This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft File: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft (raw, json) Hash identifier: f96ldtRe96E6mpxpBdlCHxwt73NzwAvHbv4d/eJ2nkA= Subject key identifier: 65:90:DA:2A:93:DB:63:BB:65:17:1F:89:19:9A:13:38:BA:BB:54:F0 Authority key identifier: D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08 Certificate issuer: /CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08 Certificate serial: 019BFBAEDDB45F758FDA437ED271FA65E9FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft Manifest number: 03 Signing time: Mon 26 Jan 2026 19:01:39 +0000 Manifest this update: Mon 26 Jan 2026 19:01:39 +0000 Manifest next update: Tue 27 Jan 2026 19:01:39 +0000 Files and hashes: 1: 2TqgHYOgfsJXr5AHbOt7Withl0Y.roa (hash: JWTP6ZFvwS7du+ja3Z9xJskq88DbPSQc49cLLypWIKw=) 2: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl (hash: eqFnkAe2CYTbrozNI+XFdol5K7KpojCKeWgTwwTfYio=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:dd:b4:5f:75:8f:da:43:7e:d2:71:fa:65:e9:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08 Validity Not Before: Jan 26 19:01:39 2026 GMT Not After : Jan 27 19:01:39 2026 GMT Subject: CN=6590da2a93db63bb65171f89199a1338babb54f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:18:22:93:4e:50:ed:62:6d:f1:13:68:de:ac: 99:17:51:a6:88:16:3e:f6:28:ef:32:82:43:99:b1: 69:8f:8b:c0:74:e2:57:d6:fa:aa:33:3d:4d:29:ca: 79:8b:67:7e:21:8c:7e:f9:2f:98:76:99:8b:2a:9e: ea:f8:8b:52:13:2e:de:94:f4:cb:3d:93:03:05:9c: f5:a8:3f:ce:8f:bd:d0:61:4d:17:80:b8:18:35:5f: 94:c8:7f:c3:14:d9:4d:ff:9f:68:cb:8e:7c:e7:d7: d4:21:58:6a:15:d4:ac:9e:df:fa:e3:c3:28:7a:c2: be:8a:a5:53:02:f0:57:f6:4a:88:b4:96:1a:62:7a: ca:33:07:de:43:48:33:6c:2a:e6:81:e5:ab:21:32: 37:29:89:2d:e9:cc:4f:e9:a8:89:f4:3b:f3:e2:4b: 00:70:d0:b6:68:67:8d:62:1d:c4:97:d0:bb:61:7f: 15:45:69:b4:ea:c3:1c:f2:d0:79:34:04:1b:bb:35: 75:0d:ad:30:f8:fa:8b:32:f3:41:f7:cf:d7:35:84: ff:0d:af:8f:27:69:85:8f:9b:d9:c8:4a:af:03:c2: d5:51:ff:33:a7:c1:78:66:02:15:c6:91:d8:7a:2d: a2:dc:c6:27:27:77:44:90:b7:f0:ba:b5:e1:8d:b8: ff:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:90:DA:2A:93:DB:63:BB:65:17:1F:89:19:9A:13:38:BA:BB:54:F0 X509v3 Authority Key Identifier: keyid:D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8f:c9:7a:0a:c0:f1:47:08:2f:da:27:41:d3:43:3c:00:04: ed:83:4a:9e:21:2b:bf:94:1c:e4:6e:89:d5:70:dc:14:9c:71: aa:88:df:89:d1:63:b6:c3:a3:dd:c6:7c:a0:8b:8a:dd:d6:9a: be:34:b7:e8:2d:dc:d6:61:91:81:89:f4:b0:5d:58:12:03:76: 4c:e1:80:c3:70:fa:b3:64:9e:92:55:2d:c5:1e:e3:b8:00:84: 49:39:60:90:6a:d9:8b:0e:f7:c3:a7:d8:75:06:0e:ae:cb:b6: c4:1c:04:7d:24:c4:73:13:f9:fb:4e:81:20:9b:14:e8:1f:1a: fa:a0:b8:0f:89:f2:a2:59:e1:1a:23:71:52:95:59:48:58:49: a2:8e:f4:96:4d:eb:3e:a3:07:51:b7:6d:8d:7d:ed:03:80:2b: d2:d2:e4:2f:f2:2a:47:35:1b:1c:44:86:5d:4e:6c:72:2c:51: fc:8c:f3:e8:21:2b:cd:08:fe:73:c0:0b:63:46:67:f6:f3:02: 5e:68:7b:49:59:39:5f:02:92:3f:a2:78:71:a2:e8:ab:bd:83: 84:fb:4b:22:6b:0f:22:9f:a2:c2:3a:5d:95:47:ff:cc:a0:7e: 98:88:f7:c7:9f:ad:42:69:1f:11:ae:bc:d0:40:96:bd:30:b7: ae:d3:21:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rt20X3WP2kN+0nH6Zen6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NmE1OGRmOWFhNDdjY2QyMTAyMWViMmM2YmYwNmIzYjQ1 OTBjMDgwHhcNMjYwMTI2MTkwMTM5WhcNMjYwMTI3MTkwMTM5WjAzMTEwLwYDVQQD Eyg2NTkwZGEyYTkzZGI2M2JiNjUxNzFmODkxOTlhMTMzOGJhYmI1NGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBgik05Q7WJt8RNo3qyZF1GmiBY+ 9ijvMoJDmbFpj4vAdOJX1vqqMz1NKcp5i2d+IYx++S+YdpmLKp7q+ItSEy7elPTL PZMDBZz1qD/Oj73QYU0XgLgYNV+UyH/DFNlN/59oy45859fUIVhqFdSsnt/648Mo esK+iqVTAvBX9kqItJYaYnrKMwfeQ0gzbCrmgeWrITI3KYkt6cxP6aiJ9Dvz4ksA cNC2aGeNYh3El9C7YX8VRWm06sMc8tB5NAQbuzV1Da0w+PqLMvNB98/XNYT/Da+P J2mFj5vZyEqvA8LVUf8zp8F4ZgIVxpHYei2i3MYnJ3dEkLfwurXhjbj/+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWQ2iqT22O7ZRcfiRmaEzi6u1TwMB8GA1UdIwQY MBaAFNlqWN+apHzNIQIessa/BrO0WQwIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMldwWTM1cWtmTTBoQWg2eXhyOEdzN1JaREFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9iZGVkZTgtNzM1ZC00YTA1LTgzOGMt MmQ0OWM5YmM5ODJkLzEvMldwWTM1cWtmTTBoQWg2eXhyOEdzN1JaREFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9iZGVkZTgtNzM1ZC00YTA1LTgzOGMtMmQ0OWM5YmM5ODJk LzEvMldwWTM1cWtmTTBoQWg2eXhyOEdzN1JaREFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACo/JegrA 8UcIL9onQdNDPAAE7YNKniErv5Qc5G6J1XDcFJxxqojfidFjtsOj3cZ8oIuK3daa vjS36C3c1mGRgYn0sF1YEgN2TOGAw3D6s2SeklUtxR7juACESTlgkGrZiw73w6fY dQYOrsu2xBwEfSTEcxP5+06BIJsU6B8a+qC4D4nyolnhGiNxUpVZSFhJoo70lk3r PqMHUbdtjX3tA4Ar0tLkL/IqRzUbHESGXU5scixR/Izz6CErzQj+c8ALY0Zn9vMC Xmh7SVk5XwKSP6J4caLoq72DhPtLImsPIp+iwjpdlUf/zKB+mIj3x5+tQmkfEa68 0ECWvTC3rtMhjQ== -----END CERTIFICATE-----Generated at Mon Jan 26 22:58:28 2026 by rpki-client