This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft File: rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft (raw, json) Hash identifier: bkvLHpxJrotdk7TdSEWBjUUFzXGhh6Y1fzqyYOoZL4Y= Subject key identifier: 06:F0:2F:86:1F:6B:FB:01:F9:01:D4:8C:12:54:07:40:D5:A5:C0:F0 Authority key identifier: AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7 Certificate issuer: /CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7 Certificate serial: 019BF350401464209E51FF5E8A56020AF1AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 04:01:21 +0000 Manifest this update: Sun 25 Jan 2026 04:01:21 +0000 Manifest next update: Mon 26 Jan 2026 04:01:21 +0000 Files and hashes: 1: Z12VW2Oj1RQBcgh65gRC_a1KwqE.roa (hash: /a7senBqK2MBRmr1Qn/8yhUtEA4NdcKwqwCyWHEGON0=) 2: p4p1Pk1qfU_SW9Ve8k8RIi63JWc.roa (hash: Wra3ytDrU1p2ihMOSoZL7h8AIxob8hYx1NIw6YWVOAs=) 3: rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl (hash: ba0Le07LfDjmJxCrq5o4P619ZOigO5RYW/dY0fmv3Wo=) 4: vKrnz1PqS6qb2zcTLwUYNYqlKd4.roa (hash: 1IT80fZU/ax5KvjXCy5/nxPjuHIDLBfsXUQ0YfHBn7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:40:14:64:20:9e:51:ff:5e:8a:56:02:0a:f1:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7 Validity Not Before: Jan 25 04:01:21 2026 GMT Not After : Jan 26 04:01:21 2026 GMT Subject: CN=06f02f861f6bfb01f901d48c12540740d5a5c0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:36:dd:87:5d:11:f8:3e:41:44:b7:bf:c8:07: f6:dd:28:ae:ea:58:71:4b:cb:36:25:7e:16:74:12: ba:fb:c8:4a:8e:57:90:4c:07:cd:39:f8:74:79:cf: 8d:d8:3f:b9:84:28:44:76:ce:4f:2b:c3:a9:52:02: 66:56:04:ed:b0:33:48:23:f1:0f:12:75:65:76:d3: a8:a5:4e:e0:a4:60:3f:9c:36:29:cd:6d:72:b7:8f: a5:78:ea:07:b4:76:77:3b:8a:80:d5:84:99:f9:82: 33:42:e2:80:4a:df:50:e6:dd:a4:37:27:36:3c:05: 73:e1:90:b8:1b:ca:e1:b7:85:a1:59:8e:67:cb:ae: fd:39:f0:d5:fb:ae:73:e8:9a:59:c8:15:70:b3:54: ae:2e:12:08:38:e2:69:fa:b4:9f:7d:55:84:a7:01: db:ca:f1:05:c4:be:3b:fa:95:50:4e:42:3c:5b:1e: 61:2c:1c:59:71:a8:2f:1d:ff:ff:00:27:84:69:fc: 2d:90:b3:28:cf:d8:78:98:b2:60:4a:05:e9:3a:9f: 93:a4:54:9e:69:04:a4:af:7c:9d:df:74:15:c5:01: 67:e6:3d:ff:3e:f7:ff:57:f6:47:7a:07:ef:09:16: 5c:a7:6d:78:c9:d7:62:b3:9f:20:6e:52:3b:9e:d0: 84:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F0:2F:86:1F:6B:FB:01:F9:01:D4:8C:12:54:07:40:D5:A5:C0:F0 X509v3 Authority Key Identifier: keyid:AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:66:bd:18:5a:53:3a:d0:27:2e:cd:ac:dc:25:00:4d:fe:95: e9:e7:11:2f:48:52:fe:16:12:df:6d:b8:ff:12:b0:e8:9d:f6: 5d:51:b4:28:16:75:47:ce:96:6a:77:a4:aa:52:9b:08:b7:e8: 5d:35:60:00:0f:ec:dc:d5:28:0b:69:e4:ad:8f:ab:48:4e:b4: e8:4c:d0:9d:2f:ae:55:53:43:68:39:74:c8:17:59:1c:e5:7f: cd:7d:f3:96:b9:b5:f0:6c:b2:a1:d1:7b:a6:8f:38:b3:a1:05: 86:73:6f:ab:e8:16:cd:71:f4:26:c4:e8:eb:41:e2:a2:28:cc: a7:d2:64:4d:a0:27:09:0e:8f:a1:84:cf:2d:56:bd:78:6b:e5: a9:ae:f8:55:e6:a3:96:b5:b4:c6:cf:ae:e5:df:5a:1e:37:b0: dd:7a:c0:23:a2:28:54:a2:f7:65:fe:52:de:4d:9b:ca:b9:02: 00:f9:ff:d3:af:a9:83:6d:2d:f2:a9:71:20:f5:60:a5:84:60: 42:0b:dc:50:ec:34:bd:d3:fd:3d:44:d7:ce:85:05:33:fe:62: 1f:21:57:93:0a:40:7c:39:9a:78:a9:31:44:a8:0e:02:37:ef: f3:89:1c:7f:25:b0:ce:73:50:a8:cf:eb:ae:f5:10:5c:aa:34: 57:02:d1:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUEAUZCCeUf9eilYCCvGvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYmUyMTJhMmYxYTExOWVmNjRhYjYyZTFhOTZkNzExNTI0 YzhiYzcwHhcNMjYwMTI1MDQwMTIxWhcNMjYwMTI2MDQwMTIxWjAzMTEwLwYDVQQD EygwNmYwMmY4NjFmNmJmYjAxZjkwMWQ0OGMxMjU0MDc0MGQ1YTVjMGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDbdh10R+D5BRLe/yAf23Siu6lhx S8s2JX4WdBK6+8hKjleQTAfNOfh0ec+N2D+5hChEds5PK8OpUgJmVgTtsDNII/EP EnVldtOopU7gpGA/nDYpzW1yt4+leOoHtHZ3O4qA1YSZ+YIzQuKASt9Q5t2kNyc2 PAVz4ZC4G8rht4WhWY5ny679OfDV+65z6JpZyBVws1SuLhIIOOJp+rSffVWEpwHb yvEFxL47+pVQTkI8Wx5hLBxZcagvHf//ACeEafwtkLMoz9h4mLJgSgXpOp+TpFSe aQSkr3yd33QVxQFn5j3/Pvf/V/ZHegfvCRZcp214yddis58gblI7ntCEBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbwL4Yfa/sB+QHUjBJUB0DVpcDwMB8GA1UdIwQY MBaAFKy+ISovGhGe9kq2LhqW1xFSTIvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckw0aEtpOGFFWjcyU3JZdUdwYlhFVkpNaThjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jNWExNTktODU2OC00OTQ1LTgwMjYt MjNjMzM4NjgwNzcxLzEvckw0aEtpOGFFWjcyU3JZdUdwYlhFVkpNaThjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9jNWExNTktODU2OC00OTQ1LTgwMjYtMjNjMzM4NjgwNzcx LzEvckw0aEtpOGFFWjcyU3JZdUdwYlhFVkpNaThjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk2a9GFpT OtAnLs2s3CUATf6V6ecRL0hS/hYS3224/xKw6J32XVG0KBZ1R86WanekqlKbCLfo XTVgAA/s3NUoC2nkrY+rSE606EzQnS+uVVNDaDl0yBdZHOV/zX3zlrm18GyyodF7 po84s6EFhnNvq+gWzXH0JsTo60HioijMp9JkTaAnCQ6PoYTPLVa9eGvlqa74Veaj lrW0xs+u5d9aHjew3XrAI6IoVKL3Zf5S3k2byrkCAPn/06+pg20t8qlxIPVgpYRg QgvcUOw0vdP9PUTXzoUFM/5iHyFXkwpAfDmaeKkxRKgOAjfv84kcfyWwznNQqM/r rvUQXKo0VwLRtg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:18:24 2026 by rpki-client