This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft File: f01ZHCOtLGlHfX96HUzo687pWWw.mft (raw, json) Hash identifier: ohuNr63ecliKP3O1XOHTnylLqbUtbpaYUY+X/4Zogdo= Subject key identifier: 2F:EB:E6:C1:82:03:32:1E:47:41:A7:61:CD:01:EE:B1:D4:C6:94:EA Authority key identifier: 7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C Certificate issuer: /CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c Certificate serial: 019BFCC0B39877936A6CB1E3A555AFFA8659 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft Manifest number: 0645 Signing time: Tue 27 Jan 2026 00:00:45 +0000 Manifest this update: Tue 27 Jan 2026 00:00:45 +0000 Manifest next update: Wed 28 Jan 2026 00:00:45 +0000 Files and hashes: 1: f01ZHCOtLGlHfX96HUzo687pWWw.crl (hash: FL81XOjcW62+wPvKzwqLnic3xQioQcMg6mZtGl2X0sk=) 2: pXDB3JZOfxhx6kB_B6yjlms4hgg.roa (hash: 7CjufhrAy5+5Le+UMiFmAE/OHHfY94923x+MRoCs0Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c0:b3:98:77:93:6a:6c:b1:e3:a5:55:af:fa:86:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c Validity Not Before: Jan 27 00:00:45 2026 GMT Not After : Jan 28 00:00:45 2026 GMT Subject: CN=2febe6c18203321e4741a761cd01eeb1d4c694ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:28:e1:ca:8b:4b:3d:56:be:69:48:4e:25:46: fb:1c:05:35:ad:13:49:25:94:db:96:94:81:f9:7b: 18:f7:e3:45:97:5f:c6:44:65:c5:54:db:c0:86:d5: db:74:c5:f6:89:e3:24:37:81:70:c0:2d:ad:90:69: bd:83:ff:ea:4c:7d:d0:4a:2d:df:5a:41:a2:55:b5: da:f1:6e:aa:25:9e:7a:ea:a5:21:81:39:6e:24:49: b9:a3:67:17:a4:25:1f:bb:16:8a:97:17:1a:65:57: 53:b8:47:05:40:0a:01:e1:b7:fa:56:ad:03:2b:73: 4d:e5:8b:3f:c1:7c:f7:fc:17:4e:e7:ad:85:3c:50: 91:c5:dd:a2:a8:03:5c:7f:06:20:1f:3a:4d:0f:48: e0:d1:c0:50:38:14:3b:0d:6f:ee:f6:52:b5:15:a2: 94:6b:9d:3d:b7:7b:c3:a1:e7:d6:cb:42:fb:35:db: 31:a1:f6:cf:d3:29:56:b6:7d:22:ee:6f:33:c6:e4: d2:58:1f:29:87:9f:e6:43:f1:94:a5:1d:c2:06:ae: 26:6c:3e:a2:30:1e:05:b8:b8:89:d7:82:82:84:7a: 2b:b2:b7:d1:7a:c9:b3:33:bc:85:f0:fb:c4:ce:ba: 31:2f:fa:97:9b:14:73:64:a0:19:db:b9:42:16:b2: 9d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EB:E6:C1:82:03:32:1E:47:41:A7:61:CD:01:EE:B1:D4:C6:94:EA X509v3 Authority Key Identifier: keyid:7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:02:92:f6:8d:79:76:f1:3f:32:2a:81:cb:d8:44:92:dc:17: a3:f2:7d:df:3a:30:1e:3f:8c:17:3b:b1:db:bc:5c:d2:d9:48: a8:f9:87:28:11:07:94:c1:c3:c9:68:74:dc:f3:3d:53:c2:44: d1:9d:36:c0:76:28:39:ec:38:91:76:ca:72:fc:ff:ca:07:2a: 03:80:2f:a3:7e:be:ec:2d:54:b5:6e:79:c9:2e:82:e1:1d:e6: 82:17:37:25:64:62:54:a2:02:15:04:b8:04:df:08:ee:38:89: ac:b6:20:a6:db:4d:cb:c1:d5:50:78:ba:4c:da:5a:e8:98:ad: 86:5d:76:92:12:5a:27:b1:13:2d:78:f3:82:6f:bd:26:c0:63: 24:e0:5e:ec:fa:67:b8:82:47:3e:c5:42:67:ea:05:21:c0:7d: 41:89:bd:84:85:d1:1e:9c:4d:94:a6:7c:45:2d:c2:21:d1:e4: c1:81:44:07:e2:b0:47:cd:9c:61:40:d8:50:4d:89:1a:27:30: 29:be:1e:53:22:ad:0c:d8:ad:e8:85:b1:3f:18:76:70:6a:71: ca:74:6d:dd:ba:2f:2c:54:10:47:53:f4:8d:5f:6d:68:a1:20: 27:fa:4c:b8:61:37:9a:a7:15:8d:8d:c3:b8:7d:c8:d7:6c:23: 1d:4f:d5:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wLOYd5NqbLHjpVWv+oZZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNGQ1OTFjMjNhZDJjNjk0NzdkN2Y3YTFkNGNlOGViY2Vl OTU5NmMwHhcNMjYwMTI3MDAwMDQ1WhcNMjYwMTI4MDAwMDQ1WjAzMTEwLwYDVQQD EygyZmViZTZjMTgyMDMzMjFlNDc0MWE3NjFjZDAxZWViMWQ0YzY5NGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yjhyotLPVa+aUhOJUb7HAU1rRNJ JZTblpSB+XsY9+NFl1/GRGXFVNvAhtXbdMX2ieMkN4FwwC2tkGm9g//qTH3QSi3f WkGiVbXa8W6qJZ566qUhgTluJEm5o2cXpCUfuxaKlxcaZVdTuEcFQAoB4bf6Vq0D K3NN5Ys/wXz3/BdO562FPFCRxd2iqANcfwYgHzpND0jg0cBQOBQ7DW/u9lK1FaKU a509t3vDoefWy0L7NdsxofbP0ylWtn0i7m8zxuTSWB8ph5/mQ/GUpR3CBq4mbD6i MB4FuLiJ14KChHorsrfResmzM7yF8PvEzroxL/qXmxRzZKAZ27lCFrKd8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/r5sGCAzIeR0GnYc0B7rHUxpTqMB8GA1UdIwQY MBaAFH9NWRwjrSxpR31/eh1M6OvO6VlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjAxWkhDT3RMR2xIZlg5NkhVem82ODdwV1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8wZDY3YTItYmMzNi00YjkzLWI2MDQt ZDRmNWM5MmQ5MDk1LzEvZjAxWkhDT3RMR2xIZlg5NkhVem82ODdwV1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8wZDY3YTItYmMzNi00YjkzLWI2MDQtZDRmNWM5MmQ5MDk1 LzEvZjAxWkhDT3RMR2xIZlg5NkhVem82ODdwV1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARwKS9o15 dvE/MiqBy9hEktwXo/J93zowHj+MFzux27xc0tlIqPmHKBEHlMHDyWh03PM9U8JE 0Z02wHYoOew4kXbKcvz/ygcqA4Avo36+7C1UtW55yS6C4R3mghc3JWRiVKICFQS4 BN8I7jiJrLYgpttNy8HVUHi6TNpa6Jithl12khJaJ7ETLXjzgm+9JsBjJOBe7Ppn uIJHPsVCZ+oFIcB9QYm9hIXRHpxNlKZ8RS3CIdHkwYFEB+KwR82cYUDYUE2JGicw Kb4eUyKtDNit6IWxPxh2cGpxynRt3bovLFQQR1P0jV9taKEgJ/pMuGE3mqcVjY3D uH3I12wjHU/VHw== -----END CERTIFICATE-----Generated at Tue Jan 27 04:27:24 2026 by rpki-client