This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft File: RKiGN0mLGI_AvOrgu_BoF2GknUs.mft (raw, json) Hash identifier: GVq6I7OqWhaWF0NpuTGqcCK0nSOXo3e9IbdGBrbWO4w= Subject key identifier: 68:B0:55:7F:50:A5:12:4A:E9:AF:A8:49:04:E4:37:FF:E5:76:6E:EA Authority key identifier: 44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B Certificate issuer: /CN=44a88637498b188fc0bceae0bbf0681761a49d4b Certificate serial: 019BF4D07DC33A654DD6C02C7409F6BD9991 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft Manifest number: 0F3A Signing time: Sun 25 Jan 2026 11:01:02 +0000 Manifest this update: Sun 25 Jan 2026 11:01:02 +0000 Manifest next update: Mon 26 Jan 2026 11:01:02 +0000 Files and hashes: 1: IlmmCphtbxCSj-g8MGUHlc5fMJI.roa (hash: ogImPjEXfsHsVXyMK+YnBJnOYbD+aI/1HsAtRVA/WoY=) 2: RKiGN0mLGI_AvOrgu_BoF2GknUs.crl (hash: gU6ZOfqWCV0RHgjneWo1152P6h5n8OvKuPHUS+ZKWLQ=) 3: hdC4Kn8NS6Sap65oEbc6C4-8rkI.roa (hash: shJCpeavm5lRb/pX8j4NjPSwHatzb8Ath7/zQC9o4/4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:7d:c3:3a:65:4d:d6:c0:2c:74:09:f6:bd:99:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44a88637498b188fc0bceae0bbf0681761a49d4b Validity Not Before: Jan 25 11:01:02 2026 GMT Not After : Jan 26 11:01:02 2026 GMT Subject: CN=68b0557f50a5124ae9afa84904e437ffe5766eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a1:96:42:83:17:3c:f0:2f:d3:68:8f:f6:91: b1:84:35:ac:52:ff:52:7a:90:5f:4c:32:d0:b2:a7: 29:8d:c0:d1:98:32:5c:98:1c:9e:12:d1:8a:0a:f5: dd:c7:0c:a2:b2:de:3d:74:aa:2b:52:15:9a:34:74: 4b:b3:90:6b:4c:e7:82:d0:9d:18:8f:00:97:cd:16: f7:a3:43:74:14:00:90:3a:7e:0d:c5:05:87:e7:cf: 89:14:89:1b:cd:d8:ac:1d:ab:74:73:38:b6:b7:d2: 2d:65:67:7d:91:47:f4:55:71:cc:d1:6a:c5:41:41: af:29:7a:d7:5e:3d:d7:8e:2c:c3:88:ca:c6:1c:fe: 11:1c:40:91:d0:3b:76:68:60:e4:b9:35:d8:00:02: 30:e4:26:ca:24:ce:68:bd:ae:2d:dc:64:6f:8a:23: f0:e5:23:56:61:58:67:fb:35:d4:9d:06:80:55:35: 14:01:0b:cd:82:68:b1:e2:76:d1:7d:ba:15:51:f3: bd:de:75:1a:69:4d:3e:bb:f0:2a:3f:e5:8b:02:93: b8:22:7a:c5:8d:a1:15:bc:9a:7c:7f:06:65:3e:5c: 6a:d1:30:f5:5a:b9:bb:52:a3:bf:93:4a:41:94:66: a2:4b:82:3e:1d:f8:23:04:6b:cb:2d:17:7a:7d:8e: ca:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B0:55:7F:50:A5:12:4A:E9:AF:A8:49:04:E4:37:FF:E5:76:6E:EA X509v3 Authority Key Identifier: keyid:44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:33:2f:d1:b1:72:72:9d:7c:5c:83:e1:09:cc:0a:1b:f1:20: 63:24:fd:38:f0:d2:6a:f1:1c:2b:aa:7e:02:b1:0a:99:90:87: 24:0d:ea:f8:1c:f8:a7:c3:53:b8:89:69:87:e2:30:99:e5:95: 5d:c2:7b:f0:24:24:05:e6:2e:82:55:83:d5:38:d8:64:59:54: 3a:ac:b6:9b:74:4c:80:55:9c:e3:eb:27:ca:8d:be:d9:4a:b7: 6d:4f:00:8e:46:35:e6:6b:09:59:4e:94:66:8b:5d:b9:4a:8a: 72:d9:6b:0b:95:64:bc:d7:f4:9a:e9:57:12:a3:39:fe:91:1f: 21:9e:fc:72:e1:55:ac:80:0c:93:71:96:30:88:cd:20:7b:87: f1:22:dd:a6:29:32:61:6e:a6:b8:90:bf:f3:3f:24:c2:a5:b3: 97:5c:88:2d:55:4d:60:cc:d6:d9:89:60:73:5d:ab:3c:6d:a0: fd:b6:cc:9f:df:2c:a7:1c:dd:13:0e:a0:97:de:df:6b:67:00: c2:40:83:9b:61:ff:42:e4:ed:5f:90:ae:a4:bd:2d:61:56:3f: 15:a4:8e:d4:bb:1f:63:d3:e4:02:ed:86:3f:25:07:a2:36:fc: 9e:ea:d2:67:00:b0:71:29:fb:58:e7:39:ab:85:ef:b2:eb:5b: eb:df:df:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00H3DOmVN1sAsdAn2vZmRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YTg4NjM3NDk4YjE4OGZjMGJjZWFlMGJiZjA2ODE3NjFh NDlkNGIwHhcNMjYwMTI1MTEwMTAyWhcNMjYwMTI2MTEwMTAyWjAzMTEwLwYDVQQD Eyg2OGIwNTU3ZjUwYTUxMjRhZTlhZmE4NDkwNGU0MzdmZmU1NzY2ZWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqGWQoMXPPAv02iP9pGxhDWsUv9S epBfTDLQsqcpjcDRmDJcmByeEtGKCvXdxwyist49dKorUhWaNHRLs5BrTOeC0J0Y jwCXzRb3o0N0FACQOn4NxQWH58+JFIkbzdisHat0czi2t9ItZWd9kUf0VXHM0WrF QUGvKXrXXj3XjizDiMrGHP4RHECR0Dt2aGDkuTXYAAIw5CbKJM5ova4t3GRviiPw 5SNWYVhn+zXUnQaAVTUUAQvNgmix4nbRfboVUfO93nUaaU0+u/AqP+WLApO4InrF jaEVvJp8fwZlPlxq0TD1Wrm7UqO/k0pBlGaiS4I+HfgjBGvLLRd6fY7KVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiwVX9QpRJK6a+oSQTkN//ldm7qMB8GA1UdIwQY MBaAFESohjdJixiPwLzq4LvwaBdhpJ1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUktpR04wbUxHSV9Bdk9yZ3VfQm9GMkdrblVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS81YmU4MGItMzM4Mi00NDQ4LWExY2Mt ZGNhMDQyNzBiOWQ1LzEvUktpR04wbUxHSV9Bdk9yZ3VfQm9GMkdrblVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS81YmU4MGItMzM4Mi00NDQ4LWExY2MtZGNhMDQyNzBiOWQ1 LzEvUktpR04wbUxHSV9Bdk9yZ3VfQm9GMkdrblVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDMv0bFy cp18XIPhCcwKG/EgYyT9OPDSavEcK6p+ArEKmZCHJA3q+Bz4p8NTuIlph+IwmeWV XcJ78CQkBeYuglWD1TjYZFlUOqy2m3RMgFWc4+snyo2+2Uq3bU8AjkY15msJWU6U ZotduUqKctlrC5VkvNf0mulXEqM5/pEfIZ78cuFVrIAMk3GWMIjNIHuH8SLdpiky YW6muJC/8z8kwqWzl1yILVVNYMzW2Ylgc12rPG2g/bbMn98spxzdEw6gl97fa2cA wkCDm2H/QuTtX5CupL0tYVY/FaSO1LsfY9PkAu2GPyUHojb8nurSZwCwcSn7WOc5 q4Xvsutb69/fog== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:14 2026 by rpki-client