This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json) Hash identifier: Y3XC9cjEUVBY+aBSRIvU3h9tGfcBmg8gbK5Oh8hYIFw= Subject key identifier: D1:5D:7C:B1:6F:F9:D9:5E:86:B1:7C:BB:89:C1:26:01:65:81:98:70 Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27 Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127 Certificate serial: 019BDF9305C3802CABA8AF0A507A237DAB1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft Manifest number: 0BF4 Signing time: Wed 21 Jan 2026 08:01:52 +0000 Manifest this update: Wed 21 Jan 2026 08:01:52 +0000 Manifest next update: Thu 22 Jan 2026 08:01:52 +0000 Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: SvDIxNBOIu9Cmr5dosXWEEDMcuSj4Lho9R4QyvJNt04=) 2: GxXxtmytTeePZFqMmjKewv0phDk.roa (hash: DQNMt4Qmq5pWK/m+65wngsoZgA7+I6etgVuEFLBf9P8=) 3: hrfVvtnK2yUD8q8kqhgwgxBrIWA.roa (hash: knPxWaldCF2NZQN6BPLTcSuiJLTa63/Ehra1OYIbZUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:93:05:c3:80:2c:ab:a8:af:0a:50:7a:23:7d:ab:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127 Validity Not Before: Jan 21 08:01:52 2026 GMT Not After : Jan 22 08:01:52 2026 GMT Subject: CN=d15d7cb16ff9d95e86b17cbb89c1260165819870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6c:cd:d2:e2:2f:e6:fe:f4:6f:ca:91:8e:c1: b7:d5:c3:31:e5:0c:f6:7c:e7:9a:a3:87:81:78:7e: 85:3b:55:45:b9:38:77:d6:27:1a:63:58:52:99:f0: 7b:49:01:0f:e9:04:f4:bb:83:38:99:7c:b5:8c:37: 51:2c:3e:94:17:5b:3d:19:d1:10:b4:7d:4e:8b:91: 9c:89:9a:80:2c:32:e0:f3:4d:23:1c:42:f4:d9:9a: 08:19:c2:3b:49:1b:9f:ca:8d:ae:ad:6c:88:c1:cb: ed:34:01:2e:62:01:25:3e:73:a7:b0:f5:6e:aa:22: 34:f7:69:16:b1:c4:22:18:ad:3b:bc:87:14:29:1a: 2f:19:db:38:8b:31:0f:25:6b:11:10:b4:02:ce:76: a8:85:13:d7:1f:4f:60:60:8a:1e:cd:6f:f3:b6:e1: 4b:50:46:55:bc:a2:00:36:2f:a5:25:41:a5:e6:7a: fe:39:89:97:6e:bd:86:73:f9:02:b1:1f:70:cc:8b: e9:b7:68:12:ff:de:ac:52:61:92:86:64:99:ac:83: 24:71:29:07:9c:69:7b:8a:46:64:1d:a0:cc:67:99: 4a:af:9d:e9:e2:8f:87:09:ca:1c:4c:55:72:0b:ae: 5a:a8:83:56:63:83:9a:71:fe:aa:23:9b:4f:00:d2: ec:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5D:7C:B1:6F:F9:D9:5E:86:B1:7C:BB:89:C1:26:01:65:81:98:70 X509v3 Authority Key Identifier: keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:83:0d:7f:4c:5a:f6:fd:18:e7:48:f9:1d:ef:af:4d:b5:d7: 40:6e:46:f7:92:0c:d2:6f:6c:8c:3c:f9:6a:23:60:97:19:85: af:bc:ba:21:b3:84:af:a9:a0:f3:3a:ee:e3:64:df:3e:79:da: fc:68:9d:16:2c:ec:e7:ad:f5:7e:2d:9b:e3:4d:73:3c:14:e4: 45:8a:9b:02:72:2c:e6:52:0f:2f:6c:1a:23:ad:f8:24:71:33: 3a:a9:0b:b8:ad:af:72:90:6e:eb:c9:5f:82:8f:a9:03:78:6f: 87:02:9a:72:cb:d5:b3:98:85:33:59:be:f9:a7:76:2f:24:83: 0a:b0:49:f6:5f:2a:b2:51:73:7a:81:c8:0d:48:83:27:69:15: 40:42:98:40:f4:33:f6:cd:bc:52:e0:92:d4:e7:ec:43:33:17: d5:20:40:ef:95:66:ee:39:31:66:15:99:58:5f:50:07:ec:57: 28:d0:66:be:cf:dc:a9:f4:e7:30:83:c4:81:b9:d4:a4:58:a9: ab:1e:5e:f7:d7:2b:37:9d:28:49:b3:f9:1c:1a:10:d3:da:32: 95:5a:d2:11:71:51:f2:bc:80:02:f0:1f:6f:c2:9d:54:74:4a: 07:9e:ba:69:7f:b9:10:20:db:71:00:01:0e:b1:8d:de:ed:56: 44:cd:9f:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvfkwXDgCyrqK8KUHojfasdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMTY4MzVkMDM3Nzg2NjIwYTllOWY3YTBlMzYwNDk4YmI2 NTQxMjcwHhcNMjYwMTIxMDgwMTUyWhcNMjYwMTIyMDgwMTUyWjAzMTEwLwYDVQQD EyhkMTVkN2NiMTZmZjlkOTVlODZiMTdjYmI4OWMxMjYwMTY1ODE5ODcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWzN0uIv5v70b8qRjsG31cMx5Qz2 fOeao4eBeH6FO1VFuTh31icaY1hSmfB7SQEP6QT0u4M4mXy1jDdRLD6UF1s9GdEQ tH1Oi5GciZqALDLg800jHEL02ZoIGcI7SRufyo2urWyIwcvtNAEuYgElPnOnsPVu qiI092kWscQiGK07vIcUKRovGds4izEPJWsRELQCznaohRPXH09gYIoezW/ztuFL UEZVvKIANi+lJUGl5nr+OYmXbr2Gc/kCsR9wzIvpt2gS/96sUmGShmSZrIMkcSkH nGl7ikZkHaDMZ5lKr53p4o+HCcocTFVyC65aqINWY4Oacf6qI5tPANLsMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFdfLFv+dlehrF8u4nBJgFlgZhwMB8GA1UdIwQY MBaAFNEWg10Dd4ZiCp6feg42BJi7ZUEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9mNTA3Y2ItNzM3MS00YWQxLWI3ZTMt MTZhN2Q2MGQ1YmVhLzEvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9mNTA3Y2ItNzM3MS00YWQxLWI3ZTMtMTZhN2Q2MGQ1YmVh LzEvMFJhRFhRTjNobUlLbnA5NkRqWUVtTHRsUVNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYMNf0xa 9v0Y50j5He+vTbXXQG5G95IM0m9sjDz5aiNglxmFr7y6IbOEr6mg8zru42TfPnna /GidFizs5631fi2b401zPBTkRYqbAnIs5lIPL2waI634JHEzOqkLuK2vcpBu68lf go+pA3hvhwKacsvVs5iFM1m++ad2LySDCrBJ9l8qslFzeoHIDUiDJ2kVQEKYQPQz 9s28UuCS1OfsQzMX1SBA75Vm7jkxZhWZWF9QB+xXKNBmvs/cqfTnMIPEgbnUpFip qx5e99crN50oSbP5HBoQ09oylVrSEXFR8ryAAvAfb8KdVHRKB566aX+5ECDbcQAB DrGN3u1WRM2f4Q== -----END CERTIFICATE-----Generated at Wed Jan 21 13:36:12 2026 by rpki-client