This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft File: 0rtm-96q__Q7llCx9svk8p7a9Yw.mft (raw, json) Hash identifier: a8W23sDhIlAo8OQPy+zhehklmb1Q29y2C7AdeWjGB4I= Subject key identifier: D4:37:7C:29:4C:4C:FE:1A:A1:8D:FA:03:55:76:71:2F:20:22:4B:66 Authority key identifier: D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C Certificate issuer: /CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c Certificate serial: 019BDF24884D73673F190DFE095182D2518F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft Manifest number: 17DE Signing time: Wed 21 Jan 2026 06:01:11 +0000 Manifest this update: Wed 21 Jan 2026 06:01:11 +0000 Manifest next update: Thu 22 Jan 2026 06:01:11 +0000 Files and hashes: 1: 0rtm-96q__Q7llCx9svk8p7a9Yw.crl (hash: B/nLW6VJa4QfRyF54OwQhQ51hbnCRmdefLSGTOzsI+E=) 2: eqRZK_JGFaT4pOqnhAyJvjkUCoA.roa (hash: jItvJdxi3E9SOd6i/gjBeEHoNNhvY/8u3V8hrLU5X7c=) 3: pdBEIOtIWrJ0TSk32Jmh_QpJkK8.asa (hash: sxkJU3Q3LaQ8TF/6A6BbBQGeo7WMZ4PLTizqyUpaQgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:24:88:4d:73:67:3f:19:0d:fe:09:51:82:d2:51:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c Validity Not Before: Jan 21 06:01:11 2026 GMT Not After : Jan 22 06:01:11 2026 GMT Subject: CN=d4377c294c4cfe1aa18dfa035576712f20224b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4b:89:a6:e1:c3:de:f9:47:f7:b1:5a:a9:5f: e2:b5:24:fb:5f:09:ba:1f:41:e0:a4:92:b7:7d:4d: 81:ef:c5:4c:08:2e:10:90:d3:58:b9:82:67:7e:1d: 98:9e:68:88:aa:75:c7:33:23:8d:42:96:e5:fa:27: 8c:d1:62:01:20:f5:f2:d6:10:57:7b:47:f9:4a:ca: e1:0d:57:c5:63:f5:0b:97:ca:1c:f9:89:da:f1:86: d1:6b:4f:05:64:1a:86:82:39:01:d5:22:7c:bc:04: e9:9c:81:dc:9b:c6:59:d6:34:f1:a6:be:08:5e:5a: 23:a6:f9:75:26:c4:99:1c:4b:02:49:e0:f3:d7:d5: 40:21:f1:d3:b1:8e:6e:b7:9a:00:dc:4c:ff:73:fc: 2c:4d:19:56:1b:30:11:86:35:b3:0b:0d:17:8c:7a: d6:ad:9a:0a:2a:1d:d8:0f:fa:ea:40:88:99:39:72: b2:61:09:d8:b1:29:de:3c:51:58:2f:35:0b:00:b7: a3:ed:83:d0:c4:64:00:26:e3:95:7b:b7:bf:d7:54: 7f:d2:10:c9:f1:fd:39:e1:f1:86:90:73:79:7c:04: ea:29:91:53:f8:0d:43:9d:be:15:2b:c3:d0:e2:10: 9c:1a:a9:87:ba:29:33:b8:3a:1d:bc:14:98:7c:56: f1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:37:7C:29:4C:4C:FE:1A:A1:8D:FA:03:55:76:71:2F:20:22:4B:66 X509v3 Authority Key Identifier: keyid:D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:fd:bf:fa:79:09:ce:b3:fd:98:a5:9a:14:96:20:25:2f:f7: 09:dd:38:1a:d5:91:24:4e:42:bf:ce:8a:3e:c6:82:1d:aa:93: 04:be:79:c1:e1:0c:93:fc:61:61:f8:81:c0:1d:ce:b7:5d:62: fa:e1:73:90:53:02:00:53:8c:c4:32:68:6f:f5:39:99:96:fe: b0:55:fa:1c:a8:7e:b1:53:46:cb:71:9d:08:22:62:05:a0:19: ea:1c:24:3b:81:39:37:e4:22:9a:7f:94:ee:9a:df:0e:31:a0: f5:ba:e4:ce:53:c9:64:cf:3a:bf:61:3a:4c:6e:75:3f:26:18: b9:aa:7e:1d:0f:c3:2d:9f:26:b8:b5:e6:f9:d6:fe:b3:a0:7a: ac:06:e9:fd:53:d1:85:cf:d4:b2:2c:3a:d9:8e:85:ba:f4:52: 76:0c:9f:73:08:1d:d4:76:00:ef:99:b3:f2:41:48:4a:a7:be: 5d:28:7d:b5:22:4f:d1:d5:6f:82:76:13:75:80:ea:dc:c4:7b: ee:0c:c0:37:05:b7:e3:47:47:2e:f6:17:2d:a6:c6:6b:24:cb: ce:f0:32:69:b1:31:3f:dc:33:19:4f:28:60:f2:98:68:87:09: 2f:17:dd:4f:85:92:56:5b:ff:39:33:68:9b:50:13:4b:34:da: b7:8c:be:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvfJIhNc2c/GQ3+CVGC0lGPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYmI2NmZiZGVhYWZmZjQzYjk2NTBiMWY2Y2JlNGYyOWVk YWY1OGMwHhcNMjYwMTIxMDYwMTExWhcNMjYwMTIyMDYwMTExWjAzMTEwLwYDVQQD EyhkNDM3N2MyOTRjNGNmZTFhYTE4ZGZhMDM1NTc2NzEyZjIwMjI0YjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukuJpuHD3vlH97FaqV/itST7Xwm6 H0HgpJK3fU2B78VMCC4QkNNYuYJnfh2YnmiIqnXHMyONQpbl+ieM0WIBIPXy1hBX e0f5SsrhDVfFY/ULl8oc+Yna8YbRa08FZBqGgjkB1SJ8vATpnIHcm8ZZ1jTxpr4I Xlojpvl1JsSZHEsCSeDz19VAIfHTsY5ut5oA3Ez/c/wsTRlWGzARhjWzCw0XjHrW rZoKKh3YD/rqQIiZOXKyYQnYsSnePFFYLzULALej7YPQxGQAJuOVe7e/11R/0hDJ 8f054fGGkHN5fATqKZFT+A1Dnb4VK8PQ4hCcGqmHuikzuDodvBSYfFbxmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQ3fClMTP4aoY36A1V2cS8gIktmMB8GA1UdIwQY MBaAFNK7Zvveqv/0O5ZQsfbL5PKe2vWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHJ0bS05NnFfX1E3bGxDeDlzdms4cDdhOVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lOWNiZjMtM2E1ZC00Yjc0LTg2ZDMt Y2IwZjI0NTVjYmQ2LzEvMHJ0bS05NnFfX1E3bGxDeDlzdms4cDdhOVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9lOWNiZjMtM2E1ZC00Yjc0LTg2ZDMtY2IwZjI0NTVjYmQ2 LzEvMHJ0bS05NnFfX1E3bGxDeDlzdms4cDdhOVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsf2/+nkJ zrP9mKWaFJYgJS/3Cd04GtWRJE5Cv86KPsaCHaqTBL55weEMk/xhYfiBwB3Ot11i +uFzkFMCAFOMxDJob/U5mZb+sFX6HKh+sVNGy3GdCCJiBaAZ6hwkO4E5N+Qimn+U 7prfDjGg9brkzlPJZM86v2E6TG51PyYYuap+HQ/DLZ8muLXm+db+s6B6rAbp/VPR hc/Usiw62Y6FuvRSdgyfcwgd1HYA75mz8kFISqe+XSh9tSJP0dVvgnYTdYDq3MR7 7gzANwW340dHLvYXLabGayTLzvAyabExP9wzGU8oYPKYaIcJLxfdT4WSVlv/OTNo m1ATSzTat4y+lw== -----END CERTIFICATE-----Generated at Wed Jan 21 12:02:34 2026 by rpki-client