This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft File: rONjRGSGG9S_jFvH48m_09JGpN0.mft (raw, json) Hash identifier: o5coTeF4bzvru5f8FIZXj3t1th06BJahVV43z6lDmMA= Subject key identifier: 68:43:4B:DA:F6:5D:8F:BE:0B:F9:C0:20:18:3D:56:77:56:E7:C2:0C Authority key identifier: AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD Certificate issuer: /CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd Certificate serial: 019BFA2D92B64D6321B1D36D3696C44F849B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 12:00:49 +0000 Manifest this update: Mon 26 Jan 2026 12:00:49 +0000 Manifest next update: Tue 27 Jan 2026 12:00:49 +0000 Files and hashes: 1: PtYo6MwEWy1vpndhzACUN02erEo.roa (hash: 3/Pp/u1BR3pOxJGz3l7tc76JM7PepsEG/RPZ3ABSNvU=) 2: rONjRGSGG9S_jFvH48m_09JGpN0.crl (hash: Q3Z9ISegkEREH6O/S6XYYl5qRXYnxyzClLeKKtzm6cs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:92:b6:4d:63:21:b1:d3:6d:36:96:c4:4f:84:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd Validity Not Before: Jan 26 12:00:49 2026 GMT Not After : Jan 27 12:00:49 2026 GMT Subject: CN=68434bdaf65d8fbe0bf9c020183d567756e7c20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:16:df:b7:87:e3:d0:69:64:42:46:dc:9d:dd: 26:a4:62:de:94:38:69:0c:be:46:e6:46:62:8e:4f: e5:57:e6:d3:74:d1:e7:fd:50:06:43:ec:95:ae:6a: b2:31:54:10:da:b4:3d:2c:7f:0d:46:29:a6:21:c5: be:a6:a1:cf:02:38:3c:ec:09:8d:b7:0e:80:ef:2b: fd:6f:8c:8a:dd:19:a6:ed:87:58:80:d7:7e:1b:86: d5:60:8d:54:8c:5d:ec:dc:9f:25:39:2b:19:19:90: 3c:96:3f:9e:04:4d:27:a3:93:3b:c0:11:9d:ef:02: c5:80:45:03:10:dc:13:e7:40:4b:2b:84:a7:c4:f3: aa:61:67:f6:b7:cd:b4:a6:5c:54:d1:69:24:1c:3a: 3f:5d:f9:44:85:b2:fe:43:6d:56:bf:da:31:a2:04: fd:07:d2:84:6a:ff:4f:d0:44:42:9d:7d:4f:f0:c9: 9d:f3:76:41:52:6b:d1:1f:15:b0:33:bb:bd:83:71: 9e:e1:46:f3:5b:bc:92:4f:d1:d5:c4:55:1d:0f:f9: 05:fc:0d:f3:72:10:f9:2d:fb:9c:e8:50:37:ec:c3: 16:ae:73:39:63:44:ee:10:d4:97:b7:e5:bb:49:ab: 86:d8:6d:8d:8d:81:62:19:e1:bc:1b:43:3a:99:b4: fc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:43:4B:DA:F6:5D:8F:BE:0B:F9:C0:20:18:3D:56:77:56:E7:C2:0C X509v3 Authority Key Identifier: keyid:AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:85:f7:11:1a:91:13:b7:0a:2f:34:67:df:bf:e1:6e:58:a2: fb:33:da:7c:1c:e8:72:4b:22:9c:b0:39:a3:c9:07:42:aa:a5: 28:ae:fc:e6:53:ee:06:85:fa:30:bb:10:91:b5:fe:5a:ee:73: 8d:d9:25:5d:57:32:63:22:67:8c:33:bb:86:fe:f7:4b:39:3c: 67:c3:bc:7d:6d:db:48:8a:00:b7:b0:ec:a9:bf:d9:e1:72:18: 19:b7:74:67:a4:1a:76:3f:0f:09:89:15:6a:d7:61:9f:71:8a: 6a:b4:ae:5c:b3:f7:e0:31:1c:a1:7a:e9:ac:80:85:94:25:6c: f3:a1:bb:cf:81:99:e9:15:3a:a5:35:6d:88:f2:ec:c4:4f:f7: 58:72:84:c8:6c:df:ed:05:34:c4:1b:00:1a:31:6f:15:3c:5e: eb:50:ee:af:95:49:1c:db:25:a6:ff:7a:35:1f:7a:0b:0b:47: 97:df:8f:5e:b3:c6:ef:65:bc:fd:02:18:29:6b:4e:06:13:e8: 06:03:e0:68:03:dc:d8:6e:80:44:55:21:e6:b2:13:89:2a:85: 54:32:f9:17:b3:5d:ad:39:e0:78:2c:6f:77:e9:49:79:5c:63: eb:07:6d:0b:20:35:da:28:02:b9:3b:cc:a1:17:b3:ea:ac:96: 0e:27:cb:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LZK2TWMhsdNtNpbET4SbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZTM2MzQ0NjQ4NjFiZDRiZjhjNWJjN2UzYzliZmQzZDI0 NmE0ZGQwHhcNMjYwMTI2MTIwMDQ5WhcNMjYwMTI3MTIwMDQ5WjAzMTEwLwYDVQQD Eyg2ODQzNGJkYWY2NWQ4ZmJlMGJmOWMwMjAxODNkNTY3NzU2ZTdjMjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxbft4fj0GlkQkbcnd0mpGLelDhp DL5G5kZijk/lV+bTdNHn/VAGQ+yVrmqyMVQQ2rQ9LH8NRimmIcW+pqHPAjg87AmN tw6A7yv9b4yK3Rmm7YdYgNd+G4bVYI1UjF3s3J8lOSsZGZA8lj+eBE0no5M7wBGd 7wLFgEUDENwT50BLK4SnxPOqYWf2t820plxU0WkkHDo/XflEhbL+Q21Wv9oxogT9 B9KEav9P0ERCnX1P8Mmd83ZBUmvRHxWwM7u9g3Ge4UbzW7yST9HVxFUdD/kF/A3z chD5Lfuc6FA37MMWrnM5Y0TuENSXt+W7SauG2G2NjYFiGeG8G0M6mbT8zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhDS9r2XY++C/nAIBg9VndW58IMMB8GA1UdIwQY MBaAFKzjY0RkhhvUv4xbx+PJv9PSRqTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMGVmNTktMTg0Mi00Y2EzLTk4NjUt MDY3Y2M0NDI2YzI4LzEvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMGVmNTktMTg0Mi00Y2EzLTk4NjUtMDY3Y2M0NDI2YzI4 LzEvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWIX3ERqR E7cKLzRn37/hblii+zPafBzocksinLA5o8kHQqqlKK785lPuBoX6MLsQkbX+Wu5z jdklXVcyYyJnjDO7hv73Szk8Z8O8fW3bSIoAt7Dsqb/Z4XIYGbd0Z6Qadj8PCYkV atdhn3GKarSuXLP34DEcoXrprICFlCVs86G7z4GZ6RU6pTVtiPLsxE/3WHKEyGzf 7QU0xBsAGjFvFTxe61Dur5VJHNslpv96NR96CwtHl9+PXrPG72W8/QIYKWtOBhPo BgPgaAPc2G6ARFUh5rITiSqFVDL5F7NdrTngeCxvd+lJeVxj6wdtCyA12igCuTvM oRez6qyWDifL2Q== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:26 2026 by rpki-client