This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft File: aDg_-p8gvwIcCQJimUIS1xZn7QI.mft (raw, json) Hash identifier: QVGMqb5ngvNVn76cRZecho7HQhqdw0vRBVupSui6Vj4= Subject key identifier: A0:2B:31:69:7A:68:9D:12:25:1F:35:AE:BA:43:AD:1B:02:1F:EC:0D Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02 Certificate issuer: /CN=68383ffa9f20bf021c090262994212d71667ed02 Certificate serial: 019BF2E1B703DED311B83B67EDEAA3007D34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 02:00:37 +0000 Manifest this update: Sun 25 Jan 2026 02:00:37 +0000 Manifest next update: Mon 26 Jan 2026 02:00:37 +0000 Files and hashes: 1: 1U6aj4iJ-y4osFcsxDSCV5GyIkA.roa (hash: UcR0Wdw86ylcwoNswSuJ+itYBJCzYFEmZPLbaTiKVvU=) 2: IGOtfSCHb-PcgN6otd-LjwgBgcY.roa (hash: mIaFqnuv58vVdHvIIehpAChWeIDBu6nXZiEhEu38H88=) 3: QgnGVYDtjT7Xiv9bSXAiMYcOfC4.roa (hash: 7jyRblRC2U+uJRMS8zI6UzI2pyhKabixPwkdu8GGav8=) 4: aDg_-p8gvwIcCQJimUIS1xZn7QI.crl (hash: xi11iEQbTSKAZo65fiKfR7Sb1r2k1PGsWpYe7eKUVXI=) 5: rgfQ7RnUFYhCryuejjkJdBuljlI.roa (hash: zzWPOS9zzP/+5hzXtVsNoePksI2Qor0wOj+9tNGbjH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e1:b7:03:de:d3:11:b8:3b:67:ed:ea:a3:00:7d:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02 Validity Not Before: Jan 25 02:00:37 2026 GMT Not After : Jan 26 02:00:37 2026 GMT Subject: CN=a02b31697a689d12251f35aeba43ad1b021fec0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:af:9d:9f:24:33:a2:e8:7c:6a:e7:c8:00:79: ca:2d:c8:f9:19:47:5e:1e:af:89:36:79:26:54:05: 83:67:b5:54:24:f4:fe:a9:46:3f:a8:b4:5b:7d:2f: 97:92:60:b0:8d:a7:22:28:23:97:a7:8a:99:01:79: d0:7b:de:51:02:88:01:9e:f6:b7:a9:b4:13:e4:d9: e9:f9:53:66:82:d6:03:80:76:0e:fe:32:c3:d9:91: 50:4c:51:d4:67:10:09:2e:d6:7f:83:75:d4:0c:a0: 44:63:89:ec:95:c2:99:c1:57:c6:34:6e:64:35:47: 3c:81:85:ec:92:9f:25:8f:c1:96:82:59:a6:24:2d: e8:91:75:14:4e:6b:eb:64:bf:4c:43:04:85:19:6a: 58:19:59:79:8f:55:f9:b9:47:7e:32:7f:6b:87:8e: a0:44:60:b1:24:8a:d5:4d:3b:83:d8:0e:59:08:4b: 49:2b:33:68:e2:de:c4:77:16:af:0c:1e:6e:60:fa: 36:9d:f7:45:8a:2a:31:3d:60:21:65:fa:a5:bd:39: b5:35:18:aa:94:51:2d:bc:19:85:df:d7:40:69:07: f9:2a:36:cf:f7:36:7a:87:59:55:ea:42:9f:53:41: f2:ba:a3:f1:f8:20:9e:34:cb:e1:4e:39:8a:f9:69: 99:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2B:31:69:7A:68:9D:12:25:1F:35:AE:BA:43:AD:1B:02:1F:EC:0D X509v3 Authority Key Identifier: keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:2b:89:d6:2d:4b:ab:4a:e5:46:6e:a6:47:d1:9d:bd:bc:cc: da:c8:d3:72:d9:4c:48:08:96:a1:e4:70:79:39:cb:2e:48:fa: 5f:03:aa:a2:f1:3b:2e:6d:d8:10:9c:77:c9:a7:36:b7:c6:2f: 00:73:dc:32:a1:35:c7:56:d8:1b:69:ca:85:d4:79:a9:7e:d9: 9f:72:d4:33:6d:90:3f:79:35:76:a5:2b:8c:bf:c9:ef:75:41: 84:70:09:1e:0a:50:f4:da:ac:fc:09:8a:38:4b:e9:ba:2e:db: 74:63:c2:b3:0d:a5:35:89:46:e1:72:77:6f:b4:d2:ed:21:ba: 54:2f:c1:1a:c1:c5:3e:70:57:89:30:9d:c1:a7:f0:6b:01:ec: 01:00:34:7f:fa:ce:33:7b:e9:eb:be:ce:ce:1a:a5:01:c2:23: d7:21:24:22:89:5c:be:12:6a:17:6f:0b:0d:34:b4:a7:1c:a8: 61:04:73:68:e2:eb:97:0a:ee:ad:d6:b2:b3:08:fd:7c:54:e9: a2:9d:a1:72:19:be:5e:45:81:44:92:37:0c:21:69:3e:f7:eb: 84:b2:6c:9d:15:17:de:44:a5:94:b1:b7:06:9c:5d:20:6f:b2: 8a:03:f2:3d:b8:71:33:27:fd:e2:ab:cd:dd:bc:5d:f5:42:3a: ec:47:1d:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4bcD3tMRuDtn7eqjAH00MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MzgzZmZhOWYyMGJmMDIxYzA5MDI2Mjk5NDIxMmQ3MTY2 N2VkMDIwHhcNMjYwMTI1MDIwMDM3WhcNMjYwMTI2MDIwMDM3WjAzMTEwLwYDVQQD EyhhMDJiMzE2OTdhNjg5ZDEyMjUxZjM1YWViYTQzYWQxYjAyMWZlYzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq+dnyQzouh8aufIAHnKLcj5GUde Hq+JNnkmVAWDZ7VUJPT+qUY/qLRbfS+XkmCwjaciKCOXp4qZAXnQe95RAogBnva3 qbQT5Nnp+VNmgtYDgHYO/jLD2ZFQTFHUZxAJLtZ/g3XUDKBEY4nslcKZwVfGNG5k NUc8gYXskp8lj8GWglmmJC3okXUUTmvrZL9MQwSFGWpYGVl5j1X5uUd+Mn9rh46g RGCxJIrVTTuD2A5ZCEtJKzNo4t7EdxavDB5uYPo2nfdFiioxPWAhZfqlvTm1NRiq lFEtvBmF39dAaQf5KjbP9zZ6h1lV6kKfU0HyuqPx+CCeNMvhTjmK+WmZxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKArMWl6aJ0SJR81rrpDrRsCH+wNMB8GA1UdIwQY MBaAFGg4P/qfIL8CHAkCYplCEtcWZ+0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYt NDA2MGU5ZWVlYjllLzEvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYtNDA2MGU5ZWVlYjll LzEvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJiuJ1i1L q0rlRm6mR9GdvbzM2sjTctlMSAiWoeRweTnLLkj6XwOqovE7Lm3YEJx3yac2t8Yv AHPcMqE1x1bYG2nKhdR5qX7Zn3LUM22QP3k1dqUrjL/J73VBhHAJHgpQ9Nqs/AmK OEvpui7bdGPCsw2lNYlG4XJ3b7TS7SG6VC/BGsHFPnBXiTCdwafwawHsAQA0f/rO M3vp677OzhqlAcIj1yEkIolcvhJqF28LDTS0pxyoYQRzaOLrlwrurdayswj9fFTp op2hchm+XkWBRJI3DCFpPvfrhLJsnRUX3kSllLG3BpxdIG+yigPyPbhxMyf94qvN 3bxd9UI67EcdLA== -----END CERTIFICATE-----Generated at Sun Jan 25 06:09:42 2026 by rpki-client