This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft File: p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft (raw, json) Hash identifier: OIGG0w/j0Tq0OQrxJp1uVWHEiNDiyM2TPSElPSfbZ/Y= Subject key identifier: 21:36:7C:2F:58:85:4A:98:32:21:42:A4:C1:C2:18:55:19:80:04:C7 Authority key identifier: A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47 Certificate issuer: /CN=a750263823402b83c11c5014d32666dcab111447 Certificate serial: 019BF5E34FCE76CB747EA7166F98C9EF7650 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft Manifest number: 028B Signing time: Sun 25 Jan 2026 16:01:13 +0000 Manifest this update: Sun 25 Jan 2026 16:01:13 +0000 Manifest next update: Mon 26 Jan 2026 16:01:13 +0000 Files and hashes: 1: P-DBjLRAhGCsnhP5dVp_tFMnlGE.roa (hash: pkN8TYGuUVnxVvKzbBZ3PyoTyNpT5OufkpOv4OKwQDY=) 2: p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl (hash: RIu+IhWDMcEijbgKlT5h80pOSxwwIjzOCMUiIRt5z5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:4f:ce:76:cb:74:7e:a7:16:6f:98:c9:ef:76:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a750263823402b83c11c5014d32666dcab111447 Validity Not Before: Jan 25 16:01:13 2026 GMT Not After : Jan 26 16:01:13 2026 GMT Subject: CN=21367c2f58854a98322142a4c1c21855198004c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fa:16:1b:66:0a:dd:fc:3b:c3:bd:b4:c1:03: 7d:f9:ce:cf:3f:0c:28:80:68:28:14:0a:21:09:b6: 0f:0f:7b:22:a9:47:e2:f6:a0:c5:55:0c:90:d7:3c: 99:96:15:d2:f4:09:d7:b2:c0:8c:82:c6:4f:b2:0e: cd:78:15:29:44:82:db:bf:3c:bc:c3:34:e7:34:74: a0:57:ae:12:71:ca:52:31:12:04:e5:a2:be:bc:5d: ac:be:83:91:80:95:ab:0d:7b:e5:d1:23:69:f4:3a: 2d:64:6c:5b:65:24:5e:11:84:fa:30:79:15:4d:1f: a9:93:7a:fa:eb:81:32:fe:a2:ed:3d:2b:b5:7e:a7: e1:a4:6d:42:02:18:01:4f:81:15:64:d1:9b:4d:ce: b2:38:c5:39:6f:a1:6b:0f:a0:82:24:7b:3e:17:65: 5f:7b:58:e1:0d:4f:27:0d:fa:4f:e7:e5:6c:4d:91: d4:09:9c:da:50:3e:f7:73:30:74:33:8f:87:f7:7e: 99:05:2a:81:de:64:23:0e:77:c0:84:b1:86:c5:45: 90:f7:54:43:02:e1:d2:09:63:b1:4d:57:86:ff:25: de:b7:aa:7f:da:20:83:df:8a:60:66:74:5a:43:34: 53:f4:8a:ad:8a:c4:74:dd:98:1c:0e:83:6a:b4:af: 16:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:36:7C:2F:58:85:4A:98:32:21:42:A4:C1:C2:18:55:19:80:04:C7 X509v3 Authority Key Identifier: keyid:A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:75:a3:b5:8f:35:de:dc:64:a8:19:81:9e:4d:2a:10:53:8b: 4f:26:45:ab:4e:c2:27:42:3e:86:e3:ea:29:c3:f3:ff:35:ca: d4:62:bc:42:e5:a8:95:2e:1a:52:3b:fd:4d:92:e9:36:b3:c4: de:b2:7d:6a:f5:dd:44:65:98:fc:d0:01:48:d3:2f:c2:ae:c0: be:ad:3d:aa:5d:39:b5:26:71:cf:85:4d:c0:d3:10:5a:2d:81: ed:23:23:65:70:e7:9b:dd:b3:65:28:4a:a3:a2:1f:09:f9:e2: 0d:86:ea:c6:96:e8:00:d9:cb:2e:4a:9e:52:fb:af:75:ee:fd: 71:ca:69:ca:11:03:f6:14:fb:03:5f:a3:d9:59:f7:df:17:01: 9f:92:ce:95:bc:07:6d:5d:92:c9:43:a2:7f:d8:e2:39:ed:39: 83:a3:84:06:61:6f:02:ae:c0:bb:c7:48:b6:c8:78:b4:18:8b: 80:17:97:8f:e7:d4:96:c5:b7:79:bc:80:0c:51:5a:9f:3f:fe: 67:8e:bb:83:61:37:b7:76:05:d7:b9:2e:3b:04:8a:44:3f:9f: 0d:33:dd:5a:7b:a3:36:37:23:2f:7b:04:91:70:4e:58:7d:47: 87:66:6a:ed:26:d9:cd:0d:90:3e:fa:aa:35:97:1c:2b:5e:61: 0b:6b:5d:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv140/Odst0fqcWb5jJ73ZQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NTAyNjM4MjM0MDJiODNjMTFjNTAxNGQzMjY2NmRjYWIx MTE0NDcwHhcNMjYwMTI1MTYwMTEzWhcNMjYwMTI2MTYwMTEzWjAzMTEwLwYDVQQD EygyMTM2N2MyZjU4ODU0YTk4MzIyMTQyYTRjMWMyMTg1NTE5ODAwNGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvoWG2YK3fw7w720wQN9+c7PPwwo gGgoFAohCbYPD3siqUfi9qDFVQyQ1zyZlhXS9AnXssCMgsZPsg7NeBUpRILbvzy8 wzTnNHSgV64SccpSMRIE5aK+vF2svoORgJWrDXvl0SNp9DotZGxbZSReEYT6MHkV TR+pk3r664Ey/qLtPSu1fqfhpG1CAhgBT4EVZNGbTc6yOMU5b6FrD6CCJHs+F2Vf e1jhDU8nDfpP5+VsTZHUCZzaUD73czB0M4+H936ZBSqB3mQjDnfAhLGGxUWQ91RD AuHSCWOxTVeG/yXet6p/2iCD34pgZnRaQzRT9IqtisR03ZgcDoNqtK8WEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCE2fC9YhUqYMiFCpMHCGFUZgATHMB8GA1UdIwQY MBaAFKdQJjgjQCuDwRxQFNMmZtyrERRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDFBbU9DTkFLNFBCSEZBVTB5Wm0zS3NSRkVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9jY2I0ZmQtZmE2Ny00OGQ2LWE4ZmMt OWEyOWYxZjQwODFjLzEvcDFBbU9DTkFLNFBCSEZBVTB5Wm0zS3NSRkVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9jY2I0ZmQtZmE2Ny00OGQ2LWE4ZmMtOWEyOWYxZjQwODFj LzEvcDFBbU9DTkFLNFBCSEZBVTB5Wm0zS3NSRkVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHWjtY81 3txkqBmBnk0qEFOLTyZFq07CJ0I+huPqKcPz/zXK1GK8QuWolS4aUjv9TZLpNrPE 3rJ9avXdRGWY/NABSNMvwq7Avq09ql05tSZxz4VNwNMQWi2B7SMjZXDnm92zZShK o6IfCfniDYbqxpboANnLLkqeUvuvde79ccppyhED9hT7A1+j2Vn33xcBn5LOlbwH bV2SyUOif9jiOe05g6OEBmFvAq7Au8dItsh4tBiLgBeXj+fUlsW3ebyADFFanz/+ Z467g2E3t3YF17kuOwSKRD+fDTPdWnujNjcjL3sEkXBOWH1Hh2Zq7SbZzQ2QPvqq NZccK15hC2tdPQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:45:05 2026 by rpki-client