This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft File: 2P9x8rGo1ir0Rqkror3qM_m2ndw.mft (raw, json) Hash identifier: sGbU5J1HZXMAsTBHbloslda2s13h7e3N52LozBmwXn4= Subject key identifier: AA:01:87:2F:A4:05:5E:3F:43:53:8C:25:30:05:A1:52:92:6B:C3:64 Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc Certificate serial: 019BF79A8A0614696DA1BB480F33155F96BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft Manifest number: 0F30 Signing time: Mon 26 Jan 2026 00:00:58 +0000 Manifest this update: Mon 26 Jan 2026 00:00:58 +0000 Manifest next update: Tue 27 Jan 2026 00:00:58 +0000 Files and hashes: 1: 2P9x8rGo1ir0Rqkror3qM_m2ndw.crl (hash: Ovc/w3WLMRC42ZIXvEDtZ+67M4QTjwi6uCjPEVc9tHs=) 2: PsYwk0RCo4-NGQkivQ24swWzsAE.roa (hash: KKbuatZB78bNN9aUEx4rRnhz0y373PaTfQEuw6Uwxzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:8a:06:14:69:6d:a1:bb:48:0f:33:15:5f:96:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc Validity Not Before: Jan 26 00:00:58 2026 GMT Not After : Jan 27 00:00:58 2026 GMT Subject: CN=aa01872fa4055e3f43538c253005a152926bc364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8b:b0:70:b6:bc:dd:df:71:30:99:ed:c8:90: c8:5f:41:16:b3:13:6c:ea:74:4e:24:5f:75:a0:aa: 6b:bc:ba:b5:1e:b3:46:b5:b3:00:52:31:f5:8d:33: 02:eb:6b:70:a7:36:c8:45:cb:3b:75:b7:db:09:f0: 85:d6:a1:bf:4d:ae:83:19:e1:e8:09:e7:32:69:89: 48:6b:fd:8b:9a:e7:42:2f:50:68:71:da:56:ac:25: a0:4e:8f:2b:94:c8:99:d3:88:d9:c5:2f:02:45:94: 39:22:52:ab:95:a5:c6:5d:ca:d6:a1:a0:de:9b:85: ee:0b:fc:83:39:99:4d:1c:1e:08:a2:13:80:d2:2f: 30:e2:1e:55:34:88:3f:12:59:b8:a5:6c:b9:40:f9: b1:0c:73:3e:41:55:ad:63:1e:37:03:e8:c3:27:d5: 04:be:74:58:6a:ff:a2:c1:da:bb:8c:29:e3:d1:c2: e1:6b:9b:61:e9:7c:68:e2:6a:ad:7c:8b:8d:c0:0f: ed:58:e4:14:1f:a7:47:b8:77:cd:92:b0:1f:16:ad: f3:c9:a1:f4:3a:b9:d7:c5:ed:a1:d1:26:f1:ac:80: 43:d9:df:11:25:fa:b5:0c:fa:75:7d:57:6b:a7:b7: 81:03:87:c8:b7:97:65:3a:e6:55:26:5a:3c:de:95: 41:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:01:87:2F:A4:05:5E:3F:43:53:8C:25:30:05:A1:52:92:6B:C3:64 X509v3 Authority Key Identifier: keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:51:7c:f6:00:62:3e:f6:a7:ef:3a:a1:2d:eb:6e:ae:23:60: 81:59:2f:c7:6f:34:f1:8e:0b:59:f1:aa:72:f5:15:f1:a5:dc: 02:2f:38:d0:69:dd:5b:b8:7d:a3:d2:66:a5:32:d2:da:00:df: 6e:74:a2:26:23:6f:23:98:0e:0b:9c:0a:7f:33:4a:df:25:82: 64:d1:34:61:b5:60:cf:d5:0f:a1:48:b4:37:9e:59:5f:d5:66: 25:91:69:d9:dd:b4:3e:ae:6b:3d:2a:1f:2a:88:7f:1d:0a:58: 0f:4d:b5:a2:e8:ac:d4:01:0e:e7:77:ca:ca:9b:6e:0c:e8:11: 73:eb:41:c7:90:a4:6c:0e:1a:fe:28:32:cd:48:66:91:f0:13: 44:67:0b:98:de:31:7c:09:c1:70:b2:ff:cf:33:1a:79:ab:2c: 0f:57:37:aa:67:13:25:4c:eb:74:b6:ab:3d:a3:44:dc:29:f3: 00:93:7e:57:29:44:98:d3:24:3e:b4:f7:4b:0f:13:50:8e:54: 69:b5:bc:e0:20:ba:38:4c:8d:24:fa:dd:66:28:5a:93:d5:99: 00:82:6e:c0:27:28:0c:9a:ab:72:a8:1e:6d:11:e8:a4:29:0c: 34:0b:d7:38:14:d7:db:b9:a1:36:f8:77:1b:85:6c:22:84:4b: 06:26:cf:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mooGFGltobtIDzMVX5a/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZmY3MWYyYjFhOGQ2MmFmNDQ2YTkyYmEyYmRlYTMzZjli NjlkZGMwHhcNMjYwMTI2MDAwMDU4WhcNMjYwMTI3MDAwMDU4WjAzMTEwLwYDVQQD EyhhYTAxODcyZmE0MDU1ZTNmNDM1MzhjMjUzMDA1YTE1MjkyNmJjMzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYuwcLa83d9xMJntyJDIX0EWsxNs 6nROJF91oKprvLq1HrNGtbMAUjH1jTMC62twpzbIRcs7dbfbCfCF1qG/Ta6DGeHo CecyaYlIa/2LmudCL1BocdpWrCWgTo8rlMiZ04jZxS8CRZQ5IlKrlaXGXcrWoaDe m4XuC/yDOZlNHB4IohOA0i8w4h5VNIg/Elm4pWy5QPmxDHM+QVWtYx43A+jDJ9UE vnRYav+iwdq7jCnj0cLha5th6Xxo4mqtfIuNwA/tWOQUH6dHuHfNkrAfFq3zyaH0 OrnXxe2h0SbxrIBD2d8RJfq1DPp1fVdrp7eBA4fIt5dlOuZVJlo83pVBjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoBhy+kBV4/Q1OMJTAFoVKSa8NkMB8GA1UdIwQY MBaAFNj/cfKxqNYq9EapK6K96jP5tp3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lYTcxZDQtNGRiYi00NDUxLWIyNmIt M2I3NWE1NjdmNzNhLzEvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lYTcxZDQtNGRiYi00NDUxLWIyNmItM2I3NWE1NjdmNzNh LzEvMlA5eDhyR28xaXIwUnFrcm9yM3FNX20ybmR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVF89gBi Pvan7zqhLeturiNggVkvx2808Y4LWfGqcvUV8aXcAi840GndW7h9o9JmpTLS2gDf bnSiJiNvI5gOC5wKfzNK3yWCZNE0YbVgz9UPoUi0N55ZX9VmJZFp2d20Pq5rPSof Koh/HQpYD021ouis1AEO53fKyptuDOgRc+tBx5CkbA4a/igyzUhmkfATRGcLmN4x fAnBcLL/zzMaeassD1c3qmcTJUzrdLarPaNE3CnzAJN+VylEmNMkPrT3Sw8TUI5U abW84CC6OEyNJPrdZihak9WZAIJuwCcoDJqrcqgebRHopCkMNAvXOBTX27mhNvh3 G4VsIoRLBibPjA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:49:32 2026 by rpki-client