This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft File: rR0qVix9shFRtKCSa41v7qzviFc.mft (raw, json) Hash identifier: FaF7eWkSsp2O6TewjUR/bUC7fy6M1gyH0doeR25uO3M= Subject key identifier: B3:30:B0:BE:33:3F:DA:2E:EE:9F:11:14:33:D0:A4:07:40:3D:29:73 Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57 Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857 Certificate serial: 019BFB40580B8B940B30FB30023AB9147FA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft Manifest number: 0CFE Signing time: Mon 26 Jan 2026 17:00:56 +0000 Manifest this update: Mon 26 Jan 2026 17:00:56 +0000 Manifest next update: Tue 27 Jan 2026 17:00:56 +0000 Files and hashes: 1: VcFoEEh31jZuhpy4eun_Hj-dma8.roa (hash: mbX6NMnSp6JT7rNp55SfsGeTE0wIj+qPbFrQAy6TmYw=) 2: dL52a-JSQC-00Ko98mQkGc0Xvzo.roa (hash: 2r+wEDTFQg2vugNKxVL/EHxSgKFbqV3jiVEPhPaqb/k=) 3: n_DU8ayGMsHeUdkTrzuKYMpaU_Q.roa (hash: KHioroc4KbkqEBK4timMsuRiTYXUbx4dAfmekQJR2xY=) 4: rR0qVix9shFRtKCSa41v7qzviFc.crl (hash: YrjURnGnyv5aATFJQYSAvyRQxJtp7vldIEBqtWCVn74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:58:0b:8b:94:0b:30:fb:30:02:3a:b9:14:7f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857 Validity Not Before: Jan 26 17:00:56 2026 GMT Not After : Jan 27 17:00:56 2026 GMT Subject: CN=b330b0be333fda2eee9f111433d0a407403d2973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:23:ce:70:42:6f:5c:14:d9:fe:00:9e:ca:40: 90:2a:19:55:4a:7e:a5:fa:b0:76:0b:ca:27:ae:d0: 33:1d:8f:9c:20:5b:13:db:d7:ac:3a:55:07:c0:03: 97:82:bc:0b:cf:23:87:94:12:ef:c4:42:ed:19:68: c4:f3:6a:de:23:d4:53:fa:0a:f2:e5:9b:b0:81:a3: 0e:98:9c:c5:9b:5b:48:e3:f7:66:fb:f0:06:62:89: 5b:d8:bd:ca:4a:c8:46:82:f4:7e:bc:90:22:f2:4d: 20:22:86:02:1a:d9:a4:2e:ce:db:65:fa:44:cd:12: 6a:a3:5b:8e:7a:91:c2:98:9f:24:01:16:78:93:50: 7d:2c:95:1b:81:24:cc:7f:ed:16:48:b6:19:fe:a1: 73:18:78:1e:3d:94:09:7b:cd:f3:53:21:1b:da:d5: ba:41:97:f7:df:bd:a7:e8:11:81:fd:e4:58:0b:96: 62:bc:fc:0d:1d:f9:23:0b:51:7a:89:55:d9:e5:55: 83:2a:b3:d2:fe:78:d9:11:6e:b8:15:93:22:be:42: b5:98:6f:2d:01:ac:35:fd:4b:3c:bc:97:ec:fd:7a: 08:e9:a6:92:98:63:75:a6:02:c3:6b:42:55:80:08: 85:ff:e5:88:5d:2c:03:e2:b3:d4:de:2c:f1:c5:d4: e0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:30:B0:BE:33:3F:DA:2E:EE:9F:11:14:33:D0:A4:07:40:3D:29:73 X509v3 Authority Key Identifier: keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:b4:8b:32:e9:68:79:da:99:fd:36:d1:71:89:d4:17:0d:89: d5:95:83:23:a1:35:1c:5d:3e:30:a2:ca:bb:e8:99:bf:4d:99: 17:0e:f9:d6:71:26:b0:83:86:13:66:47:f3:b1:f4:87:9c:be: ba:df:11:66:66:5c:de:6d:0c:a5:41:39:32:86:69:81:bd:2f: 1c:9b:ba:d4:87:33:aa:46:d7:de:94:e2:9b:3a:af:a8:ba:4c: b5:69:d0:cb:ca:81:53:10:2b:ff:d0:37:79:5c:ab:47:93:f7: e0:c1:0e:f7:39:53:c6:ae:e4:26:34:8d:43:f1:84:c9:42:85: ba:9c:4a:96:94:20:2b:70:00:36:33:b9:7f:27:50:43:d4:d1: cf:be:a7:b9:7c:d3:33:37:cc:49:11:f9:6d:83:7d:c2:49:2c: 43:2e:1c:61:57:ff:de:0d:71:17:94:74:8c:bc:f0:db:7a:7c: 8b:f0:d3:79:a1:9a:29:07:e8:0d:7d:fc:8d:c9:16:c8:1d:93: 2a:38:be:77:b9:db:4e:4d:55:3f:3d:bb:77:a3:e8:f5:ef:b4: a3:db:e1:f2:e6:dd:88:66:c1:52:6f:88:39:4b:c7:a4:fe:29: cf:98:a4:5a:90:1a:5a:0a:10:d9:70:5c:c2:0c:24:34:f6:fa: 60:8b:cd:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QFgLi5QLMPswAjq5FH+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMWQyYTU2MmM3ZGIyMTE1MWI0YTA5MjZiOGQ2ZmVlYWNl Zjg4NTcwHhcNMjYwMTI2MTcwMDU2WhcNMjYwMTI3MTcwMDU2WjAzMTEwLwYDVQQD EyhiMzMwYjBiZTMzM2ZkYTJlZWU5ZjExMTQzM2QwYTQwNzQwM2QyOTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySPOcEJvXBTZ/gCeykCQKhlVSn6l +rB2C8onrtAzHY+cIFsT29esOlUHwAOXgrwLzyOHlBLvxELtGWjE82reI9RT+gry 5ZuwgaMOmJzFm1tI4/dm+/AGYolb2L3KSshGgvR+vJAi8k0gIoYCGtmkLs7bZfpE zRJqo1uOepHCmJ8kARZ4k1B9LJUbgSTMf+0WSLYZ/qFzGHgePZQJe83zUyEb2tW6 QZf3372n6BGB/eRYC5ZivPwNHfkjC1F6iVXZ5VWDKrPS/njZEW64FZMivkK1mG8t Aaw1/Us8vJfs/XoI6aaSmGN1pgLDa0JVgAiF/+WIXSwD4rPU3izxxdTgswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMwsL4zP9ou7p8RFDPQpAdAPSlzMB8GA1UdIwQY MBaAFK0dKlYsfbIRUbSgkmuNb+6s74hXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclIwcVZpeDlzaEZSdEtDU2E0MXY3cXp2aUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84M2FjZDctNWUxYS00OWY5LWI0MDkt MzI5MzZjM2E0YTlkLzEvclIwcVZpeDlzaEZSdEtDU2E0MXY3cXp2aUZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS84M2FjZDctNWUxYS00OWY5LWI0MDktMzI5MzZjM2E0YTlk LzEvclIwcVZpeDlzaEZSdEtDU2E0MXY3cXp2aUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7SLMulo edqZ/TbRcYnUFw2J1ZWDI6E1HF0+MKLKu+iZv02ZFw751nEmsIOGE2ZH87H0h5y+ ut8RZmZc3m0MpUE5MoZpgb0vHJu61IczqkbX3pTimzqvqLpMtWnQy8qBUxAr/9A3 eVyrR5P34MEO9zlTxq7kJjSNQ/GEyUKFupxKlpQgK3AANjO5fydQQ9TRz76nuXzT MzfMSRH5bYN9wkksQy4cYVf/3g1xF5R0jLzw23p8i/DTeaGaKQfoDX38jckWyB2T Kji+d7nbTk1VPz27d6Po9e+0o9vh8ubdiGbBUm+IOUvHpP4pz5ikWpAaWgoQ2XBc wgwkNPb6YIvN+w== -----END CERTIFICATE-----Generated at Mon Jan 26 22:11:30 2026 by rpki-client