This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft File: m0FaAwWfspWkuWyc5erbWP6Y-oY.mft (raw, json) Hash identifier: 6aHm/u2bmxrCtXV+G1kHzN0UUiZ9IcyHX1HnTqaUvE4= Subject key identifier: 96:58:F3:CC:A7:CE:EB:E4:68:A4:F9:20:A4:06:35:EE:9B:A0:47:CC Authority key identifier: 9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86 Certificate issuer: /CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86 Certificate serial: 019BFC5364CC54A386F62B5F1020E43ABBF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft Manifest number: 0A2F Signing time: Mon 26 Jan 2026 22:01:22 +0000 Manifest this update: Mon 26 Jan 2026 22:01:22 +0000 Manifest next update: Tue 27 Jan 2026 22:01:22 +0000 Files and hashes: 1: PyWCYQsc-RXqOD6ZcPJVeLZsTb0.roa (hash: So755h/YppAq4z9zJnxXyj3ozNgia1MYJ3MvAVJ9wDU=) 2: m0FaAwWfspWkuWyc5erbWP6Y-oY.crl (hash: c5L0UCU1wbpmNpvgdohh7f7ytaes0O5MmTJYmbOFmDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 22:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:53:64:cc:54:a3:86:f6:2b:5f:10:20:e4:3a:bb:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86 Validity Not Before: Jan 26 22:01:22 2026 GMT Not After : Jan 27 22:01:22 2026 GMT Subject: CN=9658f3cca7ceebe468a4f920a40635ee9ba047cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d2:6f:a9:f1:60:0e:52:7c:78:2b:69:85:a8: 56:45:64:68:09:21:c2:4a:83:66:74:c2:c0:ac:68: 66:99:90:d6:03:a5:49:d4:1e:2a:ca:c2:4d:c4:ad: ed:ee:3d:b0:86:3a:61:01:cf:40:f0:2f:78:00:f3: 93:64:cd:6b:97:d1:56:18:10:e4:0f:03:98:0f:74: a5:99:1b:c2:c9:53:7c:88:63:3c:a8:3f:24:4c:0a: 54:5b:d7:e3:15:3c:d8:5e:a2:2f:c0:34:67:d0:e8: 79:d2:52:04:e7:dc:a1:a5:d6:90:79:17:53:11:75: dd:4a:83:0c:64:48:11:f8:6a:34:bf:89:07:72:dc: e0:4d:34:5a:3b:77:21:22:97:cc:25:32:bd:10:bc: a5:4b:0e:b3:b5:e0:6e:0d:23:1d:07:b7:ea:0c:a8: fa:10:e8:93:67:70:ba:36:bf:fa:88:47:12:ea:cc: 4f:62:ed:48:c5:7a:16:66:13:03:93:3d:54:0b:c8: c0:2e:dd:72:87:6c:f3:4e:39:20:ae:7e:5e:01:53: 8a:c0:1b:44:4c:5a:f1:f4:1c:7a:35:31:e9:49:56: 6b:62:4e:ec:5e:3b:73:74:75:6d:03:88:69:f3:73: ab:af:a6:b8:07:83:21:ba:00:86:67:46:64:87:79: 68:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:58:F3:CC:A7:CE:EB:E4:68:A4:F9:20:A4:06:35:EE:9B:A0:47:CC X509v3 Authority Key Identifier: keyid:9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:cc:98:19:d4:be:a4:58:ed:3e:b7:70:d8:15:3a:9e:78:90: 1f:38:4b:a8:fe:1e:d9:2c:d3:a5:43:c5:2b:39:99:c8:c6:f7: 4a:38:7d:80:d4:c6:44:fa:35:49:4b:34:ac:b9:3e:f9:db:d0: 80:65:87:58:e0:95:21:37:d9:92:66:b8:6d:70:83:bd:2b:29: 56:88:4c:39:a3:0a:3b:c9:35:af:5e:34:5e:7d:1a:b6:b6:be: e6:3e:fd:40:ad:7d:71:20:a1:83:a5:26:dd:9f:51:d5:5a:fd: 42:b4:77:e9:c4:cb:e9:14:4a:22:ae:12:c3:97:c2:ab:1c:93: 83:74:16:d7:f7:44:61:21:66:37:00:5d:5b:b9:eb:69:1b:89: b7:6e:33:26:16:97:1b:af:0f:6a:f9:f7:5f:a8:72:35:c4:1d: 2e:3e:ec:4a:95:ee:73:af:14:7e:c7:d1:c2:c3:aa:70:78:f1: 14:e7:7d:ef:41:50:62:15:3c:a9:89:29:de:f4:8e:d3:fe:e3: 69:5e:a4:c3:23:88:bb:dc:de:6f:d5:00:88:44:de:61:c1:22: ca:dc:a4:ce:67:91:ca:c9:f0:eb:50:99:4d:a6:8f:44:0b:99: 60:25:c0:ac:9a:33:02:d4:9e:dc:62:71:52:5f:8d:81:93:dd: ab:d0:bd:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8U2TMVKOG9itfECDkOrv3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNDE1YTAzMDU5ZmIyOTVhNGI5NmM5Y2U1ZWFkYjU4ZmU5 OGZhODYwHhcNMjYwMTI2MjIwMTIyWhcNMjYwMTI3MjIwMTIyWjAzMTEwLwYDVQQD Eyg5NjU4ZjNjY2E3Y2VlYmU0NjhhNGY5MjBhNDA2MzVlZTliYTA0N2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNJvqfFgDlJ8eCtphahWRWRoCSHC SoNmdMLArGhmmZDWA6VJ1B4qysJNxK3t7j2whjphAc9A8C94APOTZM1rl9FWGBDk DwOYD3SlmRvCyVN8iGM8qD8kTApUW9fjFTzYXqIvwDRn0Oh50lIE59yhpdaQeRdT EXXdSoMMZEgR+Go0v4kHctzgTTRaO3chIpfMJTK9ELylSw6zteBuDSMdB7fqDKj6 EOiTZ3C6Nr/6iEcS6sxPYu1IxXoWZhMDkz1UC8jALt1yh2zzTjkgrn5eAVOKwBtE TFrx9Bx6NTHpSVZrYk7sXjtzdHVtA4hp83Orr6a4B4MhugCGZ0Zkh3loRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZY88ynzuvkaKT5IKQGNe6boEfMMB8GA1UdIwQY MBaAFJtBWgMFn7KVpLlsnOXq21j+mPqGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTBGYUF3V2ZzcFdrdVd5YzVlcmJXUDZZLW9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84NTYxMmEtZGUzMy00MzRiLTg0NzEt MTgwMWI1NDRiOWZlLzEvbTBGYUF3V2ZzcFdrdVd5YzVlcmJXUDZZLW9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy84NTYxMmEtZGUzMy00MzRiLTg0NzEtMTgwMWI1NDRiOWZl LzEvbTBGYUF3V2ZzcFdrdVd5YzVlcmJXUDZZLW9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncyYGdS+ pFjtPrdw2BU6nniQHzhLqP4e2SzTpUPFKzmZyMb3Sjh9gNTGRPo1SUs0rLk++dvQ gGWHWOCVITfZkma4bXCDvSspVohMOaMKO8k1r140Xn0atra+5j79QK19cSChg6Um 3Z9R1Vr9QrR36cTL6RRKIq4Sw5fCqxyTg3QW1/dEYSFmNwBdW7nraRuJt24zJhaX G68Pavn3X6hyNcQdLj7sSpXuc68UfsfRwsOqcHjxFOd970FQYhU8qYkp3vSO0/7j aV6kwyOIu9zeb9UAiETeYcEiytykzmeRysnw61CZTaaPRAuZYCXArJozAtSe3GJx Ul+NgZPdq9C9Vw== -----END CERTIFICATE-----Generated at Tue Jan 27 07:17:26 2026 by rpki-client