This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft File: alg23em52u81qKf3TWMm9rQtp00.mft (raw, json) Hash identifier: XC4JH30fWMw+j9Cm/d6s/29/Ovi8BdOFM6EkRKGADSQ= Subject key identifier: 3A:69:03:4A:E5:36:1B:09:D8:1A:DB:D9:67:CC:B4:82:B2:D3:44:73 Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Certificate serial: 019BF49995C5BDC71BC38BEFD32F11B6C166 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft Manifest number: 0EA0 Signing time: Sun 25 Jan 2026 10:01:04 +0000 Manifest this update: Sun 25 Jan 2026 10:01:04 +0000 Manifest next update: Mon 26 Jan 2026 10:01:04 +0000 Files and hashes: 1: 1-1nP27bm3gAzWksm3Aa1woQLmTg.roa (hash: 4vMUg/+4aVf6LxIWRfZOUaawIS1qe+jvPE0nds6yR2Q=) 2: 1mrNfoe_DrEnoFcdS9vvvmUHCy4.roa (hash: QkanHcHHq6Wt9NiRP2L21ngt1ytK/u1yXZ42ZWeZwX8=) 3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=) 4: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=) 5: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=) 6: alg23em52u81qKf3TWMm9rQtp00.crl (hash: RT9pH3MfgP9cb2Hx+oVFWhIBnAPaWlDROXwttDdfZYE=) 7: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=) 8: kEoI4Ub4_OLWE-S0RHTXasx1pZc.roa (hash: bg1mLEhoNQt0f/1o3/ZGweSMPbQj7CpwZeH2NuHMIpw=) 9: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=) 10: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=) 11: ydHPynA-WZZzBfRpPoH9bBYJVFI.roa (hash: zUJBbBQ6fg/i/CM/EnQ7Y0w1oc/UoPQfcnnHrN+aTOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:95:c5:bd:c7:1b:c3:8b:ef:d3:2f:11:b6:c1:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Validity Not Before: Jan 25 10:01:04 2026 GMT Not After : Jan 26 10:01:04 2026 GMT Subject: CN=3a69034ae5361b09d81adbd967ccb482b2d34473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:10:b3:0a:45:73:cb:2e:b7:54:94:7f:3e:17: 38:b7:4a:3d:46:19:0c:c9:bc:a4:e2:0c:8e:01:67: 8d:74:a8:51:95:bc:b9:fb:56:2a:15:c7:a4:9e:ea: 81:49:ed:a7:34:21:a2:7b:76:9e:01:ce:93:b6:8b: 73:f0:83:8d:36:05:3e:76:f2:55:64:ff:a8:bf:27: 0f:e8:56:79:dc:ad:ad:8d:44:0b:4d:15:38:27:2b: 74:bf:36:1e:05:4a:ed:3b:f1:be:88:16:35:2d:fc: 9c:f9:e5:1f:95:11:57:ae:93:d2:42:00:43:40:af: 60:58:b9:af:81:b7:41:7d:98:a4:4f:fe:6d:b6:97: 88:43:52:a0:4f:0a:08:36:56:9a:db:f8:01:ec:6f: 2a:86:67:81:51:f2:d1:7e:54:9e:e2:7f:c8:32:0b: b6:fd:56:95:5a:3b:38:04:a2:ec:21:ef:d2:4b:5e: dd:d2:9e:fa:8d:9b:80:9b:1b:1b:5f:ae:c3:7f:7a: 10:23:2f:14:23:ae:1c:4c:12:62:36:81:dc:45:11: 0e:72:ce:68:1f:e2:6a:d4:40:81:40:bc:09:df:df: 66:2c:3f:e3:fd:72:79:23:fc:f3:05:90:1d:ca:2e: 1b:73:fd:ab:02:98:15:23:b7:0a:f4:80:48:3a:58: 43:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:69:03:4A:E5:36:1B:09:D8:1A:DB:D9:67:CC:B4:82:B2:D3:44:73 X509v3 Authority Key Identifier: keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:e7:62:bb:fc:86:4f:e3:09:64:90:93:cd:42:63:b4:93:b5: 6d:bc:4d:fd:cb:4d:a9:94:89:90:1a:0a:76:5d:34:fa:a2:c7: ff:42:24:88:a3:1a:1e:84:16:9a:56:5b:02:82:6c:47:5b:54: 2c:bd:92:2d:fe:1e:83:db:7a:9f:07:7e:18:39:83:aa:63:af: aa:5e:83:cd:32:07:5c:61:e5:73:f8:fa:3e:49:9d:66:fd:10: 61:7e:75:9c:c8:57:8c:e4:e4:ad:a6:f5:95:c0:d5:af:63:dd: 4c:ef:4a:03:fb:c5:08:5b:26:37:75:57:a4:7e:d2:98:81:4d: 84:ba:5f:09:87:d6:4f:dc:ad:cd:4c:06:a2:84:2f:14:35:97: b6:4e:5f:3f:61:67:7f:98:ee:c4:5d:eb:8b:81:36:9e:40:f4: cf:c8:f0:03:73:9e:38:16:6e:98:ff:3b:e9:6a:3d:3d:6c:3d: 68:19:8c:8d:cb:21:44:d6:e8:6b:47:5f:a0:d2:43:0f:3c:81: 1b:7b:9e:95:c8:95:05:fb:44:5c:d6:01:f9:bf:e4:01:14:5b: 3a:8c:ec:ef:38:e8:ec:b9:13:0d:90:42:a8:50:49:69:a5:c3: 74:4f:33:68:d3:a0:f0:99:31:5b:4b:90:3f:d2:50:60:40:6b: b2:b1:d6:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mZXFvccbw4vv0y8RtsFmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy ZGE3NGQwHhcNMjYwMTI1MTAwMTA0WhcNMjYwMTI2MTAwMTA0WjAzMTEwLwYDVQQD EygzYTY5MDM0YWU1MzYxYjA5ZDgxYWRiZDk2N2NjYjQ4MmIyZDM0NDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RCzCkVzyy63VJR/Phc4t0o9RhkM ybyk4gyOAWeNdKhRlby5+1YqFceknuqBSe2nNCGie3aeAc6Ttotz8IONNgU+dvJV ZP+ovycP6FZ53K2tjUQLTRU4Jyt0vzYeBUrtO/G+iBY1Lfyc+eUflRFXrpPSQgBD QK9gWLmvgbdBfZikT/5ttpeIQ1KgTwoINlaa2/gB7G8qhmeBUfLRflSe4n/IMgu2 /VaVWjs4BKLsIe/SS17d0p76jZuAmxsbX67Df3oQIy8UI64cTBJiNoHcRREOcs5o H+Jq1ECBQLwJ399mLD/j/XJ5I/zzBZAdyi4bc/2rApgVI7cK9IBIOlhDvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDppA0rlNhsJ2Brb2WfMtIKy00RzMB8GA1UdIwQY MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt YzE5OTQyNzM3ZTZkLzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArudiu/yG T+MJZJCTzUJjtJO1bbxN/ctNqZSJkBoKdl00+qLH/0IkiKMaHoQWmlZbAoJsR1tU LL2SLf4eg9t6nwd+GDmDqmOvql6DzTIHXGHlc/j6PkmdZv0QYX51nMhXjOTkrab1 lcDVr2PdTO9KA/vFCFsmN3VXpH7SmIFNhLpfCYfWT9ytzUwGooQvFDWXtk5fP2Fn f5juxF3ri4E2nkD0z8jwA3OeOBZumP876Wo9PWw9aBmMjcshRNboa0dfoNJDDzyB G3uelciVBftEXNYB+b/kARRbOozs7zjo7LkTDZBCqFBJaaXDdE8zaNOg8JkxW0uQ P9JQYEBrsrHWmw== -----END CERTIFICATE-----Generated at Sun Jan 25 15:23:47 2026 by rpki-client