This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json) Hash identifier: JpxoNnKVfaxvhKu7lA/M7+ZJG7j5hw7XczpckulxKqk= Subject key identifier: 9C:35:CF:DD:C2:06:DD:6D:20:DB:22:65:ED:A5:22:04:8C:C5:85:1D Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8 Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8 Certificate serial: 019BF3192AD5BE6017653B6D65C90DAE9415 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft Manifest number: 0E88 Signing time: Sun 25 Jan 2026 03:01:11 +0000 Manifest this update: Sun 25 Jan 2026 03:01:11 +0000 Manifest next update: Mon 26 Jan 2026 03:01:11 +0000 Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: AbJ4KhTzTw4coHKhP9Tec8iyLQH1/mpWETrtio5EuH0=) 2: BNM6KeFql-Ydq8vGXlt0w78-LM4.roa (hash: oiMAtbZ/3lDs7unsOpMUR0rJkCLWv1SgFkYJBCnCeLQ=) 3: tBScmKuEM3CY-0j6UOJC8exaQRY.roa (hash: 9gJqYwprFzWOCPewHOcv/LCR44zjyS1oQM6ha0bacY8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:19:2a:d5:be:60:17:65:3b:6d:65:c9:0d:ae:94:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8 Validity Not Before: Jan 25 03:01:11 2026 GMT Not After : Jan 26 03:01:11 2026 GMT Subject: CN=9c35cfddc206dd6d20db2265eda522048cc5851d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:79:d8:70:02:7c:66:49:e7:01:ff:c0:6c:fc: 7b:3e:7c:31:1f:55:2e:d6:33:cb:ba:7f:87:fe:f4: 66:42:dc:3e:c3:5c:e7:61:b2:8a:32:d8:d6:0f:32: 92:03:c5:b9:4a:ef:62:1f:5d:e3:45:5b:6b:13:7e: 00:05:69:4e:97:ef:0e:c9:8d:9b:40:91:48:7d:46: ba:a0:84:d1:7f:1a:53:55:c0:49:6d:4a:2b:b6:6f: 6d:c4:f6:e9:86:6f:a6:c2:f7:8f:9e:47:e2:48:6e: 61:47:0b:e7:84:84:94:a5:2e:b1:84:af:a8:70:d1: 40:9e:a4:1c:d0:1d:34:36:15:42:a6:a4:7f:7a:5c: 2a:c4:10:1b:66:8b:37:29:45:de:65:bc:ec:5c:06: 66:97:8b:ca:76:39:ca:73:2d:44:16:d7:0e:fb:2f: ff:06:d6:7d:2e:cd:24:e4:ac:4c:3f:af:07:c3:44: 5d:71:5a:6c:72:ab:51:20:88:ac:d8:63:9b:11:b9: 41:59:38:53:52:a8:96:b0:5c:50:93:35:76:2d:a1: 53:96:1e:6b:7f:f3:a7:55:51:ba:1d:5e:d7:14:26: 12:c8:dd:d3:5f:e5:2f:d5:4c:24:80:44:a1:59:f5: d4:b2:1a:ec:c5:2b:a7:5c:3d:ce:a2:8f:63:4d:44: f5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:35:CF:DD:C2:06:DD:6D:20:DB:22:65:ED:A5:22:04:8C:C5:85:1D X509v3 Authority Key Identifier: keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:9d:ba:ec:3f:69:ec:b9:c8:1d:dc:1f:e8:6f:f7:ba:e6:64: 05:55:8e:fa:cd:2c:e5:eb:8b:f8:3a:cf:de:ec:0d:c1:44:a1: 9e:38:47:cd:33:6c:62:8e:9c:94:24:cd:48:94:da:72:e4:9f: e9:a7:60:af:8a:4d:ac:74:6d:58:f9:9e:bc:02:d7:8e:d1:4a: 7a:e9:39:49:78:f5:4c:72:50:54:e2:2b:4f:0f:89:ce:3e:3d: 8a:d3:b4:23:04:58:5c:47:f2:f6:65:9f:e4:2c:41:93:d0:3a: 19:61:4c:bb:a9:e2:17:f0:64:8e:b5:54:df:c6:a9:77:aa:03: 45:60:4a:12:c9:c2:4d:cb:6f:52:52:03:b5:aa:41:7c:8c:97: 47:ed:4d:c9:7d:17:f8:50:9a:55:40:ec:ca:af:ff:09:b2:51: 3b:aa:9d:84:0e:04:8c:2e:71:46:2e:6d:a9:12:75:93:44:2a: 1d:86:7b:bf:b3:0f:e5:8a:c4:a2:cc:89:9f:46:9c:cd:a9:b6: 9b:2d:fe:5b:0a:ed:ea:ba:77:68:f0:a2:5c:21:78:2d:41:7c: bc:2a:f4:93:1f:ed:5e:de:9d:42:49:d9:0d:f3:fd:69:ab:c6: 2c:3b:e0:c8:be:d9:af:0b:7a:8a:5a:8d:f8:8f:63:7e:49:9f: 01:3f:4e:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGSrVvmAXZTttZckNrpQVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzODRlODhmYjc5YTM3NzZjYjA1ODNlMmI2N2EwYmVjNmRm YzY4YjgwHhcNMjYwMTI1MDMwMTExWhcNMjYwMTI2MDMwMTExWjAzMTEwLwYDVQQD Eyg5YzM1Y2ZkZGMyMDZkZDZkMjBkYjIyNjVlZGE1MjIwNDhjYzU4NTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnnYcAJ8ZknnAf/AbPx7PnwxH1Uu 1jPLun+H/vRmQtw+w1znYbKKMtjWDzKSA8W5Su9iH13jRVtrE34ABWlOl+8OyY2b QJFIfUa6oITRfxpTVcBJbUortm9txPbphm+mwvePnkfiSG5hRwvnhISUpS6xhK+o cNFAnqQc0B00NhVCpqR/elwqxBAbZos3KUXeZbzsXAZml4vKdjnKcy1EFtcO+y// BtZ9Ls0k5KxMP68Hw0RdcVpscqtRIIis2GObEblBWThTUqiWsFxQkzV2LaFTlh5r f/OnVVG6HV7XFCYSyN3TX+Uv1UwkgEShWfXUshrsxSunXD3Ooo9jTUT1XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJw1z93CBt1tINsiZe2lIgSMxYUdMB8GA1UdIwQY MBaAFAOE6I+3mjd2ywWD4rZ6C+xt/Gi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83YTAxNTEtY2UyMC00OGU2LTkwNTMt MzMzYTM4NGQ0MTdkLzEvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS83YTAxNTEtY2UyMC00OGU2LTkwNTMtMzMzYTM4NGQ0MTdk LzEvQTRUb2o3ZWFOM2JMQllQaXRub0w3RzM4YUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANp267D9p 7LnIHdwf6G/3uuZkBVWO+s0s5euL+DrP3uwNwUShnjhHzTNsYo6clCTNSJTacuSf 6adgr4pNrHRtWPmevALXjtFKeuk5SXj1THJQVOIrTw+Jzj49itO0IwRYXEfy9mWf 5CxBk9A6GWFMu6niF/BkjrVU38apd6oDRWBKEsnCTctvUlIDtapBfIyXR+1NyX0X +FCaVUDsyq//CbJRO6qdhA4EjC5xRi5tqRJ1k0QqHYZ7v7MP5YrEosyJn0aczam2 my3+Wwrt6rp3aPCiXCF4LUF8vCr0kx/tXt6dQknZDfP9aavGLDvgyL7Zrwt6ilqN +I9jfkmfAT9OwA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:33 2026 by rpki-client