This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft File: D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json) Hash identifier: A3NQfoBGKxTaSUVG4siYeSVvSTTUFkrrCdqP3QKEsd8= Subject key identifier: E8:71:90:19:58:03:74:90:99:CD:89:6E:74:B9:B7:C9:C4:74:CE:3F Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa Certificate serial: 019BF840010E18EEEB430C8DD2C57D9792EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft Manifest number: 16E9 Signing time: Mon 26 Jan 2026 03:01:42 +0000 Manifest this update: Mon 26 Jan 2026 03:01:42 +0000 Manifest next update: Tue 27 Jan 2026 03:01:42 +0000 Files and hashes: 1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: Vo2B5R9cNJvoVfRdggALLMy7VI4C865mH8i80yxlSbU=) 2: Sx_cRr1HK_9yxXnMP5L8UplPjnE.roa (hash: 8IHzguHfDhF9TOnq36/iF4YhTgkRtVGmhvaPUXHm58k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:40:01:0e:18:ee:eb:43:0c:8d:d2:c5:7d:97:92:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa Validity Not Before: Jan 26 03:01:42 2026 GMT Not After : Jan 27 03:01:42 2026 GMT Subject: CN=e87190195803749099cd896e74b9b7c9c474ce3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:dd:d9:fb:13:2b:b8:c0:ae:29:45:23:32:cf: a7:00:d4:08:9f:53:52:22:75:39:61:25:cd:cc:82: f7:33:2c:5e:f2:23:73:d7:86:df:63:97:df:b5:22: 1e:08:5f:45:e8:ea:f0:12:1e:9a:aa:af:b4:47:6b: a5:20:87:9a:66:8c:2c:79:3a:11:1b:34:86:af:06: 47:62:a9:8b:aa:c8:d6:e0:dc:8a:79:a8:1c:9b:2f: b5:22:03:fc:c6:6d:83:df:fd:54:c8:4d:4a:60:2f: 02:02:6d:4a:ff:7a:c1:22:6f:46:e2:6a:60:b4:ab: 15:f8:37:f6:90:ad:32:f8:e7:6a:a0:77:00:d2:03: ab:d9:e7:e6:b0:a2:aa:75:2c:1a:99:73:77:68:cc: 51:0c:78:9a:f5:b2:4b:26:c6:f7:2a:a8:cd:fc:54: b2:84:de:89:c4:0a:00:5b:32:a9:5c:ec:cd:80:7f: 89:e4:a1:62:12:5e:c8:98:79:36:43:e0:ca:e2:45: 35:3f:77:38:76:d5:53:06:6d:e3:8b:f0:7c:57:82: 90:2b:35:6d:ef:c0:4a:20:dc:e7:32:c3:0e:d3:d8: 56:b3:34:14:2a:2a:88:65:15:ab:fd:c2:95:32:89: 63:96:2f:12:83:9d:4e:71:3e:47:aa:32:84:1c:c7: f4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:71:90:19:58:03:74:90:99:CD:89:6E:74:B9:B7:C9:C4:74:CE:3F X509v3 Authority Key Identifier: keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ab:44:1f:3d:98:f4:f8:e6:ef:a6:a8:4c:f7:95:cd:5f:5c: 80:62:ff:0f:38:50:c4:e7:9f:f3:77:06:e1:93:12:c8:71:c9: df:77:86:4c:fb:f7:5e:71:20:4d:12:e5:5f:c8:fd:ae:24:d2: c7:fa:f1:ba:a2:3e:77:8f:a7:9d:44:5d:dc:19:e8:f9:52:fb: 02:b8:a5:12:a0:a9:b1:f5:66:9e:f2:b8:2c:aa:8c:0b:2f:c2: cc:41:4d:bf:09:a0:c5:51:22:2c:ab:96:3a:2b:3c:f1:32:d9: b2:f2:2e:4a:d4:99:d4:ad:4b:eb:50:79:80:4b:1b:c0:85:fa: 7f:c7:0e:7a:4a:ef:d0:d4:a1:e1:24:a4:71:d9:1f:21:15:14: cb:f2:59:51:08:dc:9d:04:ca:b7:28:af:ab:ec:53:b6:b4:ff: 2e:b0:96:17:8a:a2:6d:4a:36:db:32:77:54:df:a0:64:5a:12: 81:89:97:51:1b:34:ba:ad:d4:be:9f:ce:fc:27:0b:fc:79:39: d3:c6:94:5d:cb:63:c9:1d:b4:7a:d7:91:ad:18:85:92:a1:58: 19:07:77:fb:5c:b5:7d:f3:ac:3d:3d:02:ba:c3:ab:0b:46:9c: 03:2c:62:c9:b2:a8:12:e7:ba:04:98:ea:b2:79:18:92:28:45: ac:f8:1f:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4QAEOGO7rQwyN0sV9l5LsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZGU5N2VlZDRkOGU4NDVlYjlmOGU3ZmYzMjZlM2ZlNTI0 ODAwZmEwHhcNMjYwMTI2MDMwMTQyWhcNMjYwMTI3MDMwMTQyWjAzMTEwLwYDVQQD EyhlODcxOTAxOTU4MDM3NDkwOTljZDg5NmU3NGI5YjdjOWM0NzRjZTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN3Z+xMruMCuKUUjMs+nANQIn1NS InU5YSXNzIL3Myxe8iNz14bfY5fftSIeCF9F6OrwEh6aqq+0R2ulIIeaZowseToR GzSGrwZHYqmLqsjW4NyKeagcmy+1IgP8xm2D3/1UyE1KYC8CAm1K/3rBIm9G4mpg tKsV+Df2kK0y+OdqoHcA0gOr2efmsKKqdSwamXN3aMxRDHia9bJLJsb3KqjN/FSy hN6JxAoAWzKpXOzNgH+J5KFiEl7ImHk2Q+DK4kU1P3c4dtVTBm3ji/B8V4KQKzVt 78BKINznMsMO09hWszQUKiqIZRWr/cKVMoljli8Sg51OcT5HqjKEHMf0OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhxkBlYA3SQmc2JbnS5t8nEdM4/MB8GA1UdIwQY MBaAFA/el+7U2OhF65+Of/Mm4/5SSAD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85MmU0NmEtNGI5Zi00ZjgzLWIxMTEt ZWYwMDE5OGI0MzQyLzEvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85MmU0NmEtNGI5Zi00ZjgzLWIxMTEtZWYwMDE5OGI0MzQy LzEvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqtEHz2Y 9Pjm76aoTPeVzV9cgGL/DzhQxOef83cG4ZMSyHHJ33eGTPv3XnEgTRLlX8j9riTS x/rxuqI+d4+nnURd3Bno+VL7ArilEqCpsfVmnvK4LKqMCy/CzEFNvwmgxVEiLKuW Ois88TLZsvIuStSZ1K1L61B5gEsbwIX6f8cOekrv0NSh4SSkcdkfIRUUy/JZUQjc nQTKtyivq+xTtrT/LrCWF4qibUo22zJ3VN+gZFoSgYmXURs0uq3Uvp/O/CcL/Hk5 08aUXctjyR20eteRrRiFkqFYGQd3+1y1ffOsPT0CusOrC0acAyxiybKoEue6BJjq snkYkihFrPgf/w== -----END CERTIFICATE-----Generated at Mon Jan 26 13:05:32 2026 by rpki-client