This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft File: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json) Hash identifier: +zTTxn2hYBZ81gWCoA97IIcQFpaFseFZr5Xcnu93gBE= Subject key identifier: DD:88:B7:4C:59:EF:52:57:54:07:3F:DF:7F:B6:92:3B:F6:51:F9:D1 Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A Certificate issuer: /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a Certificate serial: 019BFA2D5E698FC32FC7631DD5123BB08767 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft Manifest number: 07DD Signing time: Mon 26 Jan 2026 12:00:35 +0000 Manifest this update: Mon 26 Jan 2026 12:00:35 +0000 Manifest next update: Tue 27 Jan 2026 12:00:35 +0000 Files and hashes: 1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: CpVReRcIaVorF7q1NiUUKP0rrw+S6zCUoVlRVmE7Wag=) 2: hK5lLAYeEFCKLEcmlgGIxpgeFig.roa (hash: ya0PEJnK8zefLN3DEt7Na6bo0IiHLAvZHRV5UX0rkk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:5e:69:8f:c3:2f:c7:63:1d:d5:12:3b:b0:87:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a Validity Not Before: Jan 26 12:00:35 2026 GMT Not After : Jan 27 12:00:35 2026 GMT Subject: CN=dd88b74c59ef525754073fdf7fb6923bf651f9d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1e:4c:aa:8a:f2:0e:82:ab:2b:47:04:66:4f: 9b:12:df:a3:14:21:61:68:6a:12:01:ea:aa:6c:55: dc:b9:85:5e:53:69:2e:50:bf:63:c2:6c:aa:58:af: e2:86:a3:ff:c6:9f:bf:17:c8:9f:6b:61:dc:2d:76: d4:f1:b1:8a:c6:69:49:f3:8f:a7:e0:ed:f2:21:0d: ae:16:54:89:6a:1a:23:8b:a7:57:eb:90:00:57:b9: 5e:29:2f:5f:4c:48:01:df:ac:c4:38:cb:0c:85:dd: 61:f4:c0:33:b9:ef:73:04:20:54:3a:ec:a0:94:6e: 0f:82:d9:9d:c2:a4:8e:95:e9:c5:12:f7:86:a8:c4: d7:c6:6c:23:c2:e2:8d:33:05:61:bf:b1:03:bb:6a: df:1a:76:b3:ba:88:a3:35:ad:b5:5d:8e:59:43:cc: ed:ed:57:99:2d:8a:7e:37:d7:86:dc:24:e1:dd:44: 29:be:40:49:0d:84:f3:b5:c8:dd:e4:6a:98:7d:39: b8:f6:72:27:bf:7d:de:fd:88:fe:26:5b:60:56:47: ca:a7:8f:89:73:0e:75:48:a1:39:d4:6a:0d:ee:03: 37:b8:58:63:8f:15:0d:83:ca:59:a6:7e:d2:13:15: f6:27:55:df:8e:bb:5b:b1:a4:f8:72:c6:f4:ac:66: 4d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:88:B7:4C:59:EF:52:57:54:07:3F:DF:7F:B6:92:3B:F6:51:F9:D1 X509v3 Authority Key Identifier: keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:d3:54:d8:63:43:60:7e:2c:71:20:be:e2:3f:53:0b:68:81: 98:ed:1b:18:6b:15:31:07:9e:cf:08:3f:6f:70:64:bb:c2:41: d0:9d:53:f3:08:40:d4:de:3a:5c:4b:3e:f0:0e:8c:c9:cd:36: 81:51:10:ee:2d:6f:bb:92:1f:a6:ff:34:93:46:6f:e8:a2:44: 62:57:02:d5:3a:98:13:df:ce:b5:46:6c:0d:79:83:ac:29:12: 0e:ec:e8:0e:90:f3:d2:b8:b1:2f:6c:f7:92:07:1b:04:ef:23: 3a:2e:4f:b0:98:8f:b9:70:03:d4:e2:bd:85:68:3e:4e:9a:f2: 32:13:fb:d4:d2:d1:8f:9b:48:59:c5:aa:53:31:49:4a:7b:26: 4b:6f:d7:0a:79:d2:f4:0b:5d:f8:ac:c3:8f:66:30:3d:68:6a: 95:d0:b3:db:c9:b5:13:d2:b5:54:df:1f:d9:68:92:29:08:8b: 82:56:a5:0e:77:7a:0a:4f:a6:cc:bc:c5:b2:de:bc:10:1b:47: ea:e2:d3:7a:3b:e3:79:74:c3:ca:f0:49:6c:d9:c4:e8:5e:8b: be:48:12:52:39:29:43:c6:33:b6:73:d3:81:e3:43:19:5e:1e: d1:a6:9d:e0:e9:e1:0f:ab:3f:ec:0c:c9:17:e5:09:0e:ff:3d: 64:f5:b9:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LV5pj8Mvx2Md1RI7sIdnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ZTY5ODVjOGRhYzhjYzY3NzJiN2ZkMzljM2E3NTY0NGMy NWEyNWEwHhcNMjYwMTI2MTIwMDM1WhcNMjYwMTI3MTIwMDM1WjAzMTEwLwYDVQQD EyhkZDg4Yjc0YzU5ZWY1MjU3NTQwNzNmZGY3ZmI2OTIzYmY2NTFmOWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx5MqoryDoKrK0cEZk+bEt+jFCFh aGoSAeqqbFXcuYVeU2kuUL9jwmyqWK/ihqP/xp+/F8ifa2HcLXbU8bGKxmlJ84+n 4O3yIQ2uFlSJahoji6dX65AAV7leKS9fTEgB36zEOMsMhd1h9MAzue9zBCBUOuyg lG4PgtmdwqSOlenFEveGqMTXxmwjwuKNMwVhv7EDu2rfGnazuoijNa21XY5ZQ8zt 7VeZLYp+N9eG3CTh3UQpvkBJDYTztcjd5GqYfTm49nInv33e/Yj+JltgVkfKp4+J cw51SKE51GoN7gM3uFhjjxUNg8pZpn7SExX2J1XfjrtbsaT4csb0rGZNPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2It0xZ71JXVAc/33+2kjv2UfnRMB8GA1UdIwQY MBaAFEXmmFyNrIzGdyt/05w6dWRMJaJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NGM0YTctMzYxYS00ODI5LWE0NjIt NjkyNDI1NzUzMGIwLzEvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82NGM0YTctMzYxYS00ODI5LWE0NjItNjkyNDI1NzUzMGIw LzEvUmVhWVhJMnNqTVozSzNfVG5EcDFaRXdsb2xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdNU2GND YH4scSC+4j9TC2iBmO0bGGsVMQeezwg/b3Bku8JB0J1T8whA1N46XEs+8A6Myc02 gVEQ7i1vu5Ifpv80k0Zv6KJEYlcC1TqYE9/OtUZsDXmDrCkSDuzoDpDz0rixL2z3 kgcbBO8jOi5PsJiPuXAD1OK9hWg+TpryMhP71NLRj5tIWcWqUzFJSnsmS2/XCnnS 9Atd+KzDj2YwPWhqldCz28m1E9K1VN8f2WiSKQiLglalDnd6Ck+mzLzFst68EBtH 6uLTejvjeXTDyvBJbNnE6F6LvkgSUjkpQ8YztnPTgeNDGV4e0aad4OnhD6s/7AzJ F+UJDv89ZPW5lg== -----END CERTIFICATE-----Generated at Mon Jan 26 22:39:32 2026 by rpki-client