This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft File: D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json) Hash identifier: w+5XnXAJnyIqIhZ7bgEUgoOs4lyfZ8I5b1R8nsz3DL4= Subject key identifier: D5:59:DC:01:81:D6:5B:28:3D:66:5A:CF:54:34:A4:50:F8:53:D6:04 Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa Certificate serial: 019BFA2E3DBFA8C5717061242BDCE0F0BB5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft Manifest number: 16EA Signing time: Mon 26 Jan 2026 12:01:33 +0000 Manifest this update: Mon 26 Jan 2026 12:01:33 +0000 Manifest next update: Tue 27 Jan 2026 12:01:33 +0000 Files and hashes: 1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: qfEqOBPOVTX5x/n2WEW7xVoLkhqbSORazjPr/FE7LZc=) 2: Sx_cRr1HK_9yxXnMP5L8UplPjnE.roa (hash: 8IHzguHfDhF9TOnq36/iF4YhTgkRtVGmhvaPUXHm58k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2e:3d:bf:a8:c5:71:70:61:24:2b:dc:e0:f0:bb:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa Validity Not Before: Jan 26 12:01:33 2026 GMT Not After : Jan 27 12:01:33 2026 GMT Subject: CN=d559dc0181d65b283d665acf5434a450f853d604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e1:7d:35:31:4b:39:7f:9d:80:18:88:d9:f4: 4e:cc:b5:84:3c:9e:50:1d:05:14:88:f8:3f:39:61: 58:4d:83:ed:43:7e:64:3b:9e:11:2d:6c:0f:18:05: 59:3f:c5:6e:8b:48:19:33:13:2d:42:03:ac:85:93: 5b:13:d4:a9:5f:26:a7:b4:5c:0a:36:8a:76:be:1c: 66:42:68:5f:36:ba:f2:e5:9b:61:5f:08:bc:8a:b4: 16:2c:f3:72:36:f8:ba:32:f1:6b:a9:9d:90:39:16: db:b8:3c:35:8a:03:fd:a2:5d:12:9a:29:31:e8:b3: ff:87:3b:5a:73:3d:f0:f8:f4:c0:40:77:c0:6b:f5: ad:ce:1c:00:a0:22:5e:04:94:14:6b:7f:13:92:db: 2a:7c:7b:00:e3:e4:29:0f:2f:79:08:7e:71:85:07: 96:0a:46:1c:79:ef:c8:03:56:27:38:66:83:cd:7d: d3:00:61:4e:ae:0c:db:22:3e:a6:c6:59:31:da:86: 54:66:13:32:c6:d1:80:9e:00:57:92:a2:86:67:ca: ac:44:34:01:7b:86:5f:8c:90:71:11:9c:9b:42:56: 14:ec:a5:d6:e0:0a:a4:05:9e:0f:c1:8c:bf:63:13: 4d:1c:ec:7d:94:e6:6f:45:62:cb:b6:ad:8d:c1:8b: db:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:59:DC:01:81:D6:5B:28:3D:66:5A:CF:54:34:A4:50:F8:53:D6:04 X509v3 Authority Key Identifier: keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:04:5b:af:4c:44:f2:a5:7a:55:64:b8:4c:8c:98:0f:69:6c: 28:02:37:50:9c:0f:c6:50:c8:68:89:e6:b3:31:ab:41:96:17: ab:7f:e5:77:60:88:0a:8c:a4:88:89:39:3d:65:22:65:78:23: 17:ad:c7:cb:0b:8f:bb:51:68:9b:d5:2a:dd:e1:2c:03:41:3e: 43:da:69:ff:61:52:4c:4b:b0:3e:81:63:86:f1:2e:2a:30:cc: 7a:7f:a1:bd:94:d4:c7:79:1f:43:49:8b:4e:f1:48:50:f0:3c: b6:1b:e4:9d:71:eb:30:76:75:06:e0:9e:69:d3:c4:7e:c8:81: 1c:ec:b9:4d:2f:36:06:4f:e5:28:30:a7:68:55:ae:c3:d6:7d: 3e:97:1d:7d:fe:84:23:96:54:8b:aa:81:ee:68:d4:2e:51:e8: 7b:66:f7:13:6b:7a:36:3c:44:35:df:99:e0:6d:57:99:a3:90: c1:2b:61:48:d9:a1:e5:3b:7c:b9:61:27:e0:2c:6b:38:c3:d8: 65:f3:00:f7:dd:dc:56:34:96:1f:e6:2d:4e:89:fd:d5:ce:95: 24:bc:5c:43:4e:c7:6e:a2:30:db:46:73:fb:bd:63:df:08:9d: d7:b6:e7:1c:ac:d0:c9:36:02:80:68:42:2e:ff:97:a3:e8:57: 04:77:d6:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6Lj2/qMVxcGEkK9zg8LtbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZGU5N2VlZDRkOGU4NDVlYjlmOGU3ZmYzMjZlM2ZlNTI0 ODAwZmEwHhcNMjYwMTI2MTIwMTMzWhcNMjYwMTI3MTIwMTMzWjAzMTEwLwYDVQQD EyhkNTU5ZGMwMTgxZDY1YjI4M2Q2NjVhY2Y1NDM0YTQ1MGY4NTNkNjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eF9NTFLOX+dgBiI2fROzLWEPJ5Q HQUUiPg/OWFYTYPtQ35kO54RLWwPGAVZP8Vui0gZMxMtQgOshZNbE9SpXyantFwK Nop2vhxmQmhfNrry5ZthXwi8irQWLPNyNvi6MvFrqZ2QORbbuDw1igP9ol0Smikx 6LP/hztacz3w+PTAQHfAa/WtzhwAoCJeBJQUa38TktsqfHsA4+QpDy95CH5xhQeW CkYcee/IA1YnOGaDzX3TAGFOrgzbIj6mxlkx2oZUZhMyxtGAngBXkqKGZ8qsRDQB e4ZfjJBxEZybQlYU7KXW4AqkBZ4PwYy/YxNNHOx9lOZvRWLLtq2NwYvbfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVZ3AGB1lsoPWZaz1Q0pFD4U9YEMB8GA1UdIwQY MBaAFA/el+7U2OhF65+Of/Mm4/5SSAD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85MmU0NmEtNGI5Zi00ZjgzLWIxMTEt ZWYwMDE5OGI0MzQyLzEvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85MmU0NmEtNGI5Zi00ZjgzLWIxMTEtZWYwMDE5OGI0MzQy LzEvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKgRbr0xE 8qV6VWS4TIyYD2lsKAI3UJwPxlDIaInmszGrQZYXq3/ld2CICoykiIk5PWUiZXgj F63HywuPu1Fom9Uq3eEsA0E+Q9pp/2FSTEuwPoFjhvEuKjDMen+hvZTUx3kfQ0mL TvFIUPA8thvknXHrMHZ1BuCeadPEfsiBHOy5TS82Bk/lKDCnaFWuw9Z9Ppcdff6E I5ZUi6qB7mjULlHoe2b3E2t6NjxENd+Z4G1XmaOQwSthSNmh5Tt8uWEn4CxrOMPY ZfMA993cVjSWH+YtTon91c6VJLxcQ07HbqIw20Zz+71j3wid17bnHKzQyTYCgGhC Lv+Xo+hXBHfWXQ== -----END CERTIFICATE-----Generated at Mon Jan 26 14:09:17 2026 by rpki-client