This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft File: urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json) Hash identifier: eb0kg/XO08SgTCjrb2xhnScwn9hqkZZzJ5NHn3owmhM= Subject key identifier: 9F:41:6F:E8:F6:05:B3:18:DE:4D:CC:22:B3:28:D5:2E:9B:F4:D9:95 Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc Certificate serial: 019BF274C1202192B34A0CE3D4A4EFD1C069 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 00:01:36 +0000 Manifest this update: Sun 25 Jan 2026 00:01:36 +0000 Manifest next update: Mon 26 Jan 2026 00:01:36 +0000 Files and hashes: 1: PzKWoUJeFLqjUWS7LgF4BdwM7PI.roa (hash: OsmHic4Ai/0j0JqDsk2Y5rGOjUKPGoeMip/8Vo2h1CM=) 2: UsG3baUGIxj41J_YNnv0F0uvJ9g.roa (hash: Ou9qv1YwHjFroWI++/0y93X1Q7gw8mUqZv7cZxbQ++U=) 3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: UtLUOtvEntP+A9uONdEQgl+TQBsBYp2z9jWE6JWnViA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:74:c1:20:21:92:b3:4a:0c:e3:d4:a4:ef:d1:c0:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc Validity Not Before: Jan 25 00:01:36 2026 GMT Not After : Jan 26 00:01:36 2026 GMT Subject: CN=9f416fe8f605b318de4dcc22b328d52e9bf4d995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d2:e8:ff:5b:c5:b2:2c:c4:ef:0f:3d:1f:44: 4e:99:ea:15:4d:ed:39:a5:cb:60:45:b4:01:41:29: 7d:83:ec:24:b4:88:cb:d1:1b:37:a3:b9:90:6d:0b: 75:69:3d:3c:96:94:bb:d0:e3:02:f0:68:8e:61:53: 2d:25:b3:88:ad:21:a0:88:bd:f6:3a:73:02:fe:5a: 70:1b:41:ef:c5:17:ca:0b:2a:71:e7:2e:e3:91:36: f8:9a:01:eb:cb:19:7e:cc:85:e4:a4:bb:9e:20:ec: 81:9c:5a:f5:98:55:8a:3c:d7:9f:e7:24:16:0e:e1: a4:46:a6:2d:74:b4:83:46:e3:16:32:5e:8e:71:74: 5e:5a:87:3e:d2:60:3f:7d:d4:41:c3:54:1c:cc:e2: 45:8a:66:73:5e:01:5d:d6:09:4e:a9:b0:76:70:29: 6d:6c:68:f7:5d:9d:5f:8a:72:09:2f:db:df:5e:82: 5e:19:6e:b1:16:45:1e:0a:59:e8:8f:e6:83:25:da: 28:3a:fd:44:a7:4e:93:ca:0b:ff:b2:7b:f3:9a:74: df:7f:90:f1:40:41:37:21:77:ad:74:b2:b9:4d:d7: d8:07:3a:4b:0e:59:ae:6d:50:90:65:00:b4:29:c0: dc:14:29:46:43:05:40:1a:85:36:1e:ac:67:35:8c: 0c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:41:6F:E8:F6:05:B3:18:DE:4D:CC:22:B3:28:D5:2E:9B:F4:D9:95 X509v3 Authority Key Identifier: keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:74:b3:ec:e9:9e:23:a5:f8:19:cf:84:f0:53:4d:9f:11:64: be:ad:4a:1c:15:ba:72:63:17:36:d8:47:8b:29:90:7c:98:1c: b8:19:38:17:8b:05:f8:b5:c7:e4:49:f2:09:74:41:3b:d8:de: 58:77:d0:6d:25:cb:52:da:f4:e5:76:58:fa:be:72:ea:f8:60: 81:a2:1e:e1:c6:1a:49:3e:80:07:a5:80:b0:8c:04:72:e7:dd: ca:7d:90:ae:d6:62:d5:13:5d:dc:9a:3d:a2:77:05:cf:38:8f: 9f:a5:52:bd:d3:9d:55:ec:79:0c:c1:94:20:76:7d:eb:b0:8f: 59:fb:c4:ee:d6:67:74:be:49:9c:6c:be:09:c8:3f:7a:3f:8a: fc:02:14:ec:71:78:36:7d:8f:1e:79:1c:66:91:1a:e2:36:d0: 4f:7c:e6:c9:a9:0a:aa:12:23:59:47:f4:bb:71:f1:30:e3:3e: 75:fe:5a:bf:68:fb:9e:de:21:36:fd:4e:05:cb:01:d1:0a:f3: 43:f1:92:fa:d1:5a:67:35:28:33:59:96:0b:77:25:c6:ea:68: 15:24:9c:da:77:8d:49:03:b4:a5:c1:79:a7:ab:b9:8a:8d:40: c9:a5:5b:7e:36:62:30:37:2a:e0:66:f9:f3:24:04:5e:01:09: 57:cd:a1:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvydMEgIZKzSgzj1KTv0cBpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYjIzMmMxZDcyZGMxY2FiYmRhMTZjODcwZWM5NDFkNDU4 YTlmZGMwHhcNMjYwMTI1MDAwMTM2WhcNMjYwMTI2MDAwMTM2WjAzMTEwLwYDVQQD Eyg5ZjQxNmZlOGY2MDViMzE4ZGU0ZGNjMjJiMzI4ZDUyZTliZjRkOTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNLo/1vFsizE7w89H0ROmeoVTe05 pctgRbQBQSl9g+wktIjL0Rs3o7mQbQt1aT08lpS70OMC8GiOYVMtJbOIrSGgiL32 OnMC/lpwG0HvxRfKCypx5y7jkTb4mgHryxl+zIXkpLueIOyBnFr1mFWKPNef5yQW DuGkRqYtdLSDRuMWMl6OcXReWoc+0mA/fdRBw1QczOJFimZzXgFd1glOqbB2cClt bGj3XZ1finIJL9vfXoJeGW6xFkUeClnoj+aDJdooOv1Ep06Tygv/snvzmnTff5Dx QEE3IXetdLK5TdfYBzpLDlmubVCQZQC0KcDcFClGQwVAGoU2HqxnNYwMiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9Bb+j2BbMY3k3MIrMo1S6b9NmVMB8GA1UdIwQY MBaAFLqyMsHXLcHKu9oWyHDslB1Fip/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXJJeXdkY3R3Y3E3MmhiSWNPeVVIVVdLbjl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83OTU3NzQtZmI5ZS00MTNmLTlmNzAt N2QzZWZiNGE2YTdmLzEvdXJJeXdkY3R3Y3E3MmhiSWNPeVVIVVdLbjl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83OTU3NzQtZmI5ZS00MTNmLTlmNzAtN2QzZWZiNGE2YTdm LzEvdXJJeXdkY3R3Y3E3MmhiSWNPeVVIVVdLbjl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3Sz7Ome I6X4Gc+E8FNNnxFkvq1KHBW6cmMXNthHiymQfJgcuBk4F4sF+LXH5EnyCXRBO9je WHfQbSXLUtr05XZY+r5y6vhggaIe4cYaST6AB6WAsIwEcufdyn2QrtZi1RNd3Jo9 oncFzziPn6VSvdOdVex5DMGUIHZ967CPWfvE7tZndL5JnGy+Ccg/ej+K/AIU7HF4 Nn2PHnkcZpEa4jbQT3zmyakKqhIjWUf0u3HxMOM+df5av2j7nt4hNv1OBcsB0Qrz Q/GS+tFaZzUoM1mWC3clxupoFSSc2neNSQO0pcF5p6u5io1AyaVbfjZiMDcq4Gb5 8yQEXgEJV82hQA== -----END CERTIFICATE-----Generated at Sun Jan 25 07:51:20 2026 by rpki-client