This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft File: 0QENo1diQjJM77LIHBM5psDjtAM.mft (raw, json) Hash identifier: o8pJ7H7dORjvKLc3sf3ciZmJSfqNWIc85wOGY2eZvLI= Subject key identifier: F7:B0:B5:B8:CA:39:82:1E:F2:B2:15:06:2B:C8:17:D4:FD:F5:50:B0 Authority key identifier: D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03 Certificate issuer: /CN=d1010da3576242324cefb2c81c1339a6c0e3b403 Certificate serial: 019BF72D4FC10C357A11B49FFC712599CDF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 22:01:40 +0000 Manifest this update: Sun 25 Jan 2026 22:01:40 +0000 Manifest next update: Mon 26 Jan 2026 22:01:40 +0000 Files and hashes: 1: 0QENo1diQjJM77LIHBM5psDjtAM.crl (hash: maRZEwZaxvIbJKrGBi1ehJzUDIS4RwnGgZYwIjOMEiY=) 2: ObhdsLoa75B_QVzex3UCt65oqHE.roa (hash: 7Rfm5BnnQZXvsHH1k9k4V3PGLN/GXjrUrEyjZS8MwJc=) 3: a-4CKpObY5cKeSuMoMgMffjvfWQ.roa (hash: SXxBaVwsAs/dLbHjv4oplsKiiaVfa0F06dRrYRWo100=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:4f:c1:0c:35:7a:11:b4:9f:fc:71:25:99:cd:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1010da3576242324cefb2c81c1339a6c0e3b403 Validity Not Before: Jan 25 22:01:40 2026 GMT Not After : Jan 26 22:01:40 2026 GMT Subject: CN=f7b0b5b8ca39821ef2b215062bc817d4fdf550b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:20:f9:5a:1f:75:17:21:7f:e9:4c:3b:40:4a: 38:dc:9b:8e:a5:b9:a8:98:12:64:03:27:3f:f4:de: 18:73:37:f9:80:28:4a:25:2a:df:49:33:b3:11:3a: c3:f7:ed:9e:bf:7a:88:2a:46:61:d0:18:b5:84:57: 34:22:54:50:08:98:61:a8:d2:04:a7:13:2f:2c:8c: 74:d7:e4:77:cf:3d:7e:7a:78:b8:0f:6c:88:61:c7: 1e:c5:f6:90:e5:d4:75:4f:f6:af:a1:ca:0d:00:0e: 5e:21:6d:84:26:c4:67:5e:06:0f:45:a3:6a:ea:d5: a0:39:0c:62:92:6c:0c:3c:5e:db:4f:37:5f:7f:7b: ad:a0:e1:92:79:b5:bc:b3:ca:76:90:9e:eb:b4:f3: 44:53:27:7b:4c:e8:e5:70:14:ce:96:3a:ba:c7:d8: 18:6d:10:04:0d:b3:4e:e3:6e:32:7a:91:09:a2:b1: 40:a6:0f:68:57:9b:91:9b:33:2d:bf:0c:fd:bd:3c: 56:b4:8a:9b:ba:d7:46:67:c0:60:0e:be:09:0c:d2: 19:52:6e:83:9b:5a:25:07:3a:71:ac:63:25:df:7f: a5:05:d4:b4:41:3f:b7:f1:02:ec:5d:c5:6c:6b:dd: b6:35:29:4f:7a:26:9c:af:e7:83:cf:f8:b0:16:94: 70:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B0:B5:B8:CA:39:82:1E:F2:B2:15:06:2B:C8:17:D4:FD:F5:50:B0 X509v3 Authority Key Identifier: keyid:D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:c6:eb:35:7c:b7:10:99:ed:ae:d5:27:56:4b:5f:08:25:28: 27:65:a9:a0:6f:e9:b2:58:64:80:f8:82:cd:58:18:c7:20:28: fb:aa:26:28:6c:c2:44:4a:15:f6:a8:64:66:3c:0d:aa:ae:b5: 2a:8a:8c:d8:ee:d1:4a:19:ef:42:e0:3e:b9:bc:b7:10:74:8b: db:b0:1c:9d:ec:f0:c8:89:cb:27:4c:d4:f0:8b:89:68:8d:25: 3a:4f:0a:f8:ed:a7:3e:65:fc:02:1c:44:0e:7b:ef:ef:06:05: 5d:6e:63:ce:89:0e:22:22:c5:eb:e6:07:63:f9:dd:f4:cc:98: d6:0d:20:82:6b:e7:79:75:7a:ab:8a:97:0f:32:a1:99:48:f3: 29:d8:51:27:54:cc:45:1c:e3:d3:e6:c8:c8:0a:5d:41:6c:d1: 9b:14:0c:9d:17:53:71:d3:9e:8c:d2:56:a6:41:2e:25:61:d0: d7:04:d5:67:2c:45:eb:87:6e:a1:72:be:91:fe:31:e7:cc:9c: 64:a5:97:7c:5f:4d:94:54:2e:bf:de:a4:02:77:fb:67:5d:41: 7d:e1:76:6e:40:cd:3f:da:eb:92:c5:a5:83:cc:3a:65:9c:f7: 31:ee:81:23:23:ba:a8:49:a2:d7:b4:d5:a1:cb:83:69:e0:e6: 2d:e0:6f:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LU/BDDV6EbSf/HElmc3zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMDEwZGEzNTc2MjQyMzI0Y2VmYjJjODFjMTMzOWE2YzBl M2I0MDMwHhcNMjYwMTI1MjIwMTQwWhcNMjYwMTI2MjIwMTQwWjAzMTEwLwYDVQQD EyhmN2IwYjViOGNhMzk4MjFlZjJiMjE1MDYyYmM4MTdkNGZkZjU1MGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiD5Wh91FyF/6Uw7QEo43JuOpbmo mBJkAyc/9N4Yczf5gChKJSrfSTOzETrD9+2ev3qIKkZh0Bi1hFc0IlRQCJhhqNIE pxMvLIx01+R3zz1+eni4D2yIYccexfaQ5dR1T/avocoNAA5eIW2EJsRnXgYPRaNq 6tWgOQxikmwMPF7bTzdff3utoOGSebW8s8p2kJ7rtPNEUyd7TOjlcBTOljq6x9gY bRAEDbNO424yepEJorFApg9oV5uRmzMtvwz9vTxWtIqbutdGZ8BgDr4JDNIZUm6D m1olBzpxrGMl33+lBdS0QT+38QLsXcVsa922NSlPeiacr+eDz/iwFpRwBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPewtbjKOYIe8rIVBivIF9T99VCwMB8GA1UdIwQY MBaAFNEBDaNXYkIyTO+yyBwTOabA47QDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFFFTm8xZGlRakpNNzdMSUhCTTVwc0RqdEFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81NzdiMTEtNzAwOS00ODZjLTkwMTAt YTcwNDEyZmJjODMyLzEvMFFFTm8xZGlRakpNNzdMSUhCTTVwc0RqdEFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi81NzdiMTEtNzAwOS00ODZjLTkwMTAtYTcwNDEyZmJjODMy LzEvMFFFTm8xZGlRakpNNzdMSUhCTTVwc0RqdEFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacbrNXy3 EJntrtUnVktfCCUoJ2WpoG/pslhkgPiCzVgYxyAo+6omKGzCREoV9qhkZjwNqq61 KoqM2O7RShnvQuA+uby3EHSL27AcnezwyInLJ0zU8IuJaI0lOk8K+O2nPmX8AhxE Dnvv7wYFXW5jzokOIiLF6+YHY/nd9MyY1g0ggmvneXV6q4qXDzKhmUjzKdhRJ1TM RRzj0+bIyApdQWzRmxQMnRdTcdOejNJWpkEuJWHQ1wTVZyxF64duoXK+kf4x58yc ZKWXfF9NlFQuv96kAnf7Z11BfeF2bkDNP9rrksWlg8w6ZZz3Me6BIyO6qEmi17TV ocuDaeDmLeBvKA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:02:42 2026 by rpki-client