This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft File: 250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json) Hash identifier: Hr4PpnzdsAwQMVw/GpMUbHhmyCFxehFoj4cFLvDfLAU= Subject key identifier: 84:90:E3:0B:1F:88:3E:42:53:E2:E6:8F:D5:51:64:72:D5:6C:F5:8B Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42 Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042 Certificate serial: 019BF5756E2E2107F14D2CFFDEEFA0BBC570 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft Manifest number: 13B0 Signing time: Sun 25 Jan 2026 14:01:12 +0000 Manifest this update: Sun 25 Jan 2026 14:01:12 +0000 Manifest next update: Mon 26 Jan 2026 14:01:12 +0000 Files and hashes: 1: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: SIejEXCeN1Sd8kLohb87AJqYDONEtWFFoNj00HIDeeI=) 2: 6mzFB1254QH_scGmAESdwoJirew.roa (hash: ZqsDszUXMXErK5gprgiRcwaopoCcJJcjnl51ncaMD10=) 3: NxvpMC3lblglKzeF_lvEXTsAm0M.roa (hash: h5SbOWhVOoNUHBZ1v4cWXnobus6Ezr2RSH0NoeXD8Eg=) 4: OIl66vV-_xpjBLdW_e37i3MHj7k.roa (hash: cSop5Hl7odCbvTkJ91gKwEE+cGwI/Owv1OQiaa9DbOI=) 5: V_9jRl4u_GQEezWDQos1yT-0bqE.roa (hash: F7HIunKap/oz5qtM7/jZgccS28Y+qRZ8R7fBgjRlXdI=) 6: fFpafy4u190DTCOPzJA2IU3Yun8.roa (hash: qkxwTsYonpEmwXLYN4+BkXLnLH6SkvbgatzFJDlgvt0=) 7: iNKNZeSZcVKtwBDeM9cWD2QfKgw.roa (hash: Ufjl8hlKJynYjHQsITek/FLuhc46CrmvrHtUUc2zMOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:6e:2e:21:07:f1:4d:2c:ff:de:ef:a0:bb:c5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042 Validity Not Before: Jan 25 14:01:12 2026 GMT Not After : Jan 26 14:01:12 2026 GMT Subject: CN=8490e30b1f883e4253e2e68fd5516472d56cf58b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c5:72:bc:8f:e2:2b:d6:a2:3d:41:cf:a6:a8: c7:96:12:6d:b1:bf:78:e5:16:fe:ac:af:2e:72:e0: 27:8f:f9:45:5a:13:f9:74:0b:02:4c:14:41:3c:1e: f9:43:64:bd:4f:2a:ed:3a:20:94:9b:28:cb:5b:3b: c7:37:36:7d:06:e0:63:7d:e8:10:ac:fb:4e:09:78: 06:77:df:6b:e0:23:50:92:87:68:43:fe:b7:6d:d9: b2:ac:01:20:33:e9:9a:f5:69:4e:3e:90:3a:79:ac: 2e:dc:74:13:34:33:d5:45:f3:f5:99:d0:0e:2b:1b: 29:13:16:70:17:19:1e:9b:7b:a2:7b:ae:b7:a4:52: dc:53:d3:22:0b:a8:40:27:0f:eb:5f:8e:4a:76:ff: b2:a6:c5:6d:f3:6d:b1:99:ee:68:d1:ba:47:76:fd: 73:48:a8:a0:a2:a4:4f:4f:8c:95:96:d4:d6:bd:cb: 20:69:79:06:6d:d7:5b:bb:05:1b:46:c7:3f:80:61: 8e:4d:41:9b:46:6a:7f:1b:64:63:33:15:c1:23:4c: 22:be:bb:b6:14:0e:ba:ab:fc:e3:f7:4e:e3:93:ec: 83:aa:fe:ca:d6:ca:dc:5a:d4:8e:e7:af:72:d6:a7: 2d:5a:a0:3a:ef:96:b8:85:72:1b:a4:3e:00:aa:88: 74:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:90:E3:0B:1F:88:3E:42:53:E2:E6:8F:D5:51:64:72:D5:6C:F5:8B X509v3 Authority Key Identifier: keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d0:dc:a6:12:92:66:89:b9:e4:d3:26:fb:ba:86:73:74:15: 7e:6f:29:df:cf:77:90:fd:c4:2a:28:c3:44:de:f8:f1:50:5c: 89:6d:91:26:24:7e:0a:13:ca:76:96:84:31:fe:12:cf:61:ef: c3:a1:ca:ea:c5:de:c9:ec:7e:26:7e:a7:a5:c6:8a:f3:e8:9b: b5:f7:b6:66:93:9e:74:17:3e:f4:be:ea:47:ce:92:e9:55:bf: f6:8f:97:d3:db:d1:51:23:1d:31:e8:0a:5d:cf:c8:50:bd:89: 4e:7b:96:9a:ff:9e:d0:18:e4:93:11:6d:86:ee:04:74:77:a7: 6f:b5:4a:7f:83:f1:cf:a8:63:61:12:a1:cf:4e:75:1a:93:43: 45:0f:1a:42:2c:96:f8:9b:df:4c:6d:24:8e:c2:43:26:69:77: 4b:f3:da:c9:2a:b2:9f:56:ac:ab:61:b9:f8:8a:0c:38:23:f9: b6:8c:79:58:9a:69:99:37:6e:36:83:c4:93:ba:e2:56:77:91: 73:a6:24:5c:fb:76:12:99:d2:f9:c2:05:35:d8:c6:bb:d0:f9: cb:97:63:cf:61:da:de:de:d9:2c:e5:3c:56:f4:94:f2:c7:bc: d1:40:1f:4b:2f:64:14:78:71:f0:b3:44:af:a4:13:7b:98:12: 1f:3b:1d:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dW4uIQfxTSz/3u+gu8VwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOWQxOTdmYmJlZTJhMWRjY2I0ZjU1NzIyYTgyMTBkMzEw NWIwNDIwHhcNMjYwMTI1MTQwMTEyWhcNMjYwMTI2MTQwMTEyWjAzMTEwLwYDVQQD Eyg4NDkwZTMwYjFmODgzZTQyNTNlMmU2OGZkNTUxNjQ3MmQ1NmNmNThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcVyvI/iK9aiPUHPpqjHlhJtsb94 5Rb+rK8ucuAnj/lFWhP5dAsCTBRBPB75Q2S9TyrtOiCUmyjLWzvHNzZ9BuBjfegQ rPtOCXgGd99r4CNQkodoQ/63bdmyrAEgM+ma9WlOPpA6eawu3HQTNDPVRfP1mdAO KxspExZwFxkem3uie663pFLcU9MiC6hAJw/rX45Kdv+ypsVt822xme5o0bpHdv1z SKigoqRPT4yVltTWvcsgaXkGbddbuwUbRsc/gGGOTUGbRmp/G2RjMxXBI0wivru2 FA66q/zj907jk+yDqv7K1srcWtSO569y1qctWqA675a4hXIbpD4Aqoh08wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISQ4wsfiD5CU+Lmj9VRZHLVbPWLMB8GA1UdIwQY MBaAFNudGX+77iodzLT1VyKoIQ0xBbBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMt NGIyMzk1NmZiZDg2LzEvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMtNGIyMzk1NmZiZDg2 LzEvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtDcphKS Zom55NMm+7qGc3QVfm8p3893kP3EKijDRN748VBciW2RJiR+ChPKdpaEMf4Sz2Hv w6HK6sXeyex+Jn6npcaK8+ibtfe2ZpOedBc+9L7qR86S6VW/9o+X09vRUSMdMegK Xc/IUL2JTnuWmv+e0BjkkxFthu4EdHenb7VKf4Pxz6hjYRKhz051GpNDRQ8aQiyW +JvfTG0kjsJDJml3S/PaySqyn1asq2G5+IoMOCP5tox5WJppmTduNoPEk7riVneR c6YkXPt2EpnS+cIFNdjGu9D5y5djz2Ha3t7ZLOU8VvSU8se80UAfSy9kFHhx8LNE r6QTe5gSHzsdTw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:15 2026 by rpki-client