This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft File: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft (raw, json) Hash identifier: A3JtvRQjsR+iUEHOGL4aCY5vef7YLD7SmNuUj5keJ9E= Subject key identifier: 51:0A:0D:4D:05:D5:2C:71:82:C6:32:F0:03:64:82:10:09:3B:DB:B7 Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F Certificate issuer: /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f Certificate serial: 019BFF1D02C98604FB5DCBE3F2FB3D14CAC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft Manifest number: 13A3 Signing time: Tue 27 Jan 2026 11:00:49 +0000 Manifest this update: Tue 27 Jan 2026 11:00:49 +0000 Manifest next update: Wed 28 Jan 2026 11:00:49 +0000 Files and hashes: 1: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl (hash: VnoOsLSp4U9H2oO1ZcTTQQ15MPCTuXJ5i1HGZZgvSeo=) 2: G8RD2uK8jegsTsE-7XQ_nINovw8.roa (hash: bbRv59/fFxUF7NCQBw4VIduLszpjkq+XNByjPQilIdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:1d:02:c9:86:04:fb:5d:cb:e3:f2:fb:3d:14:ca:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f Validity Not Before: Jan 27 11:00:49 2026 GMT Not After : Jan 28 11:00:49 2026 GMT Subject: CN=510a0d4d05d52c7182c632f003648210093bdbb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:88:20:1d:fb:44:40:b2:86:d8:f4:8a:b9:54: f0:43:b0:65:ca:0b:bd:50:e5:fa:e4:70:21:44:08: d5:bf:72:2c:58:45:e3:52:bc:21:63:01:eb:65:39: 2a:3f:2c:3f:ab:be:4f:16:41:68:89:1f:9a:89:ad: de:19:b2:53:62:10:5d:1f:6a:29:4c:4f:0c:58:7c: 6f:4d:82:0d:19:fa:f8:cb:60:93:6d:7b:35:a6:b6: c4:99:9b:3d:09:77:d3:d0:8c:6b:c5:07:e5:72:75: a6:d6:2a:f0:95:e5:da:7d:73:4d:da:54:6d:bb:90: bf:34:d7:d7:ee:ab:8d:98:65:75:d8:98:94:80:7c: e5:c2:05:39:2e:a2:58:1f:59:1e:a2:86:03:4a:92: cf:ac:47:a5:f1:22:51:8c:84:a0:72:ca:da:4c:7e: 13:ca:78:14:85:80:46:38:26:2f:f8:90:a3:fa:3e: 15:a3:ed:f2:25:b5:fd:b1:38:28:4f:b1:12:12:6b: bc:70:f6:2b:dd:9b:5e:3f:05:1d:fb:cd:68:62:f2: f5:54:e6:65:4d:a9:53:8a:a3:4d:4d:f0:f7:96:1a: e7:d7:85:e9:8b:d7:04:d2:f4:fe:e4:5f:2d:2e:00: 04:09:41:69:fa:2b:5a:f1:aa:c4:99:8d:f3:16:ff: a7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0A:0D:4D:05:D5:2C:71:82:C6:32:F0:03:64:82:10:09:3B:DB:B7 X509v3 Authority Key Identifier: keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:2c:4b:4e:ab:0c:f9:9e:26:12:bf:02:1d:18:63:8b:93:37: 20:2d:58:6f:cd:b0:d8:4d:f6:ab:ea:09:73:33:10:21:fa:eb: b4:a3:07:2c:89:8a:16:e3:1d:58:e5:c6:a2:da:34:bf:74:37: 6d:b9:8a:6f:6b:68:5f:47:fb:b3:03:c5:f9:e3:78:d2:68:52: ff:40:e9:b1:9c:9f:25:a6:64:bd:68:a8:0a:de:f2:99:4b:a8: 33:5c:88:20:fb:7a:71:14:aa:cc:69:23:af:68:e6:36:f4:0c: 62:62:19:a3:2a:84:7c:27:d2:31:d3:fc:5f:ef:20:25:62:db: 15:cf:d8:8d:73:9d:f8:ee:19:68:d1:6a:71:16:bf:ef:01:06: c3:ad:ac:85:47:24:a1:8c:38:40:d6:a3:11:95:eb:11:79:3d: 4f:fe:a5:b7:58:2e:5f:e0:15:61:ad:f1:4a:8e:e4:6b:20:9e: 27:ff:6d:c7:9e:93:0b:30:05:f0:1a:6a:10:15:fa:19:2b:36: 06:68:49:0f:ed:ea:7f:ba:f0:bc:42:d3:9d:62:e1:a0:1c:f3: 4c:ad:f1:93:dc:e4:a1:ba:04:35:85:b9:e4:77:cc:98:64:dc: c9:28:eb:0a:c3:ac:27:27:04:74:38:f5:9b:a5:a5:c9:ce:58: 33:28:d1:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv/HQLJhgT7Xcvj8vs9FMrFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNDg5ZmJlOTg5OTRjYmMwOThjODc2YmE2M2U1NjBhYzE3 ZTViMmYwHhcNMjYwMTI3MTEwMDQ5WhcNMjYwMTI4MTEwMDQ5WjAzMTEwLwYDVQQD Eyg1MTBhMGQ0ZDA1ZDUyYzcxODJjNjMyZjAwMzY0ODIxMDA5M2JkYmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIggHftEQLKG2PSKuVTwQ7Blygu9 UOX65HAhRAjVv3IsWEXjUrwhYwHrZTkqPyw/q75PFkFoiR+aia3eGbJTYhBdH2op TE8MWHxvTYINGfr4y2CTbXs1prbEmZs9CXfT0IxrxQflcnWm1irwleXafXNN2lRt u5C/NNfX7quNmGV12JiUgHzlwgU5LqJYH1keooYDSpLPrEel8SJRjISgcsraTH4T yngUhYBGOCYv+JCj+j4Vo+3yJbX9sTgoT7ESEmu8cPYr3ZtePwUd+81oYvL1VOZl TalTiqNNTfD3lhrn14Xpi9cE0vT+5F8tLgAECUFp+ita8arEmY3zFv+nHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEKDU0F1SxxgsYy8ANkghAJO9u3MB8GA1UdIwQY MBaAFNtIn76YmUy8CYyHa6Y+VgrBflsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82Y2FjNTAtM2YxMy00ZWY5LThiNmQt ZGVjZWM0MWE3MWQxLzEvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS82Y2FjNTAtM2YxMy00ZWY5LThiNmQtZGVjZWM0MWE3MWQx LzEvMjBpZnZwaVpUTHdKaklkcnBqNVdDc0YtV3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyxLTqsM +Z4mEr8CHRhji5M3IC1Yb82w2E32q+oJczMQIfrrtKMHLImKFuMdWOXGoto0v3Q3 bbmKb2toX0f7swPF+eN40mhS/0DpsZyfJaZkvWioCt7ymUuoM1yIIPt6cRSqzGkj r2jmNvQMYmIZoyqEfCfSMdP8X+8gJWLbFc/YjXOd+O4ZaNFqcRa/7wEGw62shUck oYw4QNajEZXrEXk9T/6lt1guX+AVYa3xSo7kayCeJ/9tx56TCzAF8BpqEBX6GSs2 BmhJD+3qf7rwvELTnWLhoBzzTK3xk9zkoboENYW55HfMmGTcySjrCsOsJycEdDj1 m6Wlyc5YMyjR/A== -----END CERTIFICATE-----Generated at Tue Jan 27 21:49:38 2026 by rpki-client