This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft File: 2okNBdXIi33m9bqkwdCF_nMB9dU.mft (raw, json) Hash identifier: E77D4iZ/mDGFRtiz4EHQQ2XuTp+QstonFPEm7wxGySE= Subject key identifier: 37:CB:62:87:76:18:DA:34:43:82:6D:CB:70:5D:82:3E:CC:C6:7D:FB Authority key identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5 Certificate issuer: /CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5 Certificate serial: 019BA91259F9775F1C74B6A782FE654A89B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft Manifest number: 0C18 Signing time: Sat 10 Jan 2026 18:01:50 +0000 Manifest this update: Sat 10 Jan 2026 18:01:50 +0000 Manifest next update: Sun 11 Jan 2026 18:01:50 +0000 Files and hashes: 1: 2okNBdXIi33m9bqkwdCF_nMB9dU.crl (hash: yRbmiWI0uAhaUPgXE28xGyTFPWDTG1bRpZrxfg3WmOg=) 2: ZT7cIfopY2icNRG5lkp_GApY3rE.roa (hash: gKGo8E7JgzV3hVuTiWO3MJ9KqBj85ZmcBVlHFpHWLjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a9:12:59:f9:77:5f:1c:74:b6:a7:82:fe:65:4a:89:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5 Validity Not Before: Jan 10 18:01:50 2026 GMT Not After : Jan 11 18:01:50 2026 GMT Subject: CN=37cb62877618da3443826dcb705d823eccc67dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1a:aa:4d:f3:d6:33:5d:5b:de:12:76:60:5d: b7:e6:5c:31:0a:f8:0d:8a:55:6b:66:3c:11:f9:16: 6b:b1:d7:d4:98:bc:19:98:2e:0b:82:3c:85:59:38: f6:b4:2c:a0:80:63:a4:72:8a:58:07:0b:71:a5:c0: 67:0a:94:ce:b2:ef:80:0e:d9:45:d7:d4:cb:b9:10: 8d:eb:29:e6:48:b2:50:ff:93:5d:65:28:67:2e:61: 53:84:36:38:3e:01:d3:ef:6e:77:d7:5d:b4:43:14: d4:85:a5:e7:3e:42:08:29:d0:60:50:73:47:df:35: ec:6a:02:1d:1e:4f:d8:8c:90:01:43:d7:57:57:05: 01:34:b9:c4:7a:47:1b:84:4e:91:15:86:cc:f9:b6: eb:a7:f6:03:da:07:e7:cb:b3:01:7a:06:65:14:c9: 4b:8a:93:17:b6:2b:8d:74:0e:44:fb:23:6c:4a:26: 3f:59:a5:25:ce:1d:99:d0:a3:25:ea:97:c6:95:d7: 42:70:86:73:8e:7b:17:4e:01:4e:23:23:ba:81:c8: c4:18:fc:bd:92:66:fe:89:9a:a5:f5:13:d2:6a:a1: 81:36:83:6f:f4:29:29:87:2c:08:ce:df:80:93:90: e3:8c:2f:aa:22:a5:17:01:8b:6e:ed:36:7f:9c:9a: 8f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CB:62:87:76:18:DA:34:43:82:6D:CB:70:5D:82:3E:CC:C6:7D:FB X509v3 Authority Key Identifier: keyid:DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:6f:41:08:5a:8c:e9:e6:4b:a8:dc:07:11:32:03:b8:b7:55: 5f:46:14:9a:07:0f:b5:73:b9:26:e4:0f:67:8d:b0:40:01:9b: 6e:05:94:e9:20:61:83:da:78:83:4e:cb:63:01:76:aa:2c:bc: f0:f4:0b:09:cf:cb:d6:85:f6:a1:66:1e:43:7e:14:2d:fb:38: 9b:8d:9a:b5:0c:48:03:ce:2d:a5:0c:1b:8f:be:09:c0:26:01: bb:63:93:73:00:e2:1f:d9:aa:98:78:dd:d3:e6:4c:d8:80:9d: 4d:17:9f:1f:e9:ae:ff:a8:61:b1:95:78:73:d8:d2:6a:20:bd: 41:d3:4c:f2:48:3f:b0:bd:0b:02:8e:5e:81:c5:99:86:69:77: 8e:37:dc:fe:0a:a7:d7:c4:a2:71:96:cb:02:11:1d:e8:69:13: 7a:88:c6:71:40:f8:f1:62:31:6d:7a:df:d8:2c:44:e3:4c:b8: 74:c5:c1:4f:b0:8d:bc:41:05:0a:dd:de:2c:0a:46:15:86:d5: 8b:66:bc:3a:ba:50:df:19:f5:09:69:e0:b9:4d:02:87:bf:1a: d0:67:52:30:13:11:8b:f6:84:8b:ad:08:da:f5:89:87:a6:f3: d1:ee:6f:85:56:c7:a7:31:07:60:84:50:96:8e:08:18:70:9b: 9b:93:a1:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZupEln5d18cdLangv5lSom4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhODkwZDA1ZDVjODhiN2RlNmY1YmFhNGMxZDA4NWZlNzMw MWY1ZDUwHhcNMjYwMTEwMTgwMTUwWhcNMjYwMTExMTgwMTUwWjAzMTEwLwYDVQQD EygzN2NiNjI4Nzc2MThkYTM0NDM4MjZkY2I3MDVkODIzZWNjYzY3ZGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBqqTfPWM11b3hJ2YF235lwxCvgN ilVrZjwR+RZrsdfUmLwZmC4LgjyFWTj2tCyggGOkcopYBwtxpcBnCpTOsu+ADtlF 19TLuRCN6ynmSLJQ/5NdZShnLmFThDY4PgHT72531120QxTUhaXnPkIIKdBgUHNH 3zXsagIdHk/YjJABQ9dXVwUBNLnEekcbhE6RFYbM+bbrp/YD2gfny7MBegZlFMlL ipMXtiuNdA5E+yNsSiY/WaUlzh2Z0KMl6pfGlddCcIZzjnsXTgFOIyO6gcjEGPy9 kmb+iZql9RPSaqGBNoNv9CkphywIzt+Ak5DjjC+qIqUXAYtu7TZ/nJqPNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfLYod2GNo0Q4Jty3Bdgj7Mxn37MB8GA1UdIwQY MBaAFNqJDQXVyIt95vW6pMHQhf5zAfXVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm9rTkJkWElpMzNtOWJxa3dkQ0Zfbk1COWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hNjc0MjAtYjFiNS00NDk1LTkxNzYt YjQ4MzZiYzE2NGExLzEvMm9rTkJkWElpMzNtOWJxa3dkQ0Zfbk1COWRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hNjc0MjAtYjFiNS00NDk1LTkxNzYtYjQ4MzZiYzE2NGEx LzEvMm9rTkJkWElpMzNtOWJxa3dkQ0Zfbk1COWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMG9BCFqM 6eZLqNwHETIDuLdVX0YUmgcPtXO5JuQPZ42wQAGbbgWU6SBhg9p4g07LYwF2qiy8 8PQLCc/L1oX2oWYeQ34ULfs4m42atQxIA84tpQwbj74JwCYBu2OTcwDiH9mqmHjd 0+ZM2ICdTRefH+mu/6hhsZV4c9jSaiC9QdNM8kg/sL0LAo5egcWZhml3jjfc/gqn 18SicZbLAhEd6GkTeojGcUD48WIxbXrf2CxE40y4dMXBT7CNvEEFCt3eLApGFYbV i2a8OrpQ3xn1CWnguU0Ch78a0GdSMBMRi/aEi60I2vWJh6bz0e5vhVbHpzEHYIRQ lo4IGHCbm5OhbQ== -----END CERTIFICATE-----Generated at Sat Jan 10 20:56:11 2026 by rpki-client