This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft File: 34CJqp4dXBKrrUOnAVEdocZfn6Y.mft (raw, json) Hash identifier: ugSXmNWkowOyYibjyIItkhkeElvQWQXkzZUeJzuViSs= Subject key identifier: A0:64:73:41:69:4B:03:F8:0D:4E:A0:0F:B3:41:6E:29:08:C1:51:AB Authority key identifier: DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6 Certificate issuer: /CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6 Certificate serial: 019BF3BE011BBAB03E44B5241B5ABFAB2A3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft Manifest number: 10F5 Signing time: Sun 25 Jan 2026 06:01:13 +0000 Manifest this update: Sun 25 Jan 2026 06:01:13 +0000 Manifest next update: Mon 26 Jan 2026 06:01:13 +0000 Files and hashes: 1: 34CJqp4dXBKrrUOnAVEdocZfn6Y.crl (hash: 7L+Z3AYaFZ5vchzTIEKRmzgZ7GVyHxv0FlsVHPT1EYw=) 2: a_2N7up7ge72iNFxhl27xYnKU30.roa (hash: j+RQUmxlIxzBlFZ8oJHxFEDFDPjNQtLyOqFD3f2oy3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:be:01:1b:ba:b0:3e:44:b5:24:1b:5a:bf:ab:2a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6 Validity Not Before: Jan 25 06:01:13 2026 GMT Not After : Jan 26 06:01:13 2026 GMT Subject: CN=a0647341694b03f80d4ea00fb3416e2908c151ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2c:fc:1f:ab:17:ec:7b:db:fd:a7:cc:89:31: 3a:3a:b3:13:dc:f4:a6:66:b7:8c:ac:53:64:3c:3b: 27:17:a2:52:65:05:58:91:9d:4d:dc:ac:0d:be:fc: 0b:ce:04:80:ba:5e:41:f2:7e:74:6c:18:f1:cb:fa: b1:2e:e8:79:f2:a4:18:7f:04:04:5d:bd:52:35:c1: 23:0f:d7:7a:0a:ac:f8:48:2e:05:27:36:42:48:c5: 54:5e:85:d4:59:e9:4e:fa:df:b0:5a:a9:69:1f:f8: af:95:b4:44:e5:52:68:35:e4:95:13:bd:8a:55:43: 9a:30:d5:d8:de:b6:12:8d:c2:a7:14:e8:80:f7:b8: 4c:3e:07:f4:25:9d:75:c6:c9:8f:71:82:63:b1:67: 7b:cd:7e:57:33:6a:14:80:af:ec:c5:ac:a8:29:38: 08:56:d9:5f:2b:d5:eb:5c:ed:a3:75:ed:ea:0e:9d: 94:f3:c9:ec:e6:62:c4:bb:13:b5:4f:84:23:bb:dc: dc:e3:b5:4a:05:57:26:6e:8c:d9:5f:f6:eb:88:8d: 23:fb:0f:2c:72:fc:0e:f3:f9:a1:af:5c:cc:a8:96: c8:18:f5:32:16:5c:fd:b4:84:bd:df:dc:22:34:d2: 99:d2:1f:2d:ba:9c:53:d8:89:b6:d2:b4:d9:9e:d6: 11:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:64:73:41:69:4B:03:F8:0D:4E:A0:0F:B3:41:6E:29:08:C1:51:AB X509v3 Authority Key Identifier: keyid:DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:0d:5a:b3:03:25:6d:a8:75:de:6c:08:59:ce:82:b9:09:ef: 71:2d:83:4d:23:a5:2d:09:d6:83:ff:1f:a9:78:73:7b:09:a1: 33:e7:15:84:37:85:9c:3c:b6:d3:f9:38:e4:c4:17:ad:46:c3: a3:d6:1c:56:9c:2d:0b:a6:f6:f4:cd:d6:93:73:d7:79:41:86: 82:29:9a:5e:ee:04:e0:b3:a0:d3:4f:4d:5c:b8:04:0c:7f:6b: 1a:69:0e:1c:61:cc:db:f5:34:52:f0:2a:76:26:87:cf:01:1e: 03:3e:e1:5c:1c:e9:63:8a:6d:a3:1a:1c:e1:e7:0c:0b:a3:97: 47:55:19:ef:82:5c:27:e3:73:92:03:30:29:52:d0:93:6f:57: a6:9c:c4:87:e1:0d:f6:33:4e:5e:5d:12:b5:16:fe:43:ad:73: 63:fd:ac:9c:1d:0f:f2:b9:c7:51:f7:42:5f:11:62:31:a4:09: a9:5b:09:cf:47:58:b7:1b:fe:fd:4e:4a:94:c7:1f:55:3d:b6: 22:8d:66:7a:ee:ee:3a:be:fe:1e:a1:12:bb:9d:97:e8:ec:f3: 12:1d:e6:cb:31:f5:98:6f:37:b0:80:f5:74:34:af:4d:90:18: 3c:e5:00:25:b5:af:dd:11:a3:5f:89:f5:f2:0b:ec:6b:03:aa: ec:a9:50:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvgEburA+RLUkG1q/qyo6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODA4OWFhOWUxZDVjMTJhYmFkNDNhNzAxNTExZGExYzY1 ZjlmYTYwHhcNMjYwMTI1MDYwMTEzWhcNMjYwMTI2MDYwMTEzWjAzMTEwLwYDVQQD EyhhMDY0NzM0MTY5NGIwM2Y4MGQ0ZWEwMGZiMzQxNmUyOTA4YzE1MWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSz8H6sX7Hvb/afMiTE6OrMT3PSm ZreMrFNkPDsnF6JSZQVYkZ1N3KwNvvwLzgSAul5B8n50bBjxy/qxLuh58qQYfwQE Xb1SNcEjD9d6Cqz4SC4FJzZCSMVUXoXUWelO+t+wWqlpH/ivlbRE5VJoNeSVE72K VUOaMNXY3rYSjcKnFOiA97hMPgf0JZ11xsmPcYJjsWd7zX5XM2oUgK/sxayoKTgI VtlfK9XrXO2jde3qDp2U88ns5mLEuxO1T4Qju9zc47VKBVcmbozZX/briI0j+w8s cvwO8/mhr1zMqJbIGPUyFlz9tIS939wiNNKZ0h8tupxT2Im20rTZntYRDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBkc0FpSwP4DU6gD7NBbikIwVGrMB8GA1UdIwQY MBaAFN+AiaqeHVwSq61DpwFRHaHGX5+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mNTQ3NWItYTZmOS00Y2M3LWI3MGYt ZmQ2NDQ2NTdjYTJiLzEvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9mNTQ3NWItYTZmOS00Y2M3LWI3MGYtZmQ2NDQ2NTdjYTJi LzEvMzRDSnFwNGRYQktyclVPbkFWRWRvY1pmbjZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3Q1aswMl bah13mwIWc6CuQnvcS2DTSOlLQnWg/8fqXhzewmhM+cVhDeFnDy20/k45MQXrUbD o9YcVpwtC6b29M3Wk3PXeUGGgimaXu4E4LOg009NXLgEDH9rGmkOHGHM2/U0UvAq diaHzwEeAz7hXBzpY4ptoxoc4ecMC6OXR1UZ74JcJ+NzkgMwKVLQk29XppzEh+EN 9jNOXl0StRb+Q61zY/2snB0P8rnHUfdCXxFiMaQJqVsJz0dYtxv+/U5KlMcfVT22 Io1meu7uOr7+HqESu52X6OzzEh3myzH1mG83sID1dDSvTZAYPOUAJbWv3RGjX4n1 8gvsawOq7KlQ0Q== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:08 2026 by rpki-client