This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft File: 0CDxCDLEm61vFalgWMW6GFcqxSo.mft (raw, json) Hash identifier: HX6MPrHDKpEYSWha+Evktq1FtuPYGnYysNH3zmovjTw= Subject key identifier: 1A:5B:D0:DB:ED:B0:12:D4:6E:53:9C:D9:49:1D:BE:76:88:2C:C5:08 Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A Certificate issuer: /CN=d020f10832c49bad6f15a96058c5ba18572ac52a Certificate serial: 019BFCF87907BB08D6A8B9EFF6A5DBB2CA7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft Manifest number: 0B45 Signing time: Tue 27 Jan 2026 01:01:40 +0000 Manifest this update: Tue 27 Jan 2026 01:01:40 +0000 Manifest next update: Wed 28 Jan 2026 01:01:40 +0000 Files and hashes: 1: 0CDxCDLEm61vFalgWMW6GFcqxSo.crl (hash: 4ZkRCdP0Qk/w9fcju36qT6GFyPPIvCl27I3K1/zeqck=) 2: 7Qx48EmBn-OawWJSPpRThxXxGsw.roa (hash: vJn+IO3r8KyMcEh7oBKpoGl8tmbKCsu+EUXynkIKhkQ=) 3: lbl2pQkR5Gt2zpZZ9Jh22oLkisQ.roa (hash: x9+pd0aqdgxunGrrCWfBRzAZtvQjFOaQn2oOsjiZkVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:79:07:bb:08:d6:a8:b9:ef:f6:a5:db:b2:ca:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a Validity Not Before: Jan 27 01:01:40 2026 GMT Not After : Jan 28 01:01:40 2026 GMT Subject: CN=1a5bd0dbedb012d46e539cd9491dbe76882cc508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:df:cd:c0:f9:25:a3:5b:76:e7:66:12:7c:82: 2c:e4:eb:36:64:e7:d3:f2:60:0f:b0:81:c1:ad:e5: b4:9f:0a:da:0e:d2:88:46:5c:6b:e4:35:15:9a:49: 24:e6:35:f8:5c:6d:9e:80:a2:e7:c3:c5:1c:94:91: c3:86:56:6d:ac:77:16:6b:a0:b0:e6:ca:df:c8:16: e9:72:fd:6d:94:b5:97:87:6e:09:cf:e4:49:13:d2: 74:bd:94:9c:50:bf:de:39:2a:d0:c8:13:45:9c:02: 37:50:65:f2:ef:72:f1:21:37:98:6e:a4:1f:a2:59: ed:54:ff:52:37:30:52:45:04:49:5c:a5:03:0d:60: 46:80:c5:11:9e:31:18:38:9b:21:02:f0:23:30:3e: b5:9e:59:93:89:19:4d:9a:33:76:53:cc:16:7d:82: ee:d2:d8:2d:b7:de:1b:be:37:5d:dc:0c:1d:f1:5e: b9:de:95:9e:04:cc:4f:c8:9f:be:1a:65:74:a9:71: 30:95:46:5a:eb:8d:22:bd:0e:77:60:47:71:92:8c: 27:ce:fa:9d:f7:65:1f:51:0b:20:9a:68:62:2a:98: c8:a8:eb:03:eb:3a:cd:cd:a4:6c:7f:72:50:fa:a5: cf:14:7e:ed:ba:59:3e:79:32:67:dc:4a:fa:55:90: 26:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5B:D0:DB:ED:B0:12:D4:6E:53:9C:D9:49:1D:BE:76:88:2C:C5:08 X509v3 Authority Key Identifier: keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:44:68:3a:70:1e:be:17:52:dc:e0:a0:d1:f6:37:6d:19:5c: 3d:91:77:de:1b:a2:ca:1a:58:64:61:9c:8b:c9:35:31:ed:dd: 64:1b:85:a8:9e:09:f3:53:52:06:cc:3a:99:79:bf:47:ed:1d: c7:08:59:cc:34:b5:a5:44:cc:a3:7a:b9:37:e4:0f:2d:0e:5f: c5:1a:2e:34:93:a8:fe:a0:a0:7e:ac:81:25:93:22:1a:f6:63: 40:69:be:31:e4:11:a1:ea:17:05:73:97:af:5a:60:94:f9:8a: bd:4b:4a:f8:e7:37:c4:a8:14:67:30:81:e3:42:a3:61:1c:ad: bf:ba:4a:ee:be:be:cd:e5:68:1b:50:e3:9e:c7:77:8a:6a:65: da:5e:c5:a9:76:e6:3a:25:d0:8b:76:f6:80:43:b7:5e:80:c1: 29:08:e5:76:a7:4e:fc:df:38:0b:64:d9:e6:8c:1a:ae:d8:95: da:85:cd:62:b6:3f:ab:fa:dc:19:99:f1:25:ea:b0:2f:a8:83: f1:6b:dc:67:d5:9b:5b:1b:d7:d2:cf:43:55:fb:40:aa:24:fa: c3:f7:64:3c:c7:35:e0:7e:a0:d0:c4:7f:3b:6f:42:08:c3:84: 31:fc:89:82:e9:16:41:16:77:c0:e7:99:72:7e:72:31:ca:4d: 19:af:fc:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+HkHuwjWqLnv9qXbssp8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMjBmMTA4MzJjNDliYWQ2ZjE1YTk2MDU4YzViYTE4NTcy YWM1MmEwHhcNMjYwMTI3MDEwMTQwWhcNMjYwMTI4MDEwMTQwWjAzMTEwLwYDVQQD EygxYTViZDBkYmVkYjAxMmQ0NmU1MzljZDk0OTFkYmU3Njg4MmNjNTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9/NwPklo1t252YSfIIs5Os2ZOfT 8mAPsIHBreW0nwraDtKIRlxr5DUVmkkk5jX4XG2egKLnw8UclJHDhlZtrHcWa6Cw 5srfyBbpcv1tlLWXh24Jz+RJE9J0vZScUL/eOSrQyBNFnAI3UGXy73LxITeYbqQf olntVP9SNzBSRQRJXKUDDWBGgMURnjEYOJshAvAjMD61nlmTiRlNmjN2U8wWfYLu 0tgtt94bvjdd3Awd8V653pWeBMxPyJ++GmV0qXEwlUZa640ivQ53YEdxkownzvqd 92UfUQsgmmhiKpjIqOsD6zrNzaRsf3JQ+qXPFH7tulk+eTJn3Er6VZAm4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpb0NvtsBLUblOc2UkdvnaILMUIMB8GA1UdIwQY MBaAFNAg8QgyxJutbxWpYFjFuhhXKsUqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMENEeENETEVtNjF2RmFsZ1dNVzZHRmNxeFNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8yYzExYzEtNDI1MC00Mzg3LWE0ZGIt MjcwMWQ1OTFkZWFlLzEvMENEeENETEVtNjF2RmFsZ1dNVzZHRmNxeFNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8yYzExYzEtNDI1MC00Mzg3LWE0ZGItMjcwMWQ1OTFkZWFl LzEvMENEeENETEVtNjF2RmFsZ1dNVzZHRmNxeFNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkRoOnAe vhdS3OCg0fY3bRlcPZF33huiyhpYZGGci8k1Me3dZBuFqJ4J81NSBsw6mXm/R+0d xwhZzDS1pUTMo3q5N+QPLQ5fxRouNJOo/qCgfqyBJZMiGvZjQGm+MeQRoeoXBXOX r1pglPmKvUtK+Oc3xKgUZzCB40KjYRytv7pK7r6+zeVoG1Djnsd3impl2l7FqXbm OiXQi3b2gEO3XoDBKQjldqdO/N84C2TZ5owartiV2oXNYrY/q/rcGZnxJeqwL6iD 8WvcZ9WbWxvX0s9DVftAqiT6w/dkPMc14H6g0MR/O29CCMOEMfyJgukWQRZ3wOeZ cn5yMcpNGa/8wA== -----END CERTIFICATE-----Generated at Tue Jan 27 04:16:15 2026 by rpki-client