This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft File: rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft (raw, json) Hash identifier: sKIb7fiJT7o/23QzNfkxybI+fyH+FDHPKNnJs16Kok8= Subject key identifier: 1A:2F:1C:BB:FB:08:44:A4:56:F6:5E:76:F3:A5:06:D2:24:17:70:45 Authority key identifier: AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7 Certificate issuer: /CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7 Certificate serial: 019BF53EA30B4FF9CE7E6B783C29E43DC27A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 13:01:21 +0000 Manifest this update: Sun 25 Jan 2026 13:01:21 +0000 Manifest next update: Mon 26 Jan 2026 13:01:21 +0000 Files and hashes: 1: Z12VW2Oj1RQBcgh65gRC_a1KwqE.roa (hash: /a7senBqK2MBRmr1Qn/8yhUtEA4NdcKwqwCyWHEGON0=) 2: p4p1Pk1qfU_SW9Ve8k8RIi63JWc.roa (hash: Wra3ytDrU1p2ihMOSoZL7h8AIxob8hYx1NIw6YWVOAs=) 3: rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl (hash: utnb0AYN5kF9Tqbft3ZunFgfeUChzcbeJC5DIk2b5ms=) 4: vKrnz1PqS6qb2zcTLwUYNYqlKd4.roa (hash: 1IT80fZU/ax5KvjXCy5/nxPjuHIDLBfsXUQ0YfHBn7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:a3:0b:4f:f9:ce:7e:6b:78:3c:29:e4:3d:c2:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7 Validity Not Before: Jan 25 13:01:21 2026 GMT Not After : Jan 26 13:01:21 2026 GMT Subject: CN=1a2f1cbbfb0844a456f65e76f3a506d224177045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:24:72:ee:97:2f:da:76:ba:4f:ff:21:47:40: f5:91:96:00:f1:07:c2:0d:1e:ab:c3:87:2a:00:a7: 2d:3e:c3:dd:2e:21:7c:4d:26:9d:ce:0a:9f:c5:18: 93:9f:a5:e9:51:12:ba:d0:cf:11:6d:08:a7:15:8d: 4a:a3:30:38:4b:a1:1d:b1:d7:bf:9f:31:95:6e:22: 5b:54:c5:ef:8d:85:3e:76:e6:7f:07:ac:e1:72:8a: f8:c2:0a:40:69:c2:df:5c:ad:df:0e:72:ad:3b:b1: 8c:81:5c:e3:8d:15:29:bc:e9:86:9c:91:e6:bb:6b: f6:a7:c9:cc:0d:41:09:ef:00:63:4a:1d:3a:4c:f5: 19:8b:3f:1b:b8:e3:7e:71:04:9a:84:bf:6d:c2:f9: f3:bd:30:95:a9:fd:fa:b0:3f:d8:57:1d:cd:48:65: 82:f7:04:36:27:7b:cd:e6:33:a4:7a:bb:ee:54:69: 90:57:70:bd:02:40:f3:ce:36:04:79:82:7f:29:d3: 06:8c:a8:52:0a:5a:b8:dc:9a:ea:86:6c:65:fd:de: f8:e2:00:25:0f:5b:70:39:15:68:33:51:74:79:0c: bc:fe:f8:80:cf:0d:17:c6:ef:ae:f9:50:12:31:15: 0b:52:da:86:b5:80:3a:7e:98:8c:64:9d:0e:ec:8c: ca:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2F:1C:BB:FB:08:44:A4:56:F6:5E:76:F3:A5:06:D2:24:17:70:45 X509v3 Authority Key Identifier: keyid:AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:87:4e:50:8f:32:0e:5c:ed:c6:02:71:21:a4:1a:3c:ca:f4: dc:f0:c2:3e:40:80:af:05:fa:7a:2d:d9:5b:e5:4d:58:df:11: e4:72:24:03:0d:b6:36:bc:9e:12:78:67:f3:71:ea:cd:44:4f: 7f:ba:71:7c:3b:9d:e5:8e:c9:d9:6b:17:cd:01:36:e3:e4:94: 27:7a:c0:4e:36:b5:ec:3e:43:93:08:86:38:06:f9:18:2c:aa: d7:96:57:75:25:25:45:e0:8d:a2:90:55:9d:80:61:2e:50:9c: b4:38:49:ea:19:7e:be:10:d0:4f:a1:65:32:ae:c0:8d:91:d5: 1c:08:95:8a:0b:e3:7a:45:5e:f0:03:03:b4:e9:7f:95:74:8f: d6:2a:b9:8e:46:4f:94:b0:a3:6f:43:83:1a:67:8d:04:8f:91: 4f:a5:4a:59:2e:33:ae:94:9e:5a:25:dd:d2:bb:97:37:2d:b0: 7b:d6:0b:f8:fa:d0:b5:68:35:1f:1d:a3:f8:41:8f:64:16:76: b1:a7:70:ed:9d:52:16:c8:d1:cc:84:5e:30:8c:23:7d:5b:d6: 3a:32:f1:39:45:b7:4e:75:a4:76:d3:3f:94:c8:2c:e9:f6:85: bc:60:66:74:65:a5:70:89:37:34:de:b8:62:d4:c2:c0:0f:70: a7:a8:05:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PqMLT/nOfmt4PCnkPcJ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYmUyMTJhMmYxYTExOWVmNjRhYjYyZTFhOTZkNzExNTI0 YzhiYzcwHhcNMjYwMTI1MTMwMTIxWhcNMjYwMTI2MTMwMTIxWjAzMTEwLwYDVQQD EygxYTJmMWNiYmZiMDg0NGE0NTZmNjVlNzZmM2E1MDZkMjI0MTc3MDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryRy7pcv2na6T/8hR0D1kZYA8QfC DR6rw4cqAKctPsPdLiF8TSadzgqfxRiTn6XpURK60M8RbQinFY1KozA4S6Edsde/ nzGVbiJbVMXvjYU+duZ/B6zhcor4wgpAacLfXK3fDnKtO7GMgVzjjRUpvOmGnJHm u2v2p8nMDUEJ7wBjSh06TPUZiz8buON+cQSahL9twvnzvTCVqf36sD/YVx3NSGWC 9wQ2J3vN5jOkervuVGmQV3C9AkDzzjYEeYJ/KdMGjKhSClq43Jrqhmxl/d744gAl D1twORVoM1F0eQy8/viAzw0Xxu+u+VASMRULUtqGtYA6fpiMZJ0O7IzKGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBovHLv7CESkVvZedvOlBtIkF3BFMB8GA1UdIwQY MBaAFKy+ISovGhGe9kq2LhqW1xFSTIvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckw0aEtpOGFFWjcyU3JZdUdwYlhFVkpNaThjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jNWExNTktODU2OC00OTQ1LTgwMjYt MjNjMzM4NjgwNzcxLzEvckw0aEtpOGFFWjcyU3JZdUdwYlhFVkpNaThjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9jNWExNTktODU2OC00OTQ1LTgwMjYtMjNjMzM4NjgwNzcx LzEvckw0aEtpOGFFWjcyU3JZdUdwYlhFVkpNaThjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmodOUI8y DlztxgJxIaQaPMr03PDCPkCArwX6ei3ZW+VNWN8R5HIkAw22NryeEnhn83HqzURP f7pxfDud5Y7J2WsXzQE24+SUJ3rATja17D5DkwiGOAb5GCyq15ZXdSUlReCNopBV nYBhLlCctDhJ6hl+vhDQT6FlMq7AjZHVHAiVigvjekVe8AMDtOl/lXSP1iq5jkZP lLCjb0ODGmeNBI+RT6VKWS4zrpSeWiXd0ruXNy2we9YL+PrQtWg1Hx2j+EGPZBZ2 sadw7Z1SFsjRzIReMIwjfVvWOjLxOUW3TnWkdtM/lMgs6faFvGBmdGWlcIk3NN64 YtTCwA9wp6gFxw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:30:33 2026 by rpki-client