This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft File: _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json) Hash identifier: wZAfo1HUgix9pi5Xq7O/mx+1A0TaFEanaDgPvXrh4gQ= Subject key identifier: 28:21:17:E4:58:F4:87:17:B0:C3:58:4B:3D:10:F6:3D:1F:B5:2F:30 Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8 Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8 Certificate serial: 019BFE411A897E480BDC8C0CC680BC929B66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft Manifest number: 120E Signing time: Tue 27 Jan 2026 07:00:37 +0000 Manifest this update: Tue 27 Jan 2026 07:00:37 +0000 Manifest next update: Wed 28 Jan 2026 07:00:37 +0000 Files and hashes: 1: 20o6hg6yaVER6kVktlRC-JCESYQ.roa (hash: ymV3XWOtE6TVopl8yntMuzhkTH9LeMDDpjSynZ9Lzd0=) 2: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: rRgdXqTzCx6bCRjWoEUQRHPL3dQsKU6pBgBa+XOu3W8=) 3: oR0gnNQtbyEYAy7mwLQOgUnAVks.asa (hash: IL0c2dg9/TlrWdwFPpQ8ALDudM34OvD9yFi3lxfwjYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 07:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:41:1a:89:7e:48:0b:dc:8c:0c:c6:80:bc:92:9b:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8 Validity Not Before: Jan 27 07:00:37 2026 GMT Not After : Jan 28 07:00:37 2026 GMT Subject: CN=282117e458f48717b0c3584b3d10f63d1fb52f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ee:19:95:88:ce:d2:3f:b2:59:d2:54:2e:ac: 09:0f:27:9e:b9:f6:ed:8d:87:97:61:09:47:86:f5: ce:4d:b3:0d:47:b8:8f:06:c4:2f:f0:6b:14:28:f6: fd:e1:f2:84:61:f7:96:31:0a:5b:ba:1a:df:fc:67: 37:90:05:0d:b9:53:f4:1c:91:92:78:dc:e0:77:18: e7:16:1c:b5:5c:1f:88:3b:34:0f:93:2f:b7:c5:65: a2:e9:e5:73:23:e9:2e:69:29:61:82:ff:69:63:61: f1:7e:91:e1:87:65:e2:6f:19:6e:9c:99:58:d7:93: d5:b6:4b:77:ef:76:74:62:22:17:bb:1e:4d:03:60: 1a:55:c2:cf:f7:17:0a:8a:e2:73:58:c9:0c:a2:1d: ea:a4:a7:9e:96:15:c3:0b:8d:9e:7c:64:9f:90:9f: 31:ad:45:67:c1:5f:ac:16:44:9f:4c:12:02:09:ee: 74:e7:40:9e:7d:ed:97:b6:ee:0e:4b:e3:06:40:8f: e9:ad:7a:d6:fa:78:3b:fa:06:c1:33:76:b4:70:ee: ce:9f:c9:b6:34:14:33:a0:d8:ed:77:39:66:77:27: 70:54:4d:b3:e9:26:93:70:e1:f4:02:f2:3c:2d:45: ab:d1:af:df:23:00:34:e9:35:02:24:8d:2f:29:74: 93:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:21:17:E4:58:F4:87:17:B0:C3:58:4B:3D:10:F6:3D:1F:B5:2F:30 X509v3 Authority Key Identifier: keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:6a:87:dd:46:2e:6a:67:c1:a8:40:c7:33:8e:93:12:37:ae: 75:d7:6f:0d:0e:64:e1:a4:59:ea:6c:3b:3e:a4:06:1e:56:f7: eb:46:0b:b0:ca:c8:16:d2:9c:ad:02:e3:6b:02:63:93:9d:51: 9b:0f:23:f6:87:98:ab:85:d3:d5:1f:4a:94:2e:ee:b8:d5:10: 47:c5:f0:d5:34:3d:85:56:db:af:f5:3e:f3:4e:5f:be:33:ed: 37:b2:3d:d1:d6:21:bf:2a:6f:de:39:4c:7e:51:49:db:24:b8: ba:fe:f4:a1:9a:9b:8e:09:a0:c0:df:fd:4d:a4:12:3c:35:3d: 53:f3:22:4b:68:12:c1:b4:1c:6e:78:20:37:88:5f:2f:42:7a: af:b2:e5:9a:c8:5d:81:da:16:c9:1b:23:64:dd:ab:12:de:92: 7b:36:5a:cf:25:9b:71:73:af:62:af:90:be:34:b9:9c:e4:f0: 9b:46:64:ba:f9:12:27:83:4c:21:31:d4:c7:2d:1a:ea:5c:62: 00:d8:78:a2:36:bb:85:55:1c:4b:66:ed:45:8b:47:bd:81:65: 95:b9:33:ab:99:27:b3:02:85:7c:d7:a3:b1:f3:0c:e8:6c:89: f9:fb:31:3f:25:8f:5e:59:79:24:f7:12:dd:93:54:66:5e:ac: 56:77:d2:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+QRqJfkgL3IwMxoC8kptmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMTU0ODJhNjU2MDA5YWExYmM4MDUxNDgzNjhkMWViZGY4 ZjYyYzgwHhcNMjYwMTI3MDcwMDM3WhcNMjYwMTI4MDcwMDM3WjAzMTEwLwYDVQQD EygyODIxMTdlNDU4ZjQ4NzE3YjBjMzU4NGIzZDEwZjYzZDFmYjUyZjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4u4ZlYjO0j+yWdJULqwJDyeeufbt jYeXYQlHhvXOTbMNR7iPBsQv8GsUKPb94fKEYfeWMQpbuhrf/Gc3kAUNuVP0HJGS eNzgdxjnFhy1XB+IOzQPky+3xWWi6eVzI+kuaSlhgv9pY2HxfpHhh2XibxlunJlY 15PVtkt373Z0YiIXux5NA2AaVcLP9xcKiuJzWMkMoh3qpKeelhXDC42efGSfkJ8x rUVnwV+sFkSfTBICCe5050Cefe2Xtu4OS+MGQI/prXrW+ng7+gbBM3a0cO7On8m2 NBQzoNjtdzlmdydwVE2z6SaTcOH0AvI8LUWr0a/fIwA06TUCJI0vKXSTYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCghF+RY9IcXsMNYSz0Q9j0ftS8wMB8GA1UdIwQY MBaAFP0VSCplYAmqG8gFFINo0evfj2LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1JWSUttVmdDYW9ieUFVVWcyalI2OS1QWXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jZWU5ZGItNjQwMS00NDk3LTg1ZDEt OTE3YzgwYjE0ODYyLzEvX1JWSUttVmdDYW9ieUFVVWcyalI2OS1QWXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jZWU5ZGItNjQwMS00NDk3LTg1ZDEtOTE3YzgwYjE0ODYy LzEvX1JWSUttVmdDYW9ieUFVVWcyalI2OS1QWXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmqH3UYu amfBqEDHM46TEjeudddvDQ5k4aRZ6mw7PqQGHlb360YLsMrIFtKcrQLjawJjk51R mw8j9oeYq4XT1R9KlC7uuNUQR8Xw1TQ9hVbbr/U+805fvjPtN7I90dYhvypv3jlM flFJ2yS4uv70oZqbjgmgwN/9TaQSPDU9U/MiS2gSwbQcbnggN4hfL0J6r7Llmshd gdoWyRsjZN2rEt6SezZazyWbcXOvYq+QvjS5nOTwm0ZkuvkSJ4NMITHUxy0a6lxi ANh4oja7hVUcS2btRYtHvYFllbkzq5knswKFfNejsfMM6GyJ+fsxPyWPXll5JPcS 3ZNUZl6sVnfS8g== -----END CERTIFICATE-----Generated at Tue Jan 27 14:28:16 2026 by rpki-client