This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json) Hash identifier: EsyOl53KqmpuWN0AscETp0JoxFYN21TeKD6q9Wkvrho= Subject key identifier: 63:0F:C9:0E:14:1A:8F:9F:93:29:F7:18:A6:5A:89:FD:C9:D6:C3:B3 Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72 Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772 Certificate serial: 019BFC534B6B228B5F3B51D7AC465CB7D15C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft Manifest number: 0C3F Signing time: Mon 26 Jan 2026 22:01:15 +0000 Manifest this update: Mon 26 Jan 2026 22:01:15 +0000 Manifest next update: Tue 27 Jan 2026 22:01:15 +0000 Files and hashes: 1: 3lrbo6HwulxPMj0oO3FNbjtlzV8.roa (hash: hbeRK358TvH6JocXoJjiTBC8YjChMTIhujSLDouBY5Q=) 2: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: rl//ouF9FAZd5N0pesizSJ46vQKaNsC69ubiXD7R9bE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:53:4b:6b:22:8b:5f:3b:51:d7:ac:46:5c:b7:d1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772 Validity Not Before: Jan 26 22:01:15 2026 GMT Not After : Jan 27 22:01:15 2026 GMT Subject: CN=630fc90e141a8f9f9329f718a65a89fdc9d6c3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:39:81:b4:f1:b6:07:54:b9:23:bc:12:43:db: aa:0d:35:d6:d5:26:78:28:fd:53:ee:b9:54:62:ec: 31:d8:b1:f5:17:8d:9d:ae:e8:fc:be:fa:fb:9a:59: 35:0b:b4:90:3d:56:3c:3c:ae:d4:d4:d7:13:ea:97: 40:fe:18:33:8d:5c:91:24:b6:4f:03:25:a6:76:d4: a0:ce:8c:37:78:f4:82:c5:f6:63:98:d7:10:41:28: 34:53:c1:f1:cf:0a:e4:a7:0b:35:b7:c4:2f:c6:03: 73:f2:12:99:76:33:45:d1:d7:f1:c9:74:e7:25:95: b2:33:75:46:c5:92:b2:d2:65:e6:d7:a8:c1:bd:a7: e0:9b:37:2f:0a:55:82:1c:30:1c:87:c2:a5:33:4b: 2c:de:44:5c:50:07:09:0a:0b:4f:d9:c2:b1:bb:50: 1d:dd:89:8b:af:5a:7c:64:91:77:f3:23:eb:96:67: 33:31:cf:67:98:e5:b9:12:a6:67:3d:89:0b:76:37: db:95:3c:2b:36:41:5b:fb:a4:7e:ec:7b:ed:d4:82: cf:e1:bd:86:78:08:95:19:14:f2:14:24:a3:21:3f: 0d:f1:7f:a6:ab:74:38:e0:80:11:36:cd:74:c6:70: 40:ad:22:97:84:16:f7:94:7c:e2:8c:fd:bb:08:3c: 20:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0F:C9:0E:14:1A:8F:9F:93:29:F7:18:A6:5A:89:FD:C9:D6:C3:B3 X509v3 Authority Key Identifier: keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:b7:55:05:89:68:a3:53:0e:b1:77:23:02:7c:23:88:d4:5d: 07:97:81:55:69:57:fc:68:8c:b6:25:00:4c:87:c3:74:7c:76: 27:f1:b2:1b:c1:4e:03:36:55:49:cc:d0:bd:fd:94:76:12:28: 86:28:cb:cc:ce:cc:49:0c:db:5f:c3:b9:d1:9f:39:2a:b4:fa: 19:b4:86:15:91:fd:13:8e:f1:cd:d8:6b:fd:cc:27:92:ab:26: 27:c6:d1:ce:8c:51:80:b2:1c:78:95:4f:93:32:dc:ec:28:c1: dc:97:67:bf:00:de:c8:a9:ac:ff:44:a1:a1:ae:cb:2b:96:cc: 22:49:8e:71:24:6d:69:10:4f:29:19:77:4f:30:0d:96:14:61: d2:d8:94:ee:2b:86:37:6f:63:1b:f4:fb:60:10:50:18:88:fe: 5e:ea:73:21:87:02:e1:aa:57:e0:a6:9a:3e:4f:b6:a0:ba:91: 96:d0:05:cf:a5:b6:cc:22:ea:4b:bc:b5:d8:a7:79:a4:69:c3: fa:bc:d1:fa:82:c2:aa:5c:a5:c7:a1:65:57:16:af:cf:74:09: a0:c9:73:ab:ba:cc:ae:4f:10:5c:d4:5a:0d:46:3c:16:11:42: a3:c5:2d:0a:99:4d:f6:fb:91:df:16:64:30:f9:18:68:97:67: 9a:22:47:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8U0trIotfO1HXrEZct9FcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNjNhOWQ3MDIzYjNjYjAwMzI5MTJkY2FhYzljNTYzYzkw YTk3NzIwHhcNMjYwMTI2MjIwMTE1WhcNMjYwMTI3MjIwMTE1WjAzMTEwLwYDVQQD Eyg2MzBmYzkwZTE0MWE4ZjlmOTMyOWY3MThhNjVhODlmZGM5ZDZjM2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljmBtPG2B1S5I7wSQ9uqDTXW1SZ4 KP1T7rlUYuwx2LH1F42druj8vvr7mlk1C7SQPVY8PK7U1NcT6pdA/hgzjVyRJLZP AyWmdtSgzow3ePSCxfZjmNcQQSg0U8Hxzwrkpws1t8QvxgNz8hKZdjNF0dfxyXTn JZWyM3VGxZKy0mXm16jBvafgmzcvClWCHDAch8KlM0ss3kRcUAcJCgtP2cKxu1Ad 3YmLr1p8ZJF38yPrlmczMc9nmOW5EqZnPYkLdjfblTwrNkFb+6R+7Hvt1ILP4b2G eAiVGRTyFCSjIT8N8X+mq3Q44IARNs10xnBArSKXhBb3lHzijP27CDwgbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMPyQ4UGo+fkyn3GKZaif3J1sOzMB8GA1UdIwQY MBaAFONjqdcCOzywAykS3KrJxWPJCpdyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDJPcDF3STdQTEFES1JMY3FzbkZZOGtLbDNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yZDUzMzctZGEyNC00Y2U4LWEzYjct YzMwMmMxMGVjNWMwLzEvNDJPcDF3STdQTEFES1JMY3FzbkZZOGtLbDNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8yZDUzMzctZGEyNC00Y2U4LWEzYjctYzMwMmMxMGVjNWMw LzEvNDJPcDF3STdQTEFES1JMY3FzbkZZOGtLbDNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7dVBYlo o1MOsXcjAnwjiNRdB5eBVWlX/GiMtiUATIfDdHx2J/GyG8FOAzZVSczQvf2UdhIo hijLzM7MSQzbX8O50Z85KrT6GbSGFZH9E47xzdhr/cwnkqsmJ8bRzoxRgLIceJVP kzLc7CjB3JdnvwDeyKms/0Shoa7LK5bMIkmOcSRtaRBPKRl3TzANlhRh0tiU7iuG N29jG/T7YBBQGIj+XupzIYcC4apX4KaaPk+2oLqRltAFz6W2zCLqS7y12Kd5pGnD +rzR+oLCqlylx6FlVxavz3QJoMlzq7rMrk8QXNRaDUY8FhFCo8UtCplN9vuR3xZk MPkYaJdnmiJHig== -----END CERTIFICATE-----Generated at Tue Jan 27 00:36:55 2026 by rpki-client