This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft File: 96pRbAbRINN25XURMTT0T_Yl2Oc.mft (raw, json) Hash identifier: woDM5zK+wK5WMHkfsXjVifsx0Roa7bZa1TbH4RYfH0A= Subject key identifier: DD:3F:83:38:7F:88:DE:32:EE:C8:EA:D1:24:08:33:F8:D9:DC:AA:C7 Authority key identifier: F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7 Certificate issuer: /CN=f7aa516c06d120d376e575113134f44ff625d8e7 Certificate serial: 019BF42B97FA599A04D2FCC2CCFB9E3333C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft Manifest number: 0262 Signing time: Sun 25 Jan 2026 08:00:56 +0000 Manifest this update: Sun 25 Jan 2026 08:00:56 +0000 Manifest next update: Mon 26 Jan 2026 08:00:56 +0000 Files and hashes: 1: 96pRbAbRINN25XURMTT0T_Yl2Oc.crl (hash: X8ktKA6K5aqentyQ4seuUwyFtsbViuYmWsspcI8gZ/E=) 2: MS76_2ntYKUzBFCdqt8Qshd8Nn0.asa (hash: ZwV+fZBud2t/cbTI3ChOB9UJvo4rUQVyyHgDI4t5J4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:97:fa:59:9a:04:d2:fc:c2:cc:fb:9e:33:33:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7aa516c06d120d376e575113134f44ff625d8e7 Validity Not Before: Jan 25 08:00:56 2026 GMT Not After : Jan 26 08:00:56 2026 GMT Subject: CN=dd3f83387f88de32eec8ead1240833f8d9dcaac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6b:6e:1a:94:16:69:73:79:b5:e8:e8:72:ef: 10:7f:eb:39:a1:3b:4d:d4:67:77:9d:f0:81:36:d1: 53:e7:80:d4:1a:51:54:6b:72:2d:a5:c9:ff:80:58: 15:83:83:52:cf:72:67:3f:f3:01:45:a9:e1:ba:4a: 4a:b3:8b:89:26:0b:be:ab:39:45:3e:6f:04:e3:54: cf:f3:aa:41:f2:24:b9:f9:f0:1f:22:bf:30:e3:45: 87:6e:e3:88:37:f0:29:00:b5:ab:e8:fc:27:ba:70: 69:f3:46:00:34:fe:a4:09:66:2d:2e:4a:64:81:bd: 24:33:29:b0:a4:97:60:6a:f3:b3:5e:61:ee:df:82: bd:2e:dd:47:4f:40:ae:85:23:47:9a:bb:b8:48:05: d7:55:4f:b3:0b:17:5a:e0:76:d1:7a:a5:2c:d3:c0: d0:fe:45:76:58:ad:cb:e4:fa:25:13:87:67:4f:95: d1:7a:2b:ae:12:36:7a:09:7b:70:d4:b1:56:2e:d4: a5:1b:1b:8e:db:b2:ee:fc:6f:31:2c:9d:46:7d:3f: 70:53:e5:45:cd:59:d4:59:2b:60:fc:99:77:1c:ef: 4d:b8:f8:66:b4:2f:68:ff:be:c8:9f:09:57:72:65: b8:b9:d3:83:ea:30:ed:ba:4a:98:01:66:c4:0c:31: c4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:3F:83:38:7F:88:DE:32:EE:C8:EA:D1:24:08:33:F8:D9:DC:AA:C7 X509v3 Authority Key Identifier: keyid:F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:cf:6d:c7:1f:04:05:f0:ce:82:1d:0d:67:4a:02:46:e3:9a: f5:8f:f5:46:34:17:f7:e0:c5:ba:6c:05:19:bf:71:cf:5d:1e: 5a:dd:98:d3:94:6d:55:8b:c6:b6:67:a8:6b:82:1f:16:79:54: 12:d0:b3:d3:e9:77:9b:3b:08:dc:f7:c9:43:34:1b:2c:0f:10: b3:a2:44:a2:24:43:cf:c9:1e:32:18:00:58:99:b0:57:6e:4b: 56:0c:dc:1d:81:5f:9c:77:c4:d9:94:5e:ef:ef:49:df:40:6e: 93:59:12:7a:86:de:b8:5a:04:1a:24:f9:b2:e3:73:d8:ea:8c: 86:11:69:3f:89:c0:1b:0d:7b:e3:72:89:f8:a4:1f:4e:aa:47: e1:cd:c5:06:24:12:82:f6:02:59:ae:f5:38:b5:6b:03:65:26: 15:28:d0:42:a4:d5:77:24:d1:c3:d3:51:46:3d:86:18:24:a2: 0a:8b:e6:72:29:3f:21:1b:a5:c7:d9:1a:f9:e6:3e:2f:60:83: 9b:43:94:4c:4a:a9:b3:28:6a:ac:7a:00:fb:fd:db:c5:41:f1: 1f:b8:eb:c9:f5:1d:3d:b4:ed:91:94:58:1d:09:5f:cb:dd:dd: 13:d5:4d:aa:00:da:7f:5c:e9:40:2e:07:12:90:dc:fd:d8:8c: b5:c7:86:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K5f6WZoE0vzCzPueMzPGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YWE1MTZjMDZkMTIwZDM3NmU1NzUxMTMxMzRmNDRmZjYy NWQ4ZTcwHhcNMjYwMTI1MDgwMDU2WhcNMjYwMTI2MDgwMDU2WjAzMTEwLwYDVQQD EyhkZDNmODMzODdmODhkZTMyZWVjOGVhZDEyNDA4MzNmOGQ5ZGNhYWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WtuGpQWaXN5tejocu8Qf+s5oTtN 1Gd3nfCBNtFT54DUGlFUa3Itpcn/gFgVg4NSz3JnP/MBRanhukpKs4uJJgu+qzlF Pm8E41TP86pB8iS5+fAfIr8w40WHbuOIN/ApALWr6PwnunBp80YANP6kCWYtLkpk gb0kMymwpJdgavOzXmHu34K9Lt1HT0CuhSNHmru4SAXXVU+zCxda4HbReqUs08DQ /kV2WK3L5PolE4dnT5XReiuuEjZ6CXtw1LFWLtSlGxuO27Lu/G8xLJ1GfT9wU+VF zVnUWStg/Jl3HO9NuPhmtC9o/77InwlXcmW4udOD6jDtukqYAWbEDDHE3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0/gzh/iN4y7sjq0SQIM/jZ3KrHMB8GA1UdIwQY MBaAFPeqUWwG0SDTduV1ETE09E/2JdjnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTZwUmJBYlJJTk4yNVhVUk1UVDBUX1lsMk9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82ZWVlMjgtMmQwMC00NGEwLWJjYzgt MDA2ZDQxNDg3YzQ5LzEvOTZwUmJBYlJJTk4yNVhVUk1UVDBUX1lsMk9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82ZWVlMjgtMmQwMC00NGEwLWJjYzgtMDA2ZDQxNDg3YzQ5 LzEvOTZwUmJBYlJJTk4yNVhVUk1UVDBUX1lsMk9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHM9txx8E BfDOgh0NZ0oCRuOa9Y/1RjQX9+DFumwFGb9xz10eWt2Y05RtVYvGtmeoa4IfFnlU EtCz0+l3mzsI3PfJQzQbLA8Qs6JEoiRDz8keMhgAWJmwV25LVgzcHYFfnHfE2ZRe 7+9J30Buk1kSeobeuFoEGiT5suNz2OqMhhFpP4nAGw1743KJ+KQfTqpH4c3FBiQS gvYCWa71OLVrA2UmFSjQQqTVdyTRw9NRRj2GGCSiCovmcik/IRulx9ka+eY+L2CD m0OUTEqpsyhqrHoA+/3bxUHxH7jryfUdPbTtkZRYHQlfy93dE9VNqgDaf1zpQC4H EpDc/diMtceGmQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:23:58 2026 by rpki-client