This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json) Hash identifier: czfwjB35KoHzn7/Vfl6MEVJcTN6DpsAG5C5BGyExno8= Subject key identifier: A9:86:86:70:4F:3C:A0:79:25:61:F4:50:40:92:F3:78:9C:20:8F:34 Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece Certificate serial: 019BFE0ACCE3DA9C8B8783B9DA252967967C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft Manifest number: 17EF Signing time: Tue 27 Jan 2026 06:01:19 +0000 Manifest this update: Tue 27 Jan 2026 06:01:19 +0000 Manifest next update: Wed 28 Jan 2026 06:01:19 +0000 Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: Wnda4RV7uv3U4rFHNGjanTS2ypb0HYVQzRoj9Enh0Sw=) 2: 9bOcqQ4l1m3G_N9nuDsP-sx2RmQ.roa (hash: X7Shkky0RJhdcOoiXrILcF9xuXABF5OsWRg6QfnnlNg=) 3: zG1WTyRFXoS1myarYqUTLg1NCAc.roa (hash: x64xWcnjmJQBLzFooLjv7xR5mLyovo3Fft7eyx3n874=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0a:cc:e3:da:9c:8b:87:83:b9:da:25:29:67:96:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece Validity Not Before: Jan 27 06:01:19 2026 GMT Not After : Jan 28 06:01:19 2026 GMT Subject: CN=a98686704f3ca0792561f4504092f3789c208f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f6:1f:87:3c:e2:e8:dd:9a:41:33:2d:79:8b: 00:dd:1e:82:6c:59:2d:03:0e:89:59:39:43:69:de: a8:aa:11:50:7a:ba:f7:48:bf:4c:da:95:96:22:01: 37:4d:04:07:19:0f:10:13:7f:a0:ba:a2:1d:c3:8b: 10:7e:c3:ed:45:24:23:93:42:c3:42:ea:4f:c3:5d: e6:83:7d:3c:66:14:86:85:a8:1e:77:27:fe:2c:38: d7:9e:4b:dd:39:54:a2:0d:99:c7:92:72:8a:9b:10: 7b:01:84:2d:4f:b9:23:a1:fd:23:62:02:16:70:cd: a3:0c:bd:31:43:9a:e1:33:a1:fe:01:06:c3:60:3a: 35:d0:3d:c8:6f:0a:3d:fd:bc:01:40:51:ce:17:72: 59:af:7b:00:41:e8:3e:e6:3f:34:00:dd:b6:db:b9: 40:c6:c4:33:a8:3b:6c:94:2e:17:22:fe:16:ae:80: b2:8b:d9:ce:57:11:52:94:9c:31:ef:c9:ab:b4:d8: d1:18:67:39:95:c2:04:51:78:0b:af:ec:92:4d:59: c6:2a:51:47:f6:b2:c1:ec:7d:1c:01:4b:10:a8:72: ba:56:09:f8:26:1f:e7:57:62:34:a4:a3:e6:7a:c1: e9:90:fd:55:f8:67:00:50:77:de:b2:e6:8c:86:00: 64:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:86:86:70:4F:3C:A0:79:25:61:F4:50:40:92:F3:78:9C:20:8F:34 X509v3 Authority Key Identifier: keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:f2:ff:8c:9e:0f:63:bc:99:56:18:19:ce:fb:75:da:8e:bd: 1f:f7:e0:c8:9d:08:3b:ba:7e:b5:0f:2c:af:80:af:6f:21:0c: f6:f6:e4:f7:d7:c0:13:31:83:af:06:b3:fb:80:a2:8e:63:c5: 10:48:77:fe:8d:53:ae:89:dd:74:19:d6:b2:d6:9e:5e:56:af: ba:6d:7a:69:da:3f:33:55:d6:53:b6:48:7e:19:e4:6a:51:84: cf:13:08:be:00:fa:30:b6:73:be:25:dd:ed:cf:af:77:dc:73: c1:9c:d8:60:4a:b8:d9:a7:fd:0b:06:52:79:1d:a7:f1:c2:db: 17:31:b0:4d:61:80:d9:91:d3:d7:5b:a4:37:42:7d:f5:37:5e: 91:85:f9:96:14:5b:5c:dc:87:43:f7:7a:39:88:cf:a4:22:0e: 04:c3:87:8f:e5:39:50:1b:93:1a:5b:67:df:d4:78:d0:f1:9f: 64:0f:4e:6c:dc:f2:d3:f3:d3:a5:55:62:23:aa:36:b3:08:8e: c4:5c:a4:e6:9f:db:90:25:33:61:f7:96:51:b9:5a:75:28:c8: 2e:a2:b2:a3:89:f8:db:6a:aa:54:1d:9c:ca:3e:74:7e:09:5e: 01:eb:9d:be:c8:4e:8d:7e:68:f5:dc:03:4a:17:50:d1:54:4b: 01:3b:e7:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+Cszj2pyLh4O52iUpZ5Z8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOWI5MzlkN2JjYTEzYjZkOGNjZjRkOGU3ODY3NmYzODA3 YTBlY2UwHhcNMjYwMTI3MDYwMTE5WhcNMjYwMTI4MDYwMTE5WjAzMTEwLwYDVQQD EyhhOTg2ODY3MDRmM2NhMDc5MjU2MWY0NTA0MDkyZjM3ODljMjA4ZjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPYfhzzi6N2aQTMteYsA3R6CbFkt Aw6JWTlDad6oqhFQerr3SL9M2pWWIgE3TQQHGQ8QE3+guqIdw4sQfsPtRSQjk0LD QupPw13mg308ZhSGhagedyf+LDjXnkvdOVSiDZnHknKKmxB7AYQtT7kjof0jYgIW cM2jDL0xQ5rhM6H+AQbDYDo10D3Ibwo9/bwBQFHOF3JZr3sAQeg+5j80AN2227lA xsQzqDtslC4XIv4WroCyi9nOVxFSlJwx78mrtNjRGGc5lcIEUXgLr+ySTVnGKlFH 9rLB7H0cAUsQqHK6Vgn4Jh/nV2I0pKPmesHpkP1V+GcAUHfesuaMhgBklQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmGhnBPPKB5JWH0UECS83icII80MB8GA1UdIwQY MBaAFNubk517yhO22Mz02OeGdvOAeg7OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjV1VG5YdktFN2JZelBUWTU0WjI4NEI2RHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS85MzgzMzAtY2NkOC00ZTdhLTgyMWMt YTY5YzViYzdlZDU3LzEvMjV1VG5YdktFN2JZelBUWTU0WjI4NEI2RHM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS85MzgzMzAtY2NkOC00ZTdhLTgyMWMtYTY5YzViYzdlZDU3 LzEvMjV1VG5YdktFN2JZelBUWTU0WjI4NEI2RHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifL/jJ4P Y7yZVhgZzvt12o69H/fgyJ0IO7p+tQ8sr4CvbyEM9vbk99fAEzGDrwaz+4CijmPF EEh3/o1TronddBnWstaeXlavum16ado/M1XWU7ZIfhnkalGEzxMIvgD6MLZzviXd 7c+vd9xzwZzYYEq42af9CwZSeR2n8cLbFzGwTWGA2ZHT11ukN0J99TdekYX5lhRb XNyHQ/d6OYjPpCIOBMOHj+U5UBuTGltn39R40PGfZA9ObNzy0/PTpVViI6o2swiO xFyk5p/bkCUzYfeWUbladSjILqKyo4n422qqVB2cyj50fgleAeudvshOjX5o9dwD ShdQ0VRLATvnTg== -----END CERTIFICATE-----Generated at Tue Jan 27 11:52:27 2026 by rpki-client