This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft File: acl31Fwp2BvZI_3rHwkv80ZE4zw.mft (raw, json) Hash identifier: 2/iaY1yFqYsFXWY688s7Z0fTtz4EJVsvPPXkBfVyDRA= Subject key identifier: 12:FA:25:BD:56:6B:D6:16:9D:6F:78:D6:79:A2:AB:78:C2:63:BF:52 Authority key identifier: 69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C Certificate issuer: /CN=69c977d45c29d81bd923fdeb1f092ff34644e33c Certificate serial: 019BF4622EE53672DDD4E174B5D728D08C37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 09:00:33 +0000 Manifest this update: Sun 25 Jan 2026 09:00:33 +0000 Manifest next update: Mon 26 Jan 2026 09:00:33 +0000 Files and hashes: 1: 6GMqaoNuem-rKgHvy1GiWJWKilw.roa (hash: nwMP8vU+agP8Pszmp+8gcADemNbpqE9xOsflD5H9lfw=) 2: acl31Fwp2BvZI_3rHwkv80ZE4zw.crl (hash: Pn3kNHdruGUxCbgcVriRaQkpSHSNmK5XnUWIaFjSYZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:2e:e5:36:72:dd:d4:e1:74:b5:d7:28:d0:8c:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69c977d45c29d81bd923fdeb1f092ff34644e33c Validity Not Before: Jan 25 09:00:33 2026 GMT Not After : Jan 26 09:00:33 2026 GMT Subject: CN=12fa25bd566bd6169d6f78d679a2ab78c263bf52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:24:e2:1d:d0:f6:a6:18:ae:31:d0:2a:4a:a2: e5:07:f0:a1:bd:40:4a:fd:c7:58:a4:d8:a6:1f:75: 5d:9e:11:da:58:42:f8:2c:c7:c8:a4:80:61:5f:d0: ca:a5:44:0f:f2:f0:6f:11:18:e9:d6:73:8a:ea:95: 4f:49:dc:b2:53:cf:49:aa:1a:89:e6:4c:5a:7d:93: 7e:58:87:b1:14:b2:75:1b:d6:55:9e:07:fb:ef:6f: 9f:ff:06:b6:81:ec:c9:5a:9d:60:54:c4:20:32:9e: c3:fb:32:95:59:26:a7:f5:ee:ab:2e:79:9a:3b:aa: f7:fa:17:fa:26:a6:fb:ee:c5:68:8b:39:b5:db:cf: c3:81:b7:50:79:55:28:44:0e:40:2f:7b:78:b9:35: cb:92:a7:bf:9c:ca:30:f2:f3:21:9a:ca:e9:b4:23: 9c:c3:5a:30:c0:10:fd:3e:0a:31:a6:85:eb:59:d9: d7:63:31:56:fc:50:93:2c:21:2b:73:2a:53:8e:3c: 7c:41:55:25:29:86:fa:12:8a:e5:3c:e6:61:fe:15: d0:36:66:c2:3e:a6:5c:18:e1:fb:31:ea:da:cd:9b: d3:1f:fe:98:8e:5b:96:38:f0:f3:af:af:70:52:58: 36:dc:a3:ca:d1:c4:51:61:29:d4:7e:63:28:d9:dd: 65:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FA:25:BD:56:6B:D6:16:9D:6F:78:D6:79:A2:AB:78:C2:63:BF:52 X509v3 Authority Key Identifier: keyid:69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:4e:3d:b5:bf:e9:a5:4b:7c:82:6f:f9:6d:6a:50:78:69:be: 8e:a5:c4:eb:e8:71:d3:62:86:d5:d7:17:04:c0:10:66:2d:26: 45:fb:2c:dd:dc:33:56:e5:d8:62:da:f6:18:3b:86:bb:6f:53: 8a:f7:9f:81:1e:e8:4b:cb:00:a4:b5:88:74:2b:9e:9f:3b:0c: f7:d8:41:c0:48:4f:45:03:02:34:fa:62:6b:81:56:67:c4:e0: 44:28:48:df:51:8f:c3:25:a5:74:56:1f:eb:7c:1a:40:07:9f: 16:c0:d1:32:56:e4:2b:25:b4:28:af:bf:a3:47:02:18:b9:9d: 7b:2b:84:db:e4:94:b8:c5:1c:cd:49:63:11:d0:e3:4c:14:b6: 1b:fa:5d:a9:5f:c5:0a:01:0a:a9:3e:ba:80:a9:e0:cc:c1:96: a8:1e:3a:dc:4b:f4:89:60:01:0e:64:f9:fb:01:08:cf:f6:a7: 9c:28:d0:b6:6e:f0:6a:22:31:6e:5b:66:c2:b2:c1:84:45:c1: 6b:dc:c3:41:d7:e9:a1:c0:4a:a0:e6:24:94:9d:cb:0c:04:10: fc:ed:f3:96:2d:d7:ec:a2:7f:82:49:39:d6:57:13:61:ad:16: 32:7f:b7:ee:cf:58:06:60:d1:95:91:26:47:1e:3d:09:e4:e7: 65:8d:71:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Yi7lNnLd1OF0tdco0Iw3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5Yzk3N2Q0NWMyOWQ4MWJkOTIzZmRlYjFmMDkyZmYzNDY0 NGUzM2MwHhcNMjYwMTI1MDkwMDMzWhcNMjYwMTI2MDkwMDMzWjAzMTEwLwYDVQQD EygxMmZhMjViZDU2NmJkNjE2OWQ2Zjc4ZDY3OWEyYWI3OGMyNjNiZjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CTiHdD2phiuMdAqSqLlB/ChvUBK /cdYpNimH3VdnhHaWEL4LMfIpIBhX9DKpUQP8vBvERjp1nOK6pVPSdyyU89JqhqJ 5kxafZN+WIexFLJ1G9ZVngf772+f/wa2gezJWp1gVMQgMp7D+zKVWSan9e6rLnma O6r3+hf6Jqb77sVoizm128/DgbdQeVUoRA5AL3t4uTXLkqe/nMow8vMhmsrptCOc w1owwBD9PgoxpoXrWdnXYzFW/FCTLCErcypTjjx8QVUlKYb6EorlPOZh/hXQNmbC PqZcGOH7MerazZvTH/6YjluWOPDzr69wUlg23KPK0cRRYSnUfmMo2d1lIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBL6Jb1Wa9YWnW941nmiq3jCY79SMB8GA1UdIwQY MBaAFGnJd9RcKdgb2SP96x8JL/NGROM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWNsMzFGd3AyQnZaSV8zckh3a3Y4MFpFNHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xYzlkZGMtZGM0ZC00NTcxLTgyZGIt Y2U1MzUyNmU2Njk5LzEvYWNsMzFGd3AyQnZaSV8zckh3a3Y4MFpFNHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8xYzlkZGMtZGM0ZC00NTcxLTgyZGItY2U1MzUyNmU2Njk5 LzEvYWNsMzFGd3AyQnZaSV8zckh3a3Y4MFpFNHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASk49tb/p pUt8gm/5bWpQeGm+jqXE6+hx02KG1dcXBMAQZi0mRfss3dwzVuXYYtr2GDuGu29T ivefgR7oS8sApLWIdCuenzsM99hBwEhPRQMCNPpia4FWZ8TgRChI31GPwyWldFYf 63waQAefFsDRMlbkKyW0KK+/o0cCGLmdeyuE2+SUuMUczUljEdDjTBS2G/pdqV/F CgEKqT66gKngzMGWqB463Ev0iWABDmT5+wEIz/annCjQtm7waiIxbltmwrLBhEXB a9zDQdfpocBKoOYklJ3LDAQQ/O3zli3X7KJ/gkk51lcTYa0WMn+37s9YBmDRlZEm Rx49CeTnZY1xmg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:46:44 2026 by rpki-client