This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft File: AcOKBqObILjaQACSN9dqzdKOcaU.mft (raw, json) Hash identifier: YPBv5s24UsXxbU6aT8UopZqU5bUHRnfXYOwfIm4Uc00= Subject key identifier: 82:73:11:29:C9:37:81:3A:36:1A:7B:F6:FC:B1:AF:4F:53:55:25:9E Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5 Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5 Certificate serial: 019BF7D1F2AD2FDF3EA0D710ADF803878CF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft Manifest number: 1817 Signing time: Mon 26 Jan 2026 01:01:29 +0000 Manifest this update: Mon 26 Jan 2026 01:01:29 +0000 Manifest next update: Tue 27 Jan 2026 01:01:29 +0000 Files and hashes: 1: AcOKBqObILjaQACSN9dqzdKOcaU.crl (hash: cDcPBGXkcAswCHy/I2E9V65zUnPSX5/kdH+mZ3de4YU=) 2: ov_yPvQnjCBOxMDQ0fxhQYRGf24.roa (hash: 87TB6uHBD00xhJxzxPfF6P3fX0oGRc/an9mxW40Dcho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:f2:ad:2f:df:3e:a0:d7:10:ad:f8:03:87:8c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5 Validity Not Before: Jan 26 01:01:29 2026 GMT Not After : Jan 27 01:01:29 2026 GMT Subject: CN=82731129c937813a361a7bf6fcb1af4f5355259e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7e:3e:59:a8:b9:bb:6c:a1:5c:96:b2:6f:b0: 07:8a:79:c6:6c:cd:48:de:86:f7:6a:57:63:b5:27: 93:b6:fc:90:36:35:d7:79:9f:f7:c3:e6:04:61:fb: 0b:aa:6b:5a:3e:99:db:e8:32:7f:ff:aa:25:92:e9: e8:c2:98:af:db:7c:4f:2e:ab:e5:da:7e:04:67:72: 31:40:a9:b0:c5:ce:c7:75:a4:ed:e7:d2:13:8b:a9: f4:25:de:fc:a0:38:05:6d:fb:fb:99:9a:fc:a5:20: 0e:5f:cc:13:aa:11:94:8e:24:e5:e7:9d:1a:6b:a8: 84:8c:fc:b6:0a:1d:6a:f7:43:c7:fc:83:30:c2:99: 23:b0:23:f8:c8:3e:e7:ee:8a:01:a2:9d:9b:01:b9: 09:7b:6c:0e:48:da:8f:c9:a3:a5:28:61:3e:5a:f8: 12:06:0e:a3:d4:2d:37:b5:b8:5f:de:20:2e:99:9a: c3:57:7a:bf:2b:a6:0a:65:31:fe:91:68:bd:ee:68: f2:2b:fc:ec:48:d2:40:bb:82:25:a2:ea:44:d5:d0: b6:85:56:8f:63:03:a4:4d:31:13:f2:14:fc:d7:66: 88:d8:63:80:a5:54:2e:5d:a4:6a:8e:83:57:5c:cd: bd:e3:87:22:a4:48:a9:62:af:2b:a7:00:21:f9:12: 02:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:73:11:29:C9:37:81:3A:36:1A:7B:F6:FC:B1:AF:4F:53:55:25:9E X509v3 Authority Key Identifier: keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f9:c6:e7:98:78:34:c1:47:93:c6:25:e6:94:6a:a3:29:26: ee:39:85:8d:c7:59:b5:19:01:1f:f2:d0:de:e4:18:1b:11:cd: d8:4b:16:cf:fc:0e:8b:ea:ab:7e:2f:3f:2d:40:f1:c9:0d:c7: 93:ed:1f:ab:72:13:06:0f:49:16:06:05:1f:4e:3d:cd:00:ac: e0:29:8f:2d:e1:a4:9a:a1:cb:b7:2e:37:83:86:48:fa:36:8c: e0:95:01:09:37:9c:91:ae:55:20:69:10:23:5c:a1:d4:c9:56: 05:0a:92:50:13:2a:80:b6:fa:d9:07:fd:41:64:a0:7d:bb:2e: 99:c6:53:aa:e7:83:9b:28:df:bd:ff:a5:f7:4f:b5:ae:96:87: c1:81:b4:2d:d8:b7:0d:db:69:8b:3c:ed:b7:5f:61:e9:e3:b5: ec:c4:62:da:f8:32:6a:14:a6:6f:2a:1a:06:00:8f:87:73:47: be:c5:04:80:d2:32:c5:ad:19:a4:ef:5a:7e:d3:62:df:d4:de: 33:cb:50:e4:2b:62:a6:e5:ae:bc:6b:e8:c5:72:4d:5a:2e:ed: fa:3f:31:91:19:81:e8:67:d6:10:ca:64:2f:d7:8d:7b:61:37: ce:74:6c:c8:b6:50:69:46:4f:42:6b:68:31:d9:8e:34:3c:99: 13:49:98:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30fKtL98+oNcQrfgDh4z5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYzM4YTA2YTM5YjIwYjhkYTQwMDA5MjM3ZDc2YWNkZDI4 ZTcxYTUwHhcNMjYwMTI2MDEwMTI5WhcNMjYwMTI3MDEwMTI5WjAzMTEwLwYDVQQD Eyg4MjczMTEyOWM5Mzc4MTNhMzYxYTdiZjZmY2IxYWY0ZjUzNTUyNTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi34+Wai5u2yhXJayb7AHinnGbM1I 3ob3aldjtSeTtvyQNjXXeZ/3w+YEYfsLqmtaPpnb6DJ//6olkunowpiv23xPLqvl 2n4EZ3IxQKmwxc7HdaTt59ITi6n0Jd78oDgFbfv7mZr8pSAOX8wTqhGUjiTl550a a6iEjPy2Ch1q90PH/IMwwpkjsCP4yD7n7ooBop2bAbkJe2wOSNqPyaOlKGE+WvgS Bg6j1C03tbhf3iAumZrDV3q/K6YKZTH+kWi97mjyK/zsSNJAu4IloupE1dC2hVaP YwOkTTET8hT812aI2GOApVQuXaRqjoNXXM2944cipEipYq8rpwAh+RICcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJzESnJN4E6Nhp79vyxr09TVSWeMB8GA1UdIwQY MBaAFAHDigajmyC42kAAkjfXas3SjnGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82YThlNWUtMzliNi00N2UzLWJiYjAt YjI5ZjEwY2MwMzI4LzEvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS82YThlNWUtMzliNi00N2UzLWJiYjAtYjI5ZjEwY2MwMzI4 LzEvQWNPS0JxT2JJTGphUUFDU045ZHF6ZEtPY2FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvnG55h4 NMFHk8Yl5pRqoykm7jmFjcdZtRkBH/LQ3uQYGxHN2EsWz/wOi+qrfi8/LUDxyQ3H k+0fq3ITBg9JFgYFH049zQCs4CmPLeGkmqHLty43g4ZI+jaM4JUBCTecka5VIGkQ I1yh1MlWBQqSUBMqgLb62Qf9QWSgfbsumcZTqueDmyjfvf+l90+1rpaHwYG0Ldi3 Ddtpizztt19h6eO17MRi2vgyahSmbyoaBgCPh3NHvsUEgNIyxa0ZpO9aftNi39Te M8tQ5CtipuWuvGvoxXJNWi7t+j8xkRmB6GfWEMpkL9eNe2E3znRsyLZQaUZPQmto MdmONDyZE0mY/Q== -----END CERTIFICATE-----Generated at Mon Jan 26 03:32:58 2026 by rpki-client