This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft File: acp8FyMtsGNJHPpYUgM2n_vrdu0.mft (raw, json) Hash identifier: +u+jrvyyylEqvOQEQy/RdJO/i+nZFReYTxAYxvwLs8A= Subject key identifier: 3A:37:7D:FB:3C:7D:5A:AC:99:EF:F8:96:28:99:08:6E:D4:B9:3F:B9 Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED Certificate issuer: /CN=69ca7c17232db063491cfa585203369ffbeb76ed Certificate serial: 019BF57576972B43D0AE6E1A0DE43FF58D9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 14:01:14 +0000 Manifest this update: Sun 25 Jan 2026 14:01:14 +0000 Manifest next update: Mon 26 Jan 2026 14:01:14 +0000 Files and hashes: 1: 8yAZGDwl6Q5NdW6_5msXiHDy6v0.roa (hash: hTQqJteeaF5ZjxlYrkjPbZjafNKCCRD7RpYTaq51+Q4=) 2: WHR6l1Q5Ar0v18AKFt90RxwkrKo.roa (hash: WNLKDaJxOe6Uz6jgAOWxAF+kTRgHf8gZjh0RxUla/9E=) 3: acp8FyMtsGNJHPpYUgM2n_vrdu0.crl (hash: 3k32kwD1yewspd3h86GL48hG5iXZRNpE0Rk/exgpS+4=) 4: gKFSZ12cdmISn4h5sbRx_f8ayV0.roa (hash: EtpOpvk7x1JOKFPhiQBQKjgaBtJnr2gJBSccIdWGROA=) 5: yNU-ToeAL7NXOOz9_-FlFzYfpBA.roa (hash: TjYy4/mDVjYziy+CeletARV0PQ6H5KzIho/639xxwbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:76:97:2b:43:d0:ae:6e:1a:0d:e4:3f:f5:8d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed Validity Not Before: Jan 25 14:01:14 2026 GMT Not After : Jan 26 14:01:14 2026 GMT Subject: CN=3a377dfb3c7d5aac99eff8962899086ed4b93fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9e:25:29:65:7b:4f:00:4a:4f:28:72:ac:c1: be:5a:fb:30:df:d0:a6:fb:da:c3:55:9b:a4:8a:74: b1:90:cd:de:ad:1f:30:da:c2:48:0c:6f:93:50:d9: 04:ed:c6:0a:99:57:94:ea:fc:92:ac:d0:c0:dd:49: bb:89:d2:90:bd:34:f0:61:db:fe:a4:4d:e1:98:d2: aa:92:b2:cd:67:41:97:19:8b:52:f4:45:37:cd:ae: 68:3e:2f:03:90:98:d3:77:a4:ba:2a:da:8d:38:b1: 33:78:a2:c6:e1:d3:44:16:24:95:02:9c:59:68:e2: e0:2d:da:0f:9b:36:67:12:d7:0c:96:ba:33:6b:e7: 7e:f4:f6:10:68:8c:8e:82:1a:9f:9a:3e:5b:e9:03: fd:bc:9f:4e:b1:3c:4c:78:9c:08:ba:8a:2a:68:9f: 4b:01:93:4a:d9:9e:45:24:b8:23:d5:00:f2:8d:74: 0e:6f:6f:31:03:3b:69:0f:83:86:6e:c9:ea:5e:58: 81:ad:8a:a5:a6:f5:23:1e:f6:76:ba:6d:4b:62:8b: 1d:67:52:de:41:93:f1:d9:57:06:66:c0:4a:49:58: 47:e0:a6:7b:19:07:1c:b7:12:fe:13:f0:01:9f:6b: 73:47:d8:55:34:97:0a:22:6b:d5:b6:5d:7f:2c:e5: 2c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:37:7D:FB:3C:7D:5A:AC:99:EF:F8:96:28:99:08:6E:D4:B9:3F:B9 X509v3 Authority Key Identifier: keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:e5:b2:0c:4a:86:a9:54:01:e1:9c:4e:1d:6f:5a:a8:73:71: 3f:28:2e:60:d9:4e:f7:1b:d9:c2:97:30:37:77:55:21:c8:ae: 67:d0:e6:92:59:5c:44:0b:86:ce:e5:0c:14:32:9b:3d:77:47: 70:d1:72:f1:2a:eb:99:b2:7e:cb:47:cd:30:30:7c:ff:42:9c: c3:e9:c1:03:64:c2:c7:1a:90:16:1e:14:f8:f2:62:0e:b5:52: 22:19:d5:79:05:71:eb:b6:05:4e:9f:36:ee:c5:29:92:90:9e: 46:c6:39:ac:6e:c6:85:75:de:39:24:30:76:8f:01:e0:5a:66: 21:08:9c:d0:34:6e:97:62:04:33:56:34:cd:49:f4:db:42:17: cc:cf:bd:a2:98:ec:7f:2a:9d:24:24:8d:94:d1:3a:07:de:0f: e5:29:ac:fe:0f:62:b7:b7:84:81:04:ba:89:67:aa:52:13:de: 6d:69:f8:b1:b8:84:8c:cf:0d:68:f8:97:35:71:31:53:0e:5c: 60:d2:69:34:d5:d3:ee:e2:b1:7b:48:d9:4f:16:8d:f1:4f:63: 45:fa:49:48:2a:c8:c0:8f:c4:1b:a7:5a:73:d5:67:a5:7c:8a: 50:a6:64:4e:ed:4d:58:77:13:98:0c:a4:99:c2:84:79:2c:67: 20:3b:de:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dXaXK0PQrm4aDeQ/9Y2aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5Y2E3YzE3MjMyZGIwNjM0OTFjZmE1ODUyMDMzNjlmZmJl Yjc2ZWQwHhcNMjYwMTI1MTQwMTE0WhcNMjYwMTI2MTQwMTE0WjAzMTEwLwYDVQQD EygzYTM3N2RmYjNjN2Q1YWFjOTllZmY4OTYyODk5MDg2ZWQ0YjkzZmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl54lKWV7TwBKTyhyrMG+Wvsw39Cm +9rDVZukinSxkM3erR8w2sJIDG+TUNkE7cYKmVeU6vySrNDA3Um7idKQvTTwYdv+ pE3hmNKqkrLNZ0GXGYtS9EU3za5oPi8DkJjTd6S6KtqNOLEzeKLG4dNEFiSVApxZ aOLgLdoPmzZnEtcMlroza+d+9PYQaIyOghqfmj5b6QP9vJ9OsTxMeJwIuooqaJ9L AZNK2Z5FJLgj1QDyjXQOb28xAztpD4OGbsnqXliBrYqlpvUjHvZ2um1LYosdZ1Le QZPx2VcGZsBKSVhH4KZ7GQcctxL+E/ABn2tzR9hVNJcKImvVtl1/LOUsPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDo3ffs8fVqsme/4liiZCG7UuT+5MB8GA1UdIwQY MBaAFGnKfBcjLbBjSRz6WFIDNp/763btMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUt ZjQ3YWU3ZGRhZWMwLzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUtZjQ3YWU3ZGRhZWMw LzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAluWyDEqG qVQB4ZxOHW9aqHNxPyguYNlO9xvZwpcwN3dVIciuZ9DmkllcRAuGzuUMFDKbPXdH cNFy8SrrmbJ+y0fNMDB8/0Kcw+nBA2TCxxqQFh4U+PJiDrVSIhnVeQVx67YFTp82 7sUpkpCeRsY5rG7GhXXeOSQwdo8B4FpmIQic0DRul2IEM1Y0zUn020IXzM+9opjs fyqdJCSNlNE6B94P5Sms/g9it7eEgQS6iWeqUhPebWn4sbiEjM8NaPiXNXExUw5c YNJpNNXT7uKxe0jZTxaN8U9jRfpJSCrIwI/EG6dac9VnpXyKUKZkTu1NWHcTmAyk mcKEeSxnIDve5w== -----END CERTIFICATE-----Generated at Sun Jan 25 20:09:22 2026 by rpki-client