This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft File: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft (raw, json) Hash identifier: FpR6ymlPSmc2PZh1wToT+riMsoKyH1XXGARUL+C71Yk= Subject key identifier: C4:CB:1C:01:2C:FB:C3:3E:EB:CD:9E:AC:06:29:46:51:CE:97:B1:46 Authority key identifier: D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37 Certificate issuer: /CN=d2dd4ddd536f18a872cbac15e589542aedcd0737 Certificate serial: 019BFC1CD8730E33EA41DF2FD03D1DA18357 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft Manifest number: 09D5 Signing time: Mon 26 Jan 2026 21:01:47 +0000 Manifest this update: Mon 26 Jan 2026 21:01:47 +0000 Manifest next update: Tue 27 Jan 2026 21:01:47 +0000 Files and hashes: 1: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl (hash: NoO4vu8EmmLoObCguKrVeCL1OAOc8L5K4VSqJlOOu4Q=) 2: X_8Np37khTcPCEtRXHbNQfqvQNE.roa (hash: XNLBBBK7IAMNXci8RcPDaNEkuHX48HSzOY+bMxN50u4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 21:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:d8:73:0e:33:ea:41:df:2f:d0:3d:1d:a1:83:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2dd4ddd536f18a872cbac15e589542aedcd0737 Validity Not Before: Jan 26 21:01:47 2026 GMT Not After : Jan 27 21:01:47 2026 GMT Subject: CN=c4cb1c012cfbc33eebcd9eac06294651ce97b146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6d:f1:fd:40:ee:d4:3e:22:4e:7c:89:16:9c: 95:91:d9:91:91:dc:84:bb:10:af:80:71:4a:b8:04: 86:50:f3:df:e5:e2:e7:41:7a:d0:36:ea:f7:c8:d8: 10:a5:e2:2a:bf:0a:9c:66:81:47:5d:b4:b7:a9:83: f3:37:77:e6:ab:82:b3:ee:89:3b:0e:dd:c6:7c:ba: 50:17:41:b6:49:f1:5d:70:7a:2a:1c:ad:84:43:5b: 63:0c:f3:d9:00:77:46:4a:53:20:51:45:36:a8:93: cd:e2:66:3f:a8:fe:a4:8f:16:66:c6:cc:06:2f:e1: 46:ba:d6:a2:6a:59:01:61:27:af:5e:68:ba:c1:24: 02:7b:63:32:58:0a:f4:2d:18:83:61:12:a2:ac:a4: 8d:9b:78:18:d4:90:c0:27:98:47:2e:6f:75:03:02: d6:50:67:60:41:f7:06:4d:bc:a0:7b:29:82:5a:bf: 44:77:d2:ab:80:de:30:7c:33:74:ea:33:a5:19:29: e8:bd:ae:cd:ec:d8:ab:5a:42:a5:29:ea:2d:b7:59: ea:36:cc:23:1d:3a:c2:b6:b6:ac:bc:71:e4:dd:a2: 2c:a3:d2:b2:af:69:7c:22:38:d3:55:55:89:15:1f: f7:11:43:ac:a3:2a:28:fb:2f:92:78:8f:0e:46:7d: 26:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CB:1C:01:2C:FB:C3:3E:EB:CD:9E:AC:06:29:46:51:CE:97:B1:46 X509v3 Authority Key Identifier: keyid:D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:31:7e:ea:5d:98:24:ba:f7:5b:88:f7:61:89:05:0e:56:66: 8b:e8:05:ba:7e:27:86:30:66:ef:5a:86:ed:46:56:49:7a:76: 10:9a:d3:89:a9:6e:02:bf:ba:26:e1:8f:cb:7b:27:1f:62:d8: 0b:b2:49:58:1b:35:9c:b1:02:c8:a7:ad:a2:02:66:9e:2c:55: 24:c9:d6:0b:b8:b3:00:a2:cb:16:ae:93:0c:29:a6:74:e7:09: 3c:b3:f3:8c:69:41:89:a9:4c:57:2c:5d:38:46:d7:7f:28:eb: 84:bf:04:d6:68:e4:76:60:88:cd:aa:92:88:73:e4:7b:dc:f6: ad:ba:76:20:a9:42:4c:7c:40:d3:e8:ee:ae:c2:62:c4:2e:88: 9d:fa:44:76:51:44:3e:93:15:fb:28:35:ce:fc:02:14:5f:b6: 88:30:a4:c7:dd:6a:78:f3:0e:f7:9e:1a:c8:ca:3d:0a:da:4d: ee:2c:08:3a:44:7f:58:f2:02:f5:3a:30:50:7f:d9:26:1b:ec: 0f:97:2c:87:43:3a:b5:b7:0a:f1:d8:4f:a3:8d:68:64:68:fa: a3:76:3f:83:bf:b6:71:82:94:2e:f3:3c:ac:6d:1d:00:f3:1f: 62:27:de:a6:00:c5:de:d9:af:32:9b:40:84:83:f5:12:d7:cd: d6:3a:dc:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HNhzDjPqQd8v0D0doYNXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZGQ0ZGRkNTM2ZjE4YTg3MmNiYWMxNWU1ODk1NDJhZWRj ZDA3MzcwHhcNMjYwMTI2MjEwMTQ3WhcNMjYwMTI3MjEwMTQ3WjAzMTEwLwYDVQQD EyhjNGNiMWMwMTJjZmJjMzNlZWJjZDllYWMwNjI5NDY1MWNlOTdiMTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG3x/UDu1D4iTnyJFpyVkdmRkdyE uxCvgHFKuASGUPPf5eLnQXrQNur3yNgQpeIqvwqcZoFHXbS3qYPzN3fmq4Kz7ok7 Dt3GfLpQF0G2SfFdcHoqHK2EQ1tjDPPZAHdGSlMgUUU2qJPN4mY/qP6kjxZmxswG L+FGutaialkBYSevXmi6wSQCe2MyWAr0LRiDYRKirKSNm3gY1JDAJ5hHLm91AwLW UGdgQfcGTbygeymCWr9Ed9KrgN4wfDN06jOlGSnova7N7NirWkKlKeott1nqNswj HTrCtrasvHHk3aIso9Kyr2l8IjjTVVWJFR/3EUOsoyoo+y+SeI8ORn0m1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTLHAEs+8M+682erAYpRlHOl7FGMB8GA1UdIwQY MBaAFNLdTd1TbxiocsusFeWJVCrtzQc3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHQxTjNWTnZHS2h5eTZ3VjVZbFVLdTNOQnpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lY2EwMWMtNTIzMi00N2M1LWIwMTQt NWIxMzJmN2QzYjQ5LzEvMHQxTjNWTnZHS2h5eTZ3VjVZbFVLdTNOQnpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9lY2EwMWMtNTIzMi00N2M1LWIwMTQtNWIxMzJmN2QzYjQ5 LzEvMHQxTjNWTnZHS2h5eTZ3VjVZbFVLdTNOQnpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTF+6l2Y JLr3W4j3YYkFDlZmi+gFun4nhjBm71qG7UZWSXp2EJrTialuAr+6JuGPy3snH2LY C7JJWBs1nLECyKetogJmnixVJMnWC7izAKLLFq6TDCmmdOcJPLPzjGlBialMVyxd OEbXfyjrhL8E1mjkdmCIzaqSiHPke9z2rbp2IKlCTHxA0+jursJixC6InfpEdlFE PpMV+yg1zvwCFF+2iDCkx91qePMO954ayMo9CtpN7iwIOkR/WPIC9TowUH/ZJhvs D5csh0M6tbcK8dhPo41oZGj6o3Y/g7+2cYKULvM8rG0dAPMfYifepgDF3tmvMptA hIP1EtfN1jrcPA== -----END CERTIFICATE-----Generated at Tue Jan 27 07:17:36 2026 by rpki-client