This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft File: a08STJHKoMyRw7m7T4rbBjJiJKE.mft (raw, json) Hash identifier: Ht1XMgqwme3zDmFqqp2xb6rZf8rWZHPfwiWQRHb3HKM= Subject key identifier: 21:CC:7A:2C:40:65:57:50:2D:6B:52:9D:8E:7F:43:ED:93:2B:FC:B9 Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1 Certificate issuer: /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1 Certificate serial: 019BF79ABFB720259F6DBBE09CFB397A11B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft Manifest number: 0D42 Signing time: Mon 26 Jan 2026 00:01:12 +0000 Manifest this update: Mon 26 Jan 2026 00:01:12 +0000 Manifest next update: Tue 27 Jan 2026 00:01:12 +0000 Files and hashes: 1: QgMG-u89Y-TWbT4Gt6ZsQgsTYNI.roa (hash: sETsQ4q/+Tu+FYDJynqCF64iSLCcXXD4r9m9lwpRbx8=) 2: a08STJHKoMyRw7m7T4rbBjJiJKE.crl (hash: wgQvyQYTcDFcjp+pC3s6AHrbumYttKW/Kp3h+T2ox6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:bf:b7:20:25:9f:6d:bb:e0:9c:fb:39:7a:11:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1 Validity Not Before: Jan 26 00:01:12 2026 GMT Not After : Jan 27 00:01:12 2026 GMT Subject: CN=21cc7a2c406557502d6b529d8e7f43ed932bfcb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:47:8f:6a:63:93:92:ef:76:4d:68:b7:95:b6: 0f:dd:c2:20:ac:6c:06:16:b0:66:2f:83:bc:7e:f2: 52:ea:67:51:c8:34:a5:19:c9:99:d5:2b:be:30:3c: 74:ff:0f:4a:a1:97:9b:4e:f7:f1:08:70:39:87:f0: f4:d4:bf:e7:c0:b8:47:15:98:3c:21:dc:86:9c:0f: 29:15:0c:43:21:90:24:88:86:ff:54:e4:e2:0c:d8: 18:16:5a:f5:93:be:53:8d:22:6b:54:41:3c:e7:cf: d4:94:2f:c2:d5:87:91:8d:c7:99:92:34:29:61:59: 4e:0d:ac:2f:c4:bf:c0:32:8c:62:67:38:ef:b0:a3: 8a:91:0b:5f:2b:38:1d:a6:42:9b:bf:93:48:10:a7: df:ff:f9:06:b5:51:80:28:2c:01:b8:23:5d:6b:d0: d5:a3:3f:7f:4f:4d:4f:ac:de:ad:6d:8c:50:db:a2: 85:5d:8e:7e:66:28:3b:f6:73:9b:f1:ae:c4:5e:77: fe:3d:3d:e8:ab:cf:8a:9d:40:a1:39:2d:98:06:28: f2:24:dc:f1:32:c2:9f:96:c0:5b:ec:98:16:b2:c2: dc:9d:81:62:a5:eb:3e:b5:4d:38:df:8d:3f:83:41: 49:ba:2a:9c:e0:aa:21:87:53:c5:c4:f8:0c:0f:24: da:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CC:7A:2C:40:65:57:50:2D:6B:52:9D:8E:7F:43:ED:93:2B:FC:B9 X509v3 Authority Key Identifier: keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:dc:ba:fb:ad:77:16:7b:9b:68:e0:ef:15:8b:01:84:f3:6a: 10:fd:60:1d:6b:7c:da:3b:18:f8:d7:b8:fe:47:2c:cf:3b:73: 22:a5:80:64:8e:42:46:e5:ff:0d:81:90:f5:4c:25:8f:ba:68: c2:b6:49:a5:9b:30:96:fa:73:05:b8:fe:0f:cf:7d:21:10:62: 49:e3:ec:9d:46:75:b8:cf:12:cb:a4:1d:fc:34:d6:3a:a9:24: 81:ec:b2:dc:a1:14:a9:63:c2:6e:94:db:0f:ad:9e:ee:58:5c: 1b:1c:34:59:5b:6f:be:26:9d:9d:1c:94:c7:ad:75:34:81:0a: b5:9a:01:19:36:f6:aa:72:33:af:63:73:64:4f:0c:48:61:0d: 97:65:97:93:e1:c1:62:36:9e:dd:93:a1:cb:ac:68:5e:2d:79: da:aa:b8:cf:7f:62:2f:6a:ac:0f:9e:14:1a:91:61:a8:5f:f5: 78:03:5b:07:bb:b0:10:27:bc:c3:9d:0c:0a:a3:cb:2c:7b:8e: f2:02:30:46:84:61:45:e4:1b:19:0b:45:06:57:4e:0b:2e:67: 23:45:54:56:8b:d1:e8:57:0c:40:10:29:ce:12:11:74:08:79: 8d:bd:3e:1b:cc:d6:b5:11:d0:d4:cb:67:a7:da:6e:7f:24:70: b2:de:2e:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mr+3ICWfbbvgnPs5ehG2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNGYxMjRjOTFjYWEwY2M5MWMzYjliYjRmOGFkYjA2MzI2 MjI0YTEwHhcNMjYwMTI2MDAwMTEyWhcNMjYwMTI3MDAwMTEyWjAzMTEwLwYDVQQD EygyMWNjN2EyYzQwNjU1NzUwMmQ2YjUyOWQ4ZTdmNDNlZDkzMmJmY2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEePamOTku92TWi3lbYP3cIgrGwG FrBmL4O8fvJS6mdRyDSlGcmZ1Su+MDx0/w9KoZebTvfxCHA5h/D01L/nwLhHFZg8 IdyGnA8pFQxDIZAkiIb/VOTiDNgYFlr1k75TjSJrVEE858/UlC/C1YeRjceZkjQp YVlODawvxL/AMoxiZzjvsKOKkQtfKzgdpkKbv5NIEKff//kGtVGAKCwBuCNda9DV oz9/T01PrN6tbYxQ26KFXY5+Zig79nOb8a7EXnf+PT3oq8+KnUChOS2YBijyJNzx MsKflsBb7JgWssLcnYFipes+tU04340/g0FJuiqc4Kohh1PFxPgMDyTaxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHMeixAZVdQLWtSnY5/Q+2TK/y5MB8GA1UdIwQY MBaAFGtPEkyRyqDMkcO5u0+K2wYyYiShMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMjRhYzktYWQxYy00ZWM3LTkzNzMt YjY1MjYyY2YxOTgzLzEvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9jMjRhYzktYWQxYy00ZWM3LTkzNzMtYjY1MjYyY2YxOTgz LzEvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsdy6+613 FnubaODvFYsBhPNqEP1gHWt82jsY+Ne4/kcszztzIqWAZI5CRuX/DYGQ9Uwlj7po wrZJpZswlvpzBbj+D899IRBiSePsnUZ1uM8Sy6Qd/DTWOqkkgeyy3KEUqWPCbpTb D62e7lhcGxw0WVtvviadnRyUx611NIEKtZoBGTb2qnIzr2NzZE8MSGENl2WXk+HB Yjae3ZOhy6xoXi152qq4z39iL2qsD54UGpFhqF/1eANbB7uwECe8w50MCqPLLHuO 8gIwRoRhReQbGQtFBldOCy5nI0VUVovR6FcMQBApzhIRdAh5jb0+G8zWtRHQ1Mtn p9pufyRwst4uvA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:04 2026 by rpki-client