This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft File: 0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json) Hash identifier: UZee2M8/irqsQevm4pX4U1v3RWaJi6WpSkLE8gZ8ilw= Subject key identifier: 00:64:FA:5E:E2:B2:0F:06:3B:84:00:99:4F:46:6D:5F:AC:47:66:FA Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37 Certificate issuer: /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537 Certificate serial: 019BF91BBBAB2B5E6C06205B6D8E6883F58A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft Manifest number: 177B Signing time: Mon 26 Jan 2026 07:01:42 +0000 Manifest this update: Mon 26 Jan 2026 07:01:42 +0000 Manifest next update: Tue 27 Jan 2026 07:01:42 +0000 Files and hashes: 1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: XxA2QaiTL0sLMu6ruJ3upTmNPNjx529/UF4q18tLFz8=) 2: MqEYcGP28yZryUtdD_3wTNGTAVc.roa (hash: p6r4IvQhkyRHVWZ8dRkzEjBjRhq65iPcj75XjeJcHaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:bb:ab:2b:5e:6c:06:20:5b:6d:8e:68:83:f5:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537 Validity Not Before: Jan 26 07:01:42 2026 GMT Not After : Jan 27 07:01:42 2026 GMT Subject: CN=0064fa5ee2b20f063b8400994f466d5fac4766fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:16:d8:0a:84:44:1b:ca:6a:95:f9:af:12:b8: e3:40:db:72:1c:14:55:4c:fc:56:ca:40:c0:30:ae: 02:53:47:cc:f8:d4:0a:38:71:c5:dc:48:c0:14:c1: d9:2a:e0:69:fa:d3:1a:c3:42:ad:6f:b9:a0:1b:e5: 21:a1:b0:94:12:a4:c0:71:5c:3b:42:83:58:f3:a6: 22:eb:95:59:c9:d7:6b:5f:b4:65:bd:d7:8f:91:91: 71:63:60:20:45:5a:fd:b6:fe:85:45:08:c3:97:68: df:da:cd:41:e4:67:4a:cc:be:77:d9:1b:c0:82:45: e8:b4:9d:a7:ea:41:f9:79:35:38:7c:bc:a8:f8:67: c8:bb:0c:b8:c1:1d:0f:c1:06:68:39:02:c9:25:a1: e4:9d:63:e0:dc:c4:80:bb:dc:d7:8f:27:9a:53:47: 31:87:2e:8c:f9:58:ea:8a:6a:b2:6a:9b:be:c5:1a: d7:4c:2f:99:15:4c:6f:b8:95:2f:9c:a3:d5:7c:bf: 57:59:87:6b:be:17:39:df:bc:55:b3:91:47:11:5f: 23:75:5e:de:8f:29:cb:5a:50:03:0e:8a:49:ca:e5: 17:ee:08:fc:f3:d5:80:30:a3:42:c3:7d:b6:83:31: 29:e6:4d:bb:ce:2f:05:80:95:18:4f:7e:62:8b:6f: 2b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:64:FA:5E:E2:B2:0F:06:3B:84:00:99:4F:46:6D:5F:AC:47:66:FA X509v3 Authority Key Identifier: keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:00:2d:fd:75:30:a9:e4:80:b6:1a:dc:44:57:75:b1:4b:93: fa:d3:02:df:37:23:24:fa:9f:1f:b6:a1:d4:d3:3e:36:0e:36: 97:82:84:83:70:5e:b4:6d:5f:10:83:c8:80:a6:06:12:c4:92: fb:ab:6c:8b:f1:82:ce:10:71:5e:ec:38:0d:bc:e1:76:b3:f0: 43:d7:13:04:96:27:49:87:d1:ef:7c:ff:5e:6a:3b:04:9b:13: 6a:e3:b9:0d:76:8d:9e:51:3d:5a:21:35:6f:5b:6e:41:10:fc: 2f:07:ff:80:80:a4:85:74:23:73:2e:73:c9:8f:d7:a5:1d:4e: 91:5d:1d:44:d8:ba:10:bd:d1:15:8c:1f:b7:8f:de:93:b8:79: 50:c6:c2:9c:45:58:28:d7:be:91:48:d9:76:af:57:b3:cd:a0: c9:95:84:b0:cc:fe:99:b0:9c:65:72:24:49:cb:1f:15:e0:3a: bf:0b:f3:04:43:ae:1f:0f:bd:2d:d4:39:20:d6:2d:fb:7a:29: cd:53:03:f8:d5:67:75:a6:7e:b5:9b:50:18:15:14:61:5f:56: 83:80:a9:46:7a:05:46:6b:90:81:54:2e:01:6f:77:54:0f:7d: 61:29:89:c0:c6:d9:1b:a0:2b:27:13:de:c3:cc:3a:e6:0f:b2: 76:28:5c:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G7urK15sBiBbbY5og/WKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYTM0M2EzN2VjYWQyYmZiMmMzNWJkOWIyNmQ3ZjQ4YmNi NTc1MzcwHhcNMjYwMTI2MDcwMTQyWhcNMjYwMTI3MDcwMTQyWjAzMTEwLwYDVQQD EygwMDY0ZmE1ZWUyYjIwZjA2M2I4NDAwOTk0ZjQ2NmQ1ZmFjNDc2NmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BbYCoREG8pqlfmvErjjQNtyHBRV TPxWykDAMK4CU0fM+NQKOHHF3EjAFMHZKuBp+tMaw0Ktb7mgG+UhobCUEqTAcVw7 QoNY86Yi65VZyddrX7RlvdePkZFxY2AgRVr9tv6FRQjDl2jf2s1B5GdKzL532RvA gkXotJ2n6kH5eTU4fLyo+GfIuwy4wR0PwQZoOQLJJaHknWPg3MSAu9zXjyeaU0cx hy6M+Vjqimqyapu+xRrXTC+ZFUxvuJUvnKPVfL9XWYdrvhc537xVs5FHEV8jdV7e jynLWlADDopJyuUX7gj889WAMKNCw322gzEp5k27zi8FgJUYT35ii28rVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABk+l7isg8GO4QAmU9GbV+sR2b6MB8GA1UdIwQY MBaAFNCjQ6N+ytK/ssNb2bJtf0i8tXU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEtORG8zN0swci15dzF2WnNtMV9TTHkxZFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yMDEyNzMtNzA4ZC00YTQ2LTlhYjYt YzdiMzZiOGEyNjg1LzEvMEtORG8zN0swci15dzF2WnNtMV9TTHkxZFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8yMDEyNzMtNzA4ZC00YTQ2LTlhYjYtYzdiMzZiOGEyNjg1 LzEvMEtORG8zN0swci15dzF2WnNtMV9TTHkxZFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQAt/XUw qeSAthrcRFd1sUuT+tMC3zcjJPqfH7ah1NM+Ng42l4KEg3BetG1fEIPIgKYGEsSS +6tsi/GCzhBxXuw4DbzhdrPwQ9cTBJYnSYfR73z/Xmo7BJsTauO5DXaNnlE9WiE1 b1tuQRD8Lwf/gICkhXQjcy5zyY/XpR1OkV0dRNi6EL3RFYwft4/ek7h5UMbCnEVY KNe+kUjZdq9Xs82gyZWEsMz+mbCcZXIkScsfFeA6vwvzBEOuHw+9LdQ5INYt+3op zVMD+NVndaZ+tZtQGBUUYV9Wg4CpRnoFRmuQgVQuAW93VA99YSmJwMbZG6ArJxPe w8w65g+ydihcTw== -----END CERTIFICATE-----Generated at Mon Jan 26 15:04:47 2026 by rpki-client