This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft File: deBbwhsqbxAzcR_8pkkcbDDOWko.mft (raw, json) Hash identifier: ZtvSr+gETRpFpW9XcE0lHx/CcpFDtkrmAtUTEAS7Jgw= Subject key identifier: 40:79:86:66:AE:32:47:C6:4C:FB:88:76:0A:CA:5A:05:25:F7:00:73 Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a Certificate serial: 019BF5ABC87F673DB140A84C7BA42E9CB35A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft Manifest number: 17F3 Signing time: Sun 25 Jan 2026 15:00:34 +0000 Manifest this update: Sun 25 Jan 2026 15:00:34 +0000 Manifest next update: Mon 26 Jan 2026 15:00:34 +0000 Files and hashes: 1: IKecYpJsyQoCMXhzFQm8qwezc6Q.roa (hash: AyBWoAIIW8QVXSZmJhv+7IehUMdxfXtLu4x8wnOD+Zo=) 2: Niz0xaF_UJO5sK6yvy3cMVF07nA.roa (hash: l65DOQXiJc/vw8R7nLx1kl+6tdgkTZuIaNzOHJm95Zo=) 3: WFTfI5tspGo4Ss0OCZAL-JGWw3k.roa (hash: ygHs+fWVxGVJnQRLr2/Xp2LQTIWtPolhwTvnQdcJhwg=) 4: Wrrx-J8255kGZZQo2Z_lshL_g94.roa (hash: RJwUNDcFiRkR23EOeiZYpldoRJTn3DHSqOqjyT0fbkQ=) 5: cKp2OZnMQ6gfuVdFBIpAAe-tLzE.roa (hash: mbO9zdERKtIWiDiD8x4e0EjpaANpcC71gfDZ39R7GH8=) 6: deBbwhsqbxAzcR_8pkkcbDDOWko.crl (hash: 2dr1pkVhZovEVV2idjXjcamo8Zxa21Adk1wi/6nVLYI=) 7: p6DmQaVdSnpO0418vCwa-3h5IyU.roa (hash: oLcwvSqddOQ2Ul0V7nGknSGHPS/F0P9Nc73tzvsSSQ4=) 8: r2Y6Npuwz2fSFJGlB1IqT0Y2GL8.roa (hash: lnldbd2L1Ux8PYgmjwCpHbxAbqqtYXmXImm+n59vkVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:c8:7f:67:3d:b1:40:a8:4c:7b:a4:2e:9c:b3:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a Validity Not Before: Jan 25 15:00:34 2026 GMT Not After : Jan 26 15:00:34 2026 GMT Subject: CN=40798666ae3247c64cfb88760aca5a0525f70073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ae:2c:62:a0:0e:6c:45:69:0b:f5:02:03:9d: 8e:76:74:00:77:be:79:bf:8e:48:2f:4f:6b:21:08: ac:fc:f3:18:5b:83:cc:4e:d5:0d:41:33:55:5a:17: d2:3f:c6:5b:df:1b:05:8e:be:ae:25:7e:66:9b:e6: 11:f4:53:3a:c6:b3:72:a0:73:f3:e4:d5:b0:14:0b: 18:e5:97:e1:d6:ee:50:c6:3f:eb:5f:74:b2:20:27: 4b:7e:9a:24:93:89:b8:0e:c8:11:f5:7c:33:74:20: 13:7e:5d:50:d6:ad:81:12:db:39:9e:8a:25:dc:47: 77:05:00:bc:1a:a5:73:a3:61:bb:aa:e2:95:68:df: 31:d5:d0:2a:52:28:e2:17:1e:54:d6:54:e5:6e:f9: 2f:46:66:33:80:8b:6e:3c:a4:b4:4b:5e:b5:f7:42: 57:e4:3c:b2:6b:56:47:24:74:d7:23:ef:b9:ae:1b: da:67:c7:93:99:5c:60:57:d6:bd:f1:82:20:99:10: bd:5c:65:68:2f:5c:7b:1c:7c:92:01:77:cf:00:53: d7:ff:70:f0:f8:76:e1:d7:3e:a7:06:b9:50:09:b3: 66:96:7e:61:ab:bc:ca:ad:61:90:50:41:f1:17:d5: ae:12:ff:22:a5:98:21:48:44:75:2f:ef:33:1f:fd: de:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:79:86:66:AE:32:47:C6:4C:FB:88:76:0A:CA:5A:05:25:F7:00:73 X509v3 Authority Key Identifier: keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a8:01:f8:fa:06:ee:6f:b8:ef:75:ce:99:04:5e:fd:22:46: fd:f5:d9:66:d1:1a:7a:6e:35:0f:19:23:dd:d6:02:72:8f:ec: 29:60:28:b4:08:16:e6:23:0f:36:ac:92:7c:59:d4:39:97:20: 18:1a:59:d4:e5:5c:e6:c2:18:5d:52:6c:2c:09:d7:00:5d:23: 51:98:05:26:c4:ee:bb:6a:14:39:91:bd:98:88:02:4b:3a:9e: 3a:d4:f2:aa:90:79:7f:f5:e1:33:d8:f9:51:f5:13:c3:80:d5: 74:0a:2e:a2:01:9a:e4:3e:ba:c1:7c:51:f2:f3:4e:09:ca:0d: a9:7b:6e:49:53:fb:4a:81:97:b0:7d:63:38:98:0c:fb:36:9a: 73:37:d5:5e:b2:79:f5:fc:6c:cd:c3:ce:33:84:af:be:cf:fd: 38:3a:d0:92:3d:4c:b2:14:41:03:c5:00:28:ec:e9:7c:32:fb: b1:65:9a:da:73:94:a7:9f:5f:f1:37:e2:01:b6:41:fc:16:31: 02:c5:3b:52:0c:29:42:13:67:71:8c:d1:61:67:c0:4c:b6:de: 11:d2:c4:2d:b3:0b:67:23:03:83:23:23:4b:59:40:15:48:ca: 64:9b:1f:6a:22:11:5e:2b:72:23:a6:0d:ac:29:0a:d1:d4:8f: a4:f2:47:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q8h/Zz2xQKhMe6QunLNaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZTA1YmMyMWIyYTZmMTAzMzcxMWZmY2E2NDkxYzZjMzBj ZTVhNGEwHhcNMjYwMTI1MTUwMDM0WhcNMjYwMTI2MTUwMDM0WjAzMTEwLwYDVQQD Eyg0MDc5ODY2NmFlMzI0N2M2NGNmYjg4NzYwYWNhNWEwNTI1ZjcwMDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA064sYqAObEVpC/UCA52OdnQAd755 v45IL09rIQis/PMYW4PMTtUNQTNVWhfSP8Zb3xsFjr6uJX5mm+YR9FM6xrNyoHPz 5NWwFAsY5Zfh1u5Qxj/rX3SyICdLfpokk4m4DsgR9XwzdCATfl1Q1q2BEts5nool 3Ed3BQC8GqVzo2G7quKVaN8x1dAqUijiFx5U1lTlbvkvRmYzgItuPKS0S16190JX 5Dyya1ZHJHTXI++5rhvaZ8eTmVxgV9a98YIgmRC9XGVoL1x7HHySAXfPAFPX/3Dw +Hbh1z6nBrlQCbNmln5hq7zKrWGQUEHxF9WuEv8ipZghSER1L+8zH/3eUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEB5hmauMkfGTPuIdgrKWgUl9wBzMB8GA1UdIwQY MBaAFHXgW8IbKm8QM3Ef/KZJHGwwzlpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDct ZDQ1YWI3ZGYyZGUxLzEvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDctZDQ1YWI3ZGYyZGUx LzEvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKgB+PoG 7m+473XOmQRe/SJG/fXZZtEaem41Dxkj3dYCco/sKWAotAgW5iMPNqySfFnUOZcg GBpZ1OVc5sIYXVJsLAnXAF0jUZgFJsTuu2oUOZG9mIgCSzqeOtTyqpB5f/XhM9j5 UfUTw4DVdAouogGa5D66wXxR8vNOCcoNqXtuSVP7SoGXsH1jOJgM+zaaczfVXrJ5 9fxszcPOM4Svvs/9ODrQkj1MshRBA8UAKOzpfDL7sWWa2nOUp59f8TfiAbZB/BYx AsU7UgwpQhNncYzRYWfATLbeEdLELbMLZyMDgyMjS1lAFUjKZJsfaiIRXityI6YN rCkK0dSPpPJHCA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:34 2026 by rpki-client