This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft File: p0msqF3GbIPOVezcBFyWB1yn3rw.mft (raw, json) Hash identifier: CYJa9ovCBvHMHXzZgSTz7bNwu8py8Q9s1N/CCP3P/6A= Subject key identifier: 45:5C:AE:2A:D2:F6:75:CC:C4:9C:E9:86:93:41:B6:8E:FD:30:99:42 Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc Certificate serial: 019C009D3FB459C0E4E63567F61EFFE433B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft Manifest number: 17EF Signing time: Tue 27 Jan 2026 18:00:31 +0000 Manifest this update: Tue 27 Jan 2026 18:00:31 +0000 Manifest next update: Wed 28 Jan 2026 18:00:31 +0000 Files and hashes: 1: 4g2KoICvRhAlF5rUzbxNV7SMp8U.roa (hash: Ctanikf8U9Sdy0xnpwf0T9RlsG+za8SDalPfgQYX/Y4=) 2: Ff-FE_841YKkM3pTxc9IBAIW24Y.roa (hash: DJoJ2bsSXRYjcv8lRsV6GjC25VZGryCw4Oz9ykQkgwc=) 3: p0msqF3GbIPOVezcBFyWB1yn3rw.crl (hash: PUNamVkQpgnUWpyOexM2EoxgrHAD+It71bmR7YR8rqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 15:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:00:9d:3f:b4:59:c0:e4:e6:35:67:f6:1e:ff:e4:33:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc Validity Not Before: Jan 27 18:00:31 2026 GMT Not After : Jan 28 18:00:31 2026 GMT Subject: CN=455cae2ad2f675ccc49ce9869341b68efd309942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a0:14:c9:51:f9:64:f9:c0:e3:08:d1:cf:bb: 18:c8:16:4e:b6:81:0c:bf:dd:71:76:0b:23:84:f4: d8:b9:b9:29:0c:32:35:d2:b4:fc:f6:9d:20:12:8c: 12:1a:61:f3:f2:09:e3:1c:e5:37:05:47:0a:97:0c: 86:2f:cb:00:37:56:7c:f7:08:8b:1f:df:2c:0b:60: fb:a3:be:1e:cf:53:97:27:12:64:7d:ea:83:e6:d2: 62:a9:37:5f:53:7a:37:66:28:ea:d8:52:6e:37:34: 17:2d:42:25:4a:43:89:e2:0b:9b:35:00:68:76:58: c8:4a:7e:f5:f6:16:2a:cd:89:97:aa:e2:9c:a0:70: e2:95:fb:e7:57:55:6a:59:55:27:99:74:e1:93:3a: 87:53:bb:00:82:66:af:78:08:f5:97:af:bd:35:e4: 8d:85:ec:5e:ab:0a:8a:1d:1c:46:f5:95:37:7c:53: f6:f8:d2:f4:2a:41:e3:97:cd:c8:18:55:5f:1c:cc: 46:c1:d0:3a:f4:42:19:11:e2:66:ab:7d:64:e9:1a: 88:8a:51:06:d6:1c:1e:ff:eb:96:74:f1:87:a0:67: 98:13:7c:9c:86:ab:dd:38:0b:ed:9c:f5:7e:86:82: a7:4f:aa:ec:64:2d:ed:a5:43:5d:1e:4d:e6:ad:84: 10:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5C:AE:2A:D2:F6:75:CC:C4:9C:E9:86:93:41:B6:8E:FD:30:99:42 X509v3 Authority Key Identifier: keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:09:29:8d:84:a8:e5:b5:1c:2b:21:a4:5e:9f:bf:c2:f7:87: ae:23:82:7c:bf:11:9b:dc:5a:f9:4f:ae:4a:a3:3d:a0:2d:3a: ec:d8:d6:4b:72:3d:95:05:ee:b2:67:9e:45:1b:42:e1:80:10: b0:3f:f3:42:17:69:a6:0b:08:4c:a6:f4:84:00:06:ec:11:b0: 7d:b9:e2:63:e6:ed:4d:f4:58:09:56:88:d4:ad:d8:c2:28:b0: 7b:a4:32:3c:87:96:37:1a:63:f7:66:68:4a:65:ea:d0:29:fe: 25:f3:43:fc:b9:50:20:0b:7d:b9:05:89:2c:68:d8:9d:fc:54: d4:60:f2:59:9b:be:ec:7c:11:67:4c:a4:86:90:97:9a:88:71: 1f:13:a4:94:00:c4:0e:d2:4e:54:f7:b2:24:6e:32:46:af:55: ad:9b:7c:6d:bc:4f:f3:4b:d3:96:dd:57:21:e3:e5:04:92:68: 60:7c:02:28:24:4e:f9:c9:e1:67:bb:47:97:e7:79:51:79:0d: 17:dc:dc:98:84:93:6c:b4:a1:4f:b9:f0:fc:3d:ef:5f:33:e9: b6:94:31:05:2d:60:68:f2:6d:cf:7f:0a:9b:fb:64:ef:18:38: bb:f1:42:67:42:16:f9:91:de:23:77:f9:f2:e2:97:a0:61:ef: 63:79:7e:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwAnT+0WcDk5jVn9h7/5DO0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NDlhY2E4NWRjNjZjODNjZTU1ZWNkYzA0NWM5NjA3NWNh N2RlYmMwHhcNMjYwMTI3MTgwMDMxWhcNMjYwMTI4MTgwMDMxWjAzMTEwLwYDVQQD Eyg0NTVjYWUyYWQyZjY3NWNjYzQ5Y2U5ODY5MzQxYjY4ZWZkMzA5OTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6AUyVH5ZPnA4wjRz7sYyBZOtoEM v91xdgsjhPTYubkpDDI10rT89p0gEowSGmHz8gnjHOU3BUcKlwyGL8sAN1Z89wiL H98sC2D7o74ez1OXJxJkfeqD5tJiqTdfU3o3Zijq2FJuNzQXLUIlSkOJ4gubNQBo dljISn719hYqzYmXquKcoHDilfvnV1VqWVUnmXThkzqHU7sAgmaveAj1l6+9NeSN hexeqwqKHRxG9ZU3fFP2+NL0KkHjl83IGFVfHMxGwdA69EIZEeJmq31k6RqIilEG 1hwe/+uWdPGHoGeYE3ychqvdOAvtnPV+hoKnT6rsZC3tpUNdHk3mrYQQcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVcrirS9nXMxJzphpNBto79MJlCMB8GA1UdIwQY MBaAFKdJrKhdxmyDzlXs3ARclgdcp968MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zM2U1MDgtMTI3ZC00OTQ2LWIzY2Mt NGM5ZjQzZjg3OGFiLzEvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8zM2U1MDgtMTI3ZC00OTQ2LWIzY2MtNGM5ZjQzZjg3OGFi LzEvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtAkpjYSo 5bUcKyGkXp+/wveHriOCfL8Rm9xa+U+uSqM9oC067NjWS3I9lQXusmeeRRtC4YAQ sD/zQhdppgsITKb0hAAG7BGwfbniY+btTfRYCVaI1K3Ywiiwe6QyPIeWNxpj92Zo SmXq0Cn+JfND/LlQIAt9uQWJLGjYnfxU1GDyWZu+7HwRZ0ykhpCXmohxHxOklADE DtJOVPeyJG4yRq9VrZt8bbxP80vTlt1XIePlBJJoYHwCKCRO+cnhZ7tHl+d5UXkN F9zcmISTbLShT7nw/D3vXzPptpQxBS1gaPJtz38Km/tk7xg4u/FCZ0IW+ZHeI3f5 8uKXoGHvY3l+WA== -----END CERTIFICATE-----Generated at Wed Jan 28 00:43:48 2026 by rpki-client