This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json) Hash identifier: n8dnOqy75CSQZRqT3+CL6tnULr3UNF1nbXNwVla/ZuY= Subject key identifier: 67:AD:4C:A8:FC:D3:D4:3D:A4:72:87:41:6A:89:61:BF:AC:A8:81:55 Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22 Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622 Certificate serial: 019BF5AC2ACE47E0901E64DDA69513BD000B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft Manifest number: 0FA8 Signing time: Sun 25 Jan 2026 15:00:59 +0000 Manifest this update: Sun 25 Jan 2026 15:00:59 +0000 Manifest next update: Mon 26 Jan 2026 15:00:59 +0000 Files and hashes: 1: 5pguPhI0rFbakLhW6SkFbalknGQ.roa (hash: Lus95KOZX81AaJ5QWx/HsOob7eg1M1IWrIuALpl2Ef0=) 2: JGYB1Rt7gSa81bDABH2MHCSHfp8.roa (hash: yt7CtQlz8mtjyIIaBn7vHZ5Km7TGlMzsdUa4EfI/y1M=) 3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: tBkpbfLjbQiFzGjPo7cvYgthg+HVrdwtDPrdRSHJOjU=) 4: nXA9V6KcuTrb8c4a13aM3c-s94A.roa (hash: 5zHlB5gOOOnEtUQHoN58ZN8OSmLBcHMa8Vj3/5+LjCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:2a:ce:47:e0:90:1e:64:dd:a6:95:13:bd:00:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622 Validity Not Before: Jan 25 15:00:59 2026 GMT Not After : Jan 26 15:00:59 2026 GMT Subject: CN=67ad4ca8fcd3d43da47287416a8961bfaca88155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ea:40:84:f6:65:c6:6f:06:d7:57:ef:51:92: 62:c8:ce:89:8d:b9:2f:d4:67:dc:5c:bb:25:4f:d1: 39:10:56:f2:bf:c3:86:05:97:cb:64:2f:42:88:d3: 51:87:6c:8c:00:50:55:ca:6e:7d:d7:68:e8:63:74: b6:c0:7e:a7:a0:f4:af:07:99:3d:cd:84:7d:05:8f: 92:e7:b0:43:39:52:0b:f4:1f:4d:f8:80:b4:f8:60: 4f:73:c1:ed:43:d5:0f:31:92:d2:b4:16:6d:0a:a8: 96:66:58:8e:72:2b:43:40:b3:79:92:f8:b2:d2:76: ab:f7:26:88:4a:c3:16:71:98:11:d6:c9:22:7f:e3: 60:b5:0a:d5:37:65:07:6f:b9:d6:4b:3c:67:92:60: 10:fe:d4:df:53:54:f6:f3:d6:f9:02:ac:ef:37:ed: 46:1c:1f:e0:c0:56:40:e6:f9:1d:4a:5a:d7:56:44: b1:20:2d:d2:aa:76:fa:af:be:15:04:9b:f6:e7:16: 38:2d:e9:85:ef:14:5c:66:fc:1e:97:cc:25:8d:8d: 6d:97:b3:c9:05:d6:44:5f:e4:47:2e:5d:0d:a4:c9: 3d:1a:fb:1c:34:89:af:97:8c:7a:4a:6d:c2:97:04: 93:12:cc:02:81:e6:1b:b7:ed:59:12:ad:f5:cc:f3: 3f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AD:4C:A8:FC:D3:D4:3D:A4:72:87:41:6A:89:61:BF:AC:A8:81:55 X509v3 Authority Key Identifier: keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:6f:6a:ca:55:ed:11:45:b6:6d:35:f3:af:1b:67:ca:15:c2: 40:06:da:0b:0c:37:76:eb:08:77:0a:e8:0f:5e:ef:91:dd:bd: 63:02:be:67:74:4d:60:a4:bc:4e:c2:8f:a3:2e:38:60:10:1e: 94:46:1d:5f:97:80:3c:05:25:47:7b:0f:c1:ad:5e:5e:11:76: a6:f8:5b:24:ad:c9:58:d9:4e:cc:72:00:fd:23:82:e2:e8:40: c0:17:a6:85:d4:83:7a:0b:12:62:70:b5:2f:22:09:ab:66:64: 29:0e:79:ce:1a:91:1f:48:9c:fb:1e:81:da:b8:d8:9d:66:f2: 3a:19:ba:e9:fb:b7:97:b5:f0:ff:70:6f:64:6d:db:e9:15:6c: 7b:7c:52:de:c8:70:84:ae:1b:c3:87:fc:82:d4:79:04:94:48: ae:be:50:d5:68:53:1e:cc:55:74:1b:76:8c:16:c9:c4:d1:b0: 48:f0:9c:fc:03:91:98:4a:9d:72:d6:fb:61:52:13:78:9b:43: 64:62:dd:07:fa:a9:53:16:c1:6a:89:37:3b:5c:87:cd:1b:1f: fd:ab:5c:6e:6c:a0:60:33:eb:ef:ad:9f:44:59:9e:af:1c:21: 38:58:dc:d7:15:70:dc:c1:88:81:98:77:e2:8f:ad:a6:63:f2: 8d:61:29:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rCrOR+CQHmTdppUTvQALMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhY2UyMTA5MGVlNGQ3ODY3NzQxMzQyM2RjYjJmZTAxYTZl MWM2MjIwHhcNMjYwMTI1MTUwMDU5WhcNMjYwMTI2MTUwMDU5WjAzMTEwLwYDVQQD Eyg2N2FkNGNhOGZjZDNkNDNkYTQ3Mjg3NDE2YTg5NjFiZmFjYTg4MTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+pAhPZlxm8G11fvUZJiyM6Jjbkv 1GfcXLslT9E5EFbyv8OGBZfLZC9CiNNRh2yMAFBVym5912joY3S2wH6noPSvB5k9 zYR9BY+S57BDOVIL9B9N+IC0+GBPc8HtQ9UPMZLStBZtCqiWZliOcitDQLN5kviy 0nar9yaISsMWcZgR1skif+NgtQrVN2UHb7nWSzxnkmAQ/tTfU1T289b5AqzvN+1G HB/gwFZA5vkdSlrXVkSxIC3Sqnb6r74VBJv25xY4LemF7xRcZvwel8wljY1tl7PJ BdZEX+RHLl0NpMk9GvscNImvl4x6Sm3ClwSTEswCgeYbt+1ZEq31zPM/2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGetTKj809Q9pHKHQWqJYb+sqIFVMB8GA1UdIwQY MBaAFCrOIQkO5NeGd0E0I9yy/gGm4cYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjkt NTkwYTk4MTNkZGRmLzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjktNTkwYTk4MTNkZGRm LzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt29qylXt EUW2bTXzrxtnyhXCQAbaCww3dusIdwroD17vkd29YwK+Z3RNYKS8TsKPoy44YBAe lEYdX5eAPAUlR3sPwa1eXhF2pvhbJK3JWNlOzHIA/SOC4uhAwBemhdSDegsSYnC1 LyIJq2ZkKQ55zhqRH0ic+x6B2rjYnWbyOhm66fu3l7Xw/3BvZG3b6RVse3xS3shw hK4bw4f8gtR5BJRIrr5Q1WhTHsxVdBt2jBbJxNGwSPCc/AORmEqdctb7YVITeJtD ZGLdB/qpUxbBaok3O1yHzRsf/atcbmygYDPr762fRFmerxwhOFjc1xVw3MGIgZh3 4o+tpmPyjWEptg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:42:40 2026 by rpki-client