This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft File: adXUUqjtU1KH_rNlFLyHwCI1WkM.mft (raw, json) Hash identifier: b4Q9IGydq6958xm41D0gfcfgmKtivQ2XU1Nbv+7f39Q= Subject key identifier: 62:8E:80:D0:A6:EF:1F:36:E7:A2:83:D6:43:03:A4:40:AF:73:23:6D Authority key identifier: 69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43 Certificate issuer: /CN=69d5d452a8ed535287feb36514bc87c022355a43 Certificate serial: 019BF6BECDE3697A83C31BBC57DA169C575A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 20:00:58 +0000 Manifest this update: Sun 25 Jan 2026 20:00:58 +0000 Manifest next update: Mon 26 Jan 2026 20:00:58 +0000 Files and hashes: 1: 99ukKo0G5E-X61ucxhUYzuXviMg.roa (hash: klMpZV7tFP7vNV7veN/nv8e/MQyS41qIS69khsoXMUw=) 2: adXUUqjtU1KH_rNlFLyHwCI1WkM.crl (hash: DhJtYbwAhbMlB1iPQwEnt5nTx5TwWwM7nVW7Shojrm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:cd:e3:69:7a:83:c3:1b:bc:57:da:16:9c:57:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69d5d452a8ed535287feb36514bc87c022355a43 Validity Not Before: Jan 25 20:00:58 2026 GMT Not After : Jan 26 20:00:58 2026 GMT Subject: CN=628e80d0a6ef1f36e7a283d64303a440af73236d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cb:4c:a1:f3:67:aa:0e:a5:83:90:73:2c:37: c9:51:b6:96:18:e0:b9:4a:24:80:1d:1d:d1:8c:c7: f0:57:93:65:32:fb:b8:7e:1c:c7:2d:71:fc:99:75: 33:24:11:89:54:1f:85:33:52:7e:43:59:e6:72:b5: 93:c7:af:44:ac:24:78:5d:5d:ab:20:e5:41:b5:4a: b0:ef:f7:67:ff:71:29:96:50:27:56:71:59:25:5c: 8e:b4:b7:32:5e:81:89:1e:78:9a:9c:b0:fc:1a:f2: b6:9e:77:9e:23:74:43:d8:ed:31:fc:ac:21:72:ef: 7d:2d:07:ce:c1:8d:44:3a:2e:76:a0:a4:ca:9a:40: da:52:cb:3b:ad:59:46:ac:c1:38:6f:9c:7a:1c:da: 63:96:32:ce:19:77:62:eb:ee:19:f1:ee:de:96:86: ca:7b:a0:21:d2:fc:91:77:90:2b:89:1b:06:c3:b2: 58:cf:b4:5e:4b:0a:66:5f:82:33:e1:21:c7:d2:75: ec:bf:99:a2:e1:38:9e:f8:2c:f2:aa:d6:b0:cf:66: 57:f4:b0:04:e4:f8:ab:34:d7:03:57:41:14:a0:d9: 18:ce:7f:a4:97:8d:d7:a6:d0:ed:16:8b:76:1b:fd: 8c:64:c8:84:7a:4f:ff:03:0c:d2:93:79:d9:6d:fc: 53:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8E:80:D0:A6:EF:1F:36:E7:A2:83:D6:43:03:A4:40:AF:73:23:6D X509v3 Authority Key Identifier: keyid:69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:0e:9b:70:05:46:cf:84:44:08:ce:c2:55:3d:da:81:d7:df: 74:15:9c:e2:91:c3:52:54:da:e4:b3:7c:65:97:36:56:00:e5: 63:f5:a3:c1:41:d6:0c:59:4e:e7:59:24:f1:9e:c8:06:34:c9: 83:8f:51:92:6f:67:90:b5:8b:51:5c:9a:1a:de:0f:ad:01:9e: f1:e1:eb:63:6e:0c:4a:b9:b1:97:93:4c:86:5d:40:83:b6:9e: 7f:87:a7:19:31:05:97:a3:5a:23:00:74:4c:7d:59:11:b9:34: be:f5:2f:f9:ca:0c:c3:1b:58:af:b1:82:5b:58:70:b5:9d:f3: 1b:54:94:a7:3c:3a:da:9d:44:36:0f:94:32:58:b5:49:76:2c: cc:49:70:6d:5c:02:b4:c8:fe:a0:33:12:84:a8:9b:6c:6e:e7: 94:fc:4c:7f:d8:fb:b9:61:34:56:92:2c:3a:b4:43:0e:93:ed: c0:4c:b1:3a:ea:68:3f:fe:cb:a7:0a:b5:f3:da:5f:09:17:bd: f3:fe:ee:95:4c:cc:6c:8a:38:60:09:f6:c3:ca:06:12:9b:d6: 95:50:a8:aa:ce:b2:3e:32:db:e6:48:39:10:84:bc:14:b5:d8: 9e:4c:8c:f9:8e:04:28:0f:06:8e:16:a3:5b:34:e1:cd:00:a0: 39:9c:17:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vs3jaXqDwxu8V9oWnFdaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZDVkNDUyYThlZDUzNTI4N2ZlYjM2NTE0YmM4N2MwMjIz NTVhNDMwHhcNMjYwMTI1MjAwMDU4WhcNMjYwMTI2MjAwMDU4WjAzMTEwLwYDVQQD Eyg2MjhlODBkMGE2ZWYxZjM2ZTdhMjgzZDY0MzAzYTQ0MGFmNzMyMzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2stMofNnqg6lg5BzLDfJUbaWGOC5 SiSAHR3RjMfwV5NlMvu4fhzHLXH8mXUzJBGJVB+FM1J+Q1nmcrWTx69ErCR4XV2r IOVBtUqw7/dn/3EpllAnVnFZJVyOtLcyXoGJHnianLD8GvK2nneeI3RD2O0x/Kwh cu99LQfOwY1EOi52oKTKmkDaUss7rVlGrME4b5x6HNpjljLOGXdi6+4Z8e7elobK e6Ah0vyRd5AriRsGw7JYz7ReSwpmX4Iz4SHH0nXsv5mi4Tie+Czyqtawz2ZX9LAE 5PirNNcDV0EUoNkYzn+kl43XptDtFot2G/2MZMiEek//AwzSk3nZbfxTMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGKOgNCm7x8256KD1kMDpECvcyNtMB8GA1UdIwQY MBaAFGnV1FKo7VNSh/6zZRS8h8AiNVpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWRYVVVxanRVMUtIX3JObEZMeUh3Q0kxV2tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS84ZTg4YTctMDIzMi00MDU1LWE1Y2Yt ZGQ5NDQzNTc5ZWQ1LzEvYWRYVVVxanRVMUtIX3JObEZMeUh3Q0kxV2tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS84ZTg4YTctMDIzMi00MDU1LWE1Y2YtZGQ5NDQzNTc5ZWQ1 LzEvYWRYVVVxanRVMUtIX3JObEZMeUh3Q0kxV2tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlg6bcAVG z4RECM7CVT3agdffdBWc4pHDUlTa5LN8ZZc2VgDlY/WjwUHWDFlO51kk8Z7IBjTJ g49Rkm9nkLWLUVyaGt4PrQGe8eHrY24MSrmxl5NMhl1Ag7aef4enGTEFl6NaIwB0 TH1ZEbk0vvUv+coMwxtYr7GCW1hwtZ3zG1SUpzw62p1ENg+UMli1SXYszElwbVwC tMj+oDMShKibbG7nlPxMf9j7uWE0VpIsOrRDDpPtwEyxOupoP/7Lpwq189pfCRe9 8/7ulUzMbIo4YAn2w8oGEpvWlVCoqs6yPjLb5kg5EIS8FLXYnkyM+Y4EKA8Gjhaj WzThzQCgOZwXrw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:19:19 2026 by rpki-client