This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft File: rfRJdaXb2_gjtKCmt-65mxSENn4.mft (raw, json) Hash identifier: KeJbhsAoGXqG9G30aRaGudu+VrBwHjpir4PeSQ8l3bs= Subject key identifier: BE:90:75:CA:A9:8D:1F:46:99:8A:71:0A:05:1A:EA:16:9F:1D:3E:90 Authority key identifier: AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E Certificate issuer: /CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e Certificate serial: 019BFB7729720779C3F0DFAA37FFD85DC8B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft Manifest number: 077F Signing time: Mon 26 Jan 2026 18:00:49 +0000 Manifest this update: Mon 26 Jan 2026 18:00:49 +0000 Manifest next update: Tue 27 Jan 2026 18:00:49 +0000 Files and hashes: 1: DhXIhTNHBAE7NvkalrnD2mWPOgc.roa (hash: XkSLod7NkjdHpR6f/sX0hfuPnykt4HOPZbPdtRM87jE=) 2: rfRJdaXb2_gjtKCmt-65mxSENn4.crl (hash: 9ocEV1yPnd/nVrYmnctm5xg0/nJrQHm7zj3xSvspU2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:29:72:07:79:c3:f0:df:aa:37:ff:d8:5d:c8:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e Validity Not Before: Jan 26 18:00:49 2026 GMT Not After : Jan 27 18:00:49 2026 GMT Subject: CN=be9075caa98d1f46998a710a051aea169f1d3e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9d:59:17:86:2c:07:de:71:27:7b:25:e3:3a: 7c:18:c2:86:50:af:9f:a7:d9:72:f0:3b:5c:d3:64: 19:37:1b:1c:0e:e0:01:ad:41:cd:54:c6:1f:fb:86: 74:83:9f:12:3e:8f:36:2a:78:82:7f:6d:c2:df:4c: 4a:1c:06:fb:29:fd:55:c5:88:86:2d:b8:ad:d1:73: 32:8f:61:bf:67:12:51:f9:9d:55:ec:46:64:dd:cc: 4f:b7:77:9a:b9:d5:a1:e3:9c:61:7b:66:db:99:ed: c1:73:e4:87:79:40:1b:cf:ec:19:08:0c:40:28:94: 71:e8:13:0d:0a:70:75:6a:23:ca:9e:cf:b4:50:f3: 73:71:9e:64:cf:26:40:fb:4e:c1:a3:e1:95:be:19: 3c:83:a1:05:f7:75:0b:05:22:f2:4a:6d:15:45:ad: 4a:0c:25:c6:d8:4f:5b:6c:d0:75:e5:39:2d:05:6d: 01:c4:0f:07:90:8b:a4:98:f4:d3:7f:17:90:1c:00: dd:e8:f6:f9:24:52:0a:66:94:2d:f7:48:d7:1f:4c: 9b:46:fe:b2:7a:02:66:aa:d9:44:1e:c6:e5:40:8f: 20:fb:db:77:76:b0:92:b8:97:f6:3d:e5:14:32:f8: 2d:c9:cf:db:96:d9:65:5d:09:68:76:5b:52:2f:2b: b5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:90:75:CA:A9:8D:1F:46:99:8A:71:0A:05:1A:EA:16:9F:1D:3E:90 X509v3 Authority Key Identifier: keyid:AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:be:32:90:68:1f:d2:27:da:b8:44:07:ee:af:d9:fe:10:d8: aa:4e:dd:67:5c:70:a2:72:37:a0:f4:05:61:89:67:d0:13:2d: c4:37:7c:7a:15:82:51:d3:c2:0d:9a:d1:cc:96:ee:51:db:1b: c1:26:13:05:14:c4:fd:09:3f:e3:72:6f:73:e7:66:2e:0c:ed: f4:88:6d:25:95:23:4e:0e:c7:ea:02:df:f5:9a:2b:02:cc:82: 7f:93:54:97:3f:8d:32:88:a2:f4:c4:76:01:69:7c:60:e9:85: 62:e0:33:98:a6:ee:ec:6d:d9:82:7b:97:8e:6e:59:1c:c5:95: fa:f4:a0:dd:3d:8e:3d:6b:4f:00:a7:80:07:48:39:fe:44:c7: 42:98:f7:19:11:fe:0a:fa:0a:45:39:d7:4f:55:c0:97:85:77: 24:1b:8f:90:ef:42:92:1e:52:db:2e:33:6a:ff:58:80:9c:44: 44:05:31:20:a5:cf:73:23:43:aa:b3:0f:26:3d:96:38:22:4c: 75:5f:de:3f:c0:4c:dd:b1:13:60:13:ab:c8:06:29:99:f7:c2: 9c:54:ad:6c:af:d2:cb:12:29:c5:0a:96:b0:0f:9a:96:5b:6b: c5:d3:60:69:66:27:b4:b8:84:df:14:8f:f7:40:19:ad:e3:3b: 52:ab:a4:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7dylyB3nD8N+qN//YXciyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ0OTc1YTVkYmRiZjgyM2I0YTBhNmI3ZWViOTliMTQ4 NDM2N2UwHhcNMjYwMTI2MTgwMDQ5WhcNMjYwMTI3MTgwMDQ5WjAzMTEwLwYDVQQD EyhiZTkwNzVjYWE5OGQxZjQ2OTk4YTcxMGEwNTFhZWExNjlmMWQzZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp1ZF4YsB95xJ3sl4zp8GMKGUK+f p9ly8Dtc02QZNxscDuABrUHNVMYf+4Z0g58SPo82KniCf23C30xKHAb7Kf1VxYiG Lbit0XMyj2G/ZxJR+Z1V7EZk3cxPt3eaudWh45xhe2bbme3Bc+SHeUAbz+wZCAxA KJRx6BMNCnB1aiPKns+0UPNzcZ5kzyZA+07Bo+GVvhk8g6EF93ULBSLySm0VRa1K DCXG2E9bbNB15TktBW0BxA8HkIukmPTTfxeQHADd6Pb5JFIKZpQt90jXH0ybRv6y egJmqtlEHsblQI8g+9t3drCSuJf2PeUUMvgtyc/bltllXQlodltSLyu1dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6QdcqpjR9GmYpxCgUa6hafHT6QMB8GA1UdIwQY MBaAFK30SXWl29v4I7SgprfuuZsUhDZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZSSmRhWGIyX2dqdEtDbXQtNjVteFNFTm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZWUxNzMtNmMxMi00M2NiLThiMDkt YmJiMGM4MDI4ZTJiLzEvcmZSSmRhWGIyX2dqdEtDbXQtNjVteFNFTm40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9jZWUxNzMtNmMxMi00M2NiLThiMDktYmJiMGM4MDI4ZTJi LzEvcmZSSmRhWGIyX2dqdEtDbXQtNjVteFNFTm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALr4ykGgf 0ifauEQH7q/Z/hDYqk7dZ1xwonI3oPQFYYln0BMtxDd8ehWCUdPCDZrRzJbuUdsb wSYTBRTE/Qk/43Jvc+dmLgzt9IhtJZUjTg7H6gLf9ZorAsyCf5NUlz+NMoii9MR2 AWl8YOmFYuAzmKbu7G3ZgnuXjm5ZHMWV+vSg3T2OPWtPAKeAB0g5/kTHQpj3GRH+ CvoKRTnXT1XAl4V3JBuPkO9Ckh5S2y4zav9YgJxERAUxIKXPcyNDqrMPJj2WOCJM dV/eP8BM3bETYBOryAYpmffCnFStbK/SyxIpxQqWsA+alltrxdNgaWYntLiE3xSP 90AZreM7Uquktw== -----END CERTIFICATE-----Generated at Tue Jan 27 02:52:27 2026 by rpki-client