This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft File: py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json) Hash identifier: MWShV/GYW4qtn93PIOb/7tjLiVBMzzAlH8rcbR7fbR4= Subject key identifier: D2:C2:04:98:DA:8F:80:01:5C:A0:6A:92:29:CF:4A:46:40:DB:01:66 Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c Certificate serial: 019C1D95D357E5FC98098E4183C2687E685C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft Manifest number: 1528 Signing time: Mon 02 Feb 2026 09:01:24 +0000 Manifest this update: Mon 02 Feb 2026 09:01:24 +0000 Manifest next update: Tue 03 Feb 2026 09:01:24 +0000 Files and hashes: 1: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: LjoJTF4lhr5Qxz1yxTAAGLYYV5BFfUzmuCj7XgwmCuY=) 2: w5wexF-hJcvTksgksSednww4z4E.roa (hash: e+qIfWqcWPWmwyJXZsE4ITGx8fFJ1s+k83g6vuyixn8=) 3: wEDppBCkxMeXKCmEIpLC-dW_mTc.roa (hash: +v+EfzVXLmYVPjpd5/ZRf8OaEefwLkjG3ANx8qenK0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 09:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:95:d3:57:e5:fc:98:09:8e:41:83:c2:68:7e:68:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c Validity Not Before: Feb 2 09:01:24 2026 GMT Not After : Feb 3 09:01:24 2026 GMT Subject: CN=d2c20498da8f80015ca06a9229cf4a4640db0166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:93:be:44:48:e4:46:a1:a9:68:e9:99:59:e4: d1:5f:43:3b:de:01:83:bc:dd:4c:da:01:42:86:cc: 08:78:a2:0e:6c:85:62:0d:36:da:d3:08:d2:8b:55: 9c:b1:38:9c:bc:06:af:2e:a4:63:f7:1f:e9:d4:5a: 40:3e:d8:3b:cb:92:70:9f:57:e6:73:dd:2a:91:a1: 84:d0:e0:2d:5e:95:41:eb:6e:59:b7:44:b2:4c:61: 66:ce:0e:12:c5:9e:b9:90:75:bc:b3:d9:c4:1b:7f: 6e:61:c7:17:46:e3:15:75:61:c6:af:56:cc:cd:20: b8:d0:b7:06:1a:54:e8:e5:c3:45:8f:dd:e7:43:35: 7b:d2:cb:22:1b:d9:65:fb:c8:e4:54:ec:f0:29:90: ef:ea:a7:cb:f3:37:52:21:8f:a3:44:0e:c1:46:00: fc:e8:b8:3e:96:17:7a:93:27:1c:28:ea:aa:0b:65: 45:b0:85:75:31:10:3f:41:60:c6:95:99:6a:be:ea: b2:86:a0:5b:34:a9:2a:19:cd:9f:56:09:80:55:f7: 4e:fe:83:79:e0:f5:10:0f:25:24:22:4f:a9:67:4f: 2b:2d:cd:86:49:72:9f:46:41:2c:85:c0:e8:c0:36: f0:33:7c:0c:3f:7f:ea:3c:af:38:b0:e4:e8:89:cc: 74:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C2:04:98:DA:8F:80:01:5C:A0:6A:92:29:CF:4A:46:40:DB:01:66 X509v3 Authority Key Identifier: keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:84:2a:e9:e0:e1:5b:65:14:e6:f5:3a:be:82:fd:77:4e:36: 0d:7a:ce:1b:c0:15:25:f6:8b:b1:f4:03:5e:8c:c7:e1:4c:68: ef:5c:be:42:db:cf:69:4d:8a:a5:b9:e3:be:6e:39:82:14:9f: 67:af:e9:3f:89:1e:e7:10:92:4f:a2:23:93:6c:76:5d:d9:1e: 88:b0:65:fe:44:2c:f3:bc:03:da:66:19:f6:83:f2:da:15:ee: 00:37:ac:b2:1c:d4:65:32:e9:63:20:28:85:ff:0f:5a:05:2b: d2:0b:d8:8a:5f:96:e3:56:46:11:c8:78:16:03:1e:8e:e1:e1: c2:91:f6:66:da:44:eb:0c:48:02:87:c3:16:7f:15:59:61:c6: d3:bc:6a:af:7c:e0:36:76:6d:bb:45:e4:db:1d:48:58:4d:a4: 6b:cb:38:d2:d3:44:25:a4:f6:4a:f5:8b:53:36:52:77:39:2f: f8:12:1b:d1:54:2d:f5:7d:7f:24:d7:36:11:01:99:bf:0b:28: 5f:c5:fb:7b:92:3b:34:e3:96:f1:68:1b:c8:f7:9d:3d:1f:d3: f1:f7:3b:59:a0:71:09:e7:c9:ae:9a:8b:74:dc:53:95:5e:4f: 8f:1e:9d:e5:ae:47:37:aa:1b:7d:35:52:f4:f9:6e:50:36:83: fd:ea:61:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwdldNX5fyYCY5Bg8JofmhcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MmQxNzhjOGU1M2Y1MjEzMWMxZmI2NDc0M2M5NjBjZjg5 N2ZkMGMwHhcNMjYwMjAyMDkwMTI0WhcNMjYwMjAzMDkwMTI0WjAzMTEwLwYDVQQD EyhkMmMyMDQ5OGRhOGY4MDAxNWNhMDZhOTIyOWNmNGE0NjQwZGIwMTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJO+REjkRqGpaOmZWeTRX0M73gGD vN1M2gFChswIeKIObIViDTba0wjSi1WcsTicvAavLqRj9x/p1FpAPtg7y5Jwn1fm c90qkaGE0OAtXpVB625Zt0SyTGFmzg4SxZ65kHW8s9nEG39uYccXRuMVdWHGr1bM zSC40LcGGlTo5cNFj93nQzV70ssiG9ll+8jkVOzwKZDv6qfL8zdSIY+jRA7BRgD8 6Lg+lhd6kyccKOqqC2VFsIV1MRA/QWDGlZlqvuqyhqBbNKkqGc2fVgmAVfdO/oN5 4PUQDyUkIk+pZ08rLc2GSXKfRkEshcDowDbwM3wMP3/qPK84sOToicx0kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLCBJjaj4ABXKBqkinPSkZA2wFmMB8GA1UdIwQY MBaAFKctF4yOU/UhMcH7ZHQ8lgz4l/0MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHkwWGpJNVQ5U0V4d2Z0a2REeVdEUGlYX1F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xYjgxM2EtNWU4Ni00NWIwLTk5Y2Qt MjhiOWQyNjFlY2IxLzEvcHkwWGpJNVQ5U0V4d2Z0a2REeVdEUGlYX1F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xYjgxM2EtNWU4Ni00NWIwLTk5Y2QtMjhiOWQyNjFlY2Ix LzEvcHkwWGpJNVQ5U0V4d2Z0a2REeVdEUGlYX1F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVoQq6eDh W2UU5vU6voL9d042DXrOG8AVJfaLsfQDXozH4Uxo71y+QtvPaU2Kpbnjvm45ghSf Z6/pP4ke5xCST6Ijk2x2XdkeiLBl/kQs87wD2mYZ9oPy2hXuADesshzUZTLpYyAo hf8PWgUr0gvYil+W41ZGEch4FgMejuHhwpH2ZtpE6wxIAofDFn8VWWHG07xqr3zg NnZtu0Xk2x1IWE2ka8s40tNEJaT2SvWLUzZSdzkv+BIb0VQt9X1/JNc2EQGZvwso X8X7e5I7NOOW8WgbyPedPR/T8fc7WaBxCefJrpqLdNxTlV5Pjx6d5a5HN6obfTVS 9PluUDaD/ephNQ== -----END CERTIFICATE-----Generated at Mon Feb 2 20:44:57 2026 by rpki-client