This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft File: p0j74dfTpqpHTeQ_qIXOLQkcUps.mft (raw, json) Hash identifier: gC6DZa+U3X+ZMT5d8fJaPgtAqa60zOqvqXAKmJLRq4E= Subject key identifier: 57:2A:CC:51:4A:32:C1:1D:EA:87:E6:8F:01:6F:08:EC:8A:E0:AF:C1 Authority key identifier: A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B Certificate issuer: /CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b Certificate serial: 019BF79A7644A3983C4371243937F11623C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft Manifest number: 153B Signing time: Mon 26 Jan 2026 00:00:53 +0000 Manifest this update: Mon 26 Jan 2026 00:00:53 +0000 Manifest next update: Tue 27 Jan 2026 00:00:53 +0000 Files and hashes: 1: X2Acde_AXJbiIzf4WSQxKTMikWM.roa (hash: BQtrWQacm7ByC/7TCno2qFJsSN/6VxyfhO1qrX07bW4=) 2: p0j74dfTpqpHTeQ_qIXOLQkcUps.crl (hash: sVeKpNDKyIfjGZtghhdSAEkgMn+SXU9yUMHmhz3fh7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:76:44:a3:98:3c:43:71:24:39:37:f1:16:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b Validity Not Before: Jan 26 00:00:53 2026 GMT Not After : Jan 27 00:00:53 2026 GMT Subject: CN=572acc514a32c11dea87e68f016f08ec8ae0afc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f5:be:3e:98:ba:b9:6c:4a:4c:e6:9b:d1:e1: 3d:86:15:c5:39:97:fa:9c:7d:73:fe:44:d3:94:4f: 53:d2:a5:be:3b:14:6c:16:33:a1:08:fc:4b:b1:34: bd:be:5b:86:27:3c:93:d6:a5:ce:22:69:be:8d:bf: 54:e8:43:c6:6f:c5:b2:93:b7:9f:36:f3:b9:2f:8b: 35:d8:63:f4:f9:8a:ae:ae:21:94:e5:fb:cf:a0:34: c4:bc:ef:25:90:ec:45:60:b9:cc:36:12:bd:29:65: c2:4f:c6:cc:3b:8e:77:e0:0c:73:15:1b:c2:f8:f0: db:d8:0b:74:92:2d:5b:6b:d7:be:11:54:68:54:65: 0e:c3:4a:9e:ed:b8:79:48:9b:bf:5f:db:e4:1d:12: 81:c9:ae:8c:70:24:ac:e5:25:43:6b:64:c7:67:52: 60:64:b6:fc:1f:7d:24:b1:87:31:71:0e:46:5a:9b: de:77:ab:ba:9c:3f:69:be:f4:07:fa:4c:c8:d2:9c: 20:fe:ea:b3:1a:99:cb:9e:9d:1f:60:11:3f:e1:7b: 07:8c:7a:01:22:cb:e7:d1:fe:9a:5d:e3:f4:d3:d9: e7:bb:6f:a9:30:24:4f:f0:6c:be:81:d9:74:65:8c: ba:a9:1c:22:da:b5:ab:3c:4d:80:4b:99:fc:0c:3c: ef:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2A:CC:51:4A:32:C1:1D:EA:87:E6:8F:01:6F:08:EC:8A:E0:AF:C1 X509v3 Authority Key Identifier: keyid:A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:76:24:f1:cb:cc:2e:b5:b5:e6:fb:ec:eb:44:06:10:ee:ee: 0f:75:25:04:f3:74:f9:c4:29:93:28:19:d3:a5:2f:36:57:2c: 40:11:2d:49:4d:3c:1b:f2:74:60:ab:bb:81:a2:5d:1c:5f:33: bf:d0:db:7c:98:2b:76:03:f2:bb:38:23:c2:5b:72:3d:0f:f3: 1a:59:75:c0:32:b3:e3:45:08:73:04:01:a3:9b:b0:e4:16:f8: 36:31:25:bc:c7:73:27:16:25:86:4a:94:5e:1a:9d:86:72:36: 37:33:60:e9:17:db:04:de:37:a5:5f:c5:b9:41:87:b5:47:39: f5:c0:8d:bd:3d:89:d9:c6:b6:65:cc:44:f6:19:94:e3:d8:f0: 55:a4:5a:de:c4:c4:5a:5c:4d:cb:2d:15:5b:3d:02:72:71:ff: ef:64:60:c7:f9:57:cf:e1:b1:f8:aa:7d:96:04:55:34:b8:ab: 33:65:02:8f:f3:f7:27:5b:e9:a0:5e:ec:ad:f5:9a:35:99:c2: 84:3f:f2:ac:32:b9:ff:e7:17:f6:a5:bc:a1:c3:8d:78:fa:e5: cb:b5:60:18:92:4a:2e:7d:9f:ae:fd:01:66:0f:40:ce:c4:b1: 2a:6b:f7:08:32:1f:34:8b:9c:05:31:ae:18:a2:1a:1f:3a:42: 9f:6a:ad:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mnZEo5g8Q3EkOTfxFiPAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NDhmYmUxZDdkM2E2YWE0NzRkZTQzZmE4ODVjZTJkMDkx YzUyOWIwHhcNMjYwMTI2MDAwMDUzWhcNMjYwMTI3MDAwMDUzWjAzMTEwLwYDVQQD Eyg1NzJhY2M1MTRhMzJjMTFkZWE4N2U2OGYwMTZmMDhlYzhhZTBhZmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvW+Ppi6uWxKTOab0eE9hhXFOZf6 nH1z/kTTlE9T0qW+OxRsFjOhCPxLsTS9vluGJzyT1qXOImm+jb9U6EPGb8Wyk7ef NvO5L4s12GP0+YquriGU5fvPoDTEvO8lkOxFYLnMNhK9KWXCT8bMO4534AxzFRvC +PDb2At0ki1ba9e+EVRoVGUOw0qe7bh5SJu/X9vkHRKBya6McCSs5SVDa2THZ1Jg ZLb8H30ksYcxcQ5GWpved6u6nD9pvvQH+kzI0pwg/uqzGpnLnp0fYBE/4XsHjHoB Isvn0f6aXeP009nnu2+pMCRP8Gy+gdl0ZYy6qRwi2rWrPE2AS5n8DDzvywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcqzFFKMsEd6ofmjwFvCOyK4K/BMB8GA1UdIwQY MBaAFKdI++HX06aqR03kP6iFzi0JHFKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hNzIzZDgtZDhjYy00ZTYwLTg1YWIt NmM5YjVjOWJmYTc1LzEvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9hNzIzZDgtZDhjYy00ZTYwLTg1YWItNmM5YjVjOWJmYTc1 LzEvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHYk8cvM LrW15vvs60QGEO7uD3UlBPN0+cQpkygZ06UvNlcsQBEtSU08G/J0YKu7gaJdHF8z v9DbfJgrdgPyuzgjwltyPQ/zGll1wDKz40UIcwQBo5uw5Bb4NjElvMdzJxYlhkqU XhqdhnI2NzNg6RfbBN43pV/FuUGHtUc59cCNvT2J2ca2ZcxE9hmU49jwVaRa3sTE WlxNyy0VWz0CcnH/72Rgx/lXz+Gx+Kp9lgRVNLirM2UCj/P3J1vpoF7srfWaNZnC hD/yrDK5/+cX9qW8ocONePrly7VgGJJKLn2frv0BZg9AzsSxKmv3CDIfNIucBTGu GKIaHzpCn2qtIA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:44:49 2026 by rpki-client