This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json) Hash identifier: 5xoEWPCP4x8svqtRLduwKhJ71mlmNNLIDeW9zmLdw40= Subject key identifier: 70:E0:EB:4A:1A:F2:62:95:8F:61:AA:DF:1F:F2:5B:64:DD:6D:03:39 Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b Certificate serial: 019C0DEB13675178392E130F283A0FDB2EA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft Manifest number: 1023 Signing time: Fri 30 Jan 2026 08:00:35 +0000 Manifest this update: Fri 30 Jan 2026 08:00:35 +0000 Manifest next update: Sat 31 Jan 2026 08:00:35 +0000 Files and hashes: 1: Rby5nLrJcvkrMMSKJDxv2N1Dkzg.roa (hash: UGiV11zMoAfT499xl7bL5pT0LFPEqPTZkQEi6I0tGg8=) 2: gWr1ggUi-QJWyPVvyMkseYk2qYM.roa (hash: SOpvQTd7ZBeB4IAsIyy40Ns/wcdF1JI7SbfSeVH0FHo=) 3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: Jg4Mj39+ZR2S+zX0pyEK8O2Wav1iG3CtckoFn9reGUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0d:eb:13:67:51:78:39:2e:13:0f:28:3a:0f:db:2e:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b Validity Not Before: Jan 30 08:00:35 2026 GMT Not After : Jan 31 08:00:35 2026 GMT Subject: CN=70e0eb4a1af262958f61aadf1ff25b64dd6d0339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ce:73:02:d4:5e:9d:96:28:58:12:69:67:c3: a2:b1:4a:81:f2:90:ff:97:a9:6f:41:30:c3:28:39: 37:29:43:a5:a2:33:9c:45:db:51:df:ab:90:c8:08: 32:c3:18:b2:a3:2b:44:b6:76:59:a9:f2:f4:6d:15: 20:10:e2:43:eb:ef:0b:2c:3f:a6:3f:0a:49:81:3b: 6c:a6:9f:2b:ef:20:8f:25:58:8d:9d:9e:5f:3e:e4: e6:60:f3:e2:ae:46:1d:14:8c:b3:49:06:00:76:5f: df:2c:d8:2f:f5:88:92:a0:d9:b6:eb:3c:20:d9:95: 92:cd:54:fe:93:15:a0:1b:0f:4c:b0:b8:67:3e:4a: 85:5d:21:5f:32:a5:b2:d8:00:16:f3:d7:d0:89:dc: d0:cf:19:4a:11:11:72:86:97:ea:37:d7:b4:2e:ce: 8e:0c:92:d9:5a:cd:e0:97:4d:c4:90:ae:9b:c5:40: 01:59:20:fc:6a:23:c1:f9:79:6b:eb:31:d7:16:e7: e2:62:91:8f:20:04:48:01:ac:e5:7a:01:6b:e3:6e: 36:fd:1c:71:a1:eb:8e:73:7b:44:55:e2:49:1f:62: 06:14:6c:00:53:60:e2:10:e6:07:12:32:04:0e:bb: 99:39:3d:f9:7b:ae:a3:47:8e:69:db:67:52:90:66: ca:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E0:EB:4A:1A:F2:62:95:8F:61:AA:DF:1F:F2:5B:64:DD:6D:03:39 X509v3 Authority Key Identifier: keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:83:3b:45:e8:71:98:3f:9c:13:d6:ae:3f:97:59:f1:6b:89: 88:42:d7:09:4d:d0:ab:da:ef:c2:ab:de:e4:db:08:39:14:07: bd:75:62:bd:a9:e7:81:b2:8d:f9:93:7f:d6:ee:38:99:4f:93: f4:55:a3:6e:2e:ac:6d:c5:df:b8:e9:32:a1:6b:a6:a8:f6:7f: c7:a8:aa:2b:05:03:8f:c0:5e:a4:9d:00:88:73:ba:8b:ca:09: 91:3c:26:36:ae:c3:c9:e9:32:7c:17:cb:e1:1b:08:36:d7:a8: 19:58:3b:64:5a:5b:38:9f:c9:50:32:2e:31:5b:dc:37:2a:bf: fd:a3:01:44:20:4e:71:90:29:93:be:d6:e4:89:66:58:30:1a: 8e:e0:c9:75:2f:64:1c:c1:70:9b:40:b0:1e:9a:35:f2:ed:f5: 1d:aa:a8:ea:b0:79:37:7c:f3:2a:d3:b0:a9:b5:40:f6:c0:16: 72:d3:af:97:f8:bc:71:45:39:82:e2:92:7e:a0:50:e4:34:09: e3:80:3b:12:bc:48:76:b9:b6:c6:e9:a8:49:97:e6:dd:e7:7d: ef:aa:b2:75:62:d0:06:a8:cd:10:e6:97:9a:99:ec:3f:e1:cb: 90:f1:3a:07:10:b7:be:33:f7:ed:44:ce:b9:84:28:fd:2c:b5: be:15:b5:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwN6xNnUXg5LhMPKDoP2y6nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OWY2MjY2ZjYxYTFlY2NkNGRlZTA5NGNjNzFjNmRiODZi YmIzN2IwHhcNMjYwMTMwMDgwMDM1WhcNMjYwMTMxMDgwMDM1WjAzMTEwLwYDVQQD Eyg3MGUwZWI0YTFhZjI2Mjk1OGY2MWFhZGYxZmYyNWI2NGRkNmQwMzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc5zAtRenZYoWBJpZ8OisUqB8pD/ l6lvQTDDKDk3KUOlojOcRdtR36uQyAgywxiyoytEtnZZqfL0bRUgEOJD6+8LLD+m PwpJgTtspp8r7yCPJViNnZ5fPuTmYPPirkYdFIyzSQYAdl/fLNgv9YiSoNm26zwg 2ZWSzVT+kxWgGw9MsLhnPkqFXSFfMqWy2AAW89fQidzQzxlKERFyhpfqN9e0Ls6O DJLZWs3gl03EkK6bxUABWSD8aiPB+Xlr6zHXFufiYpGPIARIAazlegFr4242/Rxx oeuOc3tEVeJJH2IGFGwAU2DiEOYHEjIEDruZOT35e66jR45p22dSkGbKtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDg60oa8mKVj2Gq3x/yW2TdbQM5MB8GA1UdIwQY MBaAFKSfYmb2Gh7M1N7glMxxxtuGu7N7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80NzYyNTMtMjc4OC00NTE5LWJlYmEt OThiZTMzNWYzYzU0LzEvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS80NzYyNTMtMjc4OC00NTE5LWJlYmEtOThiZTMzNWYzYzU0 LzEvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoM7Rehx mD+cE9auP5dZ8WuJiELXCU3Qq9rvwqve5NsIORQHvXVivanngbKN+ZN/1u44mU+T 9FWjbi6sbcXfuOkyoWumqPZ/x6iqKwUDj8BepJ0AiHO6i8oJkTwmNq7DyekyfBfL 4RsINteoGVg7ZFpbOJ/JUDIuMVvcNyq//aMBRCBOcZApk77W5IlmWDAajuDJdS9k HMFwm0CwHpo18u31Haqo6rB5N3zzKtOwqbVA9sAWctOvl/i8cUU5guKSfqBQ5DQJ 44A7ErxIdrm2xumoSZfm3ed976qydWLQBqjNEOaXmpnsP+HLkPE6BxC3vjP37UTO uYQo/Sy1vhW1Eg== -----END CERTIFICATE-----Generated at Fri Jan 30 14:44:02 2026 by rpki-client