This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft File: RPMwC82ETWB1L-Xfst4pmWbpuPY.mft (raw, json) Hash identifier: SbAe6po1jYpyj8luwJGIlCYty/kDpagnId/YtNGvpjk= Subject key identifier: 57:B8:13:11:1F:5B:F1:2E:16:28:98:70:A6:8D:7C:EA:13:3B:30:64 Authority key identifier: 44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6 Certificate issuer: /CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6 Certificate serial: 019BF4D0BF72479F1FB15ECC7A09DE452AE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft Manifest number: 0DD2 Signing time: Sun 25 Jan 2026 11:01:19 +0000 Manifest this update: Sun 25 Jan 2026 11:01:19 +0000 Manifest next update: Mon 26 Jan 2026 11:01:19 +0000 Files and hashes: 1: RPMwC82ETWB1L-Xfst4pmWbpuPY.crl (hash: PQVLs3/Calf4h7QkRNzqmZkijvurIdOBVMOeia39/J8=) 2: nileVr-DQfSJAZFmbcbQEtK8Yk0.roa (hash: 9mZq8h73P9FU0Z0VCgdb2KmGquLGZE66QT5Z6ZqwuxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:bf:72:47:9f:1f:b1:5e:cc:7a:09:de:45:2a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6 Validity Not Before: Jan 25 11:01:19 2026 GMT Not After : Jan 26 11:01:19 2026 GMT Subject: CN=57b813111f5bf12e16289870a68d7cea133b3064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c4:68:e3:d2:20:70:ca:fb:9e:90:a1:0d:49: 26:59:21:08:be:93:82:ad:2c:73:1e:ca:09:6b:9a: 51:5a:80:a5:d8:c1:65:14:89:03:16:84:db:a9:c1: eb:d5:be:b5:d8:a6:26:50:d9:2e:a0:05:62:f9:89: 88:76:2f:51:15:18:0d:67:a8:95:9f:2a:bf:a1:7d: 2c:8a:30:dd:ce:2c:50:68:9c:fa:3b:dc:84:06:6e: 68:32:cd:bc:82:94:02:62:9a:2b:47:e6:25:93:fe: b2:c0:a1:e6:67:ee:bb:ef:60:83:50:77:56:7a:88: 10:98:a1:3a:7d:d9:41:ce:e5:fc:8e:40:e1:9c:9a: 88:e9:c8:90:31:10:be:ab:ef:fb:1a:d3:9a:fa:ba: 17:7d:2f:c9:54:bb:44:92:27:b8:46:b7:5e:05:37: 2f:c7:c3:a0:54:43:fb:b8:18:2a:b1:1b:56:37:fd: 42:60:e7:e9:32:3e:54:a0:29:71:34:1c:e6:c9:99: e2:6b:4c:08:25:dd:99:7c:27:3a:36:49:d6:c3:fa: 58:ee:14:d6:5c:94:f9:0a:40:4d:14:58:6f:dd:cc: 7d:a7:93:da:db:e0:93:e5:92:a7:31:d5:83:3c:45: 4b:90:eb:2d:a6:e7:38:0a:96:c3:f8:f2:5e:c7:c2: 92:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B8:13:11:1F:5B:F1:2E:16:28:98:70:A6:8D:7C:EA:13:3B:30:64 X509v3 Authority Key Identifier: keyid:44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:b4:4d:e1:86:37:4a:e6:cf:cd:60:ef:18:b4:fe:b4:9f:14: e8:32:5b:13:a9:8b:6b:aa:0c:39:8c:99:c1:46:7c:83:f0:7e: 8f:bf:00:8e:29:80:c4:54:c7:17:a5:60:68:6a:b6:3f:40:20: f9:13:26:4a:58:59:b6:32:2a:56:89:8b:e7:ca:d9:80:22:35: e8:91:a0:46:2d:56:36:e9:97:c6:67:9a:63:5f:93:88:e9:ff: ce:a5:01:5e:34:3f:bf:bd:78:ae:c0:be:7f:7c:1b:8f:a9:89: e4:06:94:0d:5e:0c:b6:b5:15:a1:21:8f:fc:1d:8f:35:e3:ef: 9f:21:44:15:c7:7d:43:04:0a:97:07:0f:3c:93:79:8c:c5:a3: c0:85:b0:13:b1:aa:3e:6b:d6:84:69:11:64:3d:f7:80:f0:51: b9:82:33:12:1c:1b:74:a1:c6:e3:ae:f4:fa:0f:08:6d:af:45: 53:45:b6:0a:ef:c9:c1:36:db:1c:d3:4b:e3:3e:19:6d:6c:a7: dc:f3:22:53:1d:13:14:8a:03:4b:9c:43:74:a0:41:18:e0:37: 0c:fd:b3:25:8a:98:96:75:e5:14:3b:95:21:9e:2f:d2:2f:bc: 62:1c:2b:95:fb:f7:a7:da:21:3d:d0:de:a0:21:11:58:04:97: 23:b6:76:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00L9yR58fsV7MegneRSrmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZjMzMDBiY2Q4NDRkNjA3NTJmZTVkZmIyZGUyOTk5NjZl OWI4ZjYwHhcNMjYwMTI1MTEwMTE5WhcNMjYwMTI2MTEwMTE5WjAzMTEwLwYDVQQD Eyg1N2I4MTMxMTFmNWJmMTJlMTYyODk4NzBhNjhkN2NlYTEzM2IzMDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MRo49IgcMr7npChDUkmWSEIvpOC rSxzHsoJa5pRWoCl2MFlFIkDFoTbqcHr1b612KYmUNkuoAVi+YmIdi9RFRgNZ6iV nyq/oX0sijDdzixQaJz6O9yEBm5oMs28gpQCYporR+Ylk/6ywKHmZ+6772CDUHdW eogQmKE6fdlBzuX8jkDhnJqI6ciQMRC+q+/7GtOa+roXfS/JVLtEkie4RrdeBTcv x8OgVEP7uBgqsRtWN/1CYOfpMj5UoClxNBzmyZnia0wIJd2ZfCc6NknWw/pY7hTW XJT5CkBNFFhv3cx9p5Pa2+CT5ZKnMdWDPEVLkOstpuc4CpbD+PJex8KSlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFe4ExEfW/EuFiiYcKaNfOoTOzBkMB8GA1UdIwQY MBaAFETzMAvNhE1gdS/l37LeKZlm6bj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlBNd0M4MkVUV0IxTC1YZnN0NHBtV2JwdVBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jNDgzNDEtYjhmMC00MGU5LTlhYTMt ODE0ODRmN2E3OWJhLzEvUlBNd0M4MkVUV0IxTC1YZnN0NHBtV2JwdVBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jNDgzNDEtYjhmMC00MGU5LTlhYTMtODE0ODRmN2E3OWJh LzEvUlBNd0M4MkVUV0IxTC1YZnN0NHBtV2JwdVBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7RN4YY3 SubPzWDvGLT+tJ8U6DJbE6mLa6oMOYyZwUZ8g/B+j78AjimAxFTHF6VgaGq2P0Ag +RMmSlhZtjIqVomL58rZgCI16JGgRi1WNumXxmeaY1+TiOn/zqUBXjQ/v714rsC+ f3wbj6mJ5AaUDV4MtrUVoSGP/B2PNePvnyFEFcd9QwQKlwcPPJN5jMWjwIWwE7Gq PmvWhGkRZD33gPBRuYIzEhwbdKHG4670+g8Iba9FU0W2Cu/JwTbbHNNL4z4ZbWyn 3PMiUx0TFIoDS5xDdKBBGOA3DP2zJYqYlnXlFDuVIZ4v0i+8Yhwrlfv3p9ohPdDe oCERWASXI7Z2zA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:53:03 2026 by rpki-client