This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft File: C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json) Hash identifier: roG16B30tpk/9g0fQs8inSkLgmo4MTGs7Jx5t78ZU70= Subject key identifier: B6:0C:1B:77:A2:A0:CA:FC:9D:B5:72:3D:99:CF:24:1A:75:1D:4D:03 Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38 Certificate issuer: /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238 Certificate serial: 019BFB7777775C46E1D6313D0DAE70D76D1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft Manifest number: 0F81 Signing time: Mon 26 Jan 2026 18:01:09 +0000 Manifest this update: Mon 26 Jan 2026 18:01:09 +0000 Manifest next update: Tue 27 Jan 2026 18:01:09 +0000 Files and hashes: 1: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: w4MmbXqM5PZPixF+NYDeoRAiqsjElrPl5G5ga0MXv9M=) 2: vYDkiQ8284qwQlXQwbK7sIbrgu4.roa (hash: atoNREmcnzRM3p/MPLhkQ+MYv5LYFsR6JX4f94qKzQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:77:77:5c:46:e1:d6:31:3d:0d:ae:70:d7:6d:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238 Validity Not Before: Jan 26 18:01:09 2026 GMT Not After : Jan 27 18:01:09 2026 GMT Subject: CN=b60c1b77a2a0cafc9db5723d99cf241a751d4d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:22:72:2d:bc:fc:2b:89:b8:14:be:be:8e:c9: b6:77:34:ee:21:30:bb:ad:9d:81:b4:01:3b:e1:33: 08:cb:8c:ba:fe:28:7b:2b:e1:46:5f:58:29:05:9d: dc:52:0a:51:62:b6:86:ab:8b:ec:a3:ef:e7:e0:37: 29:a5:e0:22:2d:73:0d:a8:ef:4f:47:85:7b:27:2b: ee:95:11:86:d6:88:7c:75:f2:bb:ff:39:96:43:f0: fd:79:5d:4e:f9:06:89:4a:b6:4d:1a:f6:3c:b2:48: 91:61:ca:0a:52:17:57:04:55:36:aa:ff:58:6a:ce: 03:3d:d3:a5:e1:bf:70:44:e5:a4:a1:30:ed:c0:e6: 72:8a:6c:4f:00:cd:58:84:d2:44:03:72:c3:7e:a6: 4e:1c:0f:9f:e8:c2:e6:0f:70:5f:1a:26:c9:5e:57: 0b:9b:6a:74:a3:87:a8:c3:00:1e:2b:88:bf:04:af: 61:2b:7d:12:36:9b:63:ae:b9:6f:bd:be:e1:03:16: 0a:74:a4:d7:a1:86:3b:00:49:32:32:a1:1a:b5:93: c3:ed:ad:0b:3b:7f:74:7c:e0:84:77:ff:bb:ae:70: 63:1c:e4:3a:a1:62:2f:22:fb:4f:98:0b:33:61:e2: 26:a9:a5:4b:c8:4d:7a:08:2f:64:25:14:d3:25:98: d8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0C:1B:77:A2:A0:CA:FC:9D:B5:72:3D:99:CF:24:1A:75:1D:4D:03 X509v3 Authority Key Identifier: keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:28:6a:9b:c8:69:fe:bf:8a:44:8a:db:ce:06:52:b9:e6:cd: fa:0c:6d:8a:6e:bb:7e:83:b4:73:88:02:64:94:8a:2a:b5:32: b5:05:a6:60:2a:bc:79:34:0d:1f:73:e1:f5:ee:7c:37:e0:a1: 38:31:11:62:0b:a7:df:5a:49:86:33:e7:34:a3:55:27:f7:da: 9e:65:59:6d:69:09:0f:52:65:1c:3f:91:27:b2:05:3a:c7:58: 3c:4f:1d:60:99:7f:be:70:19:01:fa:76:aa:84:fb:1a:e1:50: 70:f3:38:08:a4:0a:d3:b2:36:ca:05:28:b4:f9:12:ae:da:1b: 42:96:c8:c8:cb:8e:6a:82:96:71:a5:b0:f8:20:24:13:e6:ad: ac:a2:b5:fd:46:6f:c2:cf:77:0b:90:77:33:3b:10:1a:47:90: 2d:3a:e3:ae:7a:1a:c5:43:a7:71:84:3d:c6:79:e6:b1:68:5a: ba:af:95:51:33:39:14:9f:51:69:08:bb:fc:be:0d:7a:11:70: c7:4e:3a:77:d8:01:3b:98:ef:33:2b:8c:7a:43:fb:ee:5f:0e: d4:16:bb:c1:be:cd:9c:ad:3c:9e:57:1e:95:7e:f2:db:1b:ff: 90:56:57:17:0e:ad:76:7b:ab:4f:e5:18:e4:1e:74:21:64:9d: ae:02:b5:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d3d3XEbh1jE9Da5w120cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNWE1ZWNhNmNkMzhlOTIxYjVhMTQ1NzA4NTRhZGI0YTNi NjkyMzgwHhcNMjYwMTI2MTgwMTA5WhcNMjYwMTI3MTgwMTA5WjAzMTEwLwYDVQQD EyhiNjBjMWI3N2EyYTBjYWZjOWRiNTcyM2Q5OWNmMjQxYTc1MWQ0ZDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiJyLbz8K4m4FL6+jsm2dzTuITC7 rZ2BtAE74TMIy4y6/ih7K+FGX1gpBZ3cUgpRYraGq4vso+/n4DcppeAiLXMNqO9P R4V7JyvulRGG1oh8dfK7/zmWQ/D9eV1O+QaJSrZNGvY8skiRYcoKUhdXBFU2qv9Y as4DPdOl4b9wROWkoTDtwOZyimxPAM1YhNJEA3LDfqZOHA+f6MLmD3BfGibJXlcL m2p0o4eowwAeK4i/BK9hK30SNptjrrlvvb7hAxYKdKTXoYY7AEkyMqEatZPD7a0L O390fOCEd/+7rnBjHOQ6oWIvIvtPmAszYeImqaVLyE16CC9kJRTTJZjYEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYMG3eioMr8nbVyPZnPJBp1HU0DMB8GA1UdIwQY MBaAFAtaXsps046SG1oUVwhUrbSjtpI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kYzRlNGQtYWUyMi00MTQ3LWFjODct ZTBkOTE0YzFjYjUwLzEvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9kYzRlNGQtYWUyMi00MTQ3LWFjODctZTBkOTE0YzFjYjUw LzEvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADChqm8hp /r+KRIrbzgZSuebN+gxtim67foO0c4gCZJSKKrUytQWmYCq8eTQNH3Ph9e58N+Ch ODERYgun31pJhjPnNKNVJ/fanmVZbWkJD1JlHD+RJ7IFOsdYPE8dYJl/vnAZAfp2 qoT7GuFQcPM4CKQK07I2ygUotPkSrtobQpbIyMuOaoKWcaWw+CAkE+atrKK1/UZv ws93C5B3MzsQGkeQLTrjrnoaxUOncYQ9xnnmsWhauq+VUTM5FJ9RaQi7/L4NehFw x046d9gBO5jvMyuMekP77l8O1Ba7wb7NnK08nlcelX7y2xv/kFZXFw6tdnurT+UY 5B50IWSdrgK1Pw== -----END CERTIFICATE-----Generated at Tue Jan 27 00:09:54 2026 by rpki-client