This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft File: c90olFaK69Ba1kMtU89w4s14jm4.mft (raw, json) Hash identifier: 90YlTNT81WJjri/pAx8mvKbmX080DTpjOlOzOw0GIPw= Subject key identifier: B9:A2:46:F1:55:1A:BD:D1:49:A9:D7:23:31:8A:90:5B:43:92:9F:3C Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E Certificate issuer: /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e Certificate serial: 019BF5E3CFC961F62264EE099F61113E243F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 16:01:46 +0000 Manifest this update: Sun 25 Jan 2026 16:01:46 +0000 Manifest next update: Mon 26 Jan 2026 16:01:46 +0000 Files and hashes: 1: c90olFaK69Ba1kMtU89w4s14jm4.crl (hash: LQuScs0VMPV1HGZM9EwDyRmYeUc5Jv1avgS+nB054Dg=) 2: tz2e93GZ_VkXqwiin5UrF6tTl-E.roa (hash: fs9g5+VLu3OTriRVnlbcf2rwqdoNP2oMRyLa0WT622w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:cf:c9:61:f6:22:64:ee:09:9f:61:11:3e:24:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e Validity Not Before: Jan 25 16:01:46 2026 GMT Not After : Jan 26 16:01:46 2026 GMT Subject: CN=b9a246f1551abdd149a9d723318a905b43929f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9e:35:60:c4:94:7a:0d:d1:65:4d:a0:62:2b: f5:c9:2a:11:9d:d4:66:fb:3f:19:d1:5a:60:e3:41: 36:a3:08:a4:aa:6c:62:08:e8:5a:15:2e:a6:60:e6: 55:35:57:c8:dd:28:4e:ca:0c:b6:7f:a8:2a:2f:16: 6b:28:51:2c:5f:17:9e:9d:cd:97:ac:a7:b0:28:51: fa:20:48:58:3e:a9:0c:2d:89:82:1c:90:16:88:2c: 8e:bc:6e:76:75:36:a0:5d:2e:b1:b3:11:a2:18:3b: 8f:70:fc:ef:6e:85:d0:0a:72:21:7b:3a:cd:50:68: e0:70:51:c6:05:1b:79:76:cd:a5:2b:3a:cf:88:c1: d3:f3:c6:5b:23:97:13:ac:dc:bc:9a:52:df:f1:b0: e6:89:dd:7e:65:00:fa:8c:80:cc:fb:b7:5a:1a:f3: ad:3e:7a:df:56:4c:f3:c3:21:b2:a8:3d:1a:c2:e2: 8f:f7:39:99:89:1e:c1:d9:a2:a7:49:ba:16:eb:14: ba:29:77:56:18:d9:33:68:7a:db:08:55:61:49:0d: b9:9e:23:9d:26:69:74:24:77:80:7f:3c:90:c9:82: d8:20:b3:52:4f:46:bd:19:60:ed:b2:ed:fb:19:8b: 2d:45:04:06:9b:be:5b:4e:30:76:01:53:84:09:d4: 67:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A2:46:F1:55:1A:BD:D1:49:A9:D7:23:31:8A:90:5B:43:92:9F:3C X509v3 Authority Key Identifier: keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:0f:17:ed:59:e8:7d:af:32:93:5b:19:50:88:f7:36:86:a2: 34:9a:60:1a:5d:04:12:c9:07:9f:c1:34:21:e6:1e:f9:46:a4: d2:7b:35:5c:d2:38:68:d4:15:45:68:e0:c9:78:b7:96:2d:22: 0c:a9:b9:00:92:08:15:a0:65:7c:57:e4:e2:85:e3:2a:d0:01: b2:35:d9:32:22:a6:de:fe:d2:b9:ce:45:70:6f:9a:9a:98:d5: e7:cc:70:c3:f2:05:26:8f:e0:44:6b:7d:71:a5:90:09:d9:b2: a1:a1:94:4d:5e:c1:6d:c4:12:42:10:18:82:cf:09:c8:18:ee: ff:81:60:26:cc:63:56:40:68:68:8b:9b:1d:92:e9:17:ce:0e: b0:e7:7e:54:ef:b9:be:a9:c1:38:f1:4a:c0:56:43:f0:82:1c: 9e:cd:2a:42:b6:05:7b:14:fe:a0:5f:d2:1a:fb:f8:6e:22:54: cc:b2:a6:96:d8:1c:7c:88:77:1f:f4:a3:b6:c2:6b:1a:96:67: c3:13:ae:7b:a1:46:c4:84:16:ca:f2:c7:1f:e1:c0:6d:5e:ac: 9d:e3:35:d6:91:65:7d:85:4b:1d:8c:e2:39:b0:8b:69:ce:0e: fc:45:cb:39:b0:74:4b:94:65:84:a3:74:3f:37:29:ce:da:4a: 25:34:29:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv148/JYfYiZO4Jn2ERPiQ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZGQyODk0NTY4YWViZDA1YWQ2NDMyZDUzY2Y3MGUyY2Q3 ODhlNmUwHhcNMjYwMTI1MTYwMTQ2WhcNMjYwMTI2MTYwMTQ2WjAzMTEwLwYDVQQD EyhiOWEyNDZmMTU1MWFiZGQxNDlhOWQ3MjMzMThhOTA1YjQzOTI5ZjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj541YMSUeg3RZU2gYiv1ySoRndRm +z8Z0Vpg40E2owikqmxiCOhaFS6mYOZVNVfI3ShOygy2f6gqLxZrKFEsXxeenc2X rKewKFH6IEhYPqkMLYmCHJAWiCyOvG52dTagXS6xsxGiGDuPcPzvboXQCnIhezrN UGjgcFHGBRt5ds2lKzrPiMHT88ZbI5cTrNy8mlLf8bDmid1+ZQD6jIDM+7daGvOt PnrfVkzzwyGyqD0awuKP9zmZiR7B2aKnSboW6xS6KXdWGNkzaHrbCFVhSQ25niOd Jml0JHeAfzyQyYLYILNST0a9GWDtsu37GYstRQQGm75bTjB2AVOECdRnHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmiRvFVGr3RSanXIzGKkFtDkp88MB8GA1UdIwQY MBaAFHPdKJRWiuvQWtZDLVPPcOLNeI5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hMWQyMGUtNTBhMi00NGRjLWIxZTgt YTY3ZGNhOGEwODhjLzEvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hMWQyMGUtNTBhMi00NGRjLWIxZTgtYTY3ZGNhOGEwODhj LzEvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtg8X7Vno fa8yk1sZUIj3NoaiNJpgGl0EEskHn8E0IeYe+Uak0ns1XNI4aNQVRWjgyXi3li0i DKm5AJIIFaBlfFfk4oXjKtABsjXZMiKm3v7Suc5FcG+ampjV58xww/IFJo/gRGt9 caWQCdmyoaGUTV7BbcQSQhAYgs8JyBju/4FgJsxjVkBoaIubHZLpF84OsOd+VO+5 vqnBOPFKwFZD8IIcns0qQrYFexT+oF/SGvv4biJUzLKmltgcfIh3H/SjtsJrGpZn wxOue6FGxIQWyvLHH+HAbV6sneM11pFlfYVLHYziObCLac4O/EXLObB0S5RlhKN0 PzcpztpKJTQprQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:08:34 2026 by rpki-client