This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft File: R05tfOu9CCEsqMjVka5aBrwDuXg.mft (raw, json) Hash identifier: MCpGfkDpuOsyBg5e3RE0IideC2ZxE4ibaookVyLjEqI= Subject key identifier: 81:DE:3A:72:84:95:82:BB:CB:05:55:AD:B0:FE:2A:EB:67:67:DE:C3 Authority key identifier: 47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78 Certificate issuer: /CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978 Certificate serial: 019BAFB902481A6B7F25C55C7E353A54A03E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft Manifest number: 17C1 Signing time: Mon 12 Jan 2026 01:01:36 +0000 Manifest this update: Mon 12 Jan 2026 01:01:36 +0000 Manifest next update: Tue 13 Jan 2026 01:01:36 +0000 Files and hashes: 1: 6sl1QA3sSuaYTj_Hf-IVWFHdb3I.roa (hash: L4J1WXXqopoGn75Rlv6PEAeVXiFveHZ3dIS9nhaDc3c=) 2: R05tfOu9CCEsqMjVka5aBrwDuXg.crl (hash: /1jyPkdtRR9pe5HqbtMl1BMxrmTx302g9PV+vIki9s0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 01:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:b9:02:48:1a:6b:7f:25:c5:5c:7e:35:3a:54:a0:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=474e6d7cebbd08212ca8c8d591ae5a06bc03b978 Validity Not Before: Jan 12 01:01:36 2026 GMT Not After : Jan 13 01:01:36 2026 GMT Subject: CN=81de3a72849582bbcb0555adb0fe2aeb6767dec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5a:e0:3a:ae:57:ba:ab:6a:0e:6e:00:11:a4: 7f:35:c6:ab:6f:df:d5:2a:bf:b7:9f:7a:7b:09:d3: cc:63:5e:48:d9:83:34:3c:34:a9:53:01:84:50:e9: e9:4a:b9:a2:d2:69:1e:86:f6:80:1a:9d:66:61:f9: d7:c8:c8:e5:f9:51:e2:18:d2:85:1c:a4:db:db:ca: 98:e5:75:f7:c8:d4:93:c6:f6:35:2b:80:6e:86:7c: 11:25:82:2a:3a:ba:17:6b:4d:5b:21:bb:46:e9:16: 3f:85:16:d0:11:e4:e5:e3:a1:dd:cc:40:e1:ac:ed: 27:c6:ba:43:2b:a0:1c:5d:5b:11:b8:e0:37:4e:38: 4e:3b:fa:af:fa:4a:d8:a8:4d:e4:23:97:46:fc:d7: 78:72:b0:aa:c3:24:73:be:8f:b6:52:10:2e:a9:52: d7:a5:5c:99:3c:98:8f:2a:8a:17:02:7d:28:f6:a3: 0d:bb:fb:50:f6:d2:a0:1e:b1:dd:e3:a3:9b:b1:9c: 81:03:25:44:0b:c6:be:04:3a:15:df:22:1e:15:39: 04:c2:df:04:06:26:38:1d:3a:95:9d:63:78:7b:ee: 4f:96:07:04:9c:26:cc:cc:0d:3a:5e:f4:ca:bc:de: 30:af:d9:70:fc:6d:c0:e2:da:3f:29:3f:fb:ed:c1: cf:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DE:3A:72:84:95:82:BB:CB:05:55:AD:B0:FE:2A:EB:67:67:DE:C3 X509v3 Authority Key Identifier: keyid:47:4E:6D:7C:EB:BD:08:21:2C:A8:C8:D5:91:AE:5A:06:BC:03:B9:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R05tfOu9CCEsqMjVka5aBrwDuXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4e2c6e-f781-4394-9565-29c752cc5956/1/R05tfOu9CCEsqMjVka5aBrwDuXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:5a:54:b8:55:73:78:b1:4b:61:1a:58:cf:42:ed:11:1b:5c: 65:0c:30:4b:ca:ea:aa:53:0a:0d:cc:3f:95:2c:8c:e2:cd:a6: 46:47:fd:92:cd:f4:03:52:5f:43:60:00:23:52:3a:fa:9c:64: 6e:42:5f:32:81:d8:1d:77:31:76:5a:00:68:f0:a2:29:8f:19: 06:5a:4b:12:3c:37:bc:5b:d6:0b:54:48:86:3d:3e:04:9c:72: 36:d8:9c:16:b4:37:08:14:ed:f3:99:72:3e:15:9b:07:ab:c0: e6:ef:fc:42:3b:58:fe:6a:d8:14:14:f2:1e:06:1f:4b:66:79: 61:9b:89:e6:88:12:c6:9b:32:b9:b7:10:a2:94:f5:23:ca:09: 0a:9c:db:ed:18:b9:29:6d:fa:8b:48:86:09:4e:11:a4:a4:ef: 85:88:ea:6a:6c:30:a0:83:16:8c:cb:5a:41:d0:6f:49:45:9c: e9:4f:51:cd:8d:d9:f9:58:df:f4:31:8d:5a:03:30:34:dc:4e: 26:8d:0f:06:9f:32:51:73:01:57:43:fd:f4:ff:94:d6:bc:38: 2e:8e:79:f6:20:2e:bf:8d:0e:2f:82:78:8f:81:76:62:a6:84: c8:5b:8c:6f:4f:d2:6c:fd:f6:d2:44:d8:41:e7:99:10:0a:f6: c4:83:4b:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvuQJIGmt/JcVcfjU6VKA+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NGU2ZDdjZWJiZDA4MjEyY2E4YzhkNTkxYWU1YTA2YmMw M2I5NzgwHhcNMjYwMTEyMDEwMTM2WhcNMjYwMTEzMDEwMTM2WjAzMTEwLwYDVQQD Eyg4MWRlM2E3Mjg0OTU4MmJiY2IwNTU1YWRiMGZlMmFlYjY3NjdkZWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1rgOq5XuqtqDm4AEaR/Ncarb9/V Kr+3n3p7CdPMY15I2YM0PDSpUwGEUOnpSrmi0mkehvaAGp1mYfnXyMjl+VHiGNKF HKTb28qY5XX3yNSTxvY1K4BuhnwRJYIqOroXa01bIbtG6RY/hRbQEeTl46HdzEDh rO0nxrpDK6AcXVsRuOA3TjhOO/qv+krYqE3kI5dG/Nd4crCqwyRzvo+2UhAuqVLX pVyZPJiPKooXAn0o9qMNu/tQ9tKgHrHd46ObsZyBAyVEC8a+BDoV3yIeFTkEwt8E BiY4HTqVnWN4e+5PlgcEnCbMzA06XvTKvN4wr9lw/G3A4to/KT/77cHPOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHeOnKElYK7ywVVrbD+KutnZ97DMB8GA1UdIwQY MBaAFEdObXzrvQghLKjI1ZGuWga8A7l4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjA1dGZPdTlDQ0VzcU1qVmthNWFCcndEdVhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS80ZTJjNmUtZjc4MS00Mzk0LTk1NjUt MjljNzUyY2M1OTU2LzEvUjA1dGZPdTlDQ0VzcU1qVmthNWFCcndEdVhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS80ZTJjNmUtZjc4MS00Mzk0LTk1NjUtMjljNzUyY2M1OTU2 LzEvUjA1dGZPdTlDQ0VzcU1qVmthNWFCcndEdVhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1pUuFVz eLFLYRpYz0LtERtcZQwwS8rqqlMKDcw/lSyM4s2mRkf9ks30A1JfQ2AAI1I6+pxk bkJfMoHYHXcxdloAaPCiKY8ZBlpLEjw3vFvWC1RIhj0+BJxyNticFrQ3CBTt85ly PhWbB6vA5u/8QjtY/mrYFBTyHgYfS2Z5YZuJ5ogSxpsyubcQopT1I8oJCpzb7Ri5 KW36i0iGCU4RpKTvhYjqamwwoIMWjMtaQdBvSUWc6U9RzY3Z+Vjf9DGNWgMwNNxO Jo0PBp8yUXMBV0P99P+U1rw4Lo559iAuv40OL4J4j4F2YqaEyFuMb0/SbP320kTY QeeZEAr2xINLig== -----END CERTIFICATE-----Generated at Mon Jan 12 10:52:42 2026 by rpki-client