This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft File: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft (raw, json) Hash identifier: ejOQKVsbdP1Z63LUmjj+HntAQUC+VhuAPAeXGgoXCQ8= Subject key identifier: 38:07:BA:06:4C:E7:5F:5B:FA:98:99:05:BA:AF:43:14:9C:C8:96:5A Authority key identifier: D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C Certificate issuer: /CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c Certificate serial: 019BFD66176F58A6DC115C509FAE14A21A78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft Manifest number: 17ED Signing time: Tue 27 Jan 2026 03:01:24 +0000 Manifest this update: Tue 27 Jan 2026 03:01:24 +0000 Manifest next update: Wed 28 Jan 2026 03:01:24 +0000 Files and hashes: 1: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl (hash: EKie3cjW8M70jkYf+Rw/6vZgItUb2FOPiNjqTfX90kA=) 2: c4zkb26v95y_D2sc6nv7fdxn9Lc.roa (hash: bMZY04nBemF6cIkhBuUz9nxHZyNkGpj8Eh/OlRIxJ2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:66:17:6f:58:a6:dc:11:5c:50:9f:ae:14:a2:1a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c Validity Not Before: Jan 27 03:01:24 2026 GMT Not After : Jan 28 03:01:24 2026 GMT Subject: CN=3807ba064ce75f5bfa989905baaf43149cc8965a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:56:e2:83:f1:9c:b1:4c:48:06:15:f9:49:7d: 89:ef:b8:fd:cc:3b:d1:ff:02:0d:ae:74:bf:da:08: c1:6f:a4:e1:61:b7:4a:3b:ee:d8:d4:a2:64:34:31: 7e:d0:4a:3b:c1:8d:7e:27:fa:53:5b:37:d8:b3:a3: 1d:18:ae:a6:72:0c:80:13:7b:08:42:ec:4d:7e:15: 27:e6:21:5a:50:a7:61:a0:1e:80:54:06:7f:79:ce: ab:d7:70:d0:93:52:12:f0:10:56:71:24:f1:e7:9a: ae:7d:0f:94:95:39:31:63:c5:72:b8:5c:1a:11:68: 1e:1a:86:90:cd:c9:ad:4f:ab:f1:97:06:4a:a5:80: 1b:ab:d3:27:ff:32:d5:c7:e3:ea:8a:09:ea:24:52: ff:1e:c6:81:35:2a:7a:9f:a2:a1:7c:3d:d4:43:71: 78:84:ba:82:93:02:01:dc:16:29:ca:1c:41:f2:29: 14:62:98:63:9f:dc:8b:93:4b:62:1d:4a:88:3f:1a: 56:d4:f2:8f:17:b4:0c:46:c9:ad:dc:f2:9c:80:a1: 92:5f:4b:f2:59:d9:73:ac:ca:a8:fa:4d:76:be:a8: d5:4e:12:a5:82:c7:67:20:5f:78:88:ca:be:8d:15: 60:1d:69:be:f6:27:27:2c:f4:80:1f:de:cb:ac:d2: b5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:07:BA:06:4C:E7:5F:5B:FA:98:99:05:BA:AF:43:14:9C:C8:96:5A X509v3 Authority Key Identifier: keyid:D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:75:e5:7b:ff:1b:b2:e6:5c:41:a1:a4:c9:a6:d5:e7:b1:5a: 96:80:49:7d:98:df:63:f4:27:a8:e7:c3:e6:b5:dc:df:29:8c: d0:8e:c7:3a:21:9f:f0:39:06:39:3e:0c:3a:ee:fb:f9:4d:86: 77:20:aa:9b:cf:39:5c:24:e5:ef:30:97:e3:ae:d2:91:c2:d0: 06:76:81:c7:b4:8a:d0:ea:70:c3:a6:6c:f8:93:d8:17:c4:62: c8:95:c6:81:39:6e:11:4a:c3:45:6e:bd:5f:86:1b:b3:5e:f4: 68:80:8e:9c:35:ce:dc:1b:c9:04:67:a0:e1:19:c0:df:62:c6: 2b:e3:77:1a:f5:c3:ee:57:cc:e9:44:42:96:dc:1d:cf:8d:ae: de:94:0b:d0:48:a6:c3:68:b4:f7:ee:b5:b4:10:f8:09:49:d7: ff:75:d1:a4:6a:ca:ff:68:f8:6c:bd:fd:f1:e6:9d:74:10:80: 81:05:14:1f:21:76:35:af:54:5d:35:c3:57:1a:d6:64:c2:df: 0d:75:a3:16:56:aa:b9:18:e3:e0:6b:4e:b3:6f:c2:fb:d1:33: 96:34:4c:87:3b:cf:de:98:19:39:b1:0b:47:89:6b:40:9f:ef: fc:f8:4d:76:13:cf:06:01:1b:9a:f9:54:e4:f0:d4:82:ba:bd: e2:0c:d0:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZhdvWKbcEVxQn64Uohp4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDk4Y2QzMjdlYTMzYmZmODYyOWQ3ZjQ5ZDZiZTNhZGM1 ZmYzMmMwHhcNMjYwMTI3MDMwMTI0WhcNMjYwMTI4MDMwMTI0WjAzMTEwLwYDVQQD EygzODA3YmEwNjRjZTc1ZjViZmE5ODk5MDViYWFmNDMxNDljYzg5NjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVbig/GcsUxIBhX5SX2J77j9zDvR /wINrnS/2gjBb6ThYbdKO+7Y1KJkNDF+0Eo7wY1+J/pTWzfYs6MdGK6mcgyAE3sI QuxNfhUn5iFaUKdhoB6AVAZ/ec6r13DQk1IS8BBWcSTx55qufQ+UlTkxY8VyuFwa EWgeGoaQzcmtT6vxlwZKpYAbq9Mn/zLVx+PqignqJFL/HsaBNSp6n6KhfD3UQ3F4 hLqCkwIB3BYpyhxB8ikUYphjn9yLk0tiHUqIPxpW1PKPF7QMRsmt3PKcgKGSX0vy WdlzrMqo+k12vqjVThKlgsdnIF94iMq+jRVgHWm+9icnLPSAH97LrNK1ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgHugZM519b+piZBbqvQxScyJZaMB8GA1UdIwQY MBaAFNdJjNMn6jO/+GKdf0nWvjrcX/MsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBtTTB5ZnFNN180WXAxX1NkYS1PdHhmOHl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yN2M0YzEtMTU3Ny00ZWUxLWFhMjQt YWRlMmJhYmNiOGQwLzEvMTBtTTB5ZnFNN180WXAxX1NkYS1PdHhmOHl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yN2M0YzEtMTU3Ny00ZWUxLWFhMjQtYWRlMmJhYmNiOGQw LzEvMTBtTTB5ZnFNN180WXAxX1NkYS1PdHhmOHl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHXle/8b suZcQaGkyabV57FaloBJfZjfY/QnqOfD5rXc3ymM0I7HOiGf8DkGOT4MOu77+U2G dyCqm885XCTl7zCX467SkcLQBnaBx7SK0Opww6Zs+JPYF8RiyJXGgTluEUrDRW69 X4Ybs170aICOnDXO3BvJBGeg4RnA32LGK+N3GvXD7lfM6URCltwdz42u3pQL0Eim w2i09+61tBD4CUnX/3XRpGrK/2j4bL398eaddBCAgQUUHyF2Na9UXTXDVxrWZMLf DXWjFlaquRjj4GtOs2/C+9EzljRMhzvP3pgZObELR4lrQJ/v/PhNdhPPBgEbmvlU 5PDUgrq94gzQUA== -----END CERTIFICATE-----Generated at Tue Jan 27 08:29:40 2026 by rpki-client