This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft File: rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft (raw, json) Hash identifier: K5EMOmakAyeMaq1okUnig0neACtvMvzorGyUcoWI73g= Subject key identifier: AD:98:55:BA:8D:85:33:33:AC:DC:26:17:CF:B5:3E:32:37:8F:A3:F4 Authority key identifier: AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A Certificate issuer: /CN=acb00ed62beef3070a136dd9845fd26e21fd261a Certificate serial: 019BF83FB4FFDED3E34460A19AE8BDA9A6A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 03:01:23 +0000 Manifest this update: Mon 26 Jan 2026 03:01:23 +0000 Manifest next update: Tue 27 Jan 2026 03:01:23 +0000 Files and hashes: 1: 2dRtK5SgykkBJukn17Yq5DPzVc0.roa (hash: wUS6ehBTRJETqX2oU/1L/6oJii+BNdsZeKhz7Ba1e6w=) 2: rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl (hash: +k8Zk20LIgrlxfiemD2AaHkXMr6bTLKVyeh0Y2lh1Fs=) 3: u0GdgN-zNrCqYGut-a35qKNwzjs.asa (hash: IwKaqB0Dryf2gZIxlt71CTyt+DtstV+wXUxfkXeZLX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:b4:ff:de:d3:e3:44:60:a1:9a:e8:bd:a9:a6:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acb00ed62beef3070a136dd9845fd26e21fd261a Validity Not Before: Jan 26 03:01:23 2026 GMT Not After : Jan 27 03:01:23 2026 GMT Subject: CN=ad9855ba8d853333acdc2617cfb53e32378fa3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:93:89:f5:09:35:c5:f2:1b:98:82:05:e0:c4: d6:dc:65:86:19:f1:80:b6:b5:da:d0:63:8e:57:12: 5b:0c:c4:d1:57:fb:c3:85:96:97:7e:60:8a:ba:5c: 41:4e:51:d3:f6:29:bb:38:f5:63:4a:f9:3b:94:cb: 77:8f:af:d6:5d:47:8f:43:7b:16:48:a8:14:c6:85: 90:04:1b:b0:4c:03:df:7f:f7:b4:9a:d6:25:68:2d: 41:91:98:99:e7:f8:f8:86:89:a7:50:85:3d:13:d5: c6:c6:22:e2:d9:58:0e:a2:5e:e5:27:4c:b3:cd:46: a7:8e:ca:0b:02:23:58:d3:74:68:ee:69:53:5f:4e: 25:b9:43:50:6d:2e:76:43:21:3b:ab:6c:31:05:eb: a6:35:c0:71:29:6d:8c:62:af:71:1d:20:e4:07:26: 08:7c:c4:56:49:51:93:7b:ee:a7:9b:50:79:c0:d6: 3e:d8:b4:e7:e5:aa:0a:76:c7:2d:51:37:65:82:51: 6d:15:fa:52:71:b3:f0:2f:b1:00:45:f9:4a:af:ca: ff:77:bc:d1:21:5e:8c:87:90:94:e5:3b:f2:62:cc: 51:dc:51:57:e4:47:45:85:1c:fb:08:b9:06:ad:00: 2c:f8:20:17:5b:10:62:50:eb:a7:05:b3:20:fb:46: ef:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:98:55:BA:8D:85:33:33:AC:DC:26:17:CF:B5:3E:32:37:8F:A3:F4 X509v3 Authority Key Identifier: keyid:AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ed:2d:ff:8f:d0:88:a5:09:41:d2:9f:8b:3f:07:8a:71:7d: 14:9f:93:1d:26:ec:c6:47:44:c9:e3:23:32:8d:58:05:ac:b3: 24:3a:16:82:bb:23:2d:3f:61:91:cf:f0:41:23:ed:bf:a0:42: b1:90:c5:ea:c1:55:8c:f2:fd:a9:8b:ae:db:be:d9:3b:7b:d1: b2:5e:8a:21:26:ce:e9:ff:20:7a:6c:ad:db:17:46:f7:45:28: cf:1f:ed:ab:15:d6:aa:21:89:3c:65:76:15:b0:7c:23:ca:34: fd:21:7c:b6:a8:b2:10:8c:ac:3e:cf:58:d2:7b:8a:84:33:3c: 4f:7d:ae:c9:bb:66:84:c6:68:0c:e4:c3:e1:16:3c:f6:32:b6: 6a:dd:c7:81:43:00:ca:5f:b6:37:17:8b:8c:90:5a:51:d3:1c: 2c:d5:1f:77:01:85:75:4d:dc:09:06:a1:c3:af:a9:f8:ff:45: 43:ae:02:39:24:cd:35:5f:26:f9:6f:fe:0e:b5:f6:46:c1:42: 79:7b:a4:b1:6c:83:fc:46:7e:14:35:1a:80:65:6a:11:b1:63: 98:1c:e7:25:16:14:4a:63:77:c5:cd:ae:10:c9:d1:91:fd:7d: 95:4f:43:40:0d:1b:b4:79:1b:12:5b:b7:19:9a:67:e8:3d:fd: 87:6d:5c:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P7T/3tPjRGChmui9qaanMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYjAwZWQ2MmJlZWYzMDcwYTEzNmRkOTg0NWZkMjZlMjFm ZDI2MWEwHhcNMjYwMTI2MDMwMTIzWhcNMjYwMTI3MDMwMTIzWjAzMTEwLwYDVQQD EyhhZDk4NTViYThkODUzMzMzYWNkYzI2MTdjZmI1M2UzMjM3OGZhM2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pOJ9Qk1xfIbmIIF4MTW3GWGGfGA trXa0GOOVxJbDMTRV/vDhZaXfmCKulxBTlHT9im7OPVjSvk7lMt3j6/WXUePQ3sW SKgUxoWQBBuwTAPff/e0mtYlaC1BkZiZ5/j4homnUIU9E9XGxiLi2VgOol7lJ0yz zUanjsoLAiNY03Ro7mlTX04luUNQbS52QyE7q2wxBeumNcBxKW2MYq9xHSDkByYI fMRWSVGTe+6nm1B5wNY+2LTn5aoKdsctUTdlglFtFfpScbPwL7EARflKr8r/d7zR IV6Mh5CU5TvyYsxR3FFX5EdFhRz7CLkGrQAs+CAXWxBiUOunBbMg+0bvOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2YVbqNhTMzrNwmF8+1PjI3j6P0MB8GA1UdIwQY MBaAFKywDtYr7vMHChNt2YRf0m4h/SYaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckxBTzFpdnU4d2NLRTIzWmhGX1NiaUg5SmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8zYTdlY2MtNDU5MS00YWRjLTk4ODAt YWFjODlmMmYxN2NkLzEvckxBTzFpdnU4d2NLRTIzWmhGX1NiaUg5SmhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8zYTdlY2MtNDU5MS00YWRjLTk4ODAtYWFjODlmMmYxN2Nk LzEvckxBTzFpdnU4d2NLRTIzWmhGX1NiaUg5SmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZO0t/4/Q iKUJQdKfiz8HinF9FJ+THSbsxkdEyeMjMo1YBayzJDoWgrsjLT9hkc/wQSPtv6BC sZDF6sFVjPL9qYuu277ZO3vRsl6KISbO6f8gemyt2xdG90Uozx/tqxXWqiGJPGV2 FbB8I8o0/SF8tqiyEIysPs9Y0nuKhDM8T32uybtmhMZoDOTD4RY89jK2at3HgUMA yl+2NxeLjJBaUdMcLNUfdwGFdU3cCQahw6+p+P9FQ64COSTNNV8m+W/+DrX2RsFC eXuksWyD/EZ+FDUagGVqEbFjmBznJRYUSmN3xc2uEMnRkf19lU9DQA0btHkbElu3 GZpn6D39h21cgw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:53 2026 by rpki-client