This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft File: 33mFgec3BO44yb4V5yNw8XbGAxE.mft (raw, json) Hash identifier: 7d9QcKJdUCI30n8RzSsU32xVIihWeqaV50MpweIKgUk= Subject key identifier: 08:A9:02:89:21:7B:8D:2F:2A:66:74:FE:A6:23:27:EC:65:06:B3:48 Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11 Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311 Certificate serial: 019BFA9C070ADF0FC6F158049842D30BC366 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft Manifest number: 0EBB Signing time: Mon 26 Jan 2026 14:01:27 +0000 Manifest this update: Mon 26 Jan 2026 14:01:27 +0000 Manifest next update: Tue 27 Jan 2026 14:01:27 +0000 Files and hashes: 1: 33mFgec3BO44yb4V5yNw8XbGAxE.crl (hash: hGVgQYcaxoLnW2WCe36u6reONMjkLrYmQG0GmveJqQk=) 2: 4P2zKrJn8fJZm56Y9XqGYrJfv1c.roa (hash: bGrWybjz1GP/3q4xpY+GzJUbvxSwoXS7Hg+ro0Fji/g=) 3: l8OJDxOWK_P6tGw3DzBmeW303FQ.roa (hash: oXIpjnFkS1fFSgDZNaFsFyIEm+ATqEEz53svdsFA63g=) 4: wdKGQPE-JO5dbISL5xL1WwZtJko.roa (hash: /jaf6c+DnCQc27SZJHRnst+WZgqBd/3gU6TxVmX0Ovs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9c:07:0a:df:0f:c6:f1:58:04:98:42:d3:0b:c3:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df798581e73704ee38c9be15e72370f176c60311 Validity Not Before: Jan 26 14:01:27 2026 GMT Not After : Jan 27 14:01:27 2026 GMT Subject: CN=08a90289217b8d2f2a6674fea62327ec6506b348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:52:c6:14:52:1f:29:74:be:ae:ab:73:0b:d3: 46:db:be:7e:a0:1f:9e:9e:19:12:ec:8f:32:0d:65: ef:37:2a:5a:5f:08:2c:20:dc:44:20:25:bb:47:e5: 8a:4f:f3:7c:0a:04:f5:f2:d7:07:62:d2:ad:42:05: f2:33:ca:a9:b9:8b:6f:bb:5f:23:d7:d4:d9:d2:cd: d3:93:11:5f:db:b7:06:d7:eb:aa:6e:2b:62:93:e6: 46:2d:8e:da:c2:11:39:f2:4c:9a:80:31:bf:a2:7b: 00:50:8e:9d:c7:b7:e4:5b:f8:85:c9:8c:d1:b1:0b: e4:8e:8f:1f:b9:db:74:c1:2b:4b:d5:91:d2:63:f6: 40:31:53:fc:b8:13:0c:f9:ec:63:32:4e:3b:e8:e4: ca:c7:19:0f:c7:59:6f:67:b2:ef:aa:fb:6a:2b:cd: 4a:0b:03:8f:f9:7e:56:8e:95:ca:63:e4:36:03:a4: 01:6e:3f:05:69:85:bf:77:56:23:c2:a1:41:1d:be: 13:08:2b:01:b2:1a:ae:c9:20:81:fe:7b:a1:a1:dc: ed:05:90:2a:93:57:49:6d:25:1d:ca:c0:8a:45:6e: e6:e1:01:90:de:d1:72:8d:c1:a2:60:e2:3c:e5:e1: 28:df:b5:a7:54:ba:17:f0:ee:96:be:2e:d1:70:a8: 05:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A9:02:89:21:7B:8D:2F:2A:66:74:FE:A6:23:27:EC:65:06:B3:48 X509v3 Authority Key Identifier: keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:8f:d3:4c:62:17:5a:df:bd:10:0c:a5:61:41:20:d9:80:0b: 7f:47:c6:b8:e7:be:48:a7:53:9a:4d:f8:10:d4:94:95:04:63: 3a:b6:91:fd:fd:e4:89:33:9b:c5:ee:57:7b:de:9f:16:c4:0c: 70:72:f3:cb:04:b3:56:ca:40:32:4c:6a:ed:12:7b:be:76:d8: 54:81:f8:e4:e6:05:b5:ae:44:57:a8:6f:3e:4d:2c:d6:e7:23: 5d:84:9a:81:94:8c:e8:35:7e:bf:ec:e5:3f:9a:c7:71:1e:1f: b6:15:53:4a:cf:dd:25:1e:56:b8:ad:cb:4b:0c:f5:e0:26:1e: dd:71:a2:e6:29:95:45:68:91:ae:3a:b9:ea:02:38:37:58:49: 26:38:00:0b:b8:21:23:65:5d:6c:34:d9:6d:17:9d:0c:1b:67: 51:b6:97:82:24:8a:09:36:f9:11:8d:d0:b1:fa:63:d7:32:1e: 3b:12:fa:9c:c9:88:78:5c:3d:eb:b8:7c:e3:98:4f:e2:25:5c: 98:c8:8c:1a:ad:0a:db:d7:df:88:54:0f:f4:aa:69:ab:02:f8: 4c:4a:be:12:47:0e:25:3e:b0:61:17:46:e8:66:a4:87:f0:3a: 7a:06:d9:e5:92:4a:69:fb:eb:f1:49:13:11:9e:b1:38:72:7e: 2b:de:9e:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6nAcK3w/G8VgEmELTC8NmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNzk4NTgxZTczNzA0ZWUzOGM5YmUxNWU3MjM3MGYxNzZj NjAzMTEwHhcNMjYwMTI2MTQwMTI3WhcNMjYwMTI3MTQwMTI3WjAzMTEwLwYDVQQD EygwOGE5MDI4OTIxN2I4ZDJmMmE2Njc0ZmVhNjIzMjdlYzY1MDZiMzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lLGFFIfKXS+rqtzC9NG275+oB+e nhkS7I8yDWXvNypaXwgsINxEICW7R+WKT/N8CgT18tcHYtKtQgXyM8qpuYtvu18j 19TZ0s3TkxFf27cG1+uqbitik+ZGLY7awhE58kyagDG/onsAUI6dx7fkW/iFyYzR sQvkjo8fudt0wStL1ZHSY/ZAMVP8uBMM+exjMk476OTKxxkPx1lvZ7LvqvtqK81K CwOP+X5WjpXKY+Q2A6QBbj8FaYW/d1YjwqFBHb4TCCsBshquySCB/nuhodztBZAq k1dJbSUdysCKRW7m4QGQ3tFyjcGiYOI85eEo37WnVLoX8O6Wvi7RcKgFzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAipAokhe40vKmZ0/qYjJ+xlBrNIMB8GA1UdIwQY MBaAFN95hYHnNwTuOMm+FecjcPF2xgMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9hODAwN2ItMDhjZS00YWY0LWEzODMt YzRhNTJkY2VlMjNkLzEvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9hODAwN2ItMDhjZS00YWY0LWEzODMtYzRhNTJkY2VlMjNk LzEvMzNtRmdlYzNCTzQ0eWI0VjV5Tnc4WGJHQXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl4/TTGIX Wt+9EAylYUEg2YALf0fGuOe+SKdTmk34ENSUlQRjOraR/f3kiTObxe5Xe96fFsQM cHLzywSzVspAMkxq7RJ7vnbYVIH45OYFta5EV6hvPk0s1ucjXYSagZSM6DV+v+zl P5rHcR4fthVTSs/dJR5WuK3LSwz14CYe3XGi5imVRWiRrjq56gI4N1hJJjgAC7gh I2VdbDTZbRedDBtnUbaXgiSKCTb5EY3Qsfpj1zIeOxL6nMmIeFw967h845hP4iVc mMiMGq0K29ffiFQP9KppqwL4TEq+EkcOJT6wYRdG6Gakh/A6egbZ5ZJKafvr8UkT EZ6xOHJ+K96e8w== -----END CERTIFICATE-----Generated at Tue Jan 27 00:09:49 2026 by rpki-client