This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft File: 0mF9FdtY_jBi0brb4E0wwZSd1f8.mft (raw, json) Hash identifier: Vu6hz2Py2gtPkaXa/+JO/zJdfgRhchrOAWrgEU+vJj0= Subject key identifier: 3A:42:92:25:57:E9:25:1C:7E:5B:96:A6:1D:B4:65:38:DE:ED:F1:8B Authority key identifier: D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF Certificate issuer: /CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff Certificate serial: 019BF5E3077B26F7CDABB75045E6EC77D08F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft Manifest number: 17E4 Signing time: Sun 25 Jan 2026 16:00:55 +0000 Manifest this update: Sun 25 Jan 2026 16:00:55 +0000 Manifest next update: Mon 26 Jan 2026 16:00:55 +0000 Files and hashes: 1: 0mF9FdtY_jBi0brb4E0wwZSd1f8.crl (hash: Ph8s166utiLhe6dcJXaFnTa6MotNLpfVoYWogH+Lcog=) 2: SoEs2uq-Lqa7VWg8JFQCPgrt2eI.roa (hash: NiDI43uxk76Y1iaXH3S9JcI5gdDit0xy1S3yktJNiKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:07:7b:26:f7:cd:ab:b7:50:45:e6:ec:77:d0:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff Validity Not Before: Jan 25 16:00:55 2026 GMT Not After : Jan 26 16:00:55 2026 GMT Subject: CN=3a42922557e9251c7e5b96a61db46538deedf18b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5c:25:0b:ee:cf:e5:7d:6c:c5:c0:65:df:83: c9:4e:38:c7:80:62:4c:96:45:21:3c:95:e6:1f:7f: ae:07:7e:57:4d:f7:7f:83:00:69:e9:39:43:fe:f9: ee:01:ff:31:a1:48:9c:a6:4d:74:be:4d:03:ff:45: 67:c6:d1:e9:2d:a2:29:22:bb:6d:a9:ec:1f:7f:18: d6:e3:ba:c5:bc:ba:42:a8:5d:eb:d0:fb:c1:3b:32: 16:88:64:61:fc:40:b4:ea:61:ad:c7:ef:b0:f9:9c: ce:aa:49:3f:61:5c:4a:ec:64:17:68:63:b5:ae:b2: 45:73:b9:59:cf:3c:ac:00:54:e6:f2:f0:bf:b1:8f: 23:f3:89:a5:98:9c:26:77:12:b1:20:bb:7a:f0:cd: 88:8c:d5:d6:90:65:e5:22:55:d4:43:c2:8c:a7:ad: 4b:64:cb:f1:aa:8c:16:af:49:14:36:4b:5b:4a:4e: 43:dd:df:24:d3:f4:c8:a3:15:9c:7a:7f:8f:ff:09: 0f:2f:89:6d:ae:58:f4:6a:16:dd:c4:e2:c7:5c:f6: e6:3d:86:0a:9d:dd:28:62:b3:77:b8:3f:26:04:34: fc:e6:0e:79:02:6f:02:f4:a7:ce:fe:49:f9:42:c9: 3e:81:22:e6:d9:34:73:21:22:12:ab:8c:af:07:2f: 97:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:42:92:25:57:E9:25:1C:7E:5B:96:A6:1D:B4:65:38:DE:ED:F1:8B X509v3 Authority Key Identifier: keyid:D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:8e:13:bf:63:aa:9e:28:f4:41:82:aa:cd:24:a1:52:7c:23: 11:35:26:a7:85:8c:e2:49:63:8d:f1:d3:f5:9d:fb:a8:1d:22: f5:37:9f:23:30:67:95:f4:be:d3:b0:5e:53:5d:ba:32:b7:6e: 7f:a4:b8:ff:d5:05:11:9f:a1:9d:e9:28:5a:ef:2c:51:4a:07: 58:b3:14:f3:58:d2:4e:c8:92:c0:10:0a:88:c3:ec:06:d5:cb: 7e:6b:df:e9:a9:b5:4b:70:f5:95:c1:fa:0a:06:f0:8f:36:7b: f9:84:87:45:05:c0:85:22:44:ac:8c:1e:dc:aa:6d:0a:b4:89: a5:92:6d:7d:32:07:52:7b:ed:0f:a6:88:41:d5:a1:bf:d3:90: f8:26:af:ed:e1:a7:cf:b6:c8:14:e8:19:a0:ec:50:cd:fd:25: f3:34:92:c6:c3:79:6c:d5:68:6a:d0:3c:9d:89:fd:b5:c4:7a: ee:64:b6:2f:5a:a1:c2:31:54:53:4c:06:1f:9a:67:0f:9e:79: 12:4c:24:1b:48:da:f2:50:34:9b:d9:1d:be:cf:c0:34:91:1e: cb:93:fe:0a:7c:21:42:97:06:b7:18:ea:12:a1:ff:46:b5:b7: 34:5e:d3:a3:cf:d0:51:a8:46:93:9c:39:ee:7d:0b:57:e9:98: 36:0c:76:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14wd7JvfNq7dQRebsd9CPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNjE3ZDE1ZGI1OGZlMzA2MmQxYmFkYmUwNGQzMGMxOTQ5 ZGQ1ZmYwHhcNMjYwMTI1MTYwMDU1WhcNMjYwMTI2MTYwMDU1WjAzMTEwLwYDVQQD EygzYTQyOTIyNTU3ZTkyNTFjN2U1Yjk2YTYxZGI0NjUzOGRlZWRmMThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VwlC+7P5X1sxcBl34PJTjjHgGJM lkUhPJXmH3+uB35XTfd/gwBp6TlD/vnuAf8xoUicpk10vk0D/0VnxtHpLaIpIrtt qewffxjW47rFvLpCqF3r0PvBOzIWiGRh/EC06mGtx++w+ZzOqkk/YVxK7GQXaGO1 rrJFc7lZzzysAFTm8vC/sY8j84mlmJwmdxKxILt68M2IjNXWkGXlIlXUQ8KMp61L ZMvxqowWr0kUNktbSk5D3d8k0/TIoxWcen+P/wkPL4ltrlj0ahbdxOLHXPbmPYYK nd0oYrN3uD8mBDT85g55Am8C9KfO/kn5Qsk+gSLm2TRzISISq4yvBy+XzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpCkiVX6SUcfluWph20ZTje7fGLMB8GA1UdIwQY MBaAFNJhfRXbWP4wYtG62+BNMMGUndX/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG1GOUZkdFlfakJpMGJyYjRFMHd3WlNkMWY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jYmNhMGItNjQ1My00OTRjLTg3Mjct NTdlMDhmNjFmMmVjLzEvMG1GOUZkdFlfakJpMGJyYjRFMHd3WlNkMWY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9jYmNhMGItNjQ1My00OTRjLTg3MjctNTdlMDhmNjFmMmVj LzEvMG1GOUZkdFlfakJpMGJyYjRFMHd3WlNkMWY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw44Tv2Oq nij0QYKqzSShUnwjETUmp4WM4kljjfHT9Z37qB0i9TefIzBnlfS+07BeU126Mrdu f6S4/9UFEZ+hnekoWu8sUUoHWLMU81jSTsiSwBAKiMPsBtXLfmvf6am1S3D1lcH6 CgbwjzZ7+YSHRQXAhSJErIwe3KptCrSJpZJtfTIHUnvtD6aIQdWhv9OQ+Cav7eGn z7bIFOgZoOxQzf0l8zSSxsN5bNVoatA8nYn9tcR67mS2L1qhwjFUU0wGH5pnD555 EkwkG0ja8lA0m9kdvs/ANJEey5P+CnwhQpcGtxjqEqH/RrW3NF7To8/QUahGk5w5 7n0LV+mYNgx2YQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:19:30 2026 by rpki-client