This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json) Hash identifier: EqI64ZFgaKGiahgT8OE+pYuyowr0xw4axbemrVcZfaU= Subject key identifier: 0E:1A:25:EF:39:AB:A8:F9:E3:49:7E:89:D9:77:2F:7A:9D:41:BE:AC Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 019BF9C0BC5E550E7CC92611AAA9F82C7593 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft Manifest number: 0D22 Signing time: Mon 26 Jan 2026 10:01:56 +0000 Manifest this update: Mon 26 Jan 2026 10:01:56 +0000 Manifest next update: Tue 27 Jan 2026 10:01:56 +0000 Files and hashes: 1: 35OSfnIHBzgeVNUOnTTlLCJ-41Q.asa (hash: AtHm41TjTKHIFJ2bQdWE7+1O/PQj6BaIk8dinW6LOjs=) 2: 4kD5axCPDSh_OTr3bDY6hTRuR-Y.asa (hash: dytt7ty1MYNg2mHD9RN1VQfKWAI0ZZD9QAq0LJCg/iM=) 3: 5vGd1hrRUgjw-VsLzTylini_B7Q.roa (hash: sg0Um8p6l1c6gl4UvV5+SwzisrScl+Xsl5xaWUIwQqQ=) 4: 7_Kx6Ctl8DaaoL5p_Ek3ZtApVT4.asa (hash: 8uOvnBvZoQsY2783oMLIp4UXHsh3oz2EmqHH8OrzbmU=) 5: PMb5QpHERgutl-yC5RQn75DTGLw.asa (hash: J3iqeMWpp9y9r2qafPxIekHw1hn9lS8glb6D3OYiiTQ=) 6: QGAJExkL2FvXDViXp-Coxz1ISyE.roa (hash: KqS/q7o4Pi5DS6O8i7jT3UhmWb+gbQp5j9Y+K8+kuI8=) 7: RkZNyp9wmYxkjqAQhf5rttwR3xU.asa (hash: f/5DtLEb4wh+D+8sMIfmagBhhWS2Yg6kDyhzQs/zOTY=) 8: Wa9n9eRgAcHbz76J6WcZiGS-Bbo.roa (hash: 11efmsxVKEDPybIj7bqcT7q0gfbmOyOH1LpPDuuPMuI=) 9: _L8djGrh0ltiLv6oZ1X7HHqdI7c.roa (hash: DwVvmmhzGeOduCfg7065EWl2MWaIL6OeqmDXyYbnFWc=) 10: a71loKb002beeu3NMgeo4_rsWxQ.roa (hash: 5opUCJlO31ducmOW5I+SCqLYIdXJCf8s+Rf/KTfLWQE=) 11: jk_vo45DTCE6Qch6NeSYYIx2UVA.roa (hash: Y3KIabgiInfNA/NNjT/XlQnKjIR2mWc9rhmGkHb5FNU=) 12: k2hSi2ktn1RbhMfBtzCDueEGIkY.roa (hash: x5d5j8eNv5Fwu5BVRBGFqtr5FQuqOiyNVXsyTIPzWhw=) 13: nqCowGB0ICzLbyaA3M41ICLCHf8.asa (hash: vdGJUwM6cjDv1l7k94p+qDqZhellVdm1aKK/aatWVNA=) 14: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: oaz4z0s9k+2kpaWU6Ry0SzAPTyCjalpihDPDFSlZTp4=) 15: w8W811TbOURa8f5-mcUpSAfk2n0.asa (hash: b96roN8WeCshD8FoZxjRFm4baoilKTWmZSNLBHUvnfc=) 16: x6T6GqRVAh0o9EoIdLMe4raaS10.asa (hash: MNgMjRK2BIwfms49ydVNFTqMQqZeRrZembCusJ+wf3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:c0:bc:5e:55:0e:7c:c9:26:11:aa:a9:f8:2c:75:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Jan 26 10:01:56 2026 GMT Not After : Jan 27 10:01:56 2026 GMT Subject: CN=0e1a25ef39aba8f9e3497e89d9772f7a9d41beac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b4:16:03:3a:6b:5f:0f:6c:1c:f9:75:81:6e: e5:61:56:13:35:cf:97:10:89:a8:e5:00:fe:82:6d: 32:46:90:9f:6b:bc:13:8d:72:e6:49:5c:14:f1:c3: 99:0d:b5:06:cf:84:b0:91:0e:42:97:0e:77:15:93: b8:a0:8d:d8:27:94:a8:7d:b0:50:d1:02:59:b7:4a: 43:ba:d3:b9:88:11:b2:68:54:39:55:67:6e:e8:c6: 8e:c0:e7:40:98:b6:3f:20:29:a0:df:d9:84:11:0c: 71:b1:c1:90:74:57:68:50:d6:34:c1:60:d0:97:d8: 84:8e:09:ae:18:29:9a:fb:2c:ef:25:d5:2e:82:e9: 67:5e:14:5a:6b:ae:c1:97:30:d4:9f:f5:45:c4:a8: 03:fb:55:b2:5d:59:6e:1a:96:fe:ef:bf:05:bc:57: e7:14:a5:ae:f4:48:64:df:e3:d4:75:04:33:11:0b: fc:89:e6:8b:60:ef:ee:04:7b:8f:7b:86:0e:c1:40: 6f:38:fe:4f:11:6f:2e:ea:af:e0:4a:3a:73:10:31: 9d:9e:9a:8d:70:6c:7d:55:ae:77:21:b1:7a:ca:ca: 9d:d9:34:19:82:16:5a:80:f1:51:c6:1f:ef:67:fc: 8d:d8:7b:13:4b:57:ef:c5:20:8a:c8:d6:6e:2e:38: 21:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1A:25:EF:39:AB:A8:F9:E3:49:7E:89:D9:77:2F:7A:9D:41:BE:AC X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:98:93:53:5f:9f:f6:7f:c5:9d:ac:ac:65:75:d6:40:46:f6: 6d:92:0f:52:d6:54:8b:72:4e:e2:62:4a:64:5d:8e:18:71:47: e8:c6:d2:40:d1:e2:99:9f:96:2a:78:a0:3e:c9:14:c4:83:be: c2:ca:38:3a:73:72:03:a4:c1:f8:f3:1a:0e:a9:b5:b0:47:b7: 51:05:fe:a2:d3:dd:b0:ff:49:d0:39:5d:41:78:fc:14:84:6b: 16:18:e5:d6:a1:cc:16:80:c5:10:1f:c8:3a:d8:43:fd:a7:35: 99:3a:92:c1:e9:df:4e:a8:49:43:51:1e:0f:ea:74:e3:68:ec: 56:f2:bc:f6:ad:0e:f6:32:0c:fa:fa:f5:73:db:d1:71:02:96: b4:67:f1:04:e8:57:b1:a1:94:9e:7d:2d:fc:de:cf:cd:79:88: 9e:d9:96:3b:85:5f:ea:6a:40:a8:fd:0f:0a:3f:3b:7e:4a:2c: 9e:fb:dc:12:e1:ea:ed:8f:30:02:55:49:d8:79:57:26:5f:75: 35:8c:ba:5e:ca:f0:b4:9b:fc:6c:21:08:a2:db:cb:fe:05:ff: 6b:4e:07:bb:ec:05:21:cc:fe:3a:69:b1:f7:55:4f:12:03:81: b9:69:4b:cb:73:04:c0:5b:4f:4e:0d:31:4a:0e:92:4b:ab:30: d1:44:f1:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5wLxeVQ58ySYRqqn4LHWTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjYwMTI2MTAwMTU2WhcNMjYwMTI3MTAwMTU2WjAzMTEwLwYDVQQD EygwZTFhMjVlZjM5YWJhOGY5ZTM0OTdlODlkOTc3MmY3YTlkNDFiZWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7QWAzprXw9sHPl1gW7lYVYTNc+X EImo5QD+gm0yRpCfa7wTjXLmSVwU8cOZDbUGz4SwkQ5Clw53FZO4oI3YJ5SofbBQ 0QJZt0pDutO5iBGyaFQ5VWdu6MaOwOdAmLY/ICmg39mEEQxxscGQdFdoUNY0wWDQ l9iEjgmuGCma+yzvJdUugulnXhRaa67BlzDUn/VFxKgD+1WyXVluGpb+778FvFfn FKWu9Ehk3+PUdQQzEQv8ieaLYO/uBHuPe4YOwUBvOP5PEW8u6q/gSjpzEDGdnpqN cGx9Va53IbF6ysqd2TQZghZagPFRxh/vZ/yN2HsTS1fvxSCKyNZuLjghbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4aJe85q6j540l+idl3L3qdQb6sMB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpiTU1+f 9n/FnaysZXXWQEb2bZIPUtZUi3JO4mJKZF2OGHFH6MbSQNHimZ+WKnigPskUxIO+ wso4OnNyA6TB+PMaDqm1sEe3UQX+otPdsP9J0DldQXj8FIRrFhjl1qHMFoDFEB/I OthD/ac1mTqSwenfTqhJQ1EeD+p042jsVvK89q0O9jIM+vr1c9vRcQKWtGfxBOhX saGUnn0t/N7PzXmIntmWO4Vf6mpAqP0PCj87fkosnvvcEuHq7Y8wAlVJ2HlXJl91 NYy6XsrwtJv8bCEIotvL/gX/a04Hu+wFIcz+Ommx91VPEgOBuWlLy3MEwFtPTg0x Sg6SS6sw0UTxPw== -----END CERTIFICATE-----Generated at Mon Jan 26 13:17:42 2026 by rpki-client