This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft File: 0i870LrmA6t5BgKpa7vEK1Mi6I8.mft (raw, json) Hash identifier: 6OUdpwMOQ3ct1KdGO2TyNCDkNIGzkBPNMDR/QnZ9ifw= Subject key identifier: 2F:1B:C3:10:8A:C9:7C:50:C1:A8:AB:EE:EF:79:F7:D6:77:EC:9C:E3 Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F Certificate issuer: /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f Certificate serial: 019BF5E37299262D98EC6F494F38232195F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft Manifest number: 0E68 Signing time: Sun 25 Jan 2026 16:01:22 +0000 Manifest this update: Sun 25 Jan 2026 16:01:22 +0000 Manifest next update: Mon 26 Jan 2026 16:01:22 +0000 Files and hashes: 1: 0i870LrmA6t5BgKpa7vEK1Mi6I8.crl (hash: ZY43FTNtImqrz7Xzk9Pd+AWG4WDugTYHEdLRVQIKhaI=) 2: 8YQYzkkWSUbJ3UPPymYSW914MMg.roa (hash: 9lvLYcAIuT8e6AK3a0cVw0sCFSHzJhGpdm+DyXOpWt0=) 3: 96-EzPJNO2K_r89WsSa8F4wKfII.roa (hash: TgdBDufBqmIta91fueVV5ENNB6Zw3/BojYphtII6yZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:72:99:26:2d:98:ec:6f:49:4f:38:23:21:95:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f Validity Not Before: Jan 25 16:01:22 2026 GMT Not After : Jan 26 16:01:22 2026 GMT Subject: CN=2f1bc3108ac97c50c1a8abeeef79f7d677ec9ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a3:bb:84:30:ab:e5:61:c0:79:a4:b2:ed:5c: e4:cd:11:ba:50:5e:b1:48:ef:81:1b:a0:94:7a:d1: c7:b5:7f:52:60:db:ee:b0:96:af:bf:96:0f:20:9b: 4a:28:bc:47:1d:cb:23:99:7e:4d:1f:28:50:53:09: 2b:53:9a:54:a0:52:6c:09:e4:58:e5:6e:4d:4c:ce: 12:ef:43:da:8b:40:24:15:1d:6a:f7:ed:e8:22:9d: de:54:97:53:10:d5:89:41:3a:86:53:f0:5f:ee:32: 5b:aa:20:65:66:ad:04:6e:7b:20:aa:95:92:be:23: 99:71:69:1f:9b:b1:cb:1c:d5:d0:5b:26:5a:81:6a: 25:aa:7c:c9:a1:1c:1a:a8:bd:92:59:c3:db:5a:47: 4c:dd:71:86:66:de:b0:fe:3c:e0:27:3d:51:fd:9c: bf:d6:a6:ec:61:88:86:71:82:01:6c:77:75:68:4a: e8:2a:17:ae:be:a8:fd:59:bb:14:fc:41:bb:51:cb: f1:cb:87:c0:ec:5f:84:6d:e8:be:28:27:33:86:1f: b1:f6:25:a5:c8:11:ba:7c:c0:fb:ff:0f:09:a8:b5: 6c:c2:4a:ec:0d:dc:54:ae:d3:14:53:f8:9b:92:8b: 07:18:97:1f:ad:fc:5b:65:cb:1d:01:97:48:23:6a: 96:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:1B:C3:10:8A:C9:7C:50:C1:A8:AB:EE:EF:79:F7:D6:77:EC:9C:E3 X509v3 Authority Key Identifier: keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:36:6f:c1:b0:9e:c7:1c:a0:c9:a4:77:cd:0a:41:67:5f:f8: ba:fd:c0:d0:b6:c7:df:5f:d5:aa:71:81:2c:5b:c0:97:90:df: d2:4c:fa:87:b3:e6:bb:23:90:20:30:52:92:ae:d1:31:37:56: fa:b4:b4:7d:11:58:a1:0a:49:e9:0d:a0:a2:7a:7e:1c:dc:c5: 7c:dd:d5:da:e0:20:82:9c:76:60:cc:4d:21:dc:a9:86:89:60: 59:f9:ae:e8:3b:3f:a4:45:c8:ee:2a:02:97:ed:b6:1d:0d:c2: 96:30:95:e7:00:30:b6:a6:70:a9:ee:b6:b5:94:ce:d8:bc:1c: 88:1e:4d:d3:1d:9c:ab:b6:b3:f7:66:f5:13:61:7d:6a:9e:26: b1:ed:d6:0c:38:d2:9c:32:e5:00:c2:31:2f:29:3d:e8:01:00: 59:d2:cd:8e:fa:58:78:02:04:f5:a7:03:a3:ee:20:b7:e6:85: f3:0c:6b:a0:4a:65:26:01:c5:db:47:51:1a:d8:49:71:29:e1: 18:e9:cf:30:da:d7:f3:78:e7:05:f5:44:11:10:69:74:8d:f3: 3b:5f:dd:4c:ef:50:95:85:8f:6c:d1:bc:2e:ad:1a:ee:fc:45: f2:50:2e:e4:bf:f0:3a:7c:21:96:1e:2b:c8:47:fb:92:84:2e: 2e:41:20:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv143KZJi2Y7G9JTzgjIZXxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMmYzYmQwYmFlNjAzYWI3OTA2MDJhOTZiYmJjNDJiNTMy MmU4OGYwHhcNMjYwMTI1MTYwMTIyWhcNMjYwMTI2MTYwMTIyWjAzMTEwLwYDVQQD EygyZjFiYzMxMDhhYzk3YzUwYzFhOGFiZWVlZjc5ZjdkNjc3ZWM5Y2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaO7hDCr5WHAeaSy7VzkzRG6UF6x SO+BG6CUetHHtX9SYNvusJavv5YPIJtKKLxHHcsjmX5NHyhQUwkrU5pUoFJsCeRY 5W5NTM4S70Pai0AkFR1q9+3oIp3eVJdTENWJQTqGU/Bf7jJbqiBlZq0EbnsgqpWS viOZcWkfm7HLHNXQWyZagWolqnzJoRwaqL2SWcPbWkdM3XGGZt6w/jzgJz1R/Zy/ 1qbsYYiGcYIBbHd1aEroKheuvqj9WbsU/EG7Ucvxy4fA7F+Ebei+KCczhh+x9iWl yBG6fMD7/w8JqLVswkrsDdxUrtMUU/ibkosHGJcfrfxbZcsdAZdII2qW+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8bwxCKyXxQwair7u9599Z37JzjMB8GA1UdIwQY MBaAFNIvO9C65gOreQYCqWu7xCtTIuiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGk4NzBMcm1BNnQ1QmdLcGE3dkVLMU1pNkk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82ZTUxY2ItNTE3Zi00Y2IxLWEzYTAt ZDcyMWJkMmU5ZDUzLzEvMGk4NzBMcm1BNnQ1QmdLcGE3dkVLMU1pNkk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82ZTUxY2ItNTE3Zi00Y2IxLWEzYTAtZDcyMWJkMmU5ZDUz LzEvMGk4NzBMcm1BNnQ1QmdLcGE3dkVLMU1pNkk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTZvwbCe xxygyaR3zQpBZ1/4uv3A0LbH31/VqnGBLFvAl5Df0kz6h7PmuyOQIDBSkq7RMTdW +rS0fRFYoQpJ6Q2gonp+HNzFfN3V2uAggpx2YMxNIdypholgWfmu6Ds/pEXI7ioC l+22HQ3CljCV5wAwtqZwqe62tZTO2LwciB5N0x2cq7az92b1E2F9ap4mse3WDDjS nDLlAMIxLyk96AEAWdLNjvpYeAIE9acDo+4gt+aF8wxroEplJgHF20dRGthJcSnh GOnPMNrX83jnBfVEERBpdI3zO1/dTO9QlYWPbNG8Lq0a7vxF8lAu5L/wOnwhlh4r yEf7koQuLkEg4w== -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:03 2026 by rpki-client