This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft File: u41koNwhmWscmeaMyVFpTik-3v4.mft (raw, json) Hash identifier: bfoMgvIxo6btDFvt1VS5pLLD8sJxDiepY8az/e6RD4M= Subject key identifier: 69:99:0E:E6:AE:FF:59:B9:67:75:6F:95:0F:C7:86:B1:F4:B4:8E:F1 Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe Certificate serial: 019BFBE566501FF3449BD86D8A9AB4E22081 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft Manifest number: 17F5 Signing time: Mon 26 Jan 2026 20:01:13 +0000 Manifest this update: Mon 26 Jan 2026 20:01:13 +0000 Manifest next update: Tue 27 Jan 2026 20:01:13 +0000 Files and hashes: 1: 6wCR-IXi-d6mFq9coQKBvKcWKb8.roa (hash: 3CTCR/QkDS3QC7l1TMcETE6DIffI4EDmk47oroP7Oco=) 2: Wve6Gpo7jKUoWkkK-ID2jmyV7c4.roa (hash: 1lWZa+k/0zeWIBYNmCvAje+cs/RGX75v0KzNg1cs52k=) 3: u41koNwhmWscmeaMyVFpTik-3v4.crl (hash: 0bO86mF/n/dedx0AjTOVY1Ou6/Nkppp3DIzaDGLCPeI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e5:66:50:1f:f3:44:9b:d8:6d:8a:9a:b4:e2:20:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe Validity Not Before: Jan 26 20:01:13 2026 GMT Not After : Jan 27 20:01:13 2026 GMT Subject: CN=69990ee6aeff59b967756f950fc786b1f4b48ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:96:d3:1f:62:7a:71:a8:93:c9:38:23:7d:ff: ba:a8:c2:2a:7b:14:40:9a:d6:8f:69:4a:0e:61:9d: 42:d4:bb:65:e7:aa:24:16:fa:e8:eb:a7:33:bc:3a: 3a:93:d0:bd:37:db:a4:d2:14:de:c1:12:56:81:56: f9:9c:48:8a:77:69:b9:43:90:a7:59:1b:28:f6:e9: 73:2a:85:b9:47:2c:1f:c7:3a:ca:e0:06:00:0b:15: 08:72:e2:0a:6a:29:98:8e:ad:da:b4:5f:bf:89:8b: ed:ca:d3:a3:10:d0:f0:0c:a4:61:79:e5:f2:35:07: a6:b4:cc:82:13:8d:69:ed:dd:1c:d5:39:4b:a7:ac: f5:61:7e:91:4a:73:1e:b1:bf:77:5b:cb:96:04:a1: 95:20:bd:8f:ea:d2:0b:84:b0:a8:e4:e8:00:ee:46: 26:4f:a3:4a:8f:34:81:f0:32:3e:57:07:1c:70:ec: cf:86:0a:49:61:fb:8d:4e:34:7f:d6:55:a0:a0:0f: 8b:97:74:d3:a7:4f:e5:ce:22:db:3f:eb:60:8d:06: 93:f0:2b:4d:f1:2a:fc:72:4b:4c:c1:cc:b4:6a:ca: c1:95:d1:2b:9e:01:06:0a:42:71:7c:39:5f:47:9a: 7e:66:19:04:9a:63:3a:88:b1:1d:c5:b2:9d:af:16: 3e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:99:0E:E6:AE:FF:59:B9:67:75:6F:95:0F:C7:86:B1:F4:B4:8E:F1 X509v3 Authority Key Identifier: keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:11:3b:75:fc:cf:a0:0a:18:f7:9b:a4:20:90:31:6e:a8:53: eb:a3:02:4a:a1:36:28:7e:67:25:2a:d1:f6:64:50:09:1e:91: 5d:bf:69:6e:ae:78:23:cf:44:9a:51:92:f9:b7:34:d0:fa:09: 75:41:8a:df:c5:9e:51:82:b7:41:9e:9d:6d:1c:fe:e6:e8:19: de:da:0b:c9:15:ca:a8:6b:37:cf:d7:ee:ce:e2:18:10:d5:6f: c8:3e:22:b9:90:69:4f:ad:17:2c:ba:c5:d6:ed:e8:97:aa:5a: 0e:94:97:59:5e:69:bb:c4:21:49:94:bd:50:2c:c2:df:ae:d7: 6c:47:20:d1:c5:e7:06:56:06:65:fe:f6:40:37:a1:ab:08:73: 4d:8e:aa:15:25:93:af:0e:06:97:c6:1e:bd:b1:11:80:b3:41: 0e:58:c8:ee:11:ef:02:94:9f:27:82:dc:17:ce:a9:52:55:db: 2c:b3:58:cc:41:5a:5a:a2:49:9c:36:9e:11:29:1d:ad:63:3f: bb:3e:b9:ad:6c:97:bd:5b:c7:55:5c:76:fd:27:b9:7e:00:14: 12:ee:46:ab:65:4e:ef:7b:a1:15:c9:be:27:6f:e1:da:8c:c2: 6d:f5:70:4b:86:05:e5:92:b7:19:59:e3:24:63:5e:b4:c5:10: aa:57:f0:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75WZQH/NEm9htipq04iCBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiOGQ2NGEwZGMyMTk5NmIxYzk5ZTY4Y2M5NTE2OTRlMjkz ZWRlZmUwHhcNMjYwMTI2MjAwMTEzWhcNMjYwMTI3MjAwMTEzWjAzMTEwLwYDVQQD Eyg2OTk5MGVlNmFlZmY1OWI5Njc3NTZmOTUwZmM3ODZiMWY0YjQ4ZWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZbTH2J6caiTyTgjff+6qMIqexRA mtaPaUoOYZ1C1Ltl56okFvro66czvDo6k9C9N9uk0hTewRJWgVb5nEiKd2m5Q5Cn WRso9ulzKoW5RywfxzrK4AYACxUIcuIKaimYjq3atF+/iYvtytOjENDwDKRheeXy NQemtMyCE41p7d0c1TlLp6z1YX6RSnMesb93W8uWBKGVIL2P6tILhLCo5OgA7kYm T6NKjzSB8DI+VwcccOzPhgpJYfuNTjR/1lWgoA+Ll3TTp0/lziLbP+tgjQaT8CtN 8Sr8cktMwcy0asrBldErngEGCkJxfDlfR5p+ZhkEmmM6iLEdxbKdrxY+kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmZDuau/1m5Z3VvlQ/HhrH0tI7xMB8GA1UdIwQY MBaAFLuNZKDcIZlrHJnmjMlRaU4pPt7+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yMjAzMTgtNDZmMS00ZWJmLWE3OTUt ZGQ0YTIxN2Q2MDZiLzEvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8yMjAzMTgtNDZmMS00ZWJmLWE3OTUtZGQ0YTIxN2Q2MDZi LzEvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBE7dfzP oAoY95ukIJAxbqhT66MCSqE2KH5nJSrR9mRQCR6RXb9pbq54I89EmlGS+bc00PoJ dUGK38WeUYK3QZ6dbRz+5ugZ3toLyRXKqGs3z9fuzuIYENVvyD4iuZBpT60XLLrF 1u3ol6paDpSXWV5pu8QhSZS9UCzC367XbEcg0cXnBlYGZf72QDehqwhzTY6qFSWT rw4Gl8YevbERgLNBDljI7hHvApSfJ4LcF86pUlXbLLNYzEFaWqJJnDaeESkdrWM/ uz65rWyXvVvHVVx2/Se5fgAUEu5Gq2VO73uhFcm+J2/h2ozCbfVwS4YF5ZK3GVnj JGNetMUQqlfwHw== -----END CERTIFICATE-----Generated at Tue Jan 27 06:08:04 2026 by rpki-client