This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft File: 0mHPvAfsMGN33LFql6EWDHptgsw.mft (raw, json) Hash identifier: kKh/PxPuyfxDuGmWCE3wJqZBBOmrUowuPlx5Nm7ku5g= Subject key identifier: B1:88:3E:A4:05:31:FB:2D:8B:C4:A3:AB:CD:E1:84:A5:D2:53:37:D5 Authority key identifier: D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC Certificate issuer: /CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc Certificate serial: 019B9BFBD703F88944621F40665826C4B427 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft Manifest number: 03FB Signing time: Thu 08 Jan 2026 05:02:11 +0000 Manifest this update: Thu 08 Jan 2026 05:02:11 +0000 Manifest next update: Fri 09 Jan 2026 05:02:11 +0000 Files and hashes: 1: 0mHPvAfsMGN33LFql6EWDHptgsw.crl (hash: TE18AvkaRWq3YWiByS8NW2uJm73Il/+v3jo2lG7yAX8=) 2: p0fL_-s25OijH9UglPLyGf3hQ3k.roa (hash: sp4Y+8h1IocJtG1a3SfrXHCpPOK9+n80lPdEb2+Nl4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 05:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9b:fb:d7:03:f8:89:44:62:1f:40:66:58:26:c4:b4:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d261cfbc07ec306377dcb16a97a1160c7a6d82cc Validity Not Before: Jan 8 05:02:11 2026 GMT Not After : Jan 9 05:02:11 2026 GMT Subject: CN=b1883ea40531fb2d8bc4a3abcde184a5d25337d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5c:83:29:ce:a1:ff:40:78:a8:47:0e:a5:fa: 3d:1f:d8:6b:ea:87:55:14:b3:ed:38:5c:1d:66:78: 64:df:19:be:ca:84:2c:7a:54:f7:e0:3d:f7:d0:f1: 0b:97:13:6d:77:bc:f0:b3:3d:09:66:a9:4e:f5:d5: d5:87:aa:ba:58:a9:2e:f5:a9:88:7d:45:2d:c4:b2: 07:5b:9c:1e:14:24:c2:e0:d3:61:4a:f4:4c:94:9a: a3:fa:11:36:c0:53:cb:4c:75:5e:ed:75:3f:6d:22: a1:c2:0e:b6:f4:52:14:be:62:92:f8:b1:0d:e5:70: 5f:0e:a4:18:b2:87:2c:9a:06:b0:d4:09:23:15:00: 18:54:0b:de:fd:02:19:59:8d:d3:97:17:be:e6:b1: 10:0a:5c:81:25:ce:3e:f2:54:7d:57:67:fe:3c:22: 25:f3:6f:b9:3e:d9:4c:e5:99:60:8f:a4:ea:b8:c5: d9:79:fd:ba:df:84:47:68:da:7c:e6:9f:b5:4b:95: 3d:e2:1c:6a:de:cc:34:fb:f2:2e:89:3c:4d:f2:f8: fc:41:03:53:44:a5:fd:0b:22:13:89:c8:2e:65:31: c3:14:48:00:02:a3:d2:e0:5f:3e:c0:8b:e4:b3:f8: 07:17:fb:66:1c:16:be:a4:2a:fb:d1:65:69:95:0f: de:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:88:3E:A4:05:31:FB:2D:8B:C4:A3:AB:CD:E1:84:A5:D2:53:37:D5 X509v3 Authority Key Identifier: keyid:D2:61:CF:BC:07:EC:30:63:77:DC:B1:6A:97:A1:16:0C:7A:6D:82:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mHPvAfsMGN33LFql6EWDHptgsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4eafc9-5473-4602-a149-922a16d117dd/1/0mHPvAfsMGN33LFql6EWDHptgsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:45:0b:98:32:62:3e:a4:09:b0:06:43:5d:74:9a:a5:9c:95: f1:75:ad:20:3a:6a:a5:46:91:6f:a9:d3:76:82:24:57:c4:e0: 9c:2d:95:b0:8e:51:c1:c9:89:93:61:b8:74:bb:56:94:9d:7c: 4e:df:e1:d5:06:7b:98:8f:0a:53:7e:c3:3d:cc:33:e8:a3:e4: 6d:3e:57:5f:0f:62:04:c8:88:cf:9c:94:ee:50:e1:bd:ef:59: 3e:47:ef:e3:3e:a1:f1:28:46:14:f6:16:01:81:55:6f:b2:d6: b5:3a:b5:8c:87:3c:33:3b:3a:f8:65:c7:79:bb:4d:a4:6e:88: ea:88:f8:87:3d:d2:96:b1:b5:15:0f:e3:22:b9:e3:c1:75:af: ca:13:18:23:dc:99:be:7b:c3:56:fc:01:6c:df:d1:4a:c0:f6: 08:a0:4a:4d:bd:07:05:dc:ab:8e:aa:6f:01:44:00:bc:93:a0: bf:ea:62:e1:13:ec:08:7c:9b:6f:51:7c:bc:10:fb:2a:97:15: 57:9e:fe:2e:2c:ad:c5:c9:d5:46:9c:4c:e6:7d:4e:9c:e5:fc: 01:4e:d7:7b:c9:a0:f9:95:ce:5b:d9:3d:75:89:10:05:27:8a: 67:40:f3:c9:13:01:c2:2b:09:c8:41:6b:b4:62:ce:f8:8a:1b: 3d:64:e3:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZub+9cD+IlEYh9AZlgmxLQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNjFjZmJjMDdlYzMwNjM3N2RjYjE2YTk3YTExNjBjN2E2 ZDgyY2MwHhcNMjYwMTA4MDUwMjExWhcNMjYwMTA5MDUwMjExWjAzMTEwLwYDVQQD EyhiMTg4M2VhNDA1MzFmYjJkOGJjNGEzYWJjZGUxODRhNWQyNTMzN2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1yDKc6h/0B4qEcOpfo9H9hr6odV FLPtOFwdZnhk3xm+yoQselT34D330PELlxNtd7zwsz0JZqlO9dXVh6q6WKku9amI fUUtxLIHW5weFCTC4NNhSvRMlJqj+hE2wFPLTHVe7XU/bSKhwg629FIUvmKS+LEN 5XBfDqQYsocsmgaw1AkjFQAYVAve/QIZWY3Tlxe+5rEQClyBJc4+8lR9V2f+PCIl 82+5PtlM5Zlgj6TquMXZef2634RHaNp85p+1S5U94hxq3sw0+/IuiTxN8vj8QQNT RKX9CyITicguZTHDFEgAAqPS4F8+wIvks/gHF/tmHBa+pCr70WVplQ/eKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGIPqQFMfsti8Sjq83hhKXSUzfVMB8GA1UdIwQY MBaAFNJhz7wH7DBjd9yxapehFgx6bYLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80ZWFmYzktNTQ3My00NjAyLWExNDkt OTIyYTE2ZDExN2RkLzEvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS80ZWFmYzktNTQ3My00NjAyLWExNDktOTIyYTE2ZDExN2Rk LzEvMG1IUHZBZnNNR04zM0xGcWw2RVdESHB0Z3N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUULmDJi PqQJsAZDXXSapZyV8XWtIDpqpUaRb6nTdoIkV8TgnC2VsI5RwcmJk2G4dLtWlJ18 Tt/h1QZ7mI8KU37DPcwz6KPkbT5XXw9iBMiIz5yU7lDhve9ZPkfv4z6h8ShGFPYW AYFVb7LWtTq1jIc8Mzs6+GXHebtNpG6I6oj4hz3SlrG1FQ/jIrnjwXWvyhMYI9yZ vnvDVvwBbN/RSsD2CKBKTb0HBdyrjqpvAUQAvJOgv+pi4RPsCHybb1F8vBD7KpcV V57+LiytxcnVRpxM5n1OnOX8AU7Xe8mg+ZXOW9k9dYkQBSeKZ0DzyRMBwisJyEFr tGLO+IobPWTjNg== -----END CERTIFICATE-----Generated at Thu Jan 8 13:46:42 2026 by rpki-client