This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft File: cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json) Hash identifier: xsN7E9bnc3hA2igWi6ra27FQH2MTBblNRIR3Vc7DOm8= Subject key identifier: DB:1D:C8:01:1E:C6:41:8B:84:3B:55:53:2B:8C:93:0A:17:EA:97:E2 Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8 Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8 Certificate serial: 019BFC1BE8B86664283677016424B4294E9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 21:00:46 +0000 Manifest this update: Mon 26 Jan 2026 21:00:46 +0000 Manifest next update: Tue 27 Jan 2026 21:00:46 +0000 Files and hashes: 1: NB9VsHBRBEiYw3McIpBpW336Ki4.roa (hash: RFYXt5Z4dlbdvwt6pd136hK2qoU5DGTk7ZrYTY6dsB8=) 2: YswYZYlKWOyRavy0ATCTvPfm9wQ.roa (hash: aGrODVPH+/3IzPSKFduvxP2Zeu3f9DRc9hp0rYqfO0U=) 3: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: 0Q+Hl+ihQN86t8NwB1pF44fa/U0icBjCG8fritQ//ak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1b:e8:b8:66:64:28:36:77:01:64:24:b4:29:4e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8 Validity Not Before: Jan 26 21:00:46 2026 GMT Not After : Jan 27 21:00:46 2026 GMT Subject: CN=db1dc8011ec6418b843b55532b8c930a17ea97e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e7:fe:7b:5e:55:88:f1:b5:f5:2c:92:d6:37: 6b:ab:f7:54:cb:89:95:86:72:48:20:7b:66:ca:b5: 1b:d8:cc:c0:46:19:ae:8c:b1:5c:84:5f:8d:cb:53: 56:79:6f:b8:e5:f0:10:d1:89:0b:28:75:ba:20:29: 6e:66:c9:8d:71:f9:67:c7:40:e0:83:73:14:4e:41: 0f:67:39:92:39:76:28:75:68:0a:cf:8b:99:77:64: 31:2b:b8:46:46:5e:a8:c8:0b:70:42:19:e0:cb:4f: 5b:ca:83:62:56:89:22:6f:86:73:8c:56:58:eb:63: 33:2c:0c:6f:0b:d9:86:ed:04:22:dd:e0:48:09:b0: 5e:54:86:64:9f:3c:f5:1d:26:bb:c0:09:ea:8a:6d: 19:a5:95:f1:18:45:f6:f1:5e:68:3e:58:ab:ed:29: 9a:c9:ba:33:4e:b1:09:74:40:1a:4f:0f:5c:26:10: 4b:10:ff:7c:06:7f:9a:93:c3:75:8c:d9:ba:3d:de: 9c:99:a1:dc:65:ef:db:f5:ed:9c:02:74:49:25:3c: 93:f2:35:7d:9c:b4:82:84:79:86:b4:97:2d:14:d2: 8a:41:31:f8:51:c2:ec:9f:8e:4f:3b:68:4e:e6:a5: 4d:42:7c:0b:dd:75:34:56:2b:1a:0e:66:23:09:f5: f2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1D:C8:01:1E:C6:41:8B:84:3B:55:53:2B:8C:93:0A:17:EA:97:E2 X509v3 Authority Key Identifier: keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:bd:92:00:ca:13:46:9d:5c:9b:d1:9d:c8:86:b4:f7:4e:44: b4:64:c2:da:a4:16:e2:84:35:39:0d:aa:15:57:eb:3f:00:7f: 34:00:38:ff:30:33:a1:ce:87:a4:92:3c:cd:95:41:5d:15:29: c2:01:7b:f5:53:44:d0:c6:2b:29:dd:85:53:8a:50:ca:d8:1d: f7:19:ab:85:4c:3b:52:50:ad:90:ea:ff:b7:28:73:85:50:1e: 16:cf:eb:53:fd:e4:1c:e1:37:4b:3c:fb:23:a9:43:f0:88:e7: 7a:76:77:9f:e0:a0:07:c4:3a:49:69:fc:a6:66:81:aa:ab:99: 28:40:d4:80:a1:08:b2:81:8e:29:a6:97:c7:f9:b9:d6:45:cc: e3:d6:44:95:77:21:d3:50:da:c0:58:8d:69:42:7a:57:a9:82: 22:68:dc:a0:4a:76:e5:45:e3:40:25:25:2e:10:6b:d7:10:0b: 12:18:65:98:f5:8e:96:fc:cc:d6:46:ff:19:80:de:3d:06:af: e4:20:8c:17:01:93:b8:b4:73:0b:0a:95:6b:a2:8e:40:77:5b: 76:b3:1a:a2:b8:0f:b7:9e:e8:5c:cb:04:ce:c8:dd:7a:bc:c4: 38:ab:33:75:31:88:4d:b0:31:a9:f5:85:bb:5a:ab:47:ae:83: 91:22:99:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8G+i4ZmQoNncBZCS0KU6aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYWQzNTNjYzFhMGQxNmQ1ZThlMTRhMzc1NzVhNmYzZDYw NTYzZjgwHhcNMjYwMTI2MjEwMDQ2WhcNMjYwMTI3MjEwMDQ2WjAzMTEwLwYDVQQD EyhkYjFkYzgwMTFlYzY0MThiODQzYjU1NTMyYjhjOTMwYTE3ZWE5N2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApef+e15ViPG19SyS1jdrq/dUy4mV hnJIIHtmyrUb2MzARhmujLFchF+Ny1NWeW+45fAQ0YkLKHW6ICluZsmNcflnx0Dg g3MUTkEPZzmSOXYodWgKz4uZd2QxK7hGRl6oyAtwQhngy09byoNiVokib4ZzjFZY 62MzLAxvC9mG7QQi3eBICbBeVIZknzz1HSa7wAnqim0ZpZXxGEX28V5oPlir7Sma ybozTrEJdEAaTw9cJhBLEP98Bn+ak8N1jNm6Pd6cmaHcZe/b9e2cAnRJJTyT8jV9 nLSChHmGtJctFNKKQTH4UcLsn45PO2hO5qVNQnwL3XU0VisaDmYjCfXytwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsdyAEexkGLhDtVUyuMkwoX6pfiMB8GA1UdIwQY MBaAFHCtNTzBoNFtXo4Uo3V1pvPWBWP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMjZkOWMtZDg1MS00YTY5LTk1Zjkt MTUwNGVhNTNlMjU1LzEvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMjZkOWMtZDg1MS00YTY5LTk1ZjktMTUwNGVhNTNlMjU1 LzEvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqb2SAMoT Rp1cm9GdyIa0905EtGTC2qQW4oQ1OQ2qFVfrPwB/NAA4/zAzoc6HpJI8zZVBXRUp wgF79VNE0MYrKd2FU4pQytgd9xmrhUw7UlCtkOr/tyhzhVAeFs/rU/3kHOE3Szz7 I6lD8IjnenZ3n+CgB8Q6SWn8pmaBqquZKEDUgKEIsoGOKaaXx/m51kXM49ZElXch 01DawFiNaUJ6V6mCImjcoEp25UXjQCUlLhBr1xALEhhlmPWOlvzM1kb/GYDePQav 5CCMFwGTuLRzCwqVa6KOQHdbdrMaorgPt57oXMsEzsjderzEOKszdTGITbAxqfWF u1qrR66DkSKZSA== -----END CERTIFICATE-----Generated at Tue Jan 27 03:55:56 2026 by rpki-client