:83:02:09:20:67:7A:58:C4:62:04:D1:4F:1D:CA Authority key identifier: E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD Certificate issuer: /CN=e3c85c37ad25274c712c24473e078adce732c1dd Certificate serial: 019BF5ABC48FB591AAF80724242C10C15C43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 15:00:33 +0000 Manifest this update: Sun 25 Jan 2026 15:00:33 +0000 Manifest next update: Mon 26 Jan 2026 15:00:33 +0000 Files and hashes: 1: 48hcN60lJ0xxLCRHPgeK3Ocywd0.crl (hash: DN1h50d0BBL/+c4k7Qupc6OI6TOeE5oX5hBgXYmIRRE=) 2: Bh71MIA76HLsWqh-KULy4KIN5yE.roa (hash: 2dPXwrTJcmE8t9PcfYM/2V6FylW3n+nURaEmxVQppFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:c4:8f:b5:91:aa:f8:07:24:24:2c:10:c1:5c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3c85c37ad25274c712c24473e078adce732c1dd Validity Not Before: Jan 25 15:00:33 2026 GMT Not After : Jan 26 15:00:33 2026 GMT Subject: CN=a92810912b6483020920677a58c46204d14f1dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:be:a6:f1:31:47:42:e8:04:3f:55:bb:c6:d0: 60:ac:64:04:d9:1c:9b:19:bd:9f:a7:b7:ce:b0:05: 2d:2b:22:93:c4:e2:ec:07:95:9f:e8:5c:d0:34:79: ec:26:89:8c:91:6e:52:c6:48:b1:7c:47:c1:7e:89: 66:0e:8d:b1:77:e1:a9:be:cc:97:db:a1:d2:30:0b: b9:a9:7b:16:d8:09:16:2d:0f:ca:b8:0f:26:1e:15: e2:4d:60:19:93:2a:3d:0d:3b:57:ac:f9:76:be:ba: c7:56:8c:c2:33:d9:b4:e5:df:b9:24:07:62:94:de: b5:da:ff:2f:9a:22:be:63:ce:99:bf:fe:ef:20:40: 2f:5f:e7:8d:90:ca:8a:d2:c0:f8:3d:80:56:e6:e4: fb:d3:ce:ed:e5:62:17:a8:1a:ed:5f:3d:90:ee:e2: 10:26:b6:5d:32:68:58:31:b2:0e:61:ff:95:8b:3e: c2:41:a2:df:73:b8:71:4b:10:46:71:85:c7:33:6b: 13:01:f8:14:07:30:de:1e:7b:86:ec:e8:92:35:5b: cb:87:58:9a:7c:4c:cc:6f:c5:51:ce:2e:23:52:0a: f3:07:df:9d:c9:06:62:da:60:9e:35:ad:eb:cc:a2: 16:8f:45:65:bc:3f:46:db:b6:5f:8b:10:72:b7:6c: 0c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:28:10:91:2B:64:83:02:09:20:67:7A:58:C4:62:04:D1:4F:1D:CA X509v3 Authority Key Identifier: keyid:E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:85:c6:d1:44:2e:be:47:77:64:8d:d4:21:89:ad:2d:a8:d8: ea:6d:3c:be:25:61:7a:4c:b9:57:5e:85:07:bf:cf:dc:88:03: 7a:e9:bc:2a:88:20:d5:af:60:d5:c4:b2:26:3a:62:c1:bc:43: a0:95:0e:6a:af:ef:ef:05:01:b7:9b:9d:d6:03:38:78:b9:df: 78:66:99:84:4a:1c:b9:9b:fc:7c:b8:74:5e:54:c3:24:45:eb: c4:bd:71:55:97:a0:8c:c9:da:64:f1:14:bc:ff:16:ac:40:c2: 11:46:9b:79:bc:7c:8b:b2:63:72:b2:c7:ee:8f:c7:d6:b1:21: 77:e9:ec:3a:db:a0:b7:39:69:15:6c:f5:55:19:ef:56:54:7a: b8:e4:89:44:09:45:7a:cd:3d:3b:b3:e8:e1:39:1c:8e:1c:09: 7f:41:bc:ff:97:75:55:60:aa:9d:2d:59:6c:7f:5c:d3:8a:39: c5:9a:01:ca:8f:5e:c9:85:a1:05:17:0d:4e:19:f2:d0:c2:4a: 01:09:48:1f:2a:69:d1:2c:a0:cb:a7:27:9c:a4:46:7b:c8:b2: 82:5b:1c:06:2d:8d:3f:3f:7e:98:57:6b:94:11:24:ac:ec:a7: 85:32:32:3e:53:6a:6d:fb:ad:d4:37:ce:1f:39:fb:53:2a:a3: fc:30:3d:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q8SPtZGq+AckJCwQwVxDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYzg1YzM3YWQyNTI3NGM3MTJjMjQ0NzNlMDc4YWRjZTcz MmMxZGQwHhcNMjYwMTI1MTUwMDMzWhcNMjYwMTI2MTUwMDMzWjAzMTEwLwYDVQQD EyhhOTI4MTA5MTJiNjQ4MzAyMDkyMDY3N2E1OGM0NjIwNGQxNGYxZGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL6m8TFHQugEP1W7xtBgrGQE2Ryb Gb2fp7fOsAUtKyKTxOLsB5Wf6FzQNHnsJomMkW5SxkixfEfBfolmDo2xd+GpvsyX 26HSMAu5qXsW2AkWLQ/KuA8mHhXiTWAZkyo9DTtXrPl2vrrHVozCM9m05d+5JAdi lN612v8vmiK+Y86Zv/7vIEAvX+eNkMqK0sD4PYBW5uT7087t5WIXqBrtXz2Q7uIQ JrZdMmhYMbIOYf+Viz7CQaLfc7hxSxBGcYXHM2sTAfgUBzDeHnuG7OiSNVvLh1ia fEzMb8VRzi4jUgrzB9+dyQZi2mCeNa3rzKIWj0VlvD9G27ZfixByt2wMNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkoEJErZIMCCSBneljEYgTRTx3KMB8GA1UdIwQY MBaAFOPIXDetJSdMcSwkRz4HitznMsHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjc1NmEtMWJjMC00OTM4LTgwMTUt ZGNlM2ZhM2ZiYWU5LzEvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9jNjc1NmEtMWJjMC00OTM4LTgwMTUtZGNlM2ZhM2ZiYWU5 LzEvNDhoY042MGxKMHh4TENSSFBnZUszT2N5d2QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzIXG0UQu vkd3ZI3UIYmtLajY6m08viVheky5V16FB7/P3IgDeum8Kogg1a9g1cSyJjpiwbxD oJUOaq/v7wUBt5ud1gM4eLnfeGaZhEocuZv8fLh0XlTDJEXrxL1xVZegjMnaZPEU vP8WrEDCEUabebx8i7JjcrLH7o/H1rEhd+nsOtugtzlpFWz1VRnvVlR6uOSJRAlF es09O7Po4TkcjhwJf0G8/5d1VWCqnS1ZbH9c04o5xZoByo9eyYWhBRcNThny0MJK AQlIHypp0Sygy6cnnKRGe8iyglscBi2NPz9+mFdrlBEkrOynhTIyPlNqbfut1DfO Hzn7Uyqj/DA9bQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:12:29 2026 by rpki-client