This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft File: 24P1T0UTHZIHwhWgmKKmvNb_BQs.mft (raw, json) Hash identifier: ZicUSrS9D1l3WrqrubTFXYsXfUbyXjR2zuh+NnXY3Xc= Subject key identifier: 2E:F0:7C:84:39:C4:A5:C2:CC:D8:2F:E7:D3:CF:D2:B5:C3:73:0A:B9 Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B Certificate issuer: /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b Certificate serial: 019BD84685F5016F3A4716B437F0D32FD237 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft Manifest number: 0ED3 Signing time: Mon 19 Jan 2026 22:00:59 +0000 Manifest this update: Mon 19 Jan 2026 22:00:59 +0000 Manifest next update: Tue 20 Jan 2026 22:00:59 +0000 Files and hashes: 1: 0-WmLbEH77lOVqvVQ2YUnN7Nex4.roa (hash: K4clzCUFSq6IN3lmLQlxqL/RcAzKs5Apy7zTYqaaAwc=) 2: 24P1T0UTHZIHwhWgmKKmvNb_BQs.crl (hash: TizsfUGl8LxgrUrSiJ44uBiPWOF1awcx8+GkZsGAGgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:46:85:f5:01:6f:3a:47:16:b4:37:f0:d3:2f:d2:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b Validity Not Before: Jan 19 22:00:59 2026 GMT Not After : Jan 20 22:00:59 2026 GMT Subject: CN=2ef07c8439c4a5c2ccd82fe7d3cfd2b5c3730ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b8:3d:ee:de:53:1c:16:d0:3a:6c:c8:b3:be: 6f:bc:83:aa:52:56:81:b6:71:18:fb:fc:64:d4:23: 6e:b5:0c:26:82:d6:4b:e2:fe:16:3d:3f:c2:f8:21: ef:69:3b:1d:9f:2e:f3:cb:08:f1:41:ea:a8:db:0c: 7a:cd:b1:c0:8a:46:9a:6c:d9:a8:2b:be:8a:8b:bc: a1:7f:23:ab:5d:24:d8:b7:26:20:45:a8:2e:64:ed: c3:48:fc:9a:04:83:29:7e:32:24:fa:af:e6:b9:47: 98:ad:35:21:6f:24:8f:eb:20:25:37:82:4e:ea:0f: c4:f9:fe:5d:b8:a5:62:61:db:84:b5:4e:a0:46:48: e8:a3:6c:fa:46:75:b0:49:c8:5e:11:aa:c8:c6:4d: 6c:a8:e5:eb:27:76:03:57:1f:94:5b:bc:8b:c7:ce: cf:d9:88:2c:0c:e7:c2:3b:ad:ee:21:53:fc:4b:d1: 5a:f5:09:f0:8d:23:3c:37:e9:40:6f:93:fa:cc:65: 51:4b:5b:fe:92:1a:04:56:4f:47:42:64:0b:1d:7c: 1b:b8:cd:11:4c:5b:35:88:16:8c:fa:07:23:ba:4d: 7d:93:7d:cf:7f:56:85:53:a5:73:d6:5e:a5:43:36: 63:59:9f:8d:77:da:1b:cb:b0:62:33:1c:90:13:0f: 32:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F0:7C:84:39:C4:A5:C2:CC:D8:2F:E7:D3:CF:D2:B5:C3:73:0A:B9 X509v3 Authority Key Identifier: keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:21:55:b4:ab:da:28:43:ca:08:87:10:1b:67:1b:f8:f5:7d: 9a:fb:be:5f:ad:70:94:ff:ff:b8:28:3e:c6:21:47:9f:df:5b: dd:8b:60:ce:74:0a:14:af:a2:7e:3a:7a:be:46:f5:73:ef:70: 8d:59:30:bd:b9:ff:b2:5f:c6:ec:58:f5:d3:39:ca:54:41:4e: a9:12:82:29:84:b5:4f:05:c7:6f:63:14:63:a1:29:99:51:e9: cd:8f:3e:8b:fb:0f:ec:e6:ee:10:c2:ef:11:04:70:e5:f4:9f: 4d:75:d8:28:45:ed:dc:0d:37:9a:47:fa:2d:9f:a7:5f:4f:54: 8a:60:53:ba:0a:e6:10:e1:3c:8e:96:9b:ae:a8:a6:93:3d:22: 67:41:36:d9:c8:24:3d:82:d0:87:d2:63:68:30:ce:71:a4:96: 7a:42:fe:90:70:34:f7:1e:0e:09:1c:79:72:5a:58:39:86:2f: f2:80:0c:26:df:fe:3a:81:51:74:c9:b9:63:4b:be:e9:91:41: 45:1d:12:8b:6a:52:df:81:64:2e:ca:da:0f:ad:23:2a:ea:11: 90:fa:c3:b6:a3:28:b8:01:80:96:3b:da:8d:b6:07:7a:bd:af: 70:85:1b:f7:76:65:89:6e:a7:7b:c0:d7:5b:d9:ab:8a:04:71: 5d:d5:cb:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYRoX1AW86Rxa0N/DTL9I3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiODNmNTRmNDUxMzFkOTIwN2MyMTVhMDk4YTJhNmJjZDZm ZjA1MGIwHhcNMjYwMTE5MjIwMDU5WhcNMjYwMTIwMjIwMDU5WjAzMTEwLwYDVQQD EygyZWYwN2M4NDM5YzRhNWMyY2NkODJmZTdkM2NmZDJiNWMzNzMwYWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Lg97t5THBbQOmzIs75vvIOqUlaB tnEY+/xk1CNutQwmgtZL4v4WPT/C+CHvaTsdny7zywjxQeqo2wx6zbHAikaabNmo K76Ki7yhfyOrXSTYtyYgRaguZO3DSPyaBIMpfjIk+q/muUeYrTUhbySP6yAlN4JO 6g/E+f5duKViYduEtU6gRkjoo2z6RnWwScheEarIxk1sqOXrJ3YDVx+UW7yLx87P 2YgsDOfCO63uIVP8S9Fa9QnwjSM8N+lAb5P6zGVRS1v+khoEVk9HQmQLHXwbuM0R TFs1iBaM+gcjuk19k33Pf1aFU6Vz1l6lQzZjWZ+Nd9oby7BiMxyQEw8yQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7wfIQ5xKXCzNgv59PP0rXDcwq5MB8GA1UdIwQY MBaAFNuD9U9FEx2SB8IVoJiiprzW/wULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjRQMVQwVVRIWklId2hXZ21LS212TmJfQlFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lNTBjNzAtMGE3MC00NWFjLTlhZDQt MzI2NzY0YTY4Y2ZiLzEvMjRQMVQwVVRIWklId2hXZ21LS212TmJfQlFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9lNTBjNzAtMGE3MC00NWFjLTlhZDQtMzI2NzY0YTY4Y2Zi LzEvMjRQMVQwVVRIWklId2hXZ21LS212TmJfQlFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSFVtKva KEPKCIcQG2cb+PV9mvu+X61wlP//uCg+xiFHn99b3YtgznQKFK+ifjp6vkb1c+9w jVkwvbn/sl/G7Fj10znKVEFOqRKCKYS1TwXHb2MUY6EpmVHpzY8+i/sP7ObuEMLv EQRw5fSfTXXYKEXt3A03mkf6LZ+nX09UimBTugrmEOE8jpabrqimkz0iZ0E22cgk PYLQh9JjaDDOcaSWekL+kHA09x4OCRx5clpYOYYv8oAMJt/+OoFRdMm5Y0u+6ZFB RR0Si2pS34FkLsraD60jKuoRkPrDtqMouAGAljvajbYHer2vcIUb93ZliW6ne8DX W9mrigRxXdXLQg== -----END CERTIFICATE-----Generated at Tue Jan 20 03:01:56 2026 by rpki-client