This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft File: C5DjdpRNMClN6kHyH7fx4co2ipM.mft (raw, json) Hash identifier: q/oCZsPI4K0OIxAsguzYeutMZ2fxDW5YwmQwVcIVsiQ= Subject key identifier: 8D:4F:F2:6A:F0:8D:E4:94:88:57:2C:8B:FF:C6:76:D8:69:E6:0D:9F Authority key identifier: 0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93 Certificate issuer: /CN=0b90e376944d30294dea41f21fb7f1e1ca368a93 Certificate serial: 019BDE117C2AA1AA6993EACCCC0B8D58E5E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft Manifest number: 0257 Signing time: Wed 21 Jan 2026 01:00:46 +0000 Manifest this update: Wed 21 Jan 2026 01:00:46 +0000 Manifest next update: Thu 22 Jan 2026 01:00:46 +0000 Files and hashes: 1: C5DjdpRNMClN6kHyH7fx4co2ipM.crl (hash: k3Q657d1FR0GoYLzEZIALTFoDUaUSyDp0+Cvk4iKf9I=) 2: TUc2gbf6MWuXY9TL4fj7htCzvew.roa (hash: It/V0gupbk0YCdz0m2E/YgmbfksuMYBsp7YPvJMD+P0=) 3: boz2HEWAr2I9MdgKm-5fDjqxBzg.roa (hash: bA5e5p7+fdjhJJLHq6iEFFRrnnb2+YqZFJoCCpP2MWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:11:7c:2a:a1:aa:69:93:ea:cc:cc:0b:8d:58:e5:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b90e376944d30294dea41f21fb7f1e1ca368a93 Validity Not Before: Jan 21 01:00:46 2026 GMT Not After : Jan 22 01:00:46 2026 GMT Subject: CN=8d4ff26af08de49488572c8bffc676d869e60d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a1:54:19:b7:7f:4d:ca:75:30:28:83:03:73: fd:c2:94:30:a3:7d:fb:88:2b:d6:90:57:01:34:40: 3c:f8:d7:3e:80:dc:3f:96:3f:10:68:17:c0:81:71: 1e:2d:3a:7b:08:fa:95:87:e2:29:ee:b0:df:e1:d4: c1:f3:c8:f9:7d:9b:e5:66:ce:bb:9f:9c:6c:d6:41: 0d:8f:84:a5:d7:58:8d:30:42:f1:90:cd:d7:b6:ae: ea:60:dd:ac:cb:90:ba:18:28:03:5e:a1:cd:e7:7e: 4c:98:b8:ee:9f:90:61:b2:c6:c0:09:b3:15:f4:80: bf:39:4a:62:cd:e5:c4:b8:56:0d:51:cb:47:1f:5d: f6:74:67:3a:1d:c2:8d:2f:65:0a:10:47:52:98:02: 86:ca:bd:d6:9d:83:ed:2d:ef:ed:aa:fb:0c:33:fa: 4e:6e:2c:b6:78:a3:6e:2c:0a:a4:36:36:a1:b7:ba: e5:9e:cf:b5:0f:62:55:1a:fd:4c:c8:6a:b3:26:00: 07:45:b7:bd:38:91:54:c4:d7:de:e4:77:f0:f8:0e: 9e:a5:3d:cb:b6:0b:76:76:31:73:da:02:41:60:11: a4:60:74:d7:5a:76:b1:4b:78:d7:a9:34:0a:8f:8c: 4f:70:3f:b8:fa:08:4f:96:5a:e2:5c:5f:fc:4e:af: d9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4F:F2:6A:F0:8D:E4:94:88:57:2C:8B:FF:C6:76:D8:69:E6:0D:9F X509v3 Authority Key Identifier: keyid:0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:33:3e:4c:c2:82:b6:9b:73:b6:05:2d:84:84:24:a3:e7:7e: 08:22:5e:ab:36:d8:82:d2:5c:10:8f:40:88:e1:bb:96:ef:e0: 57:a8:b0:ac:56:f5:85:4e:94:e6:49:47:39:57:5c:c6:a1:88: d5:0a:8d:db:80:7f:38:30:90:04:46:7e:f6:f0:f5:c8:fd:7e: 30:bd:b2:ab:c3:1d:4b:3e:ea:55:e7:a2:08:6d:84:8a:3e:69: dc:f3:1b:cd:84:d2:94:17:2f:c4:ae:c0:4c:6c:22:a1:f6:92: d3:ac:84:e3:82:31:28:c5:4a:8e:25:60:22:7b:7f:c5:7b:27: 73:99:ab:0e:88:5e:de:34:27:6a:af:56:9d:50:dd:0b:5a:d0: a1:ed:bf:36:30:be:6b:68:3d:1a:e2:57:d4:c3:57:a5:c5:cc: a2:92:1b:84:c8:0f:d4:a7:43:58:70:2c:45:dd:32:a1:a6:43: e5:30:81:03:bd:2e:99:3e:7c:99:bd:f1:49:81:ed:3d:28:89: 4c:89:a4:02:25:fc:41:d2:77:1d:b7:fe:1a:58:27:66:0c:f9: ac:8c:e9:08:1c:fb:9a:41:01:72:a2:d5:5f:ee:f9:fc:ee:e9: 3c:02:25:6a:d0:3e:34:e2:4d:3f:f9:db:e7:03:6c:31:6f:a3: 4e:fc:5b:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZveEXwqoappk+rMzAuNWOXkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiOTBlMzc2OTQ0ZDMwMjk0ZGVhNDFmMjFmYjdmMWUxY2Ez NjhhOTMwHhcNMjYwMTIxMDEwMDQ2WhcNMjYwMTIyMDEwMDQ2WjAzMTEwLwYDVQQD Eyg4ZDRmZjI2YWYwOGRlNDk0ODg1NzJjOGJmZmM2NzZkODY5ZTYwZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6FUGbd/Tcp1MCiDA3P9wpQwo337 iCvWkFcBNEA8+Nc+gNw/lj8QaBfAgXEeLTp7CPqVh+Ip7rDf4dTB88j5fZvlZs67 n5xs1kENj4Sl11iNMELxkM3Xtq7qYN2sy5C6GCgDXqHN535MmLjun5BhssbACbMV 9IC/OUpizeXEuFYNUctHH132dGc6HcKNL2UKEEdSmAKGyr3WnYPtLe/tqvsMM/pO biy2eKNuLAqkNjaht7rlns+1D2JVGv1MyGqzJgAHRbe9OJFUxNfe5Hfw+A6epT3L tgt2djFz2gJBYBGkYHTXWnaxS3jXqTQKj4xPcD+4+ghPllriXF/8Tq/ZxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1P8mrwjeSUiFcsi//Gdthp5g2fMB8GA1UdIwQY MBaAFAuQ43aUTTApTepB8h+38eHKNoqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzVEamRwUk5NQ2xONmtIeUg3Zng0Y28yaXBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84MjBlNzItNTcwNi00NjIwLWE5OTAt MjBhMzIxOGI5OGNkLzEvQzVEamRwUk5NQ2xONmtIeUg3Zng0Y28yaXBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84MjBlNzItNTcwNi00NjIwLWE5OTAtMjBhMzIxOGI5OGNk LzEvQzVEamRwUk5NQ2xONmtIeUg3Zng0Y28yaXBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTM+TMKC tptztgUthIQko+d+CCJeqzbYgtJcEI9AiOG7lu/gV6iwrFb1hU6U5klHOVdcxqGI 1QqN24B/ODCQBEZ+9vD1yP1+ML2yq8MdSz7qVeeiCG2Eij5p3PMbzYTSlBcvxK7A TGwiofaS06yE44IxKMVKjiVgInt/xXsnc5mrDohe3jQnaq9WnVDdC1rQoe2/NjC+ a2g9GuJX1MNXpcXMopIbhMgP1KdDWHAsRd0yoaZD5TCBA70umT58mb3xSYHtPSiJ TImkAiX8QdJ3Hbf+GlgnZgz5rIzpCBz7mkEBcqLVX+75/O7pPAIlatA+NOJNP/nb 5wNsMW+jTvxb1Q== -----END CERTIFICATE-----Generated at Wed Jan 21 08:58:25 2026 by rpki-client