This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft File: o75019azdkTAG-1V4NsxRkuYYMY.mft (raw, json) Hash identifier: 6W4uZPSr64fEnV8F6ed7AHtmtcDdFUcSgYajxE7GLVo= Subject key identifier: 42:04:9F:3E:9E:14:50:D3:B5:FA:0F:7E:73:72:16:72:5B:2F:43:E3 Authority key identifier: A3:BE:74:D7:D6:B3:76:44:C0:1B:ED:55:E0:DB:31:46:4B:98:60:C6 Certificate issuer: /CN=a3be74d7d6b37644c01bed55e0db31464b9860c6 Certificate serial: 019BF3BE3025D69C5104D2630A6F8CA9D74C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft Manifest number: 8C Signing time: Sun 25 Jan 2026 06:01:26 +0000 Manifest this update: Sun 25 Jan 2026 06:01:26 +0000 Manifest next update: Mon 26 Jan 2026 06:01:26 +0000 Files and hashes: 1: GMhL62C15YSxIRu0_i2zJp1sjEM.roa (hash: cXQPeYbdh2/Yw1nnCQtJ0X3/vBmLAl/1YbCv+gD2CRA=) 2: o75019azdkTAG-1V4NsxRkuYYMY.crl (hash: +MXr3fZWOQywUWXHwlieTPZB95slx/NWtbP3F/95wOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.crl rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:be:30:25:d6:9c:51:04:d2:63:0a:6f:8c:a9:d7:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3be74d7d6b37644c01bed55e0db31464b9860c6 Validity Not Before: Jan 25 06:01:26 2026 GMT Not After : Jan 26 06:01:26 2026 GMT Subject: CN=42049f3e9e1450d3b5fa0f7e737216725b2f43e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:28:b7:74:62:e5:26:83:32:df:4f:a3:b4:ea: 15:56:93:8d:f3:4f:d0:d4:48:7d:89:75:db:1a:6f: ba:be:36:c1:05:e5:32:69:a6:14:a9:17:34:0e:71: 5e:e6:72:c6:79:02:de:cd:95:9e:44:02:86:e2:3c: f3:8b:26:c9:e0:84:64:cb:c0:53:93:cd:ba:f4:7b: e8:9d:fb:21:3b:89:47:4e:cf:62:f2:1a:3e:44:bb: 50:b1:25:d7:05:bc:c4:cf:91:30:6e:39:4f:af:3a: 47:02:5b:68:49:1b:af:30:58:ec:38:d1:ac:da:8b: 82:7a:86:f1:1c:b7:18:4f:06:19:d9:76:5f:bf:ff: 5e:05:73:0c:8d:8b:12:0e:fa:8b:be:2e:65:b2:02: fa:ee:ca:4d:06:a0:ec:b3:fe:d6:04:88:cc:b8:0f: ac:4f:86:91:e0:b9:c2:5a:6c:aa:9f:56:6a:a7:18: fd:d8:83:52:e0:6b:e0:da:85:23:f5:44:2a:2c:b5: d5:67:3c:6d:d9:b0:a3:81:97:58:77:47:fb:bd:39: 54:82:ff:9d:d9:4a:d0:21:5e:49:4c:76:47:63:da: 26:2f:a3:77:63:d2:47:11:1b:f8:02:31:c3:e6:76: a0:46:92:72:f3:fc:fd:df:84:a1:1d:68:29:d4:4c: 12:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:04:9F:3E:9E:14:50:D3:B5:FA:0F:7E:73:72:16:72:5B:2F:43:E3 X509v3 Authority Key Identifier: keyid:A3:BE:74:D7:D6:B3:76:44:C0:1B:ED:55:E0:DB:31:46:4B:98:60:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o75019azdkTAG-1V4NsxRkuYYMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/o75019azdkTAG-1V4NsxRkuYYMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3f:84:f3:2d:41:6e:42:14:72:92:bf:49:4b:bf:0f:bc:a9: 48:65:66:3a:db:d1:f9:63:6c:e9:e2:5a:2b:88:c7:7f:a0:be: 67:2f:1e:6d:1e:01:78:39:d6:a2:de:5e:38:5e:5b:61:78:40: 62:be:04:e2:23:33:b5:91:90:86:16:df:b4:27:08:91:4e:b2: ab:56:6d:55:64:f5:b6:96:ba:c3:cc:f1:38:94:a6:9d:33:e6: 43:b1:9f:26:4b:0a:df:4a:08:da:0f:a7:81:9e:da:39:ed:71: fd:ce:fc:7d:f0:97:8c:74:70:0c:42:1d:b5:34:a5:81:fe:81: ed:f8:7f:3d:64:63:37:6f:59:44:f9:15:71:ec:3a:a9:3d:b0: 3f:de:5e:d0:67:66:ed:a0:86:e3:36:82:c4:78:ff:77:15:73: 8d:ab:b9:3a:78:a4:de:cb:95:48:75:9a:2f:6c:fb:66:5b:98: 30:87:a4:a6:0a:13:3a:b9:7b:2d:d6:73:f8:08:b2:d8:20:75: 9c:78:32:03:aa:03:0e:9e:f6:23:52:ae:3d:b9:1f:ca:1d:4e: 9a:26:46:47:b1:fd:02:1a:5a:bb:f4:af:29:4d:59:37:8c:ee: c2:0d:82:bb:65:18:9d:57:46:6b:65:bc:cd:7d:64:b8:92:53: 77:6d:31:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvjAl1pxRBNJjCm+MqddMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYmU3NGQ3ZDZiMzc2NDRjMDFiZWQ1NWUwZGIzMTQ2NGI5 ODYwYzYwHhcNMjYwMTI1MDYwMTI2WhcNMjYwMTI2MDYwMTI2WjAzMTEwLwYDVQQD Eyg0MjA0OWYzZTllMTQ1MGQzYjVmYTBmN2U3MzcyMTY3MjViMmY0M2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ii3dGLlJoMy30+jtOoVVpON80/Q 1Eh9iXXbGm+6vjbBBeUyaaYUqRc0DnFe5nLGeQLezZWeRAKG4jzziybJ4IRky8BT k8269HvonfshO4lHTs9i8ho+RLtQsSXXBbzEz5EwbjlPrzpHAltoSRuvMFjsONGs 2ouCeobxHLcYTwYZ2XZfv/9eBXMMjYsSDvqLvi5lsgL67spNBqDss/7WBIjMuA+s T4aR4LnCWmyqn1Zqpxj92INS4Gvg2oUj9UQqLLXVZzxt2bCjgZdYd0f7vTlUgv+d 2UrQIV5JTHZHY9omL6N3Y9JHERv4AjHD5nagRpJy8/z934ShHWgp1EwSCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIEnz6eFFDTtfoPfnNyFnJbL0PjMB8GA1UdIwQY MBaAFKO+dNfWs3ZEwBvtVeDbMUZLmGDGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzc1MDE5YXpka1RBRy0xVjROc3hSa3VZWU1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85NjFhY2EtZjQyNS00ODg3LWFmNGEt Y2ZhMDYxMDMwMzQ2LzEvbzc1MDE5YXpka1RBRy0xVjROc3hSa3VZWU1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi85NjFhY2EtZjQyNS00ODg3LWFmNGEtY2ZhMDYxMDMwMzQ2 LzEvbzc1MDE5YXpka1RBRy0xVjROc3hSa3VZWU1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfT+E8y1B bkIUcpK/SUu/D7ypSGVmOtvR+WNs6eJaK4jHf6C+Zy8ebR4BeDnWot5eOF5bYXhA Yr4E4iMztZGQhhbftCcIkU6yq1ZtVWT1tpa6w8zxOJSmnTPmQ7GfJksK30oI2g+n gZ7aOe1x/c78ffCXjHRwDEIdtTSlgf6B7fh/PWRjN29ZRPkVcew6qT2wP95e0Gdm 7aCG4zaCxHj/dxVzjau5Onik3suVSHWaL2z7ZluYMIekpgoTOrl7LdZz+Aiy2CB1 nHgyA6oDDp72I1KuPbkfyh1OmiZGR7H9Ahpau/SvKU1ZN4zuwg2Cu2UYnVdGa2W8 zX1kuJJTd20x4A== -----END CERTIFICATE-----Generated at Sun Jan 25 17:26:17 2026 by rpki-client