This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft File: A1KD5iNe2yXotUdJtihfXj74U3E.mft (raw, json) Hash identifier: ydbhLYTLl60rr1+Ty0SQPzwRkHhkY86CEUKHZGB1ZOg= Subject key identifier: 06:00:F1:E8:3D:75:EC:83:E1:AA:21:10:E7:E9:2A:4F:03:23:B7:B0 Authority key identifier: 03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71 Certificate issuer: /CN=035283e6235edb25e8b54749b6285f5e3ef85371 Certificate serial: 019BF6F60A782B62ED14B25F1F76B2CC6505 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft Manifest number: 0337 Signing time: Sun 25 Jan 2026 21:01:18 +0000 Manifest this update: Sun 25 Jan 2026 21:01:18 +0000 Manifest next update: Mon 26 Jan 2026 21:01:18 +0000 Files and hashes: 1: A1KD5iNe2yXotUdJtihfXj74U3E.crl (hash: Lm7yOaaBXxh5VO2R8VRWZuclfvK2EJGOJvq57XK9ON4=) 2: yX9ydvOKgI9DtKgtlG1m9Fn2ZI8.roa (hash: qPtAu4bwy3Juh5so6bwqIDZWhOQpRsegMYoucr8NrwE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f6:0a:78:2b:62:ed:14:b2:5f:1f:76:b2:cc:65:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=035283e6235edb25e8b54749b6285f5e3ef85371 Validity Not Before: Jan 25 21:01:18 2026 GMT Not After : Jan 26 21:01:18 2026 GMT Subject: CN=0600f1e83d75ec83e1aa2110e7e92a4f0323b7b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:22:1c:28:78:d7:df:fe:ec:04:66:36:6a:23: cf:0b:72:c9:95:cc:48:86:d8:78:0a:fe:b9:7c:3b: 82:0a:18:03:88:73:45:a0:6a:8c:a9:25:83:9f:90: 81:4b:05:2f:99:7e:09:f2:54:f5:6d:e9:e0:28:6b: 49:5e:f6:fe:e7:32:c9:51:37:92:56:6d:e2:06:f1: 9d:f3:b2:c2:74:f3:cc:a1:8e:45:24:82:e4:52:5e: 4c:62:41:cc:9d:21:04:3c:e6:fb:05:59:a9:2d:79: b7:91:5d:05:90:82:50:ce:37:28:8c:dc:cb:b4:8b: 8c:04:0c:be:85:e7:01:b5:f2:1e:1e:53:d3:67:eb: e5:d5:2c:c7:d6:b6:f8:a7:c0:60:2c:ee:3d:5c:2c: bf:8e:94:79:c8:00:e4:4f:a8:10:b4:43:dc:04:b4: 04:0c:90:f6:93:c9:8e:81:9c:ed:00:8d:91:62:aa: bc:10:32:54:a0:5e:d1:d3:d2:d8:65:9d:25:7a:7f: b5:cb:66:51:6a:68:e7:43:45:d8:4d:5f:d7:e5:40: ce:2b:d3:1b:b4:20:81:9d:99:43:56:89:0b:96:3b: 42:e8:f7:d8:25:06:f9:92:e6:6b:00:63:db:2d:72: 5f:14:94:8c:47:39:2d:45:c3:58:71:7e:03:e1:73: e5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:00:F1:E8:3D:75:EC:83:E1:AA:21:10:E7:E9:2A:4F:03:23:B7:B0 X509v3 Authority Key Identifier: keyid:03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:28:17:b3:a2:95:09:1e:43:a8:4e:5b:8d:1b:61:9a:56:d3: 46:56:bf:bd:5e:3d:dd:fe:1d:5d:85:d2:08:41:bb:c5:59:ba: d3:ec:38:c3:33:e9:48:4d:08:ff:85:70:0e:7e:4b:b9:65:5f: 81:ab:40:15:86:04:5d:61:3e:e8:47:0c:15:29:08:ef:6c:18: 2a:57:22:42:64:62:65:98:dc:33:d9:c6:cd:c2:f8:51:26:60: 85:73:98:02:45:20:7d:a8:38:cb:a5:99:6b:12:d4:cb:db:4b: 69:4d:ca:d6:ba:4f:fd:ba:21:20:58:76:74:d8:a7:35:95:13: f5:89:4c:af:c3:d9:5e:39:55:74:dd:f5:32:38:2c:7c:0c:4f: d1:8b:cf:bb:23:78:4f:a1:f3:f8:f8:17:77:90:f8:7d:2d:fc: 70:21:6a:5b:53:cf:44:74:bd:05:7a:e5:8a:18:d1:80:f6:9e: 65:b3:f4:79:7b:82:26:26:8b:3f:ae:a6:0c:6b:7a:5b:95:fa: f3:19:90:30:92:f9:1c:52:df:1c:a6:e8:09:12:e0:84:a3:7c: 04:3a:17:4f:15:0c:f6:92:52:f2:a4:58:ce:ef:b2:eb:de:b8: 70:6f:59:2f:4a:a9:bc:46:d7:3a:10:1a:f3:9a:b0:5f:da:b5: eb:94:45:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29gp4K2LtFLJfH3ayzGUFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNTI4M2U2MjM1ZWRiMjVlOGI1NDc0OWI2Mjg1ZjVlM2Vm ODUzNzEwHhcNMjYwMTI1MjEwMTE4WhcNMjYwMTI2MjEwMTE4WjAzMTEwLwYDVQQD EygwNjAwZjFlODNkNzVlYzgzZTFhYTIxMTBlN2U5MmE0ZjAzMjNiN2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyIcKHjX3/7sBGY2aiPPC3LJlcxI hth4Cv65fDuCChgDiHNFoGqMqSWDn5CBSwUvmX4J8lT1bengKGtJXvb+5zLJUTeS Vm3iBvGd87LCdPPMoY5FJILkUl5MYkHMnSEEPOb7BVmpLXm3kV0FkIJQzjcojNzL tIuMBAy+hecBtfIeHlPTZ+vl1SzH1rb4p8BgLO49XCy/jpR5yADkT6gQtEPcBLQE DJD2k8mOgZztAI2RYqq8EDJUoF7R09LYZZ0len+1y2ZRamjnQ0XYTV/X5UDOK9Mb tCCBnZlDVokLljtC6PfYJQb5kuZrAGPbLXJfFJSMRzktRcNYcX4D4XPlNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYA8eg9deyD4aohEOfpKk8DI7ewMB8GA1UdIwQY MBaAFANSg+YjXtsl6LVHSbYoX14++FNxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTFLRDVpTmUyeVhvdFVkSnRpaGZYajc0VTNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMTFmNTctNjQwNC00NDZhLTlmMDgt MTFiOTI5MDY0MDZkLzEvQTFLRDVpTmUyeVhvdFVkSnRpaGZYajc0VTNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zMTFmNTctNjQwNC00NDZhLTlmMDgtMTFiOTI5MDY0MDZk LzEvQTFLRDVpTmUyeVhvdFVkSnRpaGZYajc0VTNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxigXs6KV CR5DqE5bjRthmlbTRla/vV493f4dXYXSCEG7xVm60+w4wzPpSE0I/4VwDn5LuWVf gatAFYYEXWE+6EcMFSkI72wYKlciQmRiZZjcM9nGzcL4USZghXOYAkUgfag4y6WZ axLUy9tLaU3K1rpP/bohIFh2dNinNZUT9YlMr8PZXjlVdN31MjgsfAxP0YvPuyN4 T6Hz+PgXd5D4fS38cCFqW1PPRHS9BXrlihjRgPaeZbP0eXuCJiaLP66mDGt6W5X6 8xmQMJL5HFLfHKboCRLghKN8BDoXTxUM9pJS8qRYzu+y6964cG9ZL0qpvEbXOhAa 85qwX9q165RFzw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:05 2026 by rpki-client