This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft File: 2PH7284hRaDbaQBgn3xUcy37DNg.mft (raw, json) Hash identifier: 36REUKgdQevK+g6wzT6wCZypeCjVdipEKRXqaDv38PQ= Subject key identifier: C2:7E:F0:9C:ED:F5:42:9F:CF:FF:F0:ED:C3:02:FF:21:00:F7:AC:23 Authority key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8 Certificate issuer: /CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8 Certificate serial: 019C04441CBD8DD20E06DEFC53EFC6C9E862 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft Manifest number: 08B8 Signing time: Wed 28 Jan 2026 11:01:38 +0000 Manifest this update: Wed 28 Jan 2026 11:01:38 +0000 Manifest next update: Thu 29 Jan 2026 11:01:38 +0000 Files and hashes: 1: 2PH7284hRaDbaQBgn3xUcy37DNg.crl (hash: kxptRUa1RXfcgggy34nZoXHyvVNwGwVt/OCmjhNtqwU=) 2: I-cmXuRRTQgMauzqhYZq1qS7jd8.roa (hash: +mhQlm2zpG1YAxHqc5888PjYzkQLufmoxeIELPBtTRo=) 3: y3ttufEXp6cxv-T4_oDe-APoH_s.roa (hash: hqR+yWeoI/A6uSSJ7mt+LNP9uEE+SLImg2FhVTkY/wg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 11:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:44:1c:bd:8d:d2:0e:06:de:fc:53:ef:c6:c9:e8:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8 Validity Not Before: Jan 28 11:01:38 2026 GMT Not After : Jan 29 11:01:38 2026 GMT Subject: CN=c27ef09cedf5429fcffff0edc302ff2100f7ac23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4e:bc:df:12:1e:2e:73:80:11:4d:0e:35:6f: 0a:73:a0:cd:75:5f:5e:db:89:b9:1d:d9:92:ef:ca: 7d:06:30:22:b7:3a:19:41:11:89:50:bc:9d:4f:e1: 8d:51:6a:71:a1:24:98:ea:1a:db:1b:94:b7:1b:02: de:3f:f5:ba:44:8f:13:2c:6f:5a:b2:8c:c1:d9:4b: 51:eb:db:4a:d9:49:3b:c4:de:9b:64:f2:46:b1:3b: ce:9f:88:a6:63:94:40:4c:b8:5d:d5:da:20:b2:16: e3:49:01:ff:0b:ff:81:56:73:7c:4f:f5:f2:33:2c: 1d:24:5a:56:d5:bc:48:7f:43:b0:1a:67:4b:27:f0: d7:20:5a:b3:84:5b:c8:a9:01:35:41:f0:6c:94:6b: c2:ab:27:7d:ae:32:46:59:04:a6:cf:45:76:13:e7: c1:66:a7:34:86:c4:82:25:d5:49:d0:84:77:c3:57: f5:75:e7:35:d3:9d:36:e5:f0:02:24:a8:22:12:9f: f6:33:e1:34:cd:ec:de:33:ab:6c:8f:d2:67:96:ea: ad:b9:78:db:0e:d2:90:88:f7:4b:44:b8:d5:8b:cf: 31:5a:5f:0e:e5:31:e8:81:ed:b0:be:0c:25:9b:b7: 59:02:bb:30:d7:b8:e8:a1:73:22:4c:81:55:7e:e7: 7a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7E:F0:9C:ED:F5:42:9F:CF:FF:F0:ED:C3:02:FF:21:00:F7:AC:23 X509v3 Authority Key Identifier: keyid:D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:c2:f9:68:09:70:4d:79:14:c4:55:ed:48:37:6b:cf:ec:8f: da:a3:ce:98:ff:e1:ad:90:4c:57:47:c4:5c:c7:51:27:c3:fc: d1:c4:f0:46:8b:c4:b5:07:a1:86:77:37:0b:72:2e:b5:21:3a: 2e:1b:38:4f:2d:c6:42:d3:3e:0c:5c:c4:8e:6e:b6:31:a3:c7: 21:63:af:7d:c9:4e:ef:d9:3c:bf:43:be:65:4c:7e:d1:24:a9: 0c:aa:1e:86:43:12:94:23:a1:23:aa:3b:8f:35:c8:6f:94:28: 34:1b:56:af:97:58:6f:58:92:e9:aa:eb:03:86:29:e1:20:93: 9d:01:0e:ca:7d:d5:a2:cc:66:ef:f7:ad:f8:e0:fa:1d:ae:db: 3e:1d:c7:22:fa:00:ed:6d:e3:4f:7a:f0:31:65:7c:e8:7b:da: bb:46:37:23:37:1a:46:8d:28:a9:b2:81:9c:c5:23:59:e5:00: 19:92:1f:5d:de:ec:5b:5f:34:b9:01:b7:dc:68:5b:6d:61:1f: f4:bd:7c:16:bd:bf:a8:b4:c0:a5:e6:a8:27:da:54:de:c4:48: 0d:03:62:39:f1:6d:e6:c4:de:ee:ee:3a:b1:b3:8d:fc:e5:43: 58:e5:2f:c1:6d:1d:13:89:69:fc:fa:a2:f1:f3:17:3d:9a:71: b3:1f:e1:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwERBy9jdIOBt78U+/GyehiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZjFmYmRiY2UyMTQ1YTBkYjY5MDA2MDlmN2M1NDczMmRm YjBjZDgwHhcNMjYwMTI4MTEwMTM4WhcNMjYwMTI5MTEwMTM4WjAzMTEwLwYDVQQD EyhjMjdlZjA5Y2VkZjU0MjlmY2ZmZmYwZWRjMzAyZmYyMTAwZjdhYzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk683xIeLnOAEU0ONW8Kc6DNdV9e 24m5HdmS78p9BjAitzoZQRGJULydT+GNUWpxoSSY6hrbG5S3GwLeP/W6RI8TLG9a sozB2UtR69tK2Uk7xN6bZPJGsTvOn4imY5RATLhd1dogshbjSQH/C/+BVnN8T/Xy MywdJFpW1bxIf0OwGmdLJ/DXIFqzhFvIqQE1QfBslGvCqyd9rjJGWQSmz0V2E+fB Zqc0hsSCJdVJ0IR3w1f1dec105025fACJKgiEp/2M+E0zezeM6tsj9JnluqtuXjb DtKQiPdLRLjVi88xWl8O5THoge2wvgwlm7dZArsw17jooXMiTIFVfud6ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJ+8Jzt9UKfz//w7cMC/yEA96wjMB8GA1UdIwQY MBaAFNjx+9vOIUWg22kAYJ98VHMt+wzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlBINzI4NGhSYURiYVFCZ24zeFVjeTM3RE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8zMTQzMWUtNWE3ZC00ZmMzLWE4OGQt NDdmMDQzZmJhMTNiLzEvMlBINzI4NGhSYURiYVFCZ24zeFVjeTM3RE5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8zMTQzMWUtNWE3ZC00ZmMzLWE4OGQtNDdmMDQzZmJhMTNi LzEvMlBINzI4NGhSYURiYVFCZ24zeFVjeTM3RE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApcL5aAlw TXkUxFXtSDdrz+yP2qPOmP/hrZBMV0fEXMdRJ8P80cTwRovEtQehhnc3C3IutSE6 Lhs4Ty3GQtM+DFzEjm62MaPHIWOvfclO79k8v0O+ZUx+0SSpDKoehkMSlCOhI6o7 jzXIb5QoNBtWr5dYb1iS6arrA4Yp4SCTnQEOyn3Vosxm7/et+OD6Ha7bPh3HIvoA 7W3jT3rwMWV86Hvau0Y3IzcaRo0oqbKBnMUjWeUAGZIfXd7sW180uQG33GhbbWEf 9L18Fr2/qLTApeaoJ9pU3sRIDQNiOfFt5sTe7u46sbON/OVDWOUvwW0dE4lp/Pqi 8fMXPZpxsx/h+g== -----END CERTIFICATE-----Generated at Wed Jan 28 21:05:40 2026 by rpki-client