This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft File: isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft (raw, json) Hash identifier: 6WMBadEBMlw24k14W1MQWtKJyMC3nmuFbL6PUTBPfJE= Subject key identifier: A0:F9:64:F1:9A:6A:91:E8:F8:38:2F:34:D7:C9:DE:C7:FD:6B:53:B0 Authority key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18 Certificate issuer: /CN=8ac14985cb544c6d23d19bb43ac93711afe91f18 Certificate serial: 019BF76365431DCEAEF7B578922723B9431A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft Manifest number: 14D0 Signing time: Sun 25 Jan 2026 23:00:44 +0000 Manifest this update: Sun 25 Jan 2026 23:00:44 +0000 Manifest next update: Mon 26 Jan 2026 23:00:44 +0000 Files and hashes: 1: isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl (hash: TiDPs50EleYe6I3Wp80GfTy07+v/i5K8SQC7yeb5LJ4=) 2: pjsQjYCyJ3t8hM7PRxXLSSskH0s.roa (hash: JlEEmKo2Oj3IztEax/xHj/p3At5KTwe0I06/xzxbFsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:65:43:1d:ce:ae:f7:b5:78:92:27:23:b9:43:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18 Validity Not Before: Jan 25 23:00:44 2026 GMT Not After : Jan 26 23:00:44 2026 GMT Subject: CN=a0f964f19a6a91e8f8382f34d7c9dec7fd6b53b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0e:5e:7a:d2:41:bf:a0:c1:61:15:f6:da:47: ff:23:12:09:e3:6f:84:c4:c2:14:3d:70:ee:0b:d3: 1c:c8:55:bf:00:d0:f5:10:8a:3c:12:ea:5c:ea:42: 1e:2f:90:33:37:2d:cf:e3:1b:02:9f:c4:16:8c:af: 7f:c6:03:e3:1b:3e:80:cc:e3:11:b8:18:15:82:72: 61:d9:96:c2:5b:a4:34:59:0c:77:f2:68:97:2e:14: 70:a5:59:28:84:c3:dc:0e:38:c2:c4:29:85:b6:7c: 5f:0a:67:6f:95:10:95:32:e6:0c:b9:9d:3a:c5:f7: b5:6e:ce:d4:ba:c2:4c:b5:bf:f8:7b:0b:46:98:09: 4a:4f:21:1f:63:d3:d6:93:1a:97:83:3e:86:18:ff: 13:95:8e:a0:7e:ff:73:47:67:0b:c0:eb:59:41:28: b2:5e:9c:9f:81:3e:5e:10:0d:5d:d1:b8:6a:dd:1f: ab:32:fa:d5:62:ef:cf:e9:d8:b0:c7:79:79:f1:79: ef:44:83:9f:a9:1b:38:a5:91:11:02:f1:64:af:75: e9:19:66:e8:51:3d:f9:76:89:50:00:f4:16:cd:9a: 5c:ff:32:c0:03:35:eb:23:0f:52:ca:94:99:e4:e0: 27:0c:ee:5d:c5:00:14:3b:43:5f:94:e9:2b:34:89: ba:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F9:64:F1:9A:6A:91:E8:F8:38:2F:34:D7:C9:DE:C7:FD:6B:53:B0 X509v3 Authority Key Identifier: keyid:8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:d9:06:37:cd:02:cc:94:d2:bf:fd:3f:63:6f:a9:2b:5c:d3: cf:5a:11:ce:c0:d0:7d:ea:21:51:37:c8:5d:78:c6:13:c4:5a: 95:00:b3:65:94:ea:75:fb:23:0d:6f:dc:2d:88:21:6e:00:9e: 3d:07:6e:c1:2d:2c:66:09:cd:02:ae:ac:ce:83:01:55:09:25: e9:c5:53:0d:4a:82:bb:f9:10:3c:c6:35:21:a6:aa:41:12:86: 91:51:51:b8:95:aa:84:b7:22:d3:fb:01:5a:0c:1f:48:89:5d: de:b7:42:94:ff:86:26:a9:ee:78:57:5d:76:e9:a5:48:9f:6c: 10:53:3e:9e:1d:3e:24:9c:e1:82:7e:7c:bf:ce:10:3e:2f:51: c2:2e:fd:4a:b2:de:a9:fd:6e:43:e3:7c:75:0e:56:83:66:22: f0:2e:cd:44:0b:5b:29:18:3a:3a:95:7c:67:0c:9d:f7:c5:7e: d1:64:35:11:b6:f6:fa:16:98:2f:3f:4e:9d:ae:9e:b9:e5:15: 71:64:a5:8d:f2:ba:c8:91:d0:04:88:26:53:88:99:4a:d6:cc: f5:46:a7:0f:8e:e0:40:50:59:38:9c:0b:46:87:65:b0:6e:0e: de:2a:34:82:30:13:e3:f9:7d:14:ac:37:93:7e:5e:a7:d9:4c: 71:6a:64:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y2VDHc6u97V4kicjuUMaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYzE0OTg1Y2I1NDRjNmQyM2QxOWJiNDNhYzkzNzExYWZl OTFmMTgwHhcNMjYwMTI1MjMwMDQ0WhcNMjYwMTI2MjMwMDQ0WjAzMTEwLwYDVQQD EyhhMGY5NjRmMTlhNmE5MWU4ZjgzODJmMzRkN2M5ZGVjN2ZkNmI1M2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA5eetJBv6DBYRX22kf/IxIJ42+E xMIUPXDuC9McyFW/AND1EIo8Eupc6kIeL5AzNy3P4xsCn8QWjK9/xgPjGz6AzOMR uBgVgnJh2ZbCW6Q0WQx38miXLhRwpVkohMPcDjjCxCmFtnxfCmdvlRCVMuYMuZ06 xfe1bs7UusJMtb/4ewtGmAlKTyEfY9PWkxqXgz6GGP8TlY6gfv9zR2cLwOtZQSiy XpyfgT5eEA1d0bhq3R+rMvrVYu/P6diwx3l58XnvRIOfqRs4pZERAvFkr3XpGWbo UT35dolQAPQWzZpc/zLAAzXrIw9SypSZ5OAnDO5dxQAUO0NflOkrNIm6oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKD5ZPGaapHo+DgvNNfJ3sf9a1OwMB8GA1UdIwQY MBaAFIrBSYXLVExtI9GbtDrJNxGv6R8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXNGSmhjdFVURzBqMFp1ME9zazNFYV9wSHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS81ODZmNzctNmYzMi00Yjk2LTk4Mzgt YTU4OTQ2OTNhZjEwLzEvaXNGSmhjdFVURzBqMFp1ME9zazNFYV9wSHhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS81ODZmNzctNmYzMi00Yjk2LTk4MzgtYTU4OTQ2OTNhZjEw LzEvaXNGSmhjdFVURzBqMFp1ME9zazNFYV9wSHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdkGN80C zJTSv/0/Y2+pK1zTz1oRzsDQfeohUTfIXXjGE8RalQCzZZTqdfsjDW/cLYghbgCe PQduwS0sZgnNAq6szoMBVQkl6cVTDUqCu/kQPMY1IaaqQRKGkVFRuJWqhLci0/sB WgwfSIld3rdClP+GJqnueFdddumlSJ9sEFM+nh0+JJzhgn58v84QPi9Rwi79SrLe qf1uQ+N8dQ5Wg2Yi8C7NRAtbKRg6OpV8Zwyd98V+0WQ1Ebb2+haYLz9Ona6eueUV cWSljfK6yJHQBIgmU4iZStbM9UanD47gQFBZOJwLRodlsG4O3io0gjAT4/l9FKw3 k35ep9lMcWpkmA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:38:43 2026 by rpki-client