This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft File: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft (raw, json) Hash identifier: TITLc7AmOVf38QpaM40Upc+MEvqSHgef1tZhbNId73I= Subject key identifier: AC:07:4C:8E:8E:D9:B9:DE:DF:A6:71:88:D0:38:3C:DF:08:E4:5E:D9 Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A Certificate issuer: /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a Certificate serial: 019BF808298CA8AE131C99D87ED0B6DFF663 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft Manifest number: 0ACC Signing time: Mon 26 Jan 2026 02:00:42 +0000 Manifest this update: Mon 26 Jan 2026 02:00:42 +0000 Manifest next update: Tue 27 Jan 2026 02:00:42 +0000 Files and hashes: 1: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl (hash: z6rnQbWmQOfH9XKQrAuJ7IMimcC1ZB/BNT57DIdl8UU=) 2: wqM2HbHUAexqGRCIytvhP-Jzu4U.roa (hash: HC7KYLDVfK5o/bx0neagw4IbqR4rFwFVqDH+H7VDweY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:29:8c:a8:ae:13:1c:99:d8:7e:d0:b6:df:f6:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a Validity Not Before: Jan 26 02:00:42 2026 GMT Not After : Jan 27 02:00:42 2026 GMT Subject: CN=ac074c8e8ed9b9dedfa67188d0383cdf08e45ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4a:e0:5e:5d:79:6f:17:dd:15:b0:39:54:8b: f0:57:e3:b9:0e:87:23:6d:33:50:90:5d:83:b0:9e: f3:09:7e:39:89:2d:51:2b:93:fe:a8:52:42:f6:de: 08:d2:7b:aa:6b:90:5d:2e:3f:c7:a7:2d:58:b3:23: 49:78:40:b0:e0:f2:40:4e:10:e2:c6:5b:d8:73:75: 33:35:69:70:93:5e:b3:a0:c4:ef:2e:e6:8b:ad:61: c5:2e:11:78:6a:39:a1:61:9b:e8:01:6b:19:40:ff: 7f:97:74:21:d1:15:6b:91:58:f8:34:41:6b:24:f8: 3d:96:fc:06:67:3a:51:e2:4b:70:dd:41:8a:fd:9f: e3:c9:cb:6d:c6:df:b7:06:02:62:72:8a:42:bb:06: e2:fb:d9:d0:24:36:19:86:94:88:32:6b:4f:dc:b8: c4:8a:ae:ff:eb:0e:89:7e:92:43:f0:c7:90:95:cd: 93:bd:c8:dd:d8:ed:80:60:41:b3:02:32:9b:20:0a: 0e:33:9f:6f:7e:92:8b:e6:29:ec:1e:d9:48:2e:c5: 60:f8:88:3b:bc:cb:6a:bd:69:6b:7e:c7:01:82:05: 01:57:eb:7d:df:0e:89:40:dc:58:39:bc:8c:26:fd: 5c:d0:ad:28:e8:88:46:6f:c2:57:41:1c:af:8e:31: 28:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:07:4C:8E:8E:D9:B9:DE:DF:A6:71:88:D0:38:3C:DF:08:E4:5E:D9 X509v3 Authority Key Identifier: keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:da:e1:aa:53:9d:ad:03:c3:8c:3b:fa:2d:ae:3d:29:b3:ee: 42:36:d4:7d:05:ad:6b:9d:19:79:9b:fe:1d:da:90:e6:76:7f: de:27:4b:78:6f:e5:f2:56:61:7e:6f:16:8f:77:c7:a7:60:96: 3b:c1:84:66:38:b2:1c:c1:d9:46:74:cb:29:6b:ac:a7:02:39: 54:a3:4f:72:c2:e9:22:e0:d5:1e:36:ff:30:dc:ed:3f:92:6c: b8:f3:b8:68:61:c8:17:a8:77:8a:9e:cf:ce:a9:3b:e6:df:88: 24:40:68:99:b5:e4:49:35:0b:4d:59:c0:3b:89:cd:3f:94:bd: 90:8f:6b:33:1a:9c:06:10:3f:64:c6:68:03:9b:4a:a1:6d:d6: 01:a0:62:6e:5b:1c:64:c1:d2:ad:59:31:05:57:5d:f7:a8:fb: 60:d3:14:4a:36:c7:46:25:a8:87:9a:f3:42:5b:ee:4f:48:1c: 51:23:f8:97:38:8c:8c:f9:a9:29:17:54:48:da:38:e9:f1:c7: 25:75:68:97:a7:7e:df:45:cc:e8:cd:d6:8e:d4:c9:61:ba:3c: da:44:48:bd:81:4a:49:d8:90:3c:ed:6a:ad:71:7e:ae:6e:90: 9d:30:bd:a4:09:cf:7f:0d:6b:6a:51:6d:a1:5b:79:5c:72:a1: d0:41:fd:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CCmMqK4THJnYftC23/ZjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1OWRhNGE4NjM4ZGJkZDZmYTQzYzI3ZDNhYzZlYzhkOWFj Yzg3OGEwHhcNMjYwMTI2MDIwMDQyWhcNMjYwMTI3MDIwMDQyWjAzMTEwLwYDVQQD EyhhYzA3NGM4ZThlZDliOWRlZGZhNjcxODhkMDM4M2NkZjA4ZTQ1ZWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ErgXl15bxfdFbA5VIvwV+O5Docj bTNQkF2DsJ7zCX45iS1RK5P+qFJC9t4I0nuqa5BdLj/Hpy1YsyNJeECw4PJAThDi xlvYc3UzNWlwk16zoMTvLuaLrWHFLhF4ajmhYZvoAWsZQP9/l3Qh0RVrkVj4NEFr JPg9lvwGZzpR4ktw3UGK/Z/jycttxt+3BgJicopCuwbi+9nQJDYZhpSIMmtP3LjE iq7/6w6JfpJD8MeQlc2Tvcjd2O2AYEGzAjKbIAoOM59vfpKL5insHtlILsVg+Ig7 vMtqvWlrfscBggUBV+t93w6JQNxYObyMJv1c0K0o6IhGb8JXQRyvjjEoxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwHTI6O2bne36ZxiNA4PN8I5F7ZMB8GA1UdIwQY MBaAFKWdpKhjjb3W+kPCfTrG7I2azIeKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzIt MGY2OGU1YmZmYzdkLzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzItMGY2OGU1YmZmYzdk LzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdrhqlOd rQPDjDv6La49KbPuQjbUfQWta50ZeZv+HdqQ5nZ/3idLeG/l8lZhfm8Wj3fHp2CW O8GEZjiyHMHZRnTLKWuspwI5VKNPcsLpIuDVHjb/MNztP5JsuPO4aGHIF6h3ip7P zqk75t+IJEBombXkSTULTVnAO4nNP5S9kI9rMxqcBhA/ZMZoA5tKoW3WAaBiblsc ZMHSrVkxBVdd96j7YNMUSjbHRiWoh5rzQlvuT0gcUSP4lziMjPmpKRdUSNo46fHH JXVol6d+30XM6M3WjtTJYbo82kRIvYFKSdiQPO1qrXF+rm6QnTC9pAnPfw1ralFt oVt5XHKh0EH96A== -----END CERTIFICATE-----Generated at Mon Jan 26 05:13:36 2026 by rpki-client