This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft File: ACQ0xzoO6iLG5EEHLpPbd8foovE.mft (raw, json) Hash identifier: BvDJijrdxcgLJ7KjfzD/Ca2XBFWEp3882+SSkW6aKQg= Subject key identifier: 35:BE:36:6E:D1:8E:8A:78:0F:71:F3:23:F2:CA:0E:2A:96:71:9F:30 Authority key identifier: 00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1 Certificate issuer: /CN=002434c73a0eea22c6e441072e93db77c7e8a2f1 Certificate serial: 019BF6BF0D09916C968392BEA27A1FB513F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 20:01:14 +0000 Manifest this update: Sun 25 Jan 2026 20:01:14 +0000 Manifest next update: Mon 26 Jan 2026 20:01:14 +0000 Files and hashes: 1: 6uf8Q-mzBwP0CYJoLzaP07zO8js.roa (hash: g3FMpnEG+wQrG52cwJFoXy3Of4b2Onpej3iV0SnQGLM=) 2: ACQ0xzoO6iLG5EEHLpPbd8foovE.crl (hash: jzMUg6lKsL6WE5nAK83OgTBAilXcTVilE1BaejlIEjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:0d:09:91:6c:96:83:92:be:a2:7a:1f:b5:13:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002434c73a0eea22c6e441072e93db77c7e8a2f1 Validity Not Before: Jan 25 20:01:14 2026 GMT Not After : Jan 26 20:01:14 2026 GMT Subject: CN=35be366ed18e8a780f71f323f2ca0e2a96719f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:52:a8:63:10:f4:4b:d0:d3:14:1a:07:5e:4c: d3:48:cb:e3:39:bc:34:d4:f6:21:9a:f5:09:52:fc: d5:b3:cd:55:04:24:ba:ee:a6:ba:2b:36:22:8a:69: 6e:33:6d:1e:7a:b7:05:d7:6a:1a:e1:db:bf:87:33: 22:82:fc:97:a5:f1:d4:d3:ab:c7:7d:6e:a0:e2:50: 91:4e:07:b4:15:16:d4:3c:81:4b:96:e3:a2:68:a5: ea:17:3c:2c:4d:29:10:ac:84:62:3a:02:29:ab:14: 72:01:ed:7d:80:1c:1f:ef:73:b3:75:f6:b6:49:63: a7:ea:ed:e6:c7:e0:06:07:33:2d:fd:32:9c:4e:bc: ec:3d:6a:0c:69:5c:e2:7c:d9:24:05:11:47:aa:7e: b0:20:82:62:33:0b:e0:a6:8f:ce:2f:07:6e:3d:af: 09:21:02:8c:41:e2:51:9f:76:65:1a:09:9b:8e:6a: 8a:31:78:52:c5:a1:1b:2f:b7:78:0d:c3:4a:eb:9c: 92:a0:fc:be:65:93:a9:07:35:87:a8:76:02:a3:01: 00:ff:0b:b5:1d:6a:7b:b8:a6:db:12:0d:20:7e:ec: e1:95:d9:67:e3:07:98:98:5a:f3:e1:7a:c4:72:e1: c9:a3:c2:e5:aa:87:77:14:30:7f:30:e3:d5:e9:dd: 02:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BE:36:6E:D1:8E:8A:78:0F:71:F3:23:F2:CA:0E:2A:96:71:9F:30 X509v3 Authority Key Identifier: keyid:00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:28:47:58:38:ca:07:3d:6c:3b:dd:cb:99:84:96:f5:b5:65: 93:30:3d:9d:87:09:23:52:9f:b1:d1:76:10:8a:e0:21:ee:fe: 02:50:ce:a4:72:ab:b4:10:59:6b:0c:88:52:7e:d1:81:2e:cd: f5:30:a2:90:7c:af:09:8d:90:16:95:97:10:d2:72:96:02:96: b1:85:66:86:a1:52:14:37:25:bb:da:64:55:16:d2:03:25:56: 9f:da:51:71:8f:a6:d0:d9:37:44:e9:8b:bd:5c:45:f4:a8:26: 58:a1:a3:b3:5c:80:65:88:f4:2b:f9:f3:f0:79:77:d4:08:3e: 6d:e1:8e:c4:c1:56:95:66:f6:e6:aa:22:0a:ac:7a:4d:c6:80: e9:75:02:c0:6c:2d:62:c2:5a:63:7b:29:df:c9:be:af:b3:74: 8a:c9:ca:f5:c7:58:12:ca:22:ca:2b:ef:ea:a1:09:78:01:1e: 38:9f:a3:eb:bc:d6:62:2e:c9:66:93:e1:ef:92:3b:57:7e:b2: f0:b1:11:cd:26:de:d5:af:34:6c:49:ed:44:23:bb:53:a2:38: 24:d7:33:04:6d:3e:b8:7f:be:a5:71:42:ac:10:5b:33:60:ce: c6:11:5c:95:32:50:1c:f5:21:ab:df:01:d5:7b:6e:d8:cf:10: 42:02:b4:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vw0JkWyWg5K+onoftRP0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjQzNGM3M2EwZWVhMjJjNmU0NDEwNzJlOTNkYjc3Yzdl OGEyZjEwHhcNMjYwMTI1MjAwMTE0WhcNMjYwMTI2MjAwMTE0WjAzMTEwLwYDVQQD EygzNWJlMzY2ZWQxOGU4YTc4MGY3MWYzMjNmMmNhMGUyYTk2NzE5ZjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FKoYxD0S9DTFBoHXkzTSMvjObw0 1PYhmvUJUvzVs81VBCS67qa6KzYiimluM20eercF12oa4du/hzMigvyXpfHU06vH fW6g4lCRTge0FRbUPIFLluOiaKXqFzwsTSkQrIRiOgIpqxRyAe19gBwf73Ozdfa2 SWOn6u3mx+AGBzMt/TKcTrzsPWoMaVzifNkkBRFHqn6wIIJiMwvgpo/OLwduPa8J IQKMQeJRn3ZlGgmbjmqKMXhSxaEbL7d4DcNK65ySoPy+ZZOpBzWHqHYCowEA/wu1 HWp7uKbbEg0gfuzhldln4weYmFrz4XrEcuHJo8Llqod3FDB/MOPV6d0CxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDW+Nm7Rjop4D3HzI/LKDiqWcZ8wMB8GA1UdIwQY MBaAFAAkNMc6DuoixuRBBy6T23fH6KLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNRMHh6b082aUxHNUVFSExwUGJkOGZvb3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi80MDNkZGQtYzJkNS00YjU0LTk3M2Et MmI3YTc5NGQ1Nzk1LzEvQUNRMHh6b082aUxHNUVFSExwUGJkOGZvb3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi80MDNkZGQtYzJkNS00YjU0LTk3M2EtMmI3YTc5NGQ1Nzk1 LzEvQUNRMHh6b082aUxHNUVFSExwUGJkOGZvb3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASChHWDjK Bz1sO93LmYSW9bVlkzA9nYcJI1KfsdF2EIrgIe7+AlDOpHKrtBBZawyIUn7RgS7N 9TCikHyvCY2QFpWXENJylgKWsYVmhqFSFDclu9pkVRbSAyVWn9pRcY+m0Nk3ROmL vVxF9KgmWKGjs1yAZYj0K/nz8Hl31Ag+beGOxMFWlWb25qoiCqx6TcaA6XUCwGwt YsJaY3sp38m+r7N0isnK9cdYEsoiyivv6qEJeAEeOJ+j67zWYi7JZpPh75I7V36y 8LERzSbe1a80bEntRCO7U6I4JNczBG0+uH++pXFCrBBbM2DOxhFclTJQHPUhq98B 1Xtu2M8QQgK0Ng== -----END CERTIFICATE-----Generated at Mon Jan 26 05:57:09 2026 by rpki-client