This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft File: V2cFtVe4IwhralMjJL-7o2mVyxw.mft (raw, json) Hash identifier: qmGk0/zBSFfimsHSdx9HFEMvWIwqd7gJYvIjM5+twxM= Subject key identifier: 4F:C9:52:6D:24:8A:0A:80:57:7E:95:99:FE:5A:F4:BC:B1:BA:67:F2 Authority key identifier: 57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C Certificate issuer: /CN=576705b557b823086b6a532324bfbba36995cb1c Certificate serial: 019BF462C81A6857747B17A4C024BA44EA23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft Manifest number: 0514 Signing time: Sun 25 Jan 2026 09:01:13 +0000 Manifest this update: Sun 25 Jan 2026 09:01:13 +0000 Manifest next update: Mon 26 Jan 2026 09:01:13 +0000 Files and hashes: 1: V2cFtVe4IwhralMjJL-7o2mVyxw.crl (hash: iavoh1CaJyhWH8Bdhk8ummZafuH8KslxDEZ4+bnBllw=) 2: sU0CnD7fmFimr_rcXy1fRdF4mlw.roa (hash: /IZQqNWdeef3TByRifZMyHdV5Oe4U72Qr/QHSSpfxeY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:c8:1a:68:57:74:7b:17:a4:c0:24:ba:44:ea:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=576705b557b823086b6a532324bfbba36995cb1c Validity Not Before: Jan 25 09:01:13 2026 GMT Not After : Jan 26 09:01:13 2026 GMT Subject: CN=4fc9526d248a0a80577e9599fe5af4bcb1ba67f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b4:18:65:f4:76:3d:b4:44:20:03:83:f4:47: b3:ab:e5:e8:f7:47:08:a2:03:78:d5:f7:62:9f:37: 69:26:dc:0e:6d:e0:62:96:ae:20:7a:27:a1:9f:d0: 00:69:c7:02:a9:f7:91:92:6e:94:83:37:6a:c5:c3: b9:c7:0b:00:2e:7a:b7:e6:62:bc:d8:89:c6:2a:10: 12:d9:5e:0b:a1:d9:d2:50:f3:18:97:5c:6a:88:a1: 4e:85:89:4a:54:b9:09:e9:fc:ad:93:40:79:35:1b: f4:53:85:bd:2e:68:a6:3d:11:a7:2f:86:92:03:9f: 65:e3:ac:24:15:e9:0d:7a:ad:7e:f9:d1:68:20:ec: f2:2d:8d:a6:d6:e0:50:e4:45:4e:04:6f:d7:34:45: aa:f6:0e:9d:af:0b:84:e9:04:15:e3:8b:97:79:4a: b7:31:ed:f6:f2:69:06:a8:b4:cd:15:50:bb:79:d3: 8f:80:4e:9a:fd:dc:42:e9:0c:5a:e6:2f:a7:0c:ef: cf:82:e2:ff:38:26:fe:65:8e:da:aa:e3:6c:17:a6: ee:e0:a5:92:63:f3:54:63:d6:e5:32:3b:34:07:72: 18:6d:ca:bb:44:55:4a:df:32:37:3b:2b:4c:52:3c: 26:41:34:09:bd:0c:59:0e:db:7c:f5:b5:19:ae:c0: d3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C9:52:6D:24:8A:0A:80:57:7E:95:99:FE:5A:F4:BC:B1:BA:67:F2 X509v3 Authority Key Identifier: keyid:57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:51:56:66:42:1e:5f:b6:80:ed:65:76:cb:22:91:6d:e7:a9: 11:e4:9d:72:c5:dc:b0:f3:0b:a7:4a:27:eb:67:a1:6a:83:de: 0b:b6:3f:35:85:f6:fb:f6:a3:5e:18:15:36:de:c2:66:8b:5b: 95:e0:05:91:3f:73:be:68:a6:aa:cb:77:67:fc:1e:a8:c2:6a: 50:b2:bc:a8:cf:d5:fd:39:47:df:a3:98:8c:ce:c6:58:cb:cb: 02:fb:71:e3:d9:77:6c:b5:8d:03:08:72:d9:fc:14:93:3d:26: ff:38:b5:3d:9f:f7:05:3c:df:05:63:2a:94:45:fd:8a:2e:44: fa:01:90:9b:b5:29:07:ef:1b:21:38:be:9b:28:9a:00:fb:1e: 93:79:3b:a2:64:da:c5:26:ca:7d:fa:4c:78:cc:4f:a3:e7:39: 61:a3:78:6f:ec:69:45:47:16:dc:26:73:6d:ad:07:4c:e0:d0: 71:9d:19:74:f5:1e:32:3e:5c:5c:6a:6b:14:32:f9:9a:a1:97: df:ba:04:c7:b1:17:c5:84:18:c7:fa:6f:3d:e1:20:a7:e0:ee: 34:53:7a:32:98:13:a5:cb:3b:78:6e:0c:38:6f:b1:bc:36:4b: 4d:29:7f:0c:14:ca:83:66:d6:3d:81:01:5b:ef:a2:62:11:d0: da:41:dc:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YsgaaFd0exekwCS6ROojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NjcwNWI1NTdiODIzMDg2YjZhNTMyMzI0YmZiYmEzNjk5 NWNiMWMwHhcNMjYwMTI1MDkwMTEzWhcNMjYwMTI2MDkwMTEzWjAzMTEwLwYDVQQD Eyg0ZmM5NTI2ZDI0OGEwYTgwNTc3ZTk1OTlmZTVhZjRiY2IxYmE2N2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bQYZfR2PbREIAOD9Eezq+Xo90cI ogN41fdinzdpJtwObeBilq4geiehn9AAaccCqfeRkm6UgzdqxcO5xwsALnq35mK8 2InGKhAS2V4LodnSUPMYl1xqiKFOhYlKVLkJ6fytk0B5NRv0U4W9LmimPRGnL4aS A59l46wkFekNeq1++dFoIOzyLY2m1uBQ5EVOBG/XNEWq9g6drwuE6QQV44uXeUq3 Me328mkGqLTNFVC7edOPgE6a/dxC6Qxa5i+nDO/PguL/OCb+ZY7aquNsF6bu4KWS Y/NUY9blMjs0B3IYbcq7RFVK3zI3OytMUjwmQTQJvQxZDtt89bUZrsDTTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/JUm0kigqAV36Vmf5a9LyxumfyMB8GA1UdIwQY MBaAFFdnBbVXuCMIa2pTIyS/u6NplcscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjJjRnRWZTRJd2hyYWxNakpMLTdvMm1WeXh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83ZDdlMWQtMzNjMC00MzQyLWIyNTkt YTdiZjNiZjkwMmQ4LzEvVjJjRnRWZTRJd2hyYWxNakpMLTdvMm1WeXh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC83ZDdlMWQtMzNjMC00MzQyLWIyNTktYTdiZjNiZjkwMmQ4 LzEvVjJjRnRWZTRJd2hyYWxNakpMLTdvMm1WeXh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVFWZkIe X7aA7WV2yyKRbeepEeSdcsXcsPMLp0on62ehaoPeC7Y/NYX2+/ajXhgVNt7CZotb leAFkT9zvmimqst3Z/weqMJqULK8qM/V/TlH36OYjM7GWMvLAvtx49l3bLWNAwhy 2fwUkz0m/zi1PZ/3BTzfBWMqlEX9ii5E+gGQm7UpB+8bITi+myiaAPsek3k7omTa xSbKffpMeMxPo+c5YaN4b+xpRUcW3CZzba0HTODQcZ0ZdPUeMj5cXGprFDL5mqGX 37oEx7EXxYQYx/pvPeEgp+DuNFN6MpgTpcs7eG4MOG+xvDZLTSl/DBTKg2bWPYEB W++iYhHQ2kHcjw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:09 2026 by rpki-client