This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft File: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft (raw, json) Hash identifier: 4ub0L+gUnGjsZKVSSVp0QtUmq2wiwm7PJgMEiRz4TKc= Subject key identifier: 25:AD:7F:CD:E2:E0:09:2E:07:E0:12:18:C3:36:4C:91:9A:09:76:4E Authority key identifier: D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7 Certificate issuer: /CN=d0f6b8436f6634cd31d7097ce242a549935b18d7 Certificate serial: 019BFD9D32F05746AF6A037960C5D057A094 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft Manifest number: 17C1 Signing time: Tue 27 Jan 2026 04:01:36 +0000 Manifest this update: Tue 27 Jan 2026 04:01:36 +0000 Manifest next update: Wed 28 Jan 2026 04:01:36 +0000 Files and hashes: 1: 0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl (hash: 6QSMDHbq55tNmN4bBDlMQqtdw+HJjcZXLoGKs9PtjQU=) 2: 5oT4wQDby08NkKpZXaWKlUX_zBw.roa (hash: UH0KTt9pI8ZDsM/VAmcpjDz5ijVSpSbjaototx0G23E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 04:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:9d:32:f0:57:46:af:6a:03:79:60:c5:d0:57:a0:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0f6b8436f6634cd31d7097ce242a549935b18d7 Validity Not Before: Jan 27 04:01:36 2026 GMT Not After : Jan 28 04:01:36 2026 GMT Subject: CN=25ad7fcde2e0092e07e01218c3364c919a09764e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:13:45:46:68:e8:2a:70:84:c8:f9:ec:32:16: 25:53:03:03:2b:c0:ae:0e:e7:4e:5d:af:c7:75:8a: 90:a8:ff:67:8f:80:59:88:30:68:aa:11:22:cb:58: 88:4c:25:b7:22:ed:9e:1d:ba:00:6c:e9:47:a6:95: 8e:10:5d:5d:34:ad:6f:6a:ab:7b:ef:1d:92:45:d1: 37:35:fc:54:3a:95:7f:14:b3:45:33:6b:ed:1d:bd: 19:bc:59:e0:c8:73:29:ea:bc:a4:c7:6a:d8:46:b0: c7:7b:c0:e3:d2:ac:cd:49:bf:97:8e:64:8c:1b:4d: f9:83:5b:37:53:6b:58:bf:09:6c:d2:7a:1f:76:6b: 90:fc:2a:bd:8d:6f:cf:17:ad:c2:e4:5a:d8:8c:20: 10:31:a9:2b:f1:07:61:a9:18:f9:d4:21:a6:c4:19: 61:46:d4:5a:ba:f3:5d:52:37:01:49:4c:7c:e3:f5: 3b:80:31:fc:87:ae:20:29:0f:37:ef:62:5d:f7:c2: 40:60:fe:93:e3:82:cd:98:fa:90:3b:ec:d9:e4:a5: 19:0e:e5:54:6f:f8:8e:64:a7:57:7e:6b:cb:a1:78: 0d:9c:6b:6f:22:1d:ad:8d:0d:9e:54:54:c9:c6:fa: fc:1a:04:7c:8d:ed:f1:d0:50:69:9c:0f:d6:de:d6: 92:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AD:7F:CD:E2:E0:09:2E:07:E0:12:18:C3:36:4C:91:9A:09:76:4E X509v3 Authority Key Identifier: keyid:D0:F6:B8:43:6F:66:34:CD:31:D7:09:7C:E2:42:A5:49:93:5B:18:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Pa4Q29mNM0x1wl84kKlSZNbGNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/514a42-0be8-45e8-a7f0-55da8ec36014/1/0Pa4Q29mNM0x1wl84kKlSZNbGNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:74:a9:d6:fb:f6:07:80:2c:34:27:65:d7:f2:32:95:be:52: de:f4:e7:c9:66:48:54:60:ad:2a:88:4e:22:98:63:e5:fb:12: ed:90:25:78:f9:aa:e5:54:55:ff:2b:fb:71:33:59:43:4c:23: 35:de:94:0e:06:26:91:52:eb:1e:02:9c:54:ca:09:68:d2:30: fb:e1:a6:db:74:97:46:7d:f1:59:77:1d:b7:59:03:7f:19:4b: ee:8a:a9:fd:e3:17:13:91:6d:a0:0f:24:55:94:f3:64:3f:f4: 5e:5a:f0:46:cc:55:0e:fe:ff:2d:c5:93:a9:94:93:bc:9e:48: ac:72:1c:07:ef:13:f8:02:2b:90:78:5f:bd:50:b4:3f:36:05: 81:6e:27:f4:be:48:d5:88:a2:a8:b6:1b:55:93:5b:e5:0b:14: 25:7d:2a:6b:0a:85:5f:cc:71:15:4f:70:5d:23:db:58:c5:7a: 2c:c3:db:6c:8d:8b:4c:85:46:d8:e8:92:1a:38:84:a4:4d:06: f8:82:26:00:aa:7a:d2:3f:b3:39:df:7f:00:f3:b1:59:1d:fd: a6:e0:4d:d0:da:0f:8f:4d:c2:28:7d:af:55:55:4e:63:f4:17: 72:a0:96:10:ac:b8:b7:a2:ea:ac:40:0b:f9:2d:aa:1f:2c:9b: 07:dd:cf:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9nTLwV0avagN5YMXQV6CUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZjZiODQzNmY2NjM0Y2QzMWQ3MDk3Y2UyNDJhNTQ5OTM1 YjE4ZDcwHhcNMjYwMTI3MDQwMTM2WhcNMjYwMTI4MDQwMTM2WjAzMTEwLwYDVQQD EygyNWFkN2ZjZGUyZTAwOTJlMDdlMDEyMThjMzM2NGM5MTlhMDk3NjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hNFRmjoKnCEyPnsMhYlUwMDK8Cu DudOXa/HdYqQqP9nj4BZiDBoqhEiy1iITCW3Iu2eHboAbOlHppWOEF1dNK1vaqt7 7x2SRdE3NfxUOpV/FLNFM2vtHb0ZvFngyHMp6rykx2rYRrDHe8Dj0qzNSb+XjmSM G035g1s3U2tYvwls0nofdmuQ/Cq9jW/PF63C5FrYjCAQMakr8QdhqRj51CGmxBlh RtRauvNdUjcBSUx84/U7gDH8h64gKQ8372Jd98JAYP6T44LNmPqQO+zZ5KUZDuVU b/iOZKdXfmvLoXgNnGtvIh2tjQ2eVFTJxvr8GgR8je3x0FBpnA/W3taSUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWtf83i4AkuB+ASGMM2TJGaCXZOMB8GA1UdIwQY MBaAFND2uENvZjTNMdcJfOJCpUmTWxjXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFBhNFEyOW1OTTB4MXdsODRrS2xTWk5iR05jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC81MTRhNDItMGJlOC00NWU4LWE3ZjAt NTVkYThlYzM2MDE0LzEvMFBhNFEyOW1OTTB4MXdsODRrS2xTWk5iR05jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC81MTRhNDItMGJlOC00NWU4LWE3ZjAtNTVkYThlYzM2MDE0 LzEvMFBhNFEyOW1OTTB4MXdsODRrS2xTWk5iR05jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHSp1vv2 B4AsNCdl1/Iylb5S3vTnyWZIVGCtKohOIphj5fsS7ZAlePmq5VRV/yv7cTNZQ0wj Nd6UDgYmkVLrHgKcVMoJaNIw++Gm23SXRn3xWXcdt1kDfxlL7oqp/eMXE5FtoA8k VZTzZD/0XlrwRsxVDv7/LcWTqZSTvJ5IrHIcB+8T+AIrkHhfvVC0PzYFgW4n9L5I 1YiiqLYbVZNb5QsUJX0qawqFX8xxFU9wXSPbWMV6LMPbbI2LTIVG2OiSGjiEpE0G +IImAKp60j+zOd9/APOxWR39puBN0NoPj03CKH2vVVVOY/QXcqCWEKy4t6LqrEAL +S2qHyybB93Pag== -----END CERTIFICATE-----Generated at Tue Jan 27 13:24:09 2026 by rpki-client