This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft File: aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft (raw, json) Hash identifier: 13CEVBG3p6viHt4gtBDXNw5tTFCQyki8q+8u9pdKvHg= Subject key identifier: 6A:E7:F4:71:8F:D5:07:CC:A3:21:F5:2E:7C:81:07:C3:BC:4A:DE:0F Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a Certificate serial: 019BF79AE0D3DA8850F00025B01C391DACDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft Manifest number: 0D14 Signing time: Mon 26 Jan 2026 00:01:20 +0000 Manifest this update: Mon 26 Jan 2026 00:01:20 +0000 Manifest next update: Tue 27 Jan 2026 00:01:20 +0000 Files and hashes: 1: S04NKU0J13eA6-TGQ2BZfun47ys.roa (hash: xIlFQJwTJx7ez8Zx99ToD2cR7A/Ipyz0mMaGV2drzPQ=) 2: aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl (hash: FcPgrl6/lbEW7/jFQe+hieZMYykO5oU3v5QIvXUWCNU=) 3: rJKcaNGOpOiZ0iciVQt-oX04cPI.roa (hash: BT7ocoNehLiRKdELBQmLzdxfWaOUS/P7hDDrN7lDDSY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:e0:d3:da:88:50:f0:00:25:b0:1c:39:1d:ac:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a Validity Not Before: Jan 26 00:01:20 2026 GMT Not After : Jan 27 00:01:20 2026 GMT Subject: CN=6ae7f4718fd507cca321f52e7c8107c3bc4ade0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6b:d8:5f:eb:3d:52:3b:f1:e7:a4:ce:79:53: 09:43:82:8f:2e:4f:b4:90:fa:22:95:fd:e5:00:cd: 9e:78:27:31:80:64:99:58:ce:2c:35:91:a2:52:19: ed:da:ef:ba:77:6b:21:49:6b:29:a7:0c:9d:e3:b1: d2:26:f8:f0:62:02:79:95:4a:93:bb:1e:c0:35:ac: fa:48:fd:78:44:7a:49:50:80:8a:2c:3e:64:31:3c: a6:45:ad:3e:64:5d:be:53:10:2c:cf:7f:d8:1f:d1: bf:b5:99:d0:41:0c:3b:af:8e:b7:b1:91:33:54:f6: 10:33:93:30:1a:84:bb:5e:2b:c0:ef:fa:ad:e6:93: c9:53:40:09:ac:76:2d:8d:ec:ff:74:47:ff:d7:b6: f3:19:dd:fb:eb:e3:36:a5:70:83:27:d0:d7:d0:29: c1:57:81:7f:99:71:50:84:4a:0c:a0:dc:ab:fd:a7: 5f:2c:ca:46:d3:d4:5e:76:37:ef:b8:ea:7d:96:5c: 3b:4a:80:af:65:38:80:47:5f:ec:73:00:88:53:b3: 45:6c:63:94:61:5e:6e:22:cd:e2:65:92:ca:9c:55: 57:81:88:ac:4e:06:64:59:5e:f9:15:70:5c:d7:c5: 78:f0:7a:3a:dd:3d:e7:5e:99:02:7e:44:e0:61:92: ea:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E7:F4:71:8F:D5:07:CC:A3:21:F5:2E:7C:81:07:C3:BC:4A:DE:0F X509v3 Authority Key Identifier: keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e8:c0:bc:44:59:32:23:4a:a8:17:47:57:bd:5b:3b:b1:d8: 47:f9:4f:4c:cd:31:49:e0:80:82:e2:32:76:94:a0:7d:7f:e2: 4f:c0:26:c4:b8:f6:3a:d9:4c:18:95:c6:8f:28:45:f8:27:9f: d3:36:d8:9e:5b:12:f9:f8:24:59:24:53:28:0f:fd:e1:5f:94: 1e:f5:80:38:38:11:09:10:8c:3c:66:e2:01:00:e7:91:57:ce: 4e:f9:72:23:ec:42:d2:a8:52:0a:75:ea:2f:14:0a:88:68:98: bb:f8:01:95:a3:4b:b4:7f:04:5b:84:e4:34:a5:61:bc:28:29: 83:a8:a4:fc:dc:b7:89:54:54:2b:27:8a:8e:79:eb:17:38:63: f0:13:b9:d8:4e:f4:20:51:85:b1:d7:fe:e2:38:e5:46:ab:d0: 09:24:39:52:20:cc:ec:3d:90:60:9d:14:38:54:99:18:80:2e: 4f:2e:59:18:df:a4:c0:57:98:5a:0b:ac:ab:c5:16:1c:04:82: 8f:21:bb:20:67:60:d8:8c:7c:ae:06:72:68:cd:33:68:3e:06: c5:8a:3b:6c:ec:9e:01:d0:44:03:98:66:9d:f9:5a:77:85:a7: 36:48:1c:ca:30:aa:7e:81:ac:d3:6f:1d:db:de:6f:0a:c2:e7: 84:ba:ce:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3muDT2ohQ8AAlsBw5HazdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YmQxMGYxYjE0YmJiMjc2N2ZmZGNhZWM0YjQxNzI4ODBi YTQ2MWEwHhcNMjYwMTI2MDAwMTIwWhcNMjYwMTI3MDAwMTIwWjAzMTEwLwYDVQQD Eyg2YWU3ZjQ3MThmZDUwN2NjYTMyMWY1MmU3YzgxMDdjM2JjNGFkZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGvYX+s9Ujvx56TOeVMJQ4KPLk+0 kPoilf3lAM2eeCcxgGSZWM4sNZGiUhnt2u+6d2shSWsppwyd47HSJvjwYgJ5lUqT ux7ANaz6SP14RHpJUICKLD5kMTymRa0+ZF2+UxAsz3/YH9G/tZnQQQw7r463sZEz VPYQM5MwGoS7XivA7/qt5pPJU0AJrHYtjez/dEf/17bzGd376+M2pXCDJ9DX0CnB V4F/mXFQhEoMoNyr/adfLMpG09RedjfvuOp9llw7SoCvZTiAR1/scwCIU7NFbGOU YV5uIs3iZZLKnFVXgYisTgZkWV75FXBc18V48Ho63T3nXpkCfkTgYZLqRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrn9HGP1QfMoyH1LnyBB8O8St4PMB8GA1UdIwQY MBaAFGi9EPGxS7snZ//crsS0FyiAukYaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hZGU4NTYtODk2MC00YTI5LTg5NTYt OWZlN2Q5MjhkOWJlLzEvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hZGU4NTYtODk2MC00YTI5LTg5NTYtOWZlN2Q5MjhkOWJl LzEvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbejAvERZ MiNKqBdHV71bO7HYR/lPTM0xSeCAguIydpSgfX/iT8AmxLj2OtlMGJXGjyhF+Cef 0zbYnlsS+fgkWSRTKA/94V+UHvWAODgRCRCMPGbiAQDnkVfOTvlyI+xC0qhSCnXq LxQKiGiYu/gBlaNLtH8EW4TkNKVhvCgpg6ik/Ny3iVRUKyeKjnnrFzhj8BO52E70 IFGFsdf+4jjlRqvQCSQ5UiDM7D2QYJ0UOFSZGIAuTy5ZGN+kwFeYWgusq8UWHASC jyG7IGdg2Ix8rgZyaM0zaD4GxYo7bOyeAdBEA5hmnflad4WnNkgcyjCqfoGs028d 295vCsLnhLrOww== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:13 2026 by rpki-client