This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft File: 0FXguG8_USUFSGPPkmTmNG4Ju7c.mft (raw, json) Hash identifier: QBMoqccE8lL+HZIUIj9Qg7zITR015yDsATAsfJnsAP8= Subject key identifier: C3:81:D8:FA:D5:07:9F:5F:93:1F:4A:E7:A2:83:E9:3E:D2:41:96:4F Authority key identifier: D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7 Certificate issuer: /CN=d055e0b86f3f5125054863cf9264e6346e09bbb7 Certificate serial: 019BFD9D194CF747DBEF57DA8763A429B53A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft Manifest number: 17EC Signing time: Tue 27 Jan 2026 04:01:29 +0000 Manifest this update: Tue 27 Jan 2026 04:01:29 +0000 Manifest next update: Wed 28 Jan 2026 04:01:29 +0000 Files and hashes: 1: 0FXguG8_USUFSGPPkmTmNG4Ju7c.crl (hash: KssnMWA9LPZve1TCQxAr9R/fv7fq/F1/Am4EVn25itM=) 2: 1-w9c7pnS2PwsSI_8DXnKSmxWWCY.roa (hash: MtCzZ0IZEGmQ92H26BCNyGDc1iMQpeKiNKz+gparMMo=) 3: ghMafnCVzl3WC9e2jXdlhprt6tE.roa (hash: ogmfUJufoiGGCy+J4/nndYs1pyY6z1m58wMrPeX1rsg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:9d:19:4c:f7:47:db:ef:57:da:87:63:a4:29:b5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d055e0b86f3f5125054863cf9264e6346e09bbb7 Validity Not Before: Jan 27 04:01:29 2026 GMT Not After : Jan 28 04:01:29 2026 GMT Subject: CN=c381d8fad5079f5f931f4ae7a283e93ed241964f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fb:55:09:70:f7:6a:5d:ad:39:49:45:4a:8d: e8:01:c0:e5:66:a9:f5:b8:70:bb:5f:49:a9:3f:06: 87:ca:5a:26:a8:09:47:d1:fb:b4:f8:b3:18:5f:76: 0a:13:97:54:93:c5:4c:63:af:7f:af:98:1c:83:bf: b0:02:5a:2d:cd:b6:11:b6:7b:17:b2:43:93:38:6a: 74:fc:a4:33:6d:2c:65:a7:14:1a:37:77:8d:e6:b0: 07:9e:3b:cb:c7:70:42:a8:3f:cf:31:51:c5:01:5d: 5a:aa:42:9b:d5:fe:fd:6e:67:57:d4:88:1a:5b:87: e6:b1:22:82:10:d5:c0:0c:85:fc:a9:45:3b:27:55: b5:da:5f:6d:c5:0e:ec:f5:db:65:c7:b9:b1:d1:11: 9b:22:20:03:b0:54:fb:05:43:76:ef:62:39:cd:c0: ac:55:e6:3a:1d:f6:b9:e0:7a:57:c3:e1:1f:66:9c: c1:3b:b6:29:e7:74:35:33:37:65:27:5c:88:8d:15: 26:99:5a:04:e8:32:ce:35:b0:2a:90:85:7c:b1:7b: bc:d4:66:44:ad:fe:92:b7:35:44:2c:28:e5:92:65: cb:27:62:41:0b:34:2f:f5:4a:3e:76:0a:05:32:97: 3d:ab:a2:39:a8:26:9c:57:77:2f:7f:b3:93:bd:d7: d9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:81:D8:FA:D5:07:9F:5F:93:1F:4A:E7:A2:83:E9:3E:D2:41:96:4F X509v3 Authority Key Identifier: keyid:D0:55:E0:B8:6F:3F:51:25:05:48:63:CF:92:64:E6:34:6E:09:BB:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FXguG8_USUFSGPPkmTmNG4Ju7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/1cba9f-cd6e-4d12-a78d-f98c7fec194e/1/0FXguG8_USUFSGPPkmTmNG4Ju7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:bb:50:6c:f8:c7:81:20:0b:91:46:ab:ed:d5:d1:2d:4f:79: 7c:45:c8:76:99:d7:9d:a1:b4:f3:5a:24:99:a1:18:c6:35:03: 4a:3e:28:04:d3:82:7a:aa:40:81:64:ee:c4:f7:69:42:5e:fd: 6d:9a:03:12:d2:33:1c:80:9e:18:11:98:64:30:eb:70:e4:0d: 3a:be:bc:39:81:24:b4:32:4e:eb:9b:d5:44:63:36:15:48:68: 56:ff:b5:c7:82:f8:1a:a5:43:18:c0:19:b0:e4:63:33:20:37: e4:f5:8b:40:55:31:70:ab:b2:14:38:43:a4:a3:7b:f0:ab:42: b3:7f:f7:4f:04:37:55:a8:c7:20:96:de:19:28:f9:90:13:b5: 56:89:dc:91:af:4a:9f:60:73:3a:fd:c0:1b:59:43:db:97:b3: c8:54:c9:19:7f:90:59:7a:61:04:66:68:8c:e9:3f:df:29:21: 02:e1:a7:56:3e:37:fa:b4:b2:71:a8:78:28:d1:c6:97:cf:8c: 48:b7:88:a8:e9:28:25:13:a1:c0:dc:66:ac:47:24:a2:e8:7b: d2:eb:2b:54:55:10:e2:99:95:f8:66:17:1b:36:43:2b:b2:7b: b3:38:ac:bc:28:fd:78:05:2f:d4:97:70:3e:78:30:70:65:82: 96:95:0b:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9nRlM90fb71fah2OkKbU6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNTVlMGI4NmYzZjUxMjUwNTQ4NjNjZjkyNjRlNjM0NmUw OWJiYjcwHhcNMjYwMTI3MDQwMTI5WhcNMjYwMTI4MDQwMTI5WjAzMTEwLwYDVQQD EyhjMzgxZDhmYWQ1MDc5ZjVmOTMxZjRhZTdhMjgzZTkzZWQyNDE5NjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlftVCXD3al2tOUlFSo3oAcDlZqn1 uHC7X0mpPwaHylomqAlH0fu0+LMYX3YKE5dUk8VMY69/r5gcg7+wAlotzbYRtnsX skOTOGp0/KQzbSxlpxQaN3eN5rAHnjvLx3BCqD/PMVHFAV1aqkKb1f79bmdX1Iga W4fmsSKCENXADIX8qUU7J1W12l9txQ7s9dtlx7mx0RGbIiADsFT7BUN272I5zcCs VeY6Hfa54HpXw+EfZpzBO7Yp53Q1MzdlJ1yIjRUmmVoE6DLONbAqkIV8sXu81GZE rf6StzVELCjlkmXLJ2JBCzQv9Uo+dgoFMpc9q6I5qCacV3cvf7OTvdfZ4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOB2PrVB59fkx9K56KD6T7SQZZPMB8GA1UdIwQY MBaAFNBV4LhvP1ElBUhjz5Jk5jRuCbu3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8xY2JhOWYtY2Q2ZS00ZDEyLWE3OGQt Zjk4YzdmZWMxOTRlLzEvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8xY2JhOWYtY2Q2ZS00ZDEyLWE3OGQtZjk4YzdmZWMxOTRl LzEvMEZYZ3VHOF9VU1VGU0dQUGttVG1ORzRKdTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7tQbPjH gSALkUar7dXRLU95fEXIdpnXnaG081okmaEYxjUDSj4oBNOCeqpAgWTuxPdpQl79 bZoDEtIzHICeGBGYZDDrcOQNOr68OYEktDJO65vVRGM2FUhoVv+1x4L4GqVDGMAZ sORjMyA35PWLQFUxcKuyFDhDpKN78KtCs3/3TwQ3VajHIJbeGSj5kBO1Voncka9K n2BzOv3AG1lD25ezyFTJGX+QWXphBGZojOk/3ykhAuGnVj43+rSycah4KNHGl8+M SLeIqOkoJROhwNxmrEckouh70usrVFUQ4pmV+GYXGzZDK7J7szisvCj9eAUv1Jdw PngwcGWClpULTw== -----END CERTIFICATE-----Generated at Tue Jan 27 07:46:47 2026 by rpki-client