This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json) Hash identifier: ZCqnCNO2m1dYPU+fYtDqYJJIPjs9yo0EWsMXjLSejyM= Subject key identifier: 38:4D:37:73:46:25:FE:10:32:E3:A3:2F:03:60:46:88:0F:B5:A3:75 Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a Certificate serial: 019BF8E412E075C69F93E2BDFF3AA1658080 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft Manifest number: 03F2 Signing time: Mon 26 Jan 2026 06:00:55 +0000 Manifest this update: Mon 26 Jan 2026 06:00:55 +0000 Manifest next update: Tue 27 Jan 2026 06:00:55 +0000 Files and hashes: 1: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: WydjStIw72LBmM5h8Vt59Fs7C/bmozxRx39QvbywJkY=) 2: kiTvl7qRwBbY6cobkK0xpr1YwKU.roa (hash: ej/OHpg3lUXGkRe1UvCRILNoIypuMG3kknoqujS4cxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:12:e0:75:c6:9f:93:e2:bd:ff:3a:a1:65:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a Validity Not Before: Jan 26 06:00:55 2026 GMT Not After : Jan 27 06:00:55 2026 GMT Subject: CN=384d37734625fe1032e3a32f036046880fb5a375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ac:d0:c3:a5:b9:8f:de:68:45:d8:73:73:7b: d4:84:b0:e2:20:12:cf:1e:a3:be:34:36:f3:7a:e8: 43:68:fb:71:93:ac:3a:62:b2:85:f8:ba:76:6e:6a: f1:df:eb:c6:39:6c:e7:89:39:d9:b1:71:dc:d9:b6: 69:ab:0b:23:11:06:3b:ec:93:1b:70:07:fa:47:08: e1:d8:28:f0:f3:6f:5f:e9:1e:dd:39:82:b9:85:08: 1f:46:31:65:3e:07:c1:d6:0f:63:5a:5a:0b:a0:fa: 25:20:b3:46:76:2a:5d:95:28:90:b2:a7:34:c6:9e: 32:63:9a:2c:87:69:d5:0d:da:f3:42:3b:1b:48:7a: 00:2f:cb:ac:7c:a1:c1:cb:bc:db:7f:67:63:2b:d5: ed:1a:b9:57:78:b2:83:9b:69:52:2a:8c:e4:02:65: 98:aa:cb:98:16:d4:06:bf:13:52:78:9b:56:fe:0a: 2e:a0:37:db:4f:b6:84:f4:10:95:08:88:08:79:c3: 71:71:35:3a:e6:48:15:c6:e4:33:4c:8a:6f:98:f9: a0:5e:02:7d:ca:ce:42:64:bf:78:f7:8c:12:c5:ed: 9b:30:26:4f:ff:70:a8:37:6b:e2:d0:a6:9f:5f:6d: 24:04:16:94:91:0f:82:5a:9d:8a:f4:88:9a:92:7b: 8a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4D:37:73:46:25:FE:10:32:E3:A3:2F:03:60:46:88:0F:B5:A3:75 X509v3 Authority Key Identifier: keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:c0:c1:da:ae:ed:36:83:2a:dd:3e:63:b2:22:32:88:90:db: ae:b7:fa:83:2d:03:07:a4:d4:9b:15:4f:07:bf:10:e3:42:b7: f4:56:ee:40:9b:b4:3f:6e:a0:6c:e2:e9:d7:51:fd:71:a0:2b: 38:d9:52:73:9e:87:6d:34:a6:be:a0:16:10:21:52:ea:5b:2f: 01:de:fe:5f:1a:8f:e4:cf:53:e6:f9:0c:41:ce:cb:65:9e:94: ca:6f:da:bd:07:5f:52:d4:91:f2:a0:b1:a1:85:68:2b:e5:13: f5:a3:35:2c:72:43:f7:b2:0c:5f:d7:8b:3c:34:60:9b:66:f2: 08:52:1b:d5:a5:83:a6:65:c6:69:62:fd:c5:3f:99:19:7a:dd: 7e:e9:65:9b:a1:02:cc:96:17:d6:5e:7e:ec:18:3b:98:40:99: fc:c5:ce:13:7f:b7:06:54:13:cf:b9:14:3c:50:4a:a6:14:96: 92:a0:43:ee:dc:25:69:3f:db:e3:a2:25:26:36:17:5f:73:ba: cb:dd:21:69:de:e6:0b:93:d4:01:f4:04:7a:ab:44:4a:6c:95: 17:32:47:7c:6e:79:c1:30:3b:48:54:46:1e:b8:51:8f:50:a0: b5:26:a6:96:d3:d1:6b:ea:e2:6b:f0:ce:2b:ae:9e:f7:04:1a: 6e:ef:86:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45BLgdcafk+K9/zqhZYCAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmY2Q2NGVhZjI1OTQ4MjJmM2Y5YTJlYmNkMTlkYjliN2Zh NzBkOWEwHhcNMjYwMTI2MDYwMDU1WhcNMjYwMTI3MDYwMDU1WjAzMTEwLwYDVQQD EygzODRkMzc3MzQ2MjVmZTEwMzJlM2EzMmYwMzYwNDY4ODBmYjVhMzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqzQw6W5j95oRdhzc3vUhLDiIBLP HqO+NDbzeuhDaPtxk6w6YrKF+Lp2bmrx3+vGOWzniTnZsXHc2bZpqwsjEQY77JMb cAf6Rwjh2Cjw829f6R7dOYK5hQgfRjFlPgfB1g9jWloLoPolILNGdipdlSiQsqc0 xp4yY5osh2nVDdrzQjsbSHoAL8usfKHBy7zbf2djK9XtGrlXeLKDm2lSKozkAmWY qsuYFtQGvxNSeJtW/gouoDfbT7aE9BCVCIgIecNxcTU65kgVxuQzTIpvmPmgXgJ9 ys5CZL9494wSxe2bMCZP/3CoN2vi0KafX20kBBaUkQ+CWp2K9IiaknuKuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhNN3NGJf4QMuOjLwNgRogPtaN1MB8GA1UdIwQY MBaAFA/NZOryWUgi8/mi680Z25t/pw2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wZTY1NDItM2FiZS00NWExLWE4Mzgt MWEzN2YxMDc2NTU3LzEvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8wZTY1NDItM2FiZS00NWExLWE4MzgtMWEzN2YxMDc2NTU3 LzEvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZsDB2q7t NoMq3T5jsiIyiJDbrrf6gy0DB6TUmxVPB78Q40K39FbuQJu0P26gbOLp11H9caAr ONlSc56HbTSmvqAWECFS6lsvAd7+XxqP5M9T5vkMQc7LZZ6Uym/avQdfUtSR8qCx oYVoK+UT9aM1LHJD97IMX9eLPDRgm2byCFIb1aWDpmXGaWL9xT+ZGXrdfullm6EC zJYX1l5+7Bg7mECZ/MXOE3+3BlQTz7kUPFBKphSWkqBD7twlaT/b46IlJjYXX3O6 y90had7mC5PUAfQEeqtESmyVFzJHfG55wTA7SFRGHrhRj1CgtSamltPRa+ria/DO K66e9wQabu+Gxw== -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:33 2026 by rpki-client