This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft File: 0627YSN4H_DjVBNEaseTHP9KSQ0.mft (raw, json) Hash identifier: x8jcFiBlgb2rCOxN8RapS251NvK+rj3Dz0ScX7Rrbkg= Subject key identifier: 1F:12:85:50:ED:31:F8:B3:78:A6:ED:89:57:FD:94:3A:CD:6C:FD:E7 Authority key identifier: D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D Certificate issuer: /CN=d3adbb6123781ff0e35413446ac7931cff4a490d Certificate serial: 019BF72CC46C6CEF075309F99293C69B7FE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 22:01:04 +0000 Manifest this update: Sun 25 Jan 2026 22:01:04 +0000 Manifest next update: Mon 26 Jan 2026 22:01:04 +0000 Files and hashes: 1: 0627YSN4H_DjVBNEaseTHP9KSQ0.crl (hash: cy98qpf+A9x84XJVNzCFm7Rt4U92I6YyCBdtot5SlP4=) 2: uVyWlFLKciqrsAXXjZQjx39QcNU.roa (hash: jEDtg9ux39nelJUaz7u7+ZJxoa/PnUqwfRMuyqZC6j0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:c4:6c:6c:ef:07:53:09:f9:92:93:c6:9b:7f:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3adbb6123781ff0e35413446ac7931cff4a490d Validity Not Before: Jan 25 22:01:04 2026 GMT Not After : Jan 26 22:01:04 2026 GMT Subject: CN=1f128550ed31f8b378a6ed8957fd943acd6cfde7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:84:2f:46:1c:1c:e1:99:3f:72:c2:ce:3e:df: 47:2d:d4:6e:c9:e1:98:9c:8c:7d:4e:0e:12:31:24: a8:80:e8:90:16:1e:df:b6:47:ab:e9:d9:3e:66:09: c5:2b:36:57:1b:6c:b5:b2:6d:88:e7:fe:2b:b4:ce: bf:c0:d2:e0:2e:4d:30:e6:d8:93:61:c2:c3:ef:72: 9f:fe:00:73:69:de:3e:7f:9f:2e:31:ca:df:48:35: 29:b9:56:f4:86:e1:4e:57:d5:8a:85:39:29:2a:7d: 0d:9c:11:d2:6b:77:71:13:08:42:a6:75:b8:d5:a4: ea:92:50:a4:6f:55:39:93:e3:f3:3c:94:a3:64:d3: c4:a4:36:f1:f3:a3:83:fd:06:62:a4:53:76:74:3b: 5f:3d:5a:6f:b0:b4:0b:37:1c:12:7a:9f:19:36:32: b9:bc:c1:4e:61:da:c7:9b:35:de:b0:52:1d:66:d7: d0:3e:46:e6:d0:2e:6d:95:39:cb:69:82:7c:f2:6c: b2:27:b4:92:e6:dd:92:e9:64:45:05:ad:32:1f:eb: 18:35:d5:45:71:b4:e2:ce:1a:74:cd:3f:60:1c:61: 6c:f8:68:df:8d:d8:36:cb:15:c1:15:55:4d:28:a2: fb:aa:42:df:c5:27:9d:a6:ad:04:00:c7:df:c3:53: 1d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:12:85:50:ED:31:F8:B3:78:A6:ED:89:57:FD:94:3A:CD:6C:FD:E7 X509v3 Authority Key Identifier: keyid:D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:41:60:ad:e9:f4:9c:8d:00:0e:49:e4:58:ea:cc:ee:7f:8c: 31:d9:e6:19:f1:de:e6:fb:2a:45:09:b2:0a:cf:e4:c9:89:2e: ff:ee:bb:87:73:c4:8d:e8:49:d8:a8:fa:f6:2a:c3:0c:45:53: 92:53:a9:cd:00:0e:4f:3c:4f:f1:46:b9:8d:81:3d:3a:5f:18: b0:d6:2f:bf:19:73:f6:86:40:2e:aa:de:00:e7:e4:74:7b:b6: 11:99:da:72:1a:2f:43:e8:31:05:33:f2:15:f9:d8:d8:29:39: 29:40:dd:66:80:22:44:9b:e0:fb:fb:c7:db:3b:e5:82:97:db: d0:82:a0:39:6d:d0:05:e0:9b:96:1b:e3:aa:f0:dc:c6:14:9d: 44:cf:bb:cc:5f:2f:c9:8a:67:d6:86:1c:c6:ce:55:22:88:e3: 83:6d:95:b3:99:c4:cd:e3:8b:42:36:28:f3:4d:bf:d7:24:26: 52:14:4b:05:ed:13:30:e6:76:c8:5c:c2:0b:07:e8:ce:87:de: 52:8f:16:e2:d3:bf:92:60:ef:f8:67:74:97:89:36:58:2f:52: 81:7a:5a:50:7d:6a:00:2e:9d:f6:77:01:b4:44:dd:3c:be:1c: e6:02:c4:5d:e6:bf:ed:34:ec:a8:11:c3:3b:11:b6:d3:d7:ac: d8:da:82:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LMRsbO8HUwn5kpPGm3/jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYWRiYjYxMjM3ODFmZjBlMzU0MTM0NDZhYzc5MzFjZmY0 YTQ5MGQwHhcNMjYwMTI1MjIwMTA0WhcNMjYwMTI2MjIwMTA0WjAzMTEwLwYDVQQD EygxZjEyODU1MGVkMzFmOGIzNzhhNmVkODk1N2ZkOTQzYWNkNmNmZGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoQvRhwc4Zk/csLOPt9HLdRuyeGY nIx9Tg4SMSSogOiQFh7ftker6dk+ZgnFKzZXG2y1sm2I5/4rtM6/wNLgLk0w5tiT YcLD73Kf/gBzad4+f58uMcrfSDUpuVb0huFOV9WKhTkpKn0NnBHSa3dxEwhCpnW4 1aTqklCkb1U5k+PzPJSjZNPEpDbx86OD/QZipFN2dDtfPVpvsLQLNxwSep8ZNjK5 vMFOYdrHmzXesFIdZtfQPkbm0C5tlTnLaYJ88myyJ7SS5t2S6WRFBa0yH+sYNdVF cbTizhp0zT9gHGFs+Gjfjdg2yxXBFVVNKKL7qkLfxSedpq0EAMffw1MdOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8ShVDtMfizeKbtiVf9lDrNbP3nMB8GA1UdIwQY MBaAFNOtu2EjeB/w41QTRGrHkxz/SkkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDYyN1lTTjRIX0RqVkJORWFzZVRIUDlLU1EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84YTNlZTktNGYzNy00NWJlLThhYWMt Nzk4YWI3NzNlYWZhLzEvMDYyN1lTTjRIX0RqVkJORWFzZVRIUDlLU1EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS84YTNlZTktNGYzNy00NWJlLThhYWMtNzk4YWI3NzNlYWZh LzEvMDYyN1lTTjRIX0RqVkJORWFzZVRIUDlLU1EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0Fgren0 nI0ADknkWOrM7n+MMdnmGfHe5vsqRQmyCs/kyYku/+67h3PEjehJ2Kj69irDDEVT klOpzQAOTzxP8Ua5jYE9Ol8YsNYvvxlz9oZALqreAOfkdHu2EZnachovQ+gxBTPy FfnY2Ck5KUDdZoAiRJvg+/vH2zvlgpfb0IKgOW3QBeCblhvjqvDcxhSdRM+7zF8v yYpn1oYcxs5VIojjg22Vs5nEzeOLQjYo802/1yQmUhRLBe0TMOZ2yFzCCwfozofe Uo8W4tO/kmDv+Gd0l4k2WC9SgXpaUH1qAC6d9ncBtETdPL4c5gLEXea/7TTsqBHD OxG209es2NqCUg== -----END CERTIFICATE-----Generated at Mon Jan 26 04:47:39 2026 by rpki-client