This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft File: RaqI3Gdc5dw1V0v_YpDirojOCCs.mft (raw, json) Hash identifier: mAZha7v3V3q4CuExWrD5P7TlM1g0B9P4TF5S6NvRhWU= Subject key identifier: 89:A6:BD:18:8B:ED:1D:D9:8E:19:48:50:3C:35:EB:75:CB:83:09:B2 Authority key identifier: 45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B Certificate issuer: /CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b Certificate serial: 019BF42BA11E35EB77661C319E068FBF679E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft Manifest number: 149A Signing time: Sun 25 Jan 2026 08:00:58 +0000 Manifest this update: Sun 25 Jan 2026 08:00:58 +0000 Manifest next update: Mon 26 Jan 2026 08:00:58 +0000 Files and hashes: 1: RaqI3Gdc5dw1V0v_YpDirojOCCs.crl (hash: lSzcMuBaKa5Zb/QuW0MJksyuBCM5RRysk94OADT8uZo=) 2: TIe2fwjh-L9RIKenSG1hqmUrGTQ.roa (hash: 8C7bJPs/lfQ5jAlbJlDeUYVPY7qjuIpf6WDQNJK6E8I=) 3: bSiGlTpBW397VAR7wC-li7NX-jg.roa (hash: HglUCXt875tWZDRLoHCxeQZQpdgf7UP/ahcJL9mYpQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:a1:1e:35:eb:77:66:1c:31:9e:06:8f:bf:67:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45aa88dc675ce5dc35574bff6290e2ae88ce082b Validity Not Before: Jan 25 08:00:58 2026 GMT Not After : Jan 26 08:00:58 2026 GMT Subject: CN=89a6bd188bed1dd98e1948503c35eb75cb8309b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5b:60:95:7f:cc:ec:d1:5a:81:a8:63:6a:bf: fd:ef:89:05:ee:52:70:3d:f7:17:ed:de:f9:eb:58: c1:5d:26:f3:15:c2:20:a2:b2:c5:d4:5f:b8:54:8b: 0c:cb:d3:e1:fc:ef:1e:8b:72:48:57:26:20:77:82: 4a:ed:92:66:bf:5e:36:5b:cd:7b:0b:d5:ae:4c:c1: 2f:ab:6c:1a:5d:45:fb:f8:92:4b:26:79:92:0e:41: 4e:ce:5c:19:65:8f:b3:7e:09:4d:95:2e:87:03:73: 75:f5:0a:17:97:e4:96:67:d1:0a:34:2b:fb:91:ef: b4:fa:b2:f0:38:dd:67:cd:39:17:7d:1d:91:99:d8: 3c:18:6e:a6:43:bd:d0:eb:a2:78:1e:4a:02:5c:d2: 5e:17:6f:d1:31:60:8d:b7:df:bc:ef:7b:2c:7c:3d: 85:68:5d:e9:b9:05:c0:c1:3a:76:87:72:99:b7:04: d1:9f:84:35:a7:42:ca:05:1e:f4:a9:83:aa:4b:83: 6d:33:95:f9:98:2c:55:87:36:59:c6:a0:41:df:63: 9c:96:95:ad:72:9c:a6:36:80:97:6c:e8:af:64:77: 5d:66:dd:de:5f:8a:5c:94:9a:9b:79:41:85:99:5b: 6c:95:7b:92:ec:4e:2c:b5:12:71:8c:59:e8:c5:c7: 1f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A6:BD:18:8B:ED:1D:D9:8E:19:48:50:3C:35:EB:75:CB:83:09:B2 X509v3 Authority Key Identifier: keyid:45:AA:88:DC:67:5C:E5:DC:35:57:4B:FF:62:90:E2:AE:88:CE:08:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RaqI3Gdc5dw1V0v_YpDirojOCCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/42db52-dca7-4fa3-9a73-1d7b229d4e3b/1/RaqI3Gdc5dw1V0v_YpDirojOCCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:57:61:7e:3a:6f:c4:80:e3:75:85:c0:01:e4:f3:20:3c:4f: 4e:da:e4:91:c5:e2:14:f0:6e:76:50:d5:6d:78:28:22:db:0d: 3e:b0:a0:e0:09:07:50:52:e7:d9:0b:40:8b:cf:2c:c8:b7:c0: 24:75:e2:ed:d3:fd:10:26:d3:73:0a:dc:08:76:2e:75:1e:e0: 2e:96:05:a2:54:34:e9:24:f6:ee:54:39:8f:95:12:ee:92:be: 65:21:19:6b:39:41:29:b0:78:d4:65:8a:51:7e:27:ae:b3:56: 39:de:78:81:78:7c:17:35:ce:d0:a3:98:4d:d3:7f:03:aa:bd: 2d:bb:21:a4:e6:5d:9a:8f:c9:53:85:26:69:65:2e:7a:bb:26: a9:d3:4f:c7:4b:82:72:ab:72:62:2f:e1:69:1e:0a:71:3e:cd: 76:4c:2c:3b:41:4c:6b:1e:60:a3:11:0d:e3:18:84:86:13:a5: eb:ff:03:ab:11:d1:90:6d:28:77:bb:98:bd:ba:12:fd:ce:d9: 19:7c:86:32:14:58:7a:60:90:11:e2:97:ef:36:4d:f6:dd:25: ab:7c:36:02:df:54:e9:ff:31:1d:70:f0:b9:ee:1e:e3:ad:3d: ef:3b:f9:68:3c:3e:20:9a:6a:2f:0b:ea:6e:0b:f9:a1:3a:d5: 82:b3:79:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K6EeNet3ZhwxngaPv2eeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1YWE4OGRjNjc1Y2U1ZGMzNTU3NGJmZjYyOTBlMmFlODhj ZTA4MmIwHhcNMjYwMTI1MDgwMDU4WhcNMjYwMTI2MDgwMDU4WjAzMTEwLwYDVQQD Eyg4OWE2YmQxODhiZWQxZGQ5OGUxOTQ4NTAzYzM1ZWI3NWNiODMwOWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FtglX/M7NFagahjar/974kF7lJw PfcX7d7561jBXSbzFcIgorLF1F+4VIsMy9Ph/O8ei3JIVyYgd4JK7ZJmv142W817 C9WuTMEvq2waXUX7+JJLJnmSDkFOzlwZZY+zfglNlS6HA3N19QoXl+SWZ9EKNCv7 ke+0+rLwON1nzTkXfR2Rmdg8GG6mQ73Q66J4HkoCXNJeF2/RMWCNt9+873ssfD2F aF3puQXAwTp2h3KZtwTRn4Q1p0LKBR70qYOqS4NtM5X5mCxVhzZZxqBB32OclpWt cpymNoCXbOivZHddZt3eX4pclJqbeUGFmVtslXuS7E4stRJxjFnoxccfiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImmvRiL7R3ZjhlIUDw163XLgwmyMB8GA1UdIwQY MBaAFEWqiNxnXOXcNVdL/2KQ4q6IzggrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS80MmRiNTItZGNhNy00ZmEzLTlhNzMt MWQ3YjIyOWQ0ZTNiLzEvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS80MmRiNTItZGNhNy00ZmEzLTlhNzMtMWQ3YjIyOWQ0ZTNi LzEvUmFxSTNHZGM1ZHcxVjB2X1lwRGlyb2pPQ0NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVdhfjpv xIDjdYXAAeTzIDxPTtrkkcXiFPBudlDVbXgoItsNPrCg4AkHUFLn2QtAi88syLfA JHXi7dP9ECbTcwrcCHYudR7gLpYFolQ06ST27lQ5j5US7pK+ZSEZazlBKbB41GWK UX4nrrNWOd54gXh8FzXO0KOYTdN/A6q9LbshpOZdmo/JU4UmaWUuersmqdNPx0uC cqtyYi/haR4KcT7NdkwsO0FMax5goxEN4xiEhhOl6/8DqxHRkG0od7uYvboS/c7Z GXyGMhRYemCQEeKX7zZN9t0lq3w2At9U6f8xHXDwue4e46097zv5aDw+IJpqLwvq bgv5oTrVgrN5ZA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:46 2026 by rpki-client