This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft File: o52_aHirAKRS-LB_iQ06s0g3Yns.mft (raw, json) Hash identifier: DPdJldnwi+ryHT3Z72vJ4vHYc3PhnKLeiDHw4ZgxlKs= Subject key identifier: 96:50:E6:09:77:47:54:76:FE:2A:23:B8:EE:BB:96:1C:06:DB:C6:87 Authority key identifier: A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B Certificate issuer: /CN=a39dbf6878ab00a452f8b07f890d3ab34837627b Certificate serial: 019BF4633D26FB822D04C18FD66EA7FF2215 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft Manifest number: 06AB Signing time: Sun 25 Jan 2026 09:01:42 +0000 Manifest this update: Sun 25 Jan 2026 09:01:42 +0000 Manifest next update: Mon 26 Jan 2026 09:01:42 +0000 Files and hashes: 1: irICw9k54gxIc6MwAFiIdqi5VAM.roa (hash: cVexCvCqPHrx0mmIhLbiS62tGFKhVl04e+CAM0DmAGQ=) 2: o52_aHirAKRS-LB_iQ06s0g3Yns.crl (hash: 7nTkxRyiqFidkkQLf7TF/zexLQIiNc+BhvGfxLT6u7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:63:3d:26:fb:82:2d:04:c1:8f:d6:6e:a7:ff:22:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a39dbf6878ab00a452f8b07f890d3ab34837627b Validity Not Before: Jan 25 09:01:42 2026 GMT Not After : Jan 26 09:01:42 2026 GMT Subject: CN=9650e60977475476fe2a23b8eebb961c06dbc687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:43:bc:8d:d4:90:52:a3:eb:45:d3:4e:5d:60: 14:14:2d:32:3b:62:ab:d4:30:b2:d0:97:03:c9:2e: f6:c3:b8:50:a2:be:ca:e2:68:f7:5d:2b:4f:21:66: 06:86:85:72:4f:6d:93:34:02:b2:52:b7:0a:db:6c: ec:7f:48:56:37:af:6b:36:a2:d0:14:11:71:5d:b6: e8:7c:75:d5:1d:f1:1d:e1:9c:f8:7a:c3:1f:cf:0b: cc:55:5e:a7:01:b3:c8:47:3d:09:1a:53:07:69:d1: 83:e0:cd:d7:7c:24:13:f6:92:77:f1:42:ca:6b:7e: b1:21:48:e0:60:f2:6a:b6:e2:cf:45:ac:4e:85:d9: 80:20:31:b4:0b:07:7c:80:ae:96:98:01:bd:ff:36: 48:2d:aa:67:0f:d5:47:44:15:32:20:14:e7:5a:2a: 6c:97:9d:a1:21:2c:88:84:78:14:0c:02:cd:65:15: de:98:4a:92:f6:c4:bf:90:f2:16:26:a8:0b:38:d3: a5:47:35:dc:02:95:fb:c2:55:58:c2:23:a8:ec:80: 89:f0:4f:8e:38:8d:e3:13:92:b3:77:42:c9:ae:2b: fa:9a:ae:ad:4d:12:f7:b5:da:e0:01:f5:f5:26:7e: 3f:10:44:12:6c:9a:5b:6d:97:cd:21:dc:eb:58:dd: 4a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:50:E6:09:77:47:54:76:FE:2A:23:B8:EE:BB:96:1C:06:DB:C6:87 X509v3 Authority Key Identifier: keyid:A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:8b:d0:7b:12:70:75:65:1d:24:aa:b0:1b:c0:8e:5c:33:9c: 5a:2d:fb:a5:eb:5d:5e:29:21:e3:71:1e:6a:4f:10:e9:68:e4: 86:bb:3c:3a:f1:07:ca:d3:a0:f4:c8:1e:a2:6f:45:27:b0:e6: de:07:2a:61:01:cf:51:08:eb:f7:d6:7b:39:7c:39:65:25:ab: d4:b8:da:4a:53:7d:4f:a0:79:b4:d5:8c:b7:eb:3e:cd:c5:26: da:5a:5d:32:a7:11:63:a9:89:25:5e:ac:27:bf:9e:a0:d1:98: a7:75:bd:19:60:a7:68:5c:c7:37:ac:1e:93:61:8e:80:a1:5e: e0:f7:1f:ee:58:ee:0f:6c:a9:70:a3:80:fd:01:35:5a:ec:3b: 73:a3:f8:51:59:0f:0b:18:33:de:86:57:91:5a:1e:3d:cd:83: 74:38:dc:26:27:f6:e9:d4:1d:52:39:0f:17:7a:00:4f:2f:78: 31:90:c6:3b:13:cb:e3:fd:95:ff:22:4e:3f:a0:96:55:18:3b: ff:eb:c1:50:48:e0:43:54:fb:fe:81:dd:44:95:57:ce:c2:b2: 0f:d8:08:eb:ec:68:0b:f6:2a:2c:17:b6:90:9b:f7:8b:29:73: da:de:60:0c:83:78:c3:4a:24:2a:d8:d0:b8:2b:fe:9d:da:68: ee:50:bb:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Yz0m+4ItBMGP1m6n/yIVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzOWRiZjY4NzhhYjAwYTQ1MmY4YjA3Zjg5MGQzYWIzNDgz NzYyN2IwHhcNMjYwMTI1MDkwMTQyWhcNMjYwMTI2MDkwMTQyWjAzMTEwLwYDVQQD Eyg5NjUwZTYwOTc3NDc1NDc2ZmUyYTIzYjhlZWJiOTYxYzA2ZGJjNjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUO8jdSQUqPrRdNOXWAUFC0yO2Kr 1DCy0JcDyS72w7hQor7K4mj3XStPIWYGhoVyT22TNAKyUrcK22zsf0hWN69rNqLQ FBFxXbbofHXVHfEd4Zz4esMfzwvMVV6nAbPIRz0JGlMHadGD4M3XfCQT9pJ38ULK a36xIUjgYPJqtuLPRaxOhdmAIDG0Cwd8gK6WmAG9/zZILapnD9VHRBUyIBTnWips l52hISyIhHgUDALNZRXemEqS9sS/kPIWJqgLONOlRzXcApX7wlVYwiOo7ICJ8E+O OI3jE5Kzd0LJriv6mq6tTRL3tdrgAfX1Jn4/EEQSbJpbbZfNIdzrWN1KPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZQ5gl3R1R2/iojuO67lhwG28aHMB8GA1UdIwQY MBaAFKOdv2h4qwCkUviwf4kNOrNIN2J7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzUyX2FIaXJBS1JTLUxCX2lRMDZzMGczWW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yMjY5NmQtZTcyZi00Y2ZkLWJhZTAt YWQ0NDIzNzY1ODkyLzEvbzUyX2FIaXJBS1JTLUxCX2lRMDZzMGczWW5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yMjY5NmQtZTcyZi00Y2ZkLWJhZTAtYWQ0NDIzNzY1ODky LzEvbzUyX2FIaXJBS1JTLUxCX2lRMDZzMGczWW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4vQexJw dWUdJKqwG8COXDOcWi37petdXikh43Eeak8Q6Wjkhrs8OvEHytOg9Mgeom9FJ7Dm 3gcqYQHPUQjr99Z7OXw5ZSWr1LjaSlN9T6B5tNWMt+s+zcUm2lpdMqcRY6mJJV6s J7+eoNGYp3W9GWCnaFzHN6wek2GOgKFe4Pcf7ljuD2ypcKOA/QE1Wuw7c6P4UVkP Cxgz3oZXkVoePc2DdDjcJif26dQdUjkPF3oATy94MZDGOxPL4/2V/yJOP6CWVRg7 /+vBUEjgQ1T7/oHdRJVXzsKyD9gI6+xoC/YqLBe2kJv3iylz2t5gDIN4w0okKtjQ uCv+ndpo7lC7Nw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:06:19 2026 by rpki-client