This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft File: ACSx8TWREL_5kemsb1FGn9y0h68.mft (raw, json) Hash identifier: 7Evkwc0ZdAYJW9f6qrG5JS3q2OAbxfDzG1fmQYhcGrY= Subject key identifier: 03:E8:7B:FE:DD:1C:A6:AD:73:0A:68:42:45:E4:39:BF:56:08:BE:14 Authority key identifier: 00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF Certificate issuer: /CN=0024b1f1359110bff991e9ac6f51469fdcb487af Certificate serial: 019BF72DAAAEDC8115D0771C75E3FF8AC449 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft Manifest number: 0D1A Signing time: Sun 25 Jan 2026 22:02:03 +0000 Manifest this update: Sun 25 Jan 2026 22:02:03 +0000 Manifest next update: Mon 26 Jan 2026 22:02:03 +0000 Files and hashes: 1: ACSx8TWREL_5kemsb1FGn9y0h68.crl (hash: TU1iivwolrQ8Hepy3Y4PEWFm/T9OwE+8RjiVZABAMnI=) 2: L81FjA0HBR4C3VRXIdzV9aijlDs.roa (hash: l6by3JK81dcZtTI2EAV3D8+hWiL6wJ47qGTRoCR1Fpc=) 3: Tb3ZP8jCF88QUUjfET9_-Hcpu9M.roa (hash: iQIVqlpU95wZ1Y2M7mnw2rHSBBZvM/n/nZYpuMemFV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:aa:ae:dc:81:15:d0:77:1c:75:e3:ff:8a:c4:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0024b1f1359110bff991e9ac6f51469fdcb487af Validity Not Before: Jan 25 22:02:03 2026 GMT Not After : Jan 26 22:02:03 2026 GMT Subject: CN=03e87bfedd1ca6ad730a684245e439bf5608be14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7d:b1:69:2a:58:7c:ae:6f:3c:51:4d:ab:6e: f8:1c:b9:37:39:f5:17:92:13:14:d4:97:9d:fb:5b: e9:f3:90:80:a8:e1:69:17:3a:03:a3:d4:97:18:51: b7:e6:d2:28:e3:de:5d:1f:08:9e:5f:d4:90:00:82: f2:aa:fe:59:fa:2b:62:1d:5b:26:82:e4:da:bf:34: 04:d6:89:57:9b:93:d4:90:fb:26:32:a5:e6:6a:eb: 26:cf:a5:1d:35:e1:d2:95:19:f2:1a:03:10:f5:4e: 19:71:64:85:02:f6:2a:d3:9c:b1:45:81:0d:eb:bf: 67:43:d3:2b:67:6c:f7:4b:79:27:90:97:1a:29:05: b7:d6:19:45:5b:86:3d:ed:c5:3c:83:59:54:2a:af: 8b:b9:e7:a6:de:73:a5:de:f9:25:a2:54:98:1c:3f: d0:34:19:37:7e:fa:be:fb:49:34:b6:88:ee:d1:bf: 5d:73:8e:0f:51:5e:96:46:4a:8e:ad:d1:11:21:00: f0:1e:17:a9:ff:37:44:09:91:2a:66:f5:d4:c5:79: 0e:4c:f1:1f:a6:ec:ca:3f:9d:b7:08:28:c9:ed:ad: 98:d8:74:cb:5d:c1:fb:e9:93:5e:c8:0d:99:09:0a: f3:0b:05:ea:3f:f4:ba:f1:ba:7a:a7:55:34:16:31: 32:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E8:7B:FE:DD:1C:A6:AD:73:0A:68:42:45:E4:39:BF:56:08:BE:14 X509v3 Authority Key Identifier: keyid:00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d2:5d:9b:d5:7e:0e:e0:fd:7c:7d:f4:5b:b1:e4:e3:3b:e6: 1f:86:66:55:3f:dc:71:41:25:24:68:45:5b:d4:80:e9:57:01: 4e:46:5d:1f:74:36:b6:4b:ff:5d:c6:73:b2:82:74:4e:0f:37: 9e:b8:17:07:50:b7:c7:ec:66:88:e4:87:94:ef:5f:47:3c:ba: 02:a6:11:c5:3d:c0:17:ec:1f:e1:c0:de:83:f4:99:a7:4b:8c: 07:70:59:af:d3:58:ff:f1:d8:1d:34:df:ab:66:a1:1a:6a:7b: 2d:09:61:57:23:e3:ea:58:05:69:eb:d7:d2:8f:f6:b8:b6:bb: 3c:65:98:49:b2:73:ce:95:2a:88:9d:4d:7b:50:cc:0e:21:cb: d7:e6:af:59:5d:1b:c0:63:12:2f:4e:b1:d3:ef:c3:73:0f:59: 83:4c:66:66:14:ac:59:43:2c:c2:c3:3a:ad:0e:84:6a:3d:38: 42:be:26:06:38:b2:46:b3:0a:b5:f9:2d:cf:51:81:9a:0f:61: 63:66:22:32:ed:8a:64:2d:d4:5b:45:cf:24:e6:69:5b:06:d7: 42:2c:65:be:67:46:3b:7a:80:a5:1d:ed:1a:28:79:9c:17:45: 2e:f7:bc:1b:83:fc:10:17:74:16:f2:cc:27:78:dd:36:be:73: fe:8e:2f:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Laqu3IEV0HccdeP/isRJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjRiMWYxMzU5MTEwYmZmOTkxZTlhYzZmNTE0NjlmZGNi NDg3YWYwHhcNMjYwMTI1MjIwMjAzWhcNMjYwMTI2MjIwMjAzWjAzMTEwLwYDVQQD EygwM2U4N2JmZWRkMWNhNmFkNzMwYTY4NDI0NWU0MzliZjU2MDhiZTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH2xaSpYfK5vPFFNq274HLk3OfUX khMU1Jed+1vp85CAqOFpFzoDo9SXGFG35tIo495dHwieX9SQAILyqv5Z+itiHVsm guTavzQE1olXm5PUkPsmMqXmausmz6UdNeHSlRnyGgMQ9U4ZcWSFAvYq05yxRYEN 679nQ9MrZ2z3S3knkJcaKQW31hlFW4Y97cU8g1lUKq+Lueem3nOl3vklolSYHD/Q NBk3fvq++0k0toju0b9dc44PUV6WRkqOrdERIQDwHhep/zdECZEqZvXUxXkOTPEf puzKP523CCjJ7a2Y2HTLXcH76ZNeyA2ZCQrzCwXqP/S68bp6p1U0FjEy+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPoe/7dHKatcwpoQkXkOb9WCL4UMB8GA1UdIwQY MBaAFAAksfE1kRC/+ZHprG9RRp/ctIevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNTk3YzQtNmEzMi00MDA4LWIyZWUt MmRhNjI1ZWI3MjQyLzEvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iNTk3YzQtNmEzMi00MDA4LWIyZWUtMmRhNjI1ZWI3MjQy LzEvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtJdm9V+ DuD9fH30W7Hk4zvmH4ZmVT/ccUElJGhFW9SA6VcBTkZdH3Q2tkv/XcZzsoJ0Tg83 nrgXB1C3x+xmiOSHlO9fRzy6AqYRxT3AF+wf4cDeg/SZp0uMB3BZr9NY//HYHTTf q2ahGmp7LQlhVyPj6lgFaevX0o/2uLa7PGWYSbJzzpUqiJ1Ne1DMDiHL1+avWV0b wGMSL06x0+/Dcw9Zg0xmZhSsWUMswsM6rQ6Eaj04Qr4mBjiyRrMKtfktz1GBmg9h Y2YiMu2KZC3UW0XPJOZpWwbXQixlvmdGO3qApR3tGih5nBdFLve8G4P8EBd0FvLM J3jdNr5z/o4vVw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:57:08 2026 by rpki-client