This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft File: 0e1mT0ry-OEZuHomjF1DA_uzYRY.mft (raw, json) Hash identifier: jS4Snvrj920Zfz+GDExKTadqUfgg0RT/k36V+hJAFFg= Subject key identifier: BB:68:8F:86:55:FA:CB:96:C2:2A:44:80:B0:F3:0D:A9:E5:C8:74:EF Authority key identifier: D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16 Certificate issuer: /CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116 Certificate serial: 019C10B5764891694A725F83C12FE31C4C56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft Manifest number: 0123 Signing time: Fri 30 Jan 2026 21:00:53 +0000 Manifest this update: Fri 30 Jan 2026 21:00:53 +0000 Manifest next update: Sat 31 Jan 2026 21:00:53 +0000 Files and hashes: 1: 0e1mT0ry-OEZuHomjF1DA_uzYRY.crl (hash: t+LIyoxPQe/yzo3HkEqcsABdDD21rT+HDPHB8A3Kbis=) 2: BMvBIwftHVjOq-ECziUj7FT9eNs.roa (hash: VyJ9dmhC8T/OTxMz+hnV4q4zH9/xxLGMFMd7o25VL7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:10:b5:76:48:91:69:4a:72:5f:83:c1:2f:e3:1c:4c:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116 Validity Not Before: Jan 30 21:00:53 2026 GMT Not After : Jan 31 21:00:53 2026 GMT Subject: CN=bb688f8655facb96c22a4480b0f30da9e5c874ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c9:75:a8:a6:02:23:d9:a6:13:70:ec:30:e3: e9:0d:b6:70:f7:1f:ba:d9:1c:07:92:18:a7:68:40: 77:c3:20:27:2e:58:d7:9e:6d:57:e1:c6:38:a5:08: 48:b8:17:61:f9:5b:99:a1:9e:d3:d6:45:aa:0e:70: 09:0c:93:a5:ad:fa:66:b0:00:8e:8e:3b:b7:6d:3f: 6b:77:6c:29:c6:c6:36:c9:6e:e4:86:d6:ad:6f:ba: 1b:06:a4:6f:e6:3d:4e:ea:8a:36:b9:2f:c2:a4:e8: 16:9b:d5:e4:83:13:b2:1f:38:2a:b8:1e:18:df:ec: af:5a:47:22:19:51:f3:ad:a1:2a:f7:9a:28:c0:58: 8e:59:c8:22:c7:53:15:3e:2e:92:96:4c:9d:c4:48: bd:b6:0e:a6:f0:bc:6f:65:a5:d9:9c:24:2e:11:fd: af:24:60:a4:1c:7f:78:69:7c:6a:3f:70:11:e3:2e: ba:56:87:f6:44:93:2d:c6:55:51:e1:8b:56:3a:92: 43:a9:11:d9:02:18:20:c5:cc:40:35:d6:3a:a3:7b: 9c:83:e1:62:1d:7e:e1:0e:4b:fd:4b:e2:17:6a:04: de:a7:ea:d0:b1:ed:b3:19:13:58:26:4d:6f:ab:74: a8:3a:99:f6:6f:f9:20:e0:0a:ff:b6:a6:fb:52:ff: 9a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:68:8F:86:55:FA:CB:96:C2:2A:44:80:B0:F3:0D:A9:E5:C8:74:EF X509v3 Authority Key Identifier: keyid:D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:4e:0b:a5:cd:8b:dd:d4:82:30:3a:ed:c7:ee:01:ad:d8:3c: a1:94:f4:5e:87:35:a4:98:4a:2a:0b:ff:3c:ea:a4:4f:6d:2c: 84:fb:5a:40:ac:90:aa:39:3c:15:d4:51:69:39:8f:c2:aa:4c: ea:b4:80:e4:a5:97:7f:93:5d:79:3a:1a:ce:dc:af:50:92:50: 4c:1a:13:36:66:7e:56:c3:ca:92:9b:07:02:58:2c:4a:a4:cf: 2b:6e:aa:da:fb:11:c6:73:c2:56:18:22:b8:d4:fd:0f:43:c5: 03:92:0e:39:b4:57:ad:a2:c1:17:49:7a:42:71:50:cf:1f:bf: 7f:61:19:99:6e:34:f8:6b:e4:e1:e3:d5:2e:45:0f:7b:e4:0b: 8a:12:e2:be:92:ba:b5:9b:61:1e:e3:07:7c:3a:aa:eb:43:80: af:bb:a4:04:dc:3d:d4:0e:9e:86:ef:b2:d4:d7:6c:0d:80:ce: ff:cb:99:28:95:af:a9:bf:5a:5e:43:88:4c:a5:a6:99:7a:4d: f9:d4:48:c0:ac:c0:f8:2d:fb:ac:d5:98:2a:58:51:56:97:dc: 61:aa:64:de:b0:04:3c:d6:75:1c:25:46:32:59:3b:e4:06:45: 97:27:e7:49:aa:fe:d8:83:90:f3:e2:a1:f7:55:f6:1e:f0:cc: c6:c9:0a:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwQtXZIkWlKcl+DwS/jHExWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZWQ2NjRmNGFmMmY4ZTExOWI4N2EyNjhjNWQ0MzAzZmJi MzYxMTYwHhcNMjYwMTMwMjEwMDUzWhcNMjYwMTMxMjEwMDUzWjAzMTEwLwYDVQQD EyhiYjY4OGY4NjU1ZmFjYjk2YzIyYTQ0ODBiMGYzMGRhOWU1Yzg3NGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMl1qKYCI9mmE3DsMOPpDbZw9x+6 2RwHkhinaEB3wyAnLljXnm1X4cY4pQhIuBdh+VuZoZ7T1kWqDnAJDJOlrfpmsACO jju3bT9rd2wpxsY2yW7khtatb7obBqRv5j1O6oo2uS/CpOgWm9XkgxOyHzgquB4Y 3+yvWkciGVHzraEq95oowFiOWcgix1MVPi6SlkydxEi9tg6m8LxvZaXZnCQuEf2v JGCkHH94aXxqP3AR4y66Vof2RJMtxlVR4YtWOpJDqRHZAhggxcxANdY6o3ucg+Fi HX7hDkv9S+IXagTep+rQse2zGRNYJk1vq3SoOpn2b/kg4Ar/tqb7Uv+aewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtoj4ZV+suWwipEgLDzDanlyHTvMB8GA1UdIwQY MBaAFNHtZk9K8vjhGbh6JoxdQwP7s2EWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGUxbVQwcnktT0VadUhvbWpGMURBX3V6WVJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jZjczNmQtM2I4Yi00MGY1LTk3Y2Mt NGI5NTI5YjQ4Y2VhLzEvMGUxbVQwcnktT0VadUhvbWpGMURBX3V6WVJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9jZjczNmQtM2I4Yi00MGY1LTk3Y2MtNGI5NTI5YjQ4Y2Vh LzEvMGUxbVQwcnktT0VadUhvbWpGMURBX3V6WVJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApk4Lpc2L 3dSCMDrtx+4Brdg8oZT0Xoc1pJhKKgv/POqkT20shPtaQKyQqjk8FdRRaTmPwqpM 6rSA5KWXf5NdeToaztyvUJJQTBoTNmZ+VsPKkpsHAlgsSqTPK26q2vsRxnPCVhgi uNT9D0PFA5IOObRXraLBF0l6QnFQzx+/f2EZmW40+Gvk4ePVLkUPe+QLihLivpK6 tZthHuMHfDqq60OAr7ukBNw91A6ehu+y1NdsDYDO/8uZKJWvqb9aXkOITKWmmXpN +dRIwKzA+C37rNWYKlhRVpfcYapk3rAEPNZ1HCVGMlk75AZFlyfnSar+2IOQ8+Kh 91X2HvDMxskKdQ== -----END CERTIFICATE-----Generated at Sat Jan 31 06:42:08 2026 by rpki-client