This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json) Hash identifier: 5ELWqzm5RaV18aEQLK/QAAXflTQZWdi5eEK0gVO6FD0= Subject key identifier: 80:E8:19:52:91:FF:C1:00:67:B1:52:EB:D4:F1:3B:AF:C9:95:75:AE Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e Certificate serial: 019BFC529BFC805C1F615003E9630D4C81C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft Manifest number: 04D8 Signing time: Mon 26 Jan 2026 22:00:30 +0000 Manifest this update: Mon 26 Jan 2026 22:00:30 +0000 Manifest next update: Tue 27 Jan 2026 22:00:30 +0000 Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: Bdbr9PVi23g46J4FAfbwM4imejkEcjUNCMnZUX2pKl4=) 2: a_JeuiZjb_A9jIUoJNFCsdyE2LU.roa (hash: 1t3bwzQMJzq4XFVJW9/kvGIHOhZEhjPqK7BQuk4SeFA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:52:9b:fc:80:5c:1f:61:50:03:e9:63:0d:4c:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e Validity Not Before: Jan 26 22:00:30 2026 GMT Not After : Jan 27 22:00:30 2026 GMT Subject: CN=80e8195291ffc10067b152ebd4f13bafc99575ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a9:b3:02:c8:bb:a5:f0:e7:ad:17:51:39:94: 51:9a:f9:a5:0a:be:c9:d9:e5:4e:7d:fd:85:d2:f4: 3e:7c:b1:35:82:7b:d1:bd:74:9e:d9:57:d5:e3:78: 66:87:74:1d:0c:11:3f:1b:62:fb:5e:5e:79:ad:d8: a5:16:f7:61:89:2c:af:ff:56:56:af:44:6f:14:55: 1a:09:d1:f8:1f:45:31:a8:a3:27:9e:80:21:26:80: 61:8a:be:af:8d:90:b1:e2:5d:f5:81:94:71:f1:09: 53:b9:ea:c6:e9:19:27:e3:3d:ef:70:0b:0b:5f:8a: 9b:c1:4f:87:40:dc:b2:c8:4e:75:85:63:5a:de:05: fe:b8:f1:d6:b0:bc:cb:a8:10:44:b9:de:5d:be:c3: 88:1d:72:48:42:1c:7d:d8:0b:3a:e8:83:12:d2:5a: c9:9b:bc:aa:b3:54:0c:02:76:6b:6c:3a:c7:7e:47: 07:f6:89:47:09:58:e1:f8:b4:29:67:2a:15:99:e4: cb:31:98:a3:33:14:85:ab:87:25:3f:66:49:91:b5: f7:21:d5:37:8b:1d:59:bf:1b:ba:5f:86:cf:ea:4d: d0:28:7f:4e:f7:3e:6d:0a:84:1d:cd:13:68:86:9b: 6f:2e:0f:64:03:75:94:60:09:91:7e:8a:26:b6:cf: 6f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E8:19:52:91:FF:C1:00:67:B1:52:EB:D4:F1:3B:AF:C9:95:75:AE X509v3 Authority Key Identifier: keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:41:02:9c:50:6c:ef:90:6f:05:b9:b6:c4:30:2b:20:69:3b: 3d:d5:c3:d5:05:13:42:da:51:86:52:96:be:ef:15:90:6b:7f: 6c:f6:a4:e3:37:09:51:69:ef:83:71:a8:76:d0:31:b6:7d:43: d4:67:f3:28:4a:57:e9:dd:2f:92:08:35:ca:30:48:83:e3:4d: cf:23:ab:da:dc:dc:30:81:03:fe:f3:ee:79:46:20:3c:11:38: bc:16:9b:ae:5f:8f:a1:ee:f9:23:cc:d3:7f:0e:b7:42:0b:23: 6f:3b:92:a2:56:f9:a2:d2:a5:4e:01:7d:84:8b:65:56:2f:3f: 95:5f:a6:54:50:f5:9b:41:e0:02:90:3b:21:b4:7a:2d:e1:fd: 37:f7:38:08:22:e6:2d:66:c2:3b:74:ed:ba:23:dd:c9:1f:4a: 5f:01:ea:78:27:33:9e:84:0e:4b:b1:6b:be:c1:cc:3a:6a:7e: b6:b4:a0:b0:3e:ee:19:45:4b:0c:8c:89:44:59:9b:d0:67:f4: 05:97:c0:04:ef:5a:71:0d:fe:4e:04:da:b6:9f:74:77:4c:ce: 0d:13:23:d9:7a:94:70:d7:f0:14:a6:37:92:d3:fa:ca:39:24: 36:a0:94:cf:2b:61:22:21:be:af:f2:4c:6d:69:aa:4f:10:50: c5:65:56:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8Upv8gFwfYVAD6WMNTIHAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNmU1ZDcwOTM1YjhjYmMzN2NmMjE2YzQ0NjY5N2Q0YzI3 YTk5M2UwHhcNMjYwMTI2MjIwMDMwWhcNMjYwMTI3MjIwMDMwWjAzMTEwLwYDVQQD Eyg4MGU4MTk1MjkxZmZjMTAwNjdiMTUyZWJkNGYxM2JhZmM5OTU3NWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKmzAsi7pfDnrRdROZRRmvmlCr7J 2eVOff2F0vQ+fLE1gnvRvXSe2VfV43hmh3QdDBE/G2L7Xl55rdilFvdhiSyv/1ZW r0RvFFUaCdH4H0UxqKMnnoAhJoBhir6vjZCx4l31gZRx8QlTuerG6Rkn4z3vcAsL X4qbwU+HQNyyyE51hWNa3gX+uPHWsLzLqBBEud5dvsOIHXJIQhx92As66IMS0lrJ m7yqs1QMAnZrbDrHfkcH9olHCVjh+LQpZyoVmeTLMZijMxSFq4clP2ZJkbX3IdU3 ix1Zvxu6X4bP6k3QKH9O9z5tCoQdzRNohptvLg9kA3WUYAmRfoomts9vMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDoGVKR/8EAZ7FS69TxO6/JlXWuMB8GA1UdIwQY MBaAFNNuXXCTW4y8N88hbERml9TCepk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wYjA2YzAtZDg5MC00OWJkLWEyOWYt ZjA3ZWZhYzRlMmRlLzEvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8wYjA2YzAtZDg5MC00OWJkLWEyOWYtZjA3ZWZhYzRlMmRl LzEvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0ECnFBs 75BvBbm2xDArIGk7PdXD1QUTQtpRhlKWvu8VkGt/bPak4zcJUWnvg3GodtAxtn1D 1GfzKEpX6d0vkgg1yjBIg+NNzyOr2tzcMIED/vPueUYgPBE4vBabrl+Poe75I8zT fw63QgsjbzuSolb5otKlTgF9hItlVi8/lV+mVFD1m0HgApA7IbR6LeH9N/c4CCLm LWbCO3TtuiPdyR9KXwHqeCcznoQOS7FrvsHMOmp+trSgsD7uGUVLDIyJRFmb0Gf0 BZfABO9acQ3+TgTatp90d0zODRMj2XqUcNfwFKY3ktP6yjkkNqCUzythIiG+r/JM bWmqTxBQxWVWsg== -----END CERTIFICATE-----Generated at Tue Jan 27 02:36:13 2026 by rpki-client