This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft File: r0eMzcBICmtDus2KruAHmxbsLmg.mft (raw, json) Hash identifier: RVPd1jO7XBXFlzy9j1pmAfNN1eNiGcRjw/ZLrr3CTKU= Subject key identifier: F9:89:B0:CC:6E:C9:70:F9:87:BF:D0:87:C3:30:04:23:DE:F8:73:C9 Authority key identifier: AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68 Certificate issuer: /CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68 Certificate serial: 019BD9C7334A1B2E9F4F03DD21552D209837 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft Manifest number: 0A5B Signing time: Tue 20 Jan 2026 05:01:09 +0000 Manifest this update: Tue 20 Jan 2026 05:01:09 +0000 Manifest next update: Wed 21 Jan 2026 05:01:09 +0000 Files and hashes: 1: r0eMzcBICmtDus2KruAHmxbsLmg.crl (hash: KW/htj9J5gTlK//zaGpbGta10b9Ra0ZgDOzKk1ca1cs=) 2: schhp52ulEJ2Q5lWWzeviWV-gSw.roa (hash: HhUn0pI+C/AL7qljIPdAHULHb8txQJ+RtoE68bF3XwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:c7:33:4a:1b:2e:9f:4f:03:dd:21:55:2d:20:98:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af478ccdc0480a6b43bacd8aaee0079b16ec2e68 Validity Not Before: Jan 20 05:01:09 2026 GMT Not After : Jan 21 05:01:09 2026 GMT Subject: CN=f989b0cc6ec970f987bfd087c3300423def873c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:83:8f:a7:fe:b6:26:2a:9b:cc:a0:d2:72:1e: f1:84:58:8c:28:69:6f:f4:0e:90:af:db:9c:28:f4: d9:75:80:cc:6e:a3:d1:58:7d:52:23:dc:9d:f7:1c: b8:34:67:d7:26:94:5f:77:32:aa:a5:ac:20:36:04: fe:d7:53:0b:b5:ae:6d:61:eb:b7:59:83:26:77:13: 58:36:d9:39:39:7b:83:c2:2e:72:4b:6d:ac:3f:f1: 19:a7:48:47:e1:ca:e7:51:9c:24:b8:a4:73:91:14: 25:c8:31:d9:b0:3f:ba:14:b6:ec:78:d2:ee:17:e0: 4f:98:c5:60:20:86:7a:0e:4c:15:e1:53:a7:fe:a2: 56:3a:67:eb:6c:36:52:ec:ed:66:33:1c:6e:6a:04: a2:d0:17:02:56:42:06:08:f3:69:38:30:96:5f:80: d4:b4:0e:40:55:35:62:5e:22:52:96:bd:34:fc:a1: 55:f0:2a:b0:50:35:d5:48:71:6d:29:a5:63:4a:9d: 13:fd:99:3a:1e:57:ff:17:f8:d2:2f:7c:8f:17:f2: 0c:0f:57:27:d1:3c:7a:bb:ec:d4:a9:46:7e:97:37: 30:90:d8:4b:24:43:1c:c0:4f:6c:c9:3d:a1:34:70: e3:fb:f1:75:a8:41:2e:06:93:81:bd:c2:97:58:ae: d8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:89:B0:CC:6E:C9:70:F9:87:BF:D0:87:C3:30:04:23:DE:F8:73:C9 X509v3 Authority Key Identifier: keyid:AF:47:8C:CD:C0:48:0A:6B:43:BA:CD:8A:AE:E0:07:9B:16:EC:2E:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0eMzcBICmtDus2KruAHmxbsLmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/990506-41bc-4098-af7f-cc8bf3fbef99/1/r0eMzcBICmtDus2KruAHmxbsLmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:1f:4c:8f:42:fc:a6:1d:37:98:f9:34:58:59:39:a2:e1:7a: 11:b5:8f:ee:27:97:f0:1a:80:92:50:4c:fb:9d:13:d2:21:b0: a3:d5:04:1d:89:e6:b9:fb:d9:9d:a7:86:ca:fb:a6:f7:05:a9: 93:0f:a5:ee:53:57:7d:c5:53:6a:81:dc:61:54:cd:83:a7:6c: 56:82:2a:3d:31:04:ff:85:63:b2:c8:cf:6f:7c:22:f9:4f:a4: 16:e2:3a:dd:c0:f9:76:94:95:28:f2:6f:5c:5d:a1:69:0e:4c: cf:62:80:0f:f8:e0:c6:42:ba:d1:ab:14:53:f5:ac:6b:1e:98: dc:9e:ea:a6:89:66:2f:ae:99:b9:ac:54:61:06:f0:e8:80:c5: 0d:7e:fc:63:89:17:42:81:b9:2c:a6:64:8d:96:a3:79:ca:7a: 18:2c:2f:49:c0:8f:af:3d:67:66:57:01:4e:2f:0f:a5:ce:c8: fc:b4:2f:99:38:c2:45:02:d4:5e:8c:4e:ee:3f:b1:03:61:68: 2b:11:fe:d1:04:56:94:5c:d0:6e:8d:5a:50:76:59:86:17:cb: 82:1e:bc:68:c9:44:48:69:ba:2e:d0:c7:04:9f:00:74:04:0a: 24:14:d6:f5:1a:61:7a:c4:ca:9e:06:8d:8b:34:ce:e0:00:76: 44:6e:61:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZxzNKGy6fTwPdIVUtIJg3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNDc4Y2NkYzA0ODBhNmI0M2JhY2Q4YWFlZTAwNzliMTZl YzJlNjgwHhcNMjYwMTIwMDUwMTA5WhcNMjYwMTIxMDUwMTA5WjAzMTEwLwYDVQQD EyhmOTg5YjBjYzZlYzk3MGY5ODdiZmQwODdjMzMwMDQyM2RlZjg3M2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4OPp/62JiqbzKDSch7xhFiMKGlv 9A6Qr9ucKPTZdYDMbqPRWH1SI9yd9xy4NGfXJpRfdzKqpawgNgT+11MLta5tYeu3 WYMmdxNYNtk5OXuDwi5yS22sP/EZp0hH4crnUZwkuKRzkRQlyDHZsD+6FLbseNLu F+BPmMVgIIZ6DkwV4VOn/qJWOmfrbDZS7O1mMxxuagSi0BcCVkIGCPNpODCWX4DU tA5AVTViXiJSlr00/KFV8CqwUDXVSHFtKaVjSp0T/Zk6Hlf/F/jSL3yPF/IMD1cn 0Tx6u+zUqUZ+lzcwkNhLJEMcwE9syT2hNHDj+/F1qEEuBpOBvcKXWK7YPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmJsMxuyXD5h7/Qh8MwBCPe+HPJMB8GA1UdIwQY MBaAFK9HjM3ASAprQ7rNiq7gB5sW7C5oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85OTA1MDYtNDFiYy00MDk4LWFmN2Yt Y2M4YmYzZmJlZjk5LzEvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS85OTA1MDYtNDFiYy00MDk4LWFmN2YtY2M4YmYzZmJlZjk5 LzEvcjBlTXpjQklDbXREdXMyS3J1QUhteGJzTG1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALh9Mj0L8 ph03mPk0WFk5ouF6EbWP7ieX8BqAklBM+50T0iGwo9UEHYnmufvZnaeGyvum9wWp kw+l7lNXfcVTaoHcYVTNg6dsVoIqPTEE/4VjssjPb3wi+U+kFuI63cD5dpSVKPJv XF2haQ5Mz2KAD/jgxkK60asUU/Wsax6Y3J7qpolmL66ZuaxUYQbw6IDFDX78Y4kX QoG5LKZkjZajecp6GCwvScCPrz1nZlcBTi8Ppc7I/LQvmTjCRQLUXoxO7j+xA2Fo KxH+0QRWlFzQbo1aUHZZhhfLgh68aMlESGm6LtDHBJ8AdAQKJBTW9RphesTKngaN izTO4AB2RG5hXA== -----END CERTIFICATE-----Generated at Tue Jan 20 09:10:19 2026 by rpki-client