This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft File: 2rU_myHRPgeOPoRNZF7qhYDxzOE.mft (raw, json) Hash identifier: TJ2a4ryDIs0ye+SRffDcWS5U0XHId/2OUrklCZ6YNtU= Subject key identifier: 67:80:34:5D:63:0D:DF:7D:61:3D:7E:84:F3:09:D4:6C:A8:04:5E:A0 Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1 Certificate issuer: /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1 Certificate serial: 019BFC537734055DBA6AA07201820AB1D692 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft Manifest number: 17F0 Signing time: Mon 26 Jan 2026 22:01:26 +0000 Manifest this update: Mon 26 Jan 2026 22:01:26 +0000 Manifest next update: Tue 27 Jan 2026 22:01:26 +0000 Files and hashes: 1: 2rU_myHRPgeOPoRNZF7qhYDxzOE.crl (hash: eviIfB/P5ObODzCe8TGU3++QT5YgM9mFQLjoKjroGXw=) 2: pZ9C3CmkxrOGsoj0mtQVOZi53qw.roa (hash: sgsuQe2msoFiMDKKrbbPAUnLjdv7QmZ0qLU2RSe/3FQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:53:77:34:05:5d:ba:6a:a0:72:01:82:0a:b1:d6:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1 Validity Not Before: Jan 26 22:01:26 2026 GMT Not After : Jan 27 22:01:26 2026 GMT Subject: CN=6780345d630ddf7d613d7e84f309d46ca8045ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e1:d3:81:7d:4b:e7:2e:67:46:50:dd:8c:9b: 89:8b:bb:89:76:01:f9:ec:a2:e1:d1:39:16:8b:69: d8:50:5a:c7:0c:8c:72:e6:7f:84:9f:00:d4:fe:f0: c7:2f:cd:90:11:91:e9:75:c3:73:f1:e3:c7:ce:87: c6:83:a2:cd:52:a6:bb:c9:b3:1e:4d:11:81:de:28: 41:be:73:45:37:6d:63:e8:cd:b0:22:3e:07:e8:dd: 10:1b:e0:1d:5d:01:dc:8c:2e:fc:c0:dd:89:e3:20: 66:f1:98:f6:e3:be:13:2a:26:16:97:3a:fb:55:ce: a4:e1:65:b1:76:3f:be:02:a1:3e:b9:b2:67:2b:8a: 38:bc:47:d8:f9:fe:f9:f0:06:3a:41:36:4e:d0:a1: fc:7d:94:7c:ab:b1:9f:8f:67:71:28:89:27:62:4d: 59:e6:ed:90:f8:3d:c0:d8:69:a1:23:50:b1:34:47: 05:49:99:06:f1:93:79:28:0a:4e:41:20:01:92:34: 32:35:45:87:d8:02:49:5b:16:3d:41:f2:0e:45:33: 6a:29:4d:4b:3a:de:64:a0:9f:87:c7:12:59:8b:0f: 5f:08:bc:73:a6:21:c3:ab:3c:e4:8e:8b:1f:c9:d3: 6a:d0:03:2e:c6:31:94:57:92:48:35:4c:39:10:25: 6f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:80:34:5D:63:0D:DF:7D:61:3D:7E:84:F3:09:D4:6C:A8:04:5E:A0 X509v3 Authority Key Identifier: keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:cf:85:2f:fd:a0:1d:e5:61:26:6f:d3:df:20:8f:8b:7f:cb: 1a:dd:98:77:38:3f:bd:fa:f6:17:37:f5:cb:10:09:e0:93:6a: 57:c9:7f:08:14:1b:7d:f2:25:95:5a:6b:7a:e2:8e:59:d8:ce: c5:35:f1:0b:9a:37:ef:2a:8c:fd:27:a3:12:cd:e3:6e:84:60: 28:66:e7:ef:9c:d4:d6:20:d6:d0:a7:f6:06:54:9e:55:70:eb: 41:5e:09:d3:d3:44:ab:6f:ef:d9:7d:95:4e:09:82:17:30:e6: ed:88:23:4f:61:d6:25:09:cf:8b:52:a1:6e:f3:99:fc:5a:ab: cd:78:7b:5c:0d:02:9f:e0:45:6e:4d:ef:1f:ff:bc:42:ab:6b: d4:e1:a3:77:42:77:b1:70:db:1d:b1:96:a9:1e:e6:f5:96:4a: 69:9c:52:88:c0:fc:cd:cd:1d:3b:97:0a:69:17:db:01:ed:4c: 2e:bb:7d:14:61:94:3d:e6:43:9e:ce:b8:3e:5b:b0:78:2c:3c: 7d:f4:d3:8a:24:dc:e1:25:46:0c:bd:8c:5a:dc:96:a1:48:f8: a5:ff:a0:7f:ed:e4:ce:17:ac:50:50:63:e0:c9:08:0b:30:a3: d9:7a:6c:99:99:3f:fe:f3:b2:c0:ad:11:b0:f9:48:90:24:f3: 2f:9d:81:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8U3c0BV26aqByAYIKsdaSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYjUzZjliMjFkMTNlMDc4ZTNlODQ0ZDY0NWVlYTg1ODBm MWNjZTEwHhcNMjYwMTI2MjIwMTI2WhcNMjYwMTI3MjIwMTI2WjAzMTEwLwYDVQQD Eyg2NzgwMzQ1ZDYzMGRkZjdkNjEzZDdlODRmMzA5ZDQ2Y2E4MDQ1ZWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseHTgX1L5y5nRlDdjJuJi7uJdgH5 7KLh0TkWi2nYUFrHDIxy5n+EnwDU/vDHL82QEZHpdcNz8ePHzofGg6LNUqa7ybMe TRGB3ihBvnNFN21j6M2wIj4H6N0QG+AdXQHcjC78wN2J4yBm8Zj2474TKiYWlzr7 Vc6k4WWxdj++AqE+ubJnK4o4vEfY+f758AY6QTZO0KH8fZR8q7Gfj2dxKIknYk1Z 5u2Q+D3A2GmhI1CxNEcFSZkG8ZN5KApOQSABkjQyNUWH2AJJWxY9QfIORTNqKU1L Ot5koJ+HxxJZiw9fCLxzpiHDqzzkjosfydNq0AMuxjGUV5JINUw5ECVvuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGeANF1jDd99YT1+hPMJ1GyoBF6gMB8GA1UdIwQY MBaAFNq1P5sh0T4Hjj6ETWRe6oWA8czhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi83ZjlhYjEtYmM3Yy00ZDBkLWE5NzAt NWI4YmM1OTBiMTk3LzEvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi83ZjlhYjEtYmM3Yy00ZDBkLWE5NzAtNWI4YmM1OTBiMTk3 LzEvMnJVX215SFJQZ2VPUG9STlpGN3FoWUR4ek9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8+FL/2g HeVhJm/T3yCPi3/LGt2Ydzg/vfr2Fzf1yxAJ4JNqV8l/CBQbffIllVpreuKOWdjO xTXxC5o37yqM/SejEs3jboRgKGbn75zU1iDW0Kf2BlSeVXDrQV4J09NEq2/v2X2V TgmCFzDm7YgjT2HWJQnPi1KhbvOZ/FqrzXh7XA0Cn+BFbk3vH/+8Qqtr1OGjd0J3 sXDbHbGWqR7m9ZZKaZxSiMD8zc0dO5cKaRfbAe1MLrt9FGGUPeZDns64PluweCw8 ffTTiiTc4SVGDL2MWtyWoUj4pf+gf+3kzhesUFBj4MkICzCj2XpsmZk//vOywK0R sPlIkCTzL52Bww== -----END CERTIFICATE-----Generated at Tue Jan 27 03:55:43 2026 by rpki-client