This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft File: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft (raw, json) Hash identifier: WKuSRNJmQQPAKV9HvFDUEQ76395hKvNpVf8NQRCytZk= Subject key identifier: B3:F8:7D:A1:0D:24:30:C8:07:B3:BC:CD:7D:32:9C:9D:3B:A0:AE:C9 Authority key identifier: AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3 Certificate issuer: /CN=ac08da139b56f998be24665db14ad1e156768fc3 Certificate serial: 019BF7D1A6C4C8912D69AF5F597FF683B6F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft Manifest number: 04D7 Signing time: Mon 26 Jan 2026 01:01:10 +0000 Manifest this update: Mon 26 Jan 2026 01:01:10 +0000 Manifest next update: Tue 27 Jan 2026 01:01:10 +0000 Files and hashes: 1: LMFtBS2aexBP5idp4kn9Cblsyrg.roa (hash: SFFRBNG1AmZ+gynl5+RE9vwnB25aOjb/67Op7mUiN24=) 2: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl (hash: oXtfdJoWVu11TdhbHUJuTG5k80YUw1c4E+wBDcRFVHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:a6:c4:c8:91:2d:69:af:5f:59:7f:f6:83:b6:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac08da139b56f998be24665db14ad1e156768fc3 Validity Not Before: Jan 26 01:01:10 2026 GMT Not After : Jan 27 01:01:10 2026 GMT Subject: CN=b3f87da10d2430c807b3bccd7d329c9d3ba0aec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:70:ac:d7:0f:6a:51:cb:8a:01:3c:c1:7a:c9: 96:a0:6c:45:c7:f8:30:d2:4e:e4:a7:df:b0:b8:a9: 4a:37:e6:79:d5:a1:78:a4:e2:98:29:19:22:96:9b: 0e:8a:f4:cf:ed:93:9a:94:83:d3:b2:6c:f4:fc:a6: d0:f2:7a:75:54:ba:1c:d9:a6:46:2f:30:35:4f:75: a5:82:83:69:c8:96:e4:93:05:c3:31:26:28:3e:9d: 28:3d:81:aa:2a:e6:d1:9c:f3:bb:5f:10:fe:ba:63: 11:27:67:86:ff:c8:7b:a5:01:ff:05:b8:b8:ae:16: 7c:01:4f:35:b3:cd:cd:07:eb:bd:32:4a:3f:7a:e0: b7:65:ef:0e:a3:0a:8a:8c:20:da:9f:67:f7:2d:61: 0b:52:a7:66:f4:b9:84:f9:25:55:c1:c2:3b:26:06: 03:be:a4:f0:44:d7:0d:10:25:71:e2:50:17:7b:3d: e0:67:b0:71:19:c7:57:2e:29:57:b7:e0:86:17:f3: ae:f9:14:0f:2b:72:d7:44:df:c7:83:57:24:8f:7d: 63:3d:71:ca:fa:bb:c5:41:a1:c1:3a:de:c0:4e:86: 99:fa:3d:3c:54:ea:d7:5f:b8:a7:70:08:95:16:89: 56:ac:04:df:73:c2:29:a0:d9:f7:32:ff:39:23:fd: cd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F8:7D:A1:0D:24:30:C8:07:B3:BC:CD:7D:32:9C:9D:3B:A0:AE:C9 X509v3 Authority Key Identifier: keyid:AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:89:17:16:0e:90:68:d5:c7:21:e5:f2:cf:ae:da:19:af:44: 09:fe:44:80:b0:49:9f:b0:aa:f1:e0:bd:aa:b3:e3:3e:23:58: 2b:fa:44:24:47:a7:b6:80:77:65:b2:21:82:fd:9e:f4:1e:7a: 9c:70:cc:27:68:ff:75:35:c8:ce:2b:98:ad:b8:31:7a:6e:82: 26:af:3d:1a:46:b9:fb:80:39:36:3a:05:6b:2a:b9:27:97:5c: 22:8b:dc:cf:c7:50:5d:90:f8:99:5b:fe:3a:9b:a5:c4:6d:ff: 22:12:56:52:18:29:14:ba:57:ab:b5:81:d1:1a:c7:de:0b:2b: 18:f2:20:82:99:da:e6:99:30:90:5c:26:28:36:16:ad:cd:31: b6:27:fd:29:77:66:76:7b:15:b0:b3:26:9c:fe:d7:9d:5b:96: 90:b1:6c:b0:6e:ae:f8:24:f0:af:84:fb:fb:c4:ba:37:6f:d1: aa:89:5c:d1:57:60:be:5a:5e:8a:78:8e:b4:85:55:b9:ce:8b: 8f:41:74:f1:04:e1:86:25:09:39:e7:ac:07:bb:e3:49:71:2e: b4:9c:f7:62:04:c6:0a:9f:c9:cf:aa:00:c8:8c:96:3e:7e:09: 27:fb:a0:c8:5a:df:c6:bd:29:9d:a3:ac:52:aa:58:71:5d:4f: 8d:ae:00:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30abEyJEtaa9fWX/2g7b4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMDhkYTEzOWI1NmY5OThiZTI0NjY1ZGIxNGFkMWUxNTY3 NjhmYzMwHhcNMjYwMTI2MDEwMTEwWhcNMjYwMTI3MDEwMTEwWjAzMTEwLwYDVQQD EyhiM2Y4N2RhMTBkMjQzMGM4MDdiM2JjY2Q3ZDMyOWM5ZDNiYTBhZWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3Cs1w9qUcuKATzBesmWoGxFx/gw 0k7kp9+wuKlKN+Z51aF4pOKYKRkilpsOivTP7ZOalIPTsmz0/KbQ8np1VLoc2aZG LzA1T3WlgoNpyJbkkwXDMSYoPp0oPYGqKubRnPO7XxD+umMRJ2eG/8h7pQH/Bbi4 rhZ8AU81s83NB+u9Mko/euC3Ze8OowqKjCDan2f3LWELUqdm9LmE+SVVwcI7JgYD vqTwRNcNECVx4lAXez3gZ7BxGcdXLilXt+CGF/Ou+RQPK3LXRN/Hg1ckj31jPXHK +rvFQaHBOt7AToaZ+j08VOrXX7incAiVFolWrATfc8IpoNn3Mv85I/3NbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLP4faENJDDIB7O8zX0ynJ07oK7JMB8GA1UdIwQY MBaAFKwI2hObVvmYviRmXbFK0eFWdo/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckFqYUU1dFctWmktSkdaZHNVclI0VloyajhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zZTM1ZWUtZDg4Zi00YzFmLWI0Mzct Njk5Y2Y3YjA5NTkwLzEvckFqYUU1dFctWmktSkdaZHNVclI0VloyajhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zZTM1ZWUtZDg4Zi00YzFmLWI0MzctNjk5Y2Y3YjA5NTkw LzEvckFqYUU1dFctWmktSkdaZHNVclI0VloyajhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABokXFg6Q aNXHIeXyz67aGa9ECf5EgLBJn7Cq8eC9qrPjPiNYK/pEJEentoB3ZbIhgv2e9B56 nHDMJ2j/dTXIziuYrbgxem6CJq89Gka5+4A5NjoFayq5J5dcIovcz8dQXZD4mVv+ OpulxG3/IhJWUhgpFLpXq7WB0RrH3gsrGPIggpna5pkwkFwmKDYWrc0xtif9KXdm dnsVsLMmnP7XnVuWkLFssG6u+CTwr4T7+8S6N2/Rqolc0VdgvlpeiniOtIVVuc6L j0F08QThhiUJOeesB7vjSXEutJz3YgTGCp/Jz6oAyIyWPn4JJ/ugyFrfxr0pnaOs UqpYcV1Pja4AYg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:17 2026 by rpki-client