This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft File: 0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json) Hash identifier: Yb1Mfn6R4QmGISHJbTVwfUALcCFCRX3LVK9m3rmnQso= Subject key identifier: EF:2B:57:8F:7B:DA:32:A1:45:4B:92:C6:54:88:6F:5C:F2:CC:CD:E8 Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c Certificate serial: 019C0A0F6328AC7A0F3A0CA656D87F4F9AAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft Manifest number: 0F6E Signing time: Thu 29 Jan 2026 14:01:46 +0000 Manifest this update: Thu 29 Jan 2026 14:01:46 +0000 Manifest next update: Fri 30 Jan 2026 14:01:46 +0000 Files and hashes: 1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: MOnYDBynv93S2ZtbI2B7dmeqHCFa4yZG0UC8Q6e3dMA=) 2: V85y9LeDqS5T_7Jp3kZ3KBVJA_Q.roa (hash: dqwbGll0ZQp3qCkA8FJVoE9Przjq1Z276l8w8WiwoPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0a:0f:63:28:ac:7a:0f:3a:0c:a6:56:d8:7f:4f:9a:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c Validity Not Before: Jan 29 14:01:46 2026 GMT Not After : Jan 30 14:01:46 2026 GMT Subject: CN=ef2b578f7bda32a1454b92c654886f5cf2cccde8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9e:d8:2e:b6:8e:33:f8:0f:1e:20:8a:3d:aa: e4:e2:35:1d:7a:d9:6f:89:7e:56:f9:ac:eb:c2:5c: 24:f0:34:b7:fb:75:13:04:b7:c2:f5:61:01:55:96: bb:80:14:35:f7:b0:a8:88:e1:d2:64:ab:e6:bd:1f: 87:8d:8d:a4:ec:0d:62:ba:3b:61:ac:d4:fa:a2:3c: 3e:69:b7:bb:12:e5:dc:53:7d:9f:3d:6c:2f:72:59: 2b:e6:07:73:db:7a:dc:f5:e3:1f:0e:6c:1f:35:33: 7d:1c:24:ce:23:4a:59:d3:9b:1c:4a:31:d6:63:b9: e4:b1:20:54:36:8c:76:de:9f:43:56:4b:08:40:1a: 1b:5d:5c:be:00:da:15:2b:c0:d3:7f:24:80:b3:63: 8d:23:8e:26:b4:13:7b:40:fb:19:a9:1b:47:a4:70: c8:b3:7e:2d:59:e0:b1:63:ab:85:20:f5:24:86:6b: 29:ab:01:5a:f1:7e:93:a7:10:af:ee:0d:fd:2c:2e: 8b:d5:ca:a1:a4:72:6e:35:43:1c:f2:88:77:2d:66: 52:ac:92:e2:90:34:65:ba:1e:f8:26:32:da:f8:73: b8:4f:37:c2:7c:4d:77:97:68:0a:fc:f3:a4:69:8c: 6f:14:1c:90:24:fd:9f:bb:94:dc:76:43:08:44:a1: 0c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:2B:57:8F:7B:DA:32:A1:45:4B:92:C6:54:88:6F:5C:F2:CC:CD:E8 X509v3 Authority Key Identifier: keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d5:8e:cc:dc:ca:83:7b:b5:0a:c9:93:3b:b4:12:d2:ee:d4: d1:87:cb:ff:67:03:b2:c0:30:b7:02:bb:63:e8:41:a1:b9:1c: 23:6b:95:e5:67:ee:9d:84:c8:dd:23:66:a4:62:4e:5a:56:e0: 60:04:df:27:9e:88:98:70:ef:20:6a:83:74:05:fa:5a:37:35: 94:96:3e:65:a5:b0:6c:f7:ba:3e:ab:6e:71:37:5c:fc:55:53: bd:e0:8a:4a:48:9b:13:43:c5:61:2b:7c:a5:f7:b1:87:81:f8: 91:f9:69:57:25:4b:9e:90:30:bf:7b:18:4a:3b:8c:f2:eb:24: d0:6b:2a:2d:51:38:55:43:f7:7d:c1:67:ce:d5:dd:a7:b8:90: 3f:f6:11:66:95:5c:14:93:99:97:79:fa:eb:a9:f3:a2:97:16: 24:3c:10:5a:b0:7d:90:df:e4:90:ac:7b:8f:87:16:e1:2b:bc: 59:ed:d2:3b:76:01:01:1d:c9:58:cd:bf:a4:28:07:72:25:dc: 0c:21:fb:83:62:9d:08:c8:ca:68:b2:78:23:d4:db:8a:39:44: 5b:49:f5:6b:06:37:6e:59:9a:d2:28:f5:f7:ca:97:ad:2b:cf: 03:18:89:a2:1d:df:ae:21:75:6f:12:94:d6:07:dd:81:80:09: b8:db:ea:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwKD2MorHoPOgymVth/T5qqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMjE1YmZjNDg4NzZjMzY1MTgzNTZlZmQ2ZTI4MDI1NWEx ZGVlM2MwHhcNMjYwMTI5MTQwMTQ2WhcNMjYwMTMwMTQwMTQ2WjAzMTEwLwYDVQQD EyhlZjJiNTc4ZjdiZGEzMmExNDU0YjkyYzY1NDg4NmY1Y2YyY2NjZGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J7YLraOM/gPHiCKPark4jUdetlv iX5W+azrwlwk8DS3+3UTBLfC9WEBVZa7gBQ197CoiOHSZKvmvR+HjY2k7A1iujth rNT6ojw+abe7EuXcU32fPWwvclkr5gdz23rc9eMfDmwfNTN9HCTOI0pZ05scSjHW Y7nksSBUNox23p9DVksIQBobXVy+ANoVK8DTfySAs2ONI44mtBN7QPsZqRtHpHDI s34tWeCxY6uFIPUkhmspqwFa8X6TpxCv7g39LC6L1cqhpHJuNUMc8oh3LWZSrJLi kDRluh74JjLa+HO4TzfCfE13l2gK/POkaYxvFByQJP2fu5TcdkMIRKEMfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8rV4972jKhRUuSxlSIb1zyzM3oMB8GA1UdIwQY MBaAFNEhW/xIh2w2UYNW79bigCVaHe48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFNGYl9FaUhiRFpSZzFidjF1S0FKVm9kN2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9kMGM0NWMtMmE4ZC00YzNiLTgwOWQt MDliZjQwNzFhZWEyLzEvMFNGYl9FaUhiRFpSZzFidjF1S0FKVm9kN2p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9kMGM0NWMtMmE4ZC00YzNiLTgwOWQtMDliZjQwNzFhZWEy LzEvMFNGYl9FaUhiRFpSZzFidjF1S0FKVm9kN2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9WOzNzK g3u1CsmTO7QS0u7U0YfL/2cDssAwtwK7Y+hBobkcI2uV5WfunYTI3SNmpGJOWlbg YATfJ56ImHDvIGqDdAX6Wjc1lJY+ZaWwbPe6PqtucTdc/FVTveCKSkibE0PFYSt8 pfexh4H4kflpVyVLnpAwv3sYSjuM8usk0GsqLVE4VUP3fcFnztXdp7iQP/YRZpVc FJOZl3n666nzopcWJDwQWrB9kN/kkKx7j4cW4Su8We3SO3YBAR3JWM2/pCgHciXc DCH7g2KdCMjKaLJ4I9TbijlEW0n1awY3blma0ij198qXrSvPAxiJoh3friF1bxKU 1gfdgYAJuNvqLg== -----END CERTIFICATE-----Generated at Thu Jan 29 18:09:26 2026 by rpki-client