This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft File: _0cFo2PcHY0OpRybmh7L04B70FQ.mft (raw, json) Hash identifier: 8/E2klXW3oCBcS5COXiL6oiEGG7W6VstJ42gOkaGTYI= Subject key identifier: 24:3D:00:2A:08:92:A4:65:F1:82:33:34:40:71:E3:CC:A0:B7:F4:9F Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54 Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054 Certificate serial: 019BFEAF48449EC0C37E65D6C7F1D4EF39C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft Manifest number: 17F1 Signing time: Tue 27 Jan 2026 09:00:58 +0000 Manifest this update: Tue 27 Jan 2026 09:00:58 +0000 Manifest next update: Wed 28 Jan 2026 09:00:58 +0000 Files and hashes: 1: DJeUFnamTZ95ip1wqQB6GBsmyiQ.roa (hash: MVnppoj2mz3TnYvjg2uHh/9JjoQIHJwR2BBiRIQrPeE=) 2: GHjJjwBpoAdhz9IMpI8-MFbmhXg.roa (hash: Yg81SKjjSUrf7wcCQo3l8C3jEm5E2w8HUv9yWnStEig=) 3: _0cFo2PcHY0OpRybmh7L04B70FQ.crl (hash: 9Q+wVCHaicNBeLY0fVrOPEkijPvm50lQWD2SSVAKD1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:af:48:44:9e:c0:c3:7e:65:d6:c7:f1:d4:ef:39:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054 Validity Not Before: Jan 27 09:00:58 2026 GMT Not After : Jan 28 09:00:58 2026 GMT Subject: CN=243d002a0892a465f18233344071e3cca0b7f49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:32:53:01:d3:a4:ac:34:c2:91:07:f2:9c:37: 1e:52:28:8b:6a:21:19:91:34:a8:69:5b:52:b5:d2: 57:c4:a5:1c:65:65:9c:0d:d5:9b:63:bd:79:8d:ae: 7c:b5:f8:01:b7:47:f9:f1:32:26:f8:21:7a:7d:6e: ea:bd:7c:07:10:35:24:8f:62:43:d9:51:4d:be:85: a1:b0:0b:48:6a:7d:25:90:39:f1:2b:28:24:f8:2d: ba:1a:a7:6e:da:64:82:e3:94:0d:d1:19:c1:70:71: 52:7b:f1:d9:57:7b:3c:58:eb:7f:59:d7:4f:c9:7a: 45:93:92:b6:b5:04:1d:14:d8:49:ee:52:b5:e2:79: 56:63:55:ae:fd:71:b3:50:8f:30:a6:70:fd:ac:38: 27:87:a1:1b:99:b4:f9:75:01:20:dc:31:e1:6c:31: 5d:0b:54:0a:cc:1c:20:75:84:ce:fd:5a:9d:e4:21: b9:73:73:85:15:4c:cb:12:03:bd:04:2e:3d:f2:03: b9:89:d4:f3:5b:83:df:af:9c:de:be:11:0f:bb:1b: 87:89:bc:09:31:b5:7f:d4:72:41:8b:15:2c:73:8c: e3:2f:d5:ab:b2:81:f7:9c:ff:58:f2:f5:98:e1:21: f5:dc:ae:19:35:2b:58:d1:5b:1e:dd:67:b1:a1:eb: 15:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3D:00:2A:08:92:A4:65:F1:82:33:34:40:71:E3:CC:A0:B7:F4:9F X509v3 Authority Key Identifier: keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:8a:7a:89:9d:01:ab:91:28:af:fb:c9:67:f9:be:58:01:3f: 38:a9:38:13:3e:c3:f1:cb:19:70:32:7f:90:7d:b0:88:d9:b5: 85:50:4e:72:a4:e1:e2:6c:6c:10:9d:45:55:fd:25:80:d5:ca: 66:de:57:1c:f4:0b:c6:5c:2e:bc:7e:8a:07:3e:bb:d3:00:d0: 76:9c:96:10:18:1e:d1:10:15:c9:85:9f:db:1f:51:fc:fe:02: 5d:2e:f1:74:92:25:33:72:f8:16:d6:be:e8:9f:30:f5:29:d1: 36:ae:75:9b:c3:c0:3b:f2:df:4b:eb:cd:e9:d6:01:44:06:c1: f7:4a:31:cc:82:0e:fa:35:ef:e4:82:8d:28:a8:a6:6c:a9:26: 7e:5c:d5:fa:f8:36:e5:3a:bd:02:c5:97:f9:c6:c5:28:dc:c5: 8b:b9:1b:d9:21:94:3d:d3:f3:81:3a:a0:71:74:fd:73:b8:c2: 7d:6a:63:ee:c0:94:1c:3a:85:11:5e:76:b8:69:2c:53:4d:7c: f7:e1:65:05:15:16:49:1e:e3:5c:da:51:58:42:70:e2:57:51: 0c:8a:d2:13:32:7a:c7:62:22:2b:49:1b:77:e5:94:7a:d3:5b: 27:e4:55:0f:1e:69:37:08:26:ea:b4:07:59:ba:1d:b4:e1:39: 12:03:40:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+r0hEnsDDfmXWx/HU7znGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDcwNWEzNjNkYzFkOGQwZWE1MWM5YjlhMWVjYmQzODA3 YmQwNTQwHhcNMjYwMTI3MDkwMDU4WhcNMjYwMTI4MDkwMDU4WjAzMTEwLwYDVQQD EygyNDNkMDAyYTA4OTJhNDY1ZjE4MjMzMzQ0MDcxZTNjY2EwYjdmNDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zJTAdOkrDTCkQfynDceUiiLaiEZ kTSoaVtStdJXxKUcZWWcDdWbY715ja58tfgBt0f58TIm+CF6fW7qvXwHEDUkj2JD 2VFNvoWhsAtIan0lkDnxKygk+C26Gqdu2mSC45QN0RnBcHFSe/HZV3s8WOt/WddP yXpFk5K2tQQdFNhJ7lK14nlWY1Wu/XGzUI8wpnD9rDgnh6EbmbT5dQEg3DHhbDFd C1QKzBwgdYTO/Vqd5CG5c3OFFUzLEgO9BC498gO5idTzW4Pfr5zevhEPuxuHibwJ MbV/1HJBixUsc4zjL9WrsoH3nP9Y8vWY4SH13K4ZNStY0Vse3WexoesV5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQ9ACoIkqRl8YIzNEBx48ygt/SfMB8GA1UdIwQY MBaAFP9HBaNj3B2NDqUcm5oey9OAe9BUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYt NTZiYmUzOGY3NDA3LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYtNTZiYmUzOGY3NDA3 LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4p6iZ0B q5Eor/vJZ/m+WAE/OKk4Ez7D8csZcDJ/kH2wiNm1hVBOcqTh4mxsEJ1FVf0lgNXK Zt5XHPQLxlwuvH6KBz670wDQdpyWEBge0RAVyYWf2x9R/P4CXS7xdJIlM3L4Fta+ 6J8w9SnRNq51m8PAO/LfS+vN6dYBRAbB90oxzIIO+jXv5IKNKKimbKkmflzV+vg2 5Tq9AsWX+cbFKNzFi7kb2SGUPdPzgTqgcXT9c7jCfWpj7sCUHDqFEV52uGksU018 9+FlBRUWSR7jXNpRWEJw4ldRDIrSEzJ6x2IiK0kbd+WUetNbJ+RVDx5pNwgm6rQH WbodtOE5EgNA6Q== -----END CERTIFICATE-----Generated at Tue Jan 27 17:11:38 2026 by rpki-client