This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft File: 0KpKGno60j-q4q6un6YZTwISgSk.mft (raw, json) Hash identifier: 7+JYWupoRhwx8Wu/5RiQB97tyQZDlxfOqQ2Cmu2INSA= Subject key identifier: 12:2A:19:05:C1:92:A5:C1:CB:75:AD:2F:51:60:A7:E4:82:A4:C6:CA Authority key identifier: D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29 Certificate issuer: /CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129 Certificate serial: 019BF9F665F8C617B0A4AB8EE897B992344C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft Manifest number: 0406 Signing time: Mon 26 Jan 2026 11:00:33 +0000 Manifest this update: Mon 26 Jan 2026 11:00:33 +0000 Manifest next update: Tue 27 Jan 2026 11:00:33 +0000 Files and hashes: 1: 0KpKGno60j-q4q6un6YZTwISgSk.crl (hash: g2psA1fUTes2oeQWc375eRtJvNSr9ad1JoBW8AfqIe4=) 2: 0r4BvsnJAN2Pz40prPoUEy6WvzU.roa (hash: AamdQ0j/vjkbuVtweF8p9JDSZ2i84cCde/Gwvcvf218=) 3: 5bf5CwJmQOVXufa2Bw359AZEO9s.roa (hash: vE+kqAcM+EoC006Mvnftc/u8n7NMMiAT3ni4cuysV1M=) 4: epNTET6BvQ6zhUMoLdSPzHjbIWE.roa (hash: qxvi55+BDN0SED0a/Y9HgRfeWegI7IGQUucmOAr178Y=) 5: ncOZbEMiJNqjiscavpDBkZeriIg.roa (hash: KP4yleOLVWJhJdzAKqGM+QLwSbZEncnkoAH1TNTBzJs=) 6: oS9h716veeRY1y9kuFn-MIGUEBg.roa (hash: KS+2BIj/1oDD8HcECr/uPYIsA+2SUgLQkBkCEiNQnZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:65:f8:c6:17:b0:a4:ab:8e:e8:97:b9:92:34:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129 Validity Not Before: Jan 26 11:00:33 2026 GMT Not After : Jan 27 11:00:33 2026 GMT Subject: CN=122a1905c192a5c1cb75ad2f5160a7e482a4c6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c7:0a:e0:8b:8a:0f:0c:8b:05:10:c3:8f:70: 58:34:1f:13:ad:c6:2a:9d:ad:9a:e9:a9:f6:c9:11: 0d:66:ae:6c:29:77:91:34:41:75:6d:54:71:aa:c5: 7d:88:22:d7:d9:3c:5e:e4:11:93:9c:a8:8d:3f:07: a5:fb:ba:44:c9:af:11:88:52:59:a1:11:87:19:c5: 70:7c:16:aa:78:89:d9:b2:3e:5c:7d:43:f8:b8:6c: 4f:88:e8:ef:f5:c0:f7:18:95:4f:3a:4f:39:7d:e2: c4:60:ef:ec:38:bf:4f:0c:a9:0a:01:37:e0:b0:ad: 0d:6e:47:dd:76:1a:05:60:8d:a9:d4:a5:85:6b:98: 41:50:a5:1a:5a:19:e0:41:82:49:ee:de:fc:4e:b1: 35:b4:bb:a4:5a:26:69:7c:01:9c:fc:34:b3:6d:06: 7f:91:54:18:22:3a:4d:c0:47:95:df:17:51:7f:6e: 37:93:21:09:a8:fb:3f:b0:29:8f:ed:8c:76:cc:44: c0:09:03:fe:ef:fe:d5:9e:9e:85:37:93:be:44:c4: 95:a5:e0:60:80:3f:05:8a:7f:c2:e3:fd:e3:af:7b: b8:47:ef:1b:bc:f2:d7:5d:d4:6f:f7:4a:2b:b2:16: eb:e7:fb:6c:7e:db:b7:c3:ec:41:ec:04:7a:3d:98: 8d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2A:19:05:C1:92:A5:C1:CB:75:AD:2F:51:60:A7:E4:82:A4:C6:CA X509v3 Authority Key Identifier: keyid:D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:66:63:78:67:2f:31:70:47:c5:34:bb:2b:c4:54:da:72:85: 6b:dd:a3:2b:33:b6:c6:8b:6d:47:ff:09:e8:79:9f:22:cc:09: 45:eb:58:66:59:29:00:68:74:57:94:9a:b4:73:1d:2b:39:18: fe:07:95:49:7e:a1:93:a4:f7:c4:be:ea:98:eb:c5:07:a2:2f: dd:4c:cc:e3:df:e3:8a:ce:a8:46:d2:60:26:ae:5a:a1:8a:97: aa:c8:35:40:84:9d:b5:a5:9c:c1:2b:e2:92:d2:46:c0:e9:57: 73:81:79:3e:65:f1:ff:f2:e3:ce:54:f0:c6:ea:97:04:17:80: b2:4a:d4:27:54:06:d6:2f:fd:6f:b2:43:1f:85:ee:c2:3f:9e: 79:e0:2f:8b:f9:a2:96:30:99:eb:66:1e:66:24:fc:41:3a:81: 2e:b4:21:fd:5d:c4:ee:51:cc:0c:74:de:98:27:61:db:b4:07: 55:ff:6c:6e:d8:0a:d3:e5:1d:9a:6f:d4:cb:80:3a:85:6f:1b: ac:52:36:57:c4:bb:da:e5:4c:e2:03:7c:67:73:bb:d2:13:a3: 48:7f:f5:11:e5:27:30:b3:67:40:93:e6:91:33:dd:83:53:f1: e7:03:cf:5e:03:d9:7e:9f:91:25:36:10:3d:64:60:52:77:4d: b2:dc:3e:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59mX4xhewpKuO6Je5kjRMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYWE0YTFhN2EzYWQyM2ZhYWUyYWVhZTlmYTYxOTRmMDIx MjgxMjkwHhcNMjYwMTI2MTEwMDMzWhcNMjYwMTI3MTEwMDMzWjAzMTEwLwYDVQQD EygxMjJhMTkwNWMxOTJhNWMxY2I3NWFkMmY1MTYwYTdlNDgyYTRjNmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxccK4IuKDwyLBRDDj3BYNB8TrcYq na2a6an2yRENZq5sKXeRNEF1bVRxqsV9iCLX2Txe5BGTnKiNPwel+7pEya8RiFJZ oRGHGcVwfBaqeInZsj5cfUP4uGxPiOjv9cD3GJVPOk85feLEYO/sOL9PDKkKATfg sK0NbkfddhoFYI2p1KWFa5hBUKUaWhngQYJJ7t78TrE1tLukWiZpfAGc/DSzbQZ/ kVQYIjpNwEeV3xdRf243kyEJqPs/sCmP7Yx2zETACQP+7/7Vnp6FN5O+RMSVpeBg gD8Fin/C4/3jr3u4R+8bvPLXXdRv90orshbr5/tsftu3w+xB7AR6PZiNiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIqGQXBkqXBy3WtL1Fgp+SCpMbKMB8GA1UdIwQY MBaAFNCqShp6OtI/quKurp+mGU8CEoEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEtwS0dubzYwai1xNHE2dW42WVpUd0lTZ1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83NjU1NmUtYTFkOC00ZTBhLTg0Njgt MjIxNGYxOGViMzI5LzEvMEtwS0dubzYwai1xNHE2dW42WVpUd0lTZ1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83NjU1NmUtYTFkOC00ZTBhLTg0NjgtMjIxNGYxOGViMzI5 LzEvMEtwS0dubzYwai1xNHE2dW42WVpUd0lTZ1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGZjeGcv MXBHxTS7K8RU2nKFa92jKzO2xottR/8J6HmfIswJRetYZlkpAGh0V5SatHMdKzkY /geVSX6hk6T3xL7qmOvFB6Iv3UzM49/jis6oRtJgJq5aoYqXqsg1QISdtaWcwSvi ktJGwOlXc4F5PmXx//LjzlTwxuqXBBeAskrUJ1QG1i/9b7JDH4Xuwj+eeeAvi/mi ljCZ62YeZiT8QTqBLrQh/V3E7lHMDHTemCdh27QHVf9sbtgK0+Udmm/Uy4A6hW8b rFI2V8S72uVM4gN8Z3O70hOjSH/1EeUnMLNnQJPmkTPdg1Px5wPPXgPZfp+RJTYQ PWRgUndNstw+5g== -----END CERTIFICATE-----Generated at Mon Jan 26 15:39:50 2026 by rpki-client