This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft File: 0PT6gHWHU7JDohZe3ep12-7oJsQ.mft (raw, json) Hash identifier: HwkXT4XPvHAOBCyiFDDw42PhhINm6ea8VzWvKf0pIsU= Subject key identifier: C0:2E:95:18:E3:0B:62:8C:A1:D6:0C:3A:16:70:91:EF:44:BF:60:58 Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4 Certificate issuer: /CN=d0f4fa80758753b243a2165eddea75dbeee826c4 Certificate serial: 019BFBAEE005C121663BEA51A44BBC48FC97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft Manifest number: 12D7 Signing time: Mon 26 Jan 2026 19:01:40 +0000 Manifest this update: Mon 26 Jan 2026 19:01:40 +0000 Manifest next update: Tue 27 Jan 2026 19:01:40 +0000 Files and hashes: 1: 0PT6gHWHU7JDohZe3ep12-7oJsQ.crl (hash: RoIliLltVwn+7K/fpBd0zlzkM8gvGReXjh7tvxjVzNk=) 2: pLi1qq2wcSmdgCiUnjjCoQErQdA.roa (hash: 7prO26MADaOtqZ/YBeNHajM4pUEvbdbYtkMA592/T+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:e0:05:c1:21:66:3b:ea:51:a4:4b:bc:48:fc:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4 Validity Not Before: Jan 26 19:01:40 2026 GMT Not After : Jan 27 19:01:40 2026 GMT Subject: CN=c02e9518e30b628ca1d60c3a167091ef44bf6058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:76:35:09:6b:f4:ef:8d:d2:72:9e:54:f9:bb: a7:b9:b2:9b:62:e1:c0:51:d1:70:83:6c:3f:17:d3: 0d:87:de:bf:1e:af:3d:ba:40:96:6f:da:5a:c2:9a: 3d:eb:ea:f5:af:e8:4c:ca:48:22:64:72:b5:2f:bf: ad:90:d7:42:a2:4f:15:4c:15:14:1a:fb:5b:de:b3: 02:1d:f1:b5:47:95:57:45:a5:ad:54:a7:26:08:03: d9:43:ab:ec:05:a5:e1:e9:b3:13:88:21:0a:c0:8b: f2:10:bd:b9:13:8e:8d:06:a6:99:95:92:fb:1b:aa: f8:d2:0c:81:1d:32:e0:6a:01:d4:46:02:ca:a3:62: f2:4a:45:d3:f4:a0:2e:84:c3:84:fc:82:04:dd:e2: a9:d5:b5:ba:17:e3:36:10:b9:9f:88:6d:f9:58:ea: ff:82:a5:e4:f0:b6:c9:e6:da:18:d1:b0:d8:ce:c2: 8f:ce:de:2f:88:a1:b3:8f:f5:5d:9c:89:79:77:e3: b9:f9:ea:ab:f8:92:2a:94:b8:1c:3f:13:99:ba:d7: 5b:90:74:04:79:82:d6:39:5f:54:a5:2a:24:ae:45: 0e:97:14:eb:16:de:dc:f7:28:4c:13:6d:bd:dc:9a: 15:44:34:46:fc:14:13:b6:fa:00:87:f3:1b:17:b7: 33:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2E:95:18:E3:0B:62:8C:A1:D6:0C:3A:16:70:91:EF:44:BF:60:58 X509v3 Authority Key Identifier: keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:89:5a:c9:9f:3f:1e:64:57:0e:83:bf:44:6f:ef:8b:6c:9d: 9d:da:97:36:67:aa:0e:50:5c:f3:44:3f:75:36:a6:3c:c5:5e: 49:f7:5e:05:ee:a3:01:2e:c1:c2:37:91:db:6b:69:5f:97:14: cd:65:f5:15:35:7a:34:77:ee:34:83:34:47:46:7b:dc:17:86: 88:26:cc:2d:1f:ce:1d:2c:ab:eb:90:ad:39:d3:cb:1f:a3:95: 49:3f:40:e0:40:04:68:09:b5:e4:a3:c2:c5:85:c0:71:ea:6c: f2:ec:ef:90:4d:18:ce:3a:c3:b9:64:f7:5b:e8:5e:8b:ed:14: a6:76:2b:f0:00:13:f8:97:39:9a:27:ca:f6:3e:3c:10:73:2f: fe:ea:5a:fb:90:7a:57:3a:67:c0:0b:ba:a7:ae:ea:52:2c:e2: 6d:7e:3b:44:4b:35:bf:13:62:1b:07:8c:be:fa:33:78:98:71: e2:b6:7e:02:99:aa:d4:78:38:38:d9:60:6e:39:a7:a4:db:b9: fb:28:04:25:ed:bd:89:e3:7f:c9:19:e2:6a:39:e3:21:2a:02: cc:93:df:37:86:c9:11:f5:ae:40:6f:e6:b2:fa:5f:c7:ee:91: 1b:1f:03:59:ac:e6:12:b0:66:84:59:7c:a2:9b:4f:99:38:1e: cc:a4:dd:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7ruAFwSFmO+pRpEu8SPyXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZjRmYTgwNzU4NzUzYjI0M2EyMTY1ZWRkZWE3NWRiZWVl ODI2YzQwHhcNMjYwMTI2MTkwMTQwWhcNMjYwMTI3MTkwMTQwWjAzMTEwLwYDVQQD EyhjMDJlOTUxOGUzMGI2MjhjYTFkNjBjM2ExNjcwOTFlZjQ0YmY2MDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nY1CWv0743Scp5U+bunubKbYuHA UdFwg2w/F9MNh96/Hq89ukCWb9pawpo96+r1r+hMykgiZHK1L7+tkNdCok8VTBUU Gvtb3rMCHfG1R5VXRaWtVKcmCAPZQ6vsBaXh6bMTiCEKwIvyEL25E46NBqaZlZL7 G6r40gyBHTLgagHURgLKo2LySkXT9KAuhMOE/IIE3eKp1bW6F+M2ELmfiG35WOr/ gqXk8LbJ5toY0bDYzsKPzt4viKGzj/VdnIl5d+O5+eqr+JIqlLgcPxOZutdbkHQE eYLWOV9UpSokrkUOlxTrFt7c9yhME2293JoVRDRG/BQTtvoAh/MbF7cz2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAulRjjC2KModYMOhZwke9Ev2BYMB8GA1UdIwQY MBaAFND0+oB1h1OyQ6IWXt3qddvu6CbEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jYTVjMTktZTQ5Ni00OWU4LThiOTMt NzJhMWYzNzcxOWJiLzEvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9jYTVjMTktZTQ5Ni00OWU4LThiOTMtNzJhMWYzNzcxOWJi LzEvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIlayZ8/ HmRXDoO/RG/vi2ydndqXNmeqDlBc80Q/dTamPMVeSfdeBe6jAS7BwjeR22tpX5cU zWX1FTV6NHfuNIM0R0Z73BeGiCbMLR/OHSyr65CtOdPLH6OVST9A4EAEaAm15KPC xYXAceps8uzvkE0YzjrDuWT3W+hei+0UpnYr8AAT+Jc5mifK9j48EHMv/upa+5B6 VzpnwAu6p67qUizibX47REs1vxNiGweMvvozeJhx4rZ+Apmq1Hg4ONlgbjmnpNu5 +ygEJe29ieN/yRniajnjISoCzJPfN4bJEfWuQG/msvpfx+6RGx8DWazmErBmhFl8 optPmTgezKTdwA== -----END CERTIFICATE-----Generated at Tue Jan 27 06:10:52 2026 by rpki-client