This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft File: RnSvG73Eykg8ZpxP4L3XZLisFnU.mft (raw, json) Hash identifier: xNQPKXRyOI1TgGBfxR0x+UZLJ1XOcNvVfWYws2h0JP4= Subject key identifier: A2:28:34:F0:36:2C:43:96:39:BE:00:72:8F:10:D5:AE:12:0C:03:FB Authority key identifier: 46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75 Certificate issuer: /CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675 Certificate serial: 019BF6F6064EE49F6D23DD29892BEBB569FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 21:01:16 +0000 Manifest this update: Sun 25 Jan 2026 21:01:16 +0000 Manifest next update: Mon 26 Jan 2026 21:01:16 +0000 Files and hashes: 1: RnSvG73Eykg8ZpxP4L3XZLisFnU.crl (hash: iBIIQgY9Pj4YZbUTEj/e9H+ivlGQw0RekZbcxkWA/bQ=) 2: VLzEBPYWpwlxw34UQJFFdOGntXc.roa (hash: MIMHe1Kmdz8phFSPAFOMKLvUlt1LLncBccV6RF4w1BI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.crl rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f6:06:4e:e4:9f:6d:23:dd:29:89:2b:eb:b5:69:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675 Validity Not Before: Jan 25 21:01:16 2026 GMT Not After : Jan 26 21:01:16 2026 GMT Subject: CN=a22834f0362c439639be00728f10d5ae120c03fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:81:be:d6:19:62:9e:63:21:dc:da:75:d9:eb: bf:63:28:fb:e6:8c:2f:66:10:20:86:0e:d9:b5:79: 19:19:b6:57:a4:28:1d:9f:04:36:6f:4e:70:c1:d6: 5c:0f:4f:72:78:c8:d0:e1:3d:ca:20:45:5e:d2:9b: a0:fc:bf:75:78:d3:6f:57:16:ee:e0:83:4f:24:a6: 8b:1a:e7:2d:d2:fe:39:fb:d4:b2:b4:00:12:c4:01: 1d:2b:bf:62:c9:92:e8:68:97:7e:1d:f6:fb:7d:da: 2f:e5:29:d2:a0:7d:9b:c7:2c:cb:b9:07:21:7b:72: fe:fe:62:b7:e4:98:94:0a:68:22:03:f1:ed:64:3a: 76:44:24:41:12:8a:ed:88:90:62:f2:8a:ec:c9:a2: 60:15:f0:1c:c4:3b:67:30:b6:33:35:12:c2:90:bb: 7f:20:d7:6d:97:2e:c9:19:c5:79:32:88:d9:bb:5f: 7e:e3:0f:92:7e:cf:66:6b:8b:34:2d:15:27:0b:2b: e3:a5:cf:8d:d4:d5:f9:b6:e3:44:6f:7a:97:a7:b9: 62:2a:0d:70:90:93:1e:01:00:3b:58:86:6e:3a:a9: 17:b2:7e:40:f5:37:f7:d9:46:e1:78:b5:d3:ca:65: 96:58:0d:d6:18:80:c9:b5:ef:17:01:bc:65:ec:38: 87:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:28:34:F0:36:2C:43:96:39:BE:00:72:8F:10:D5:AE:12:0C:03:FB X509v3 Authority Key Identifier: keyid:46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:c7:f1:55:f4:1e:d9:73:f5:0a:e2:99:65:b4:33:2e:ca:ad: 4c:7b:d1:80:2b:11:7c:2b:54:db:02:2a:58:b6:41:bc:1a:f0: 1e:35:c9:e5:d4:6c:2b:07:a5:97:29:25:c5:da:36:74:06:88: 4d:0d:c1:41:34:b1:0d:bb:9a:c5:cc:45:ef:da:01:ca:99:e4: f8:8d:63:98:c2:7d:22:12:c1:47:3c:01:0d:e9:8c:00:cd:34: 7a:08:b5:9e:f7:ca:5d:e5:a5:d1:56:f4:d0:c1:4b:d4:12:b0: 75:5d:35:3a:05:e7:da:4d:e6:aa:3a:f0:d9:d6:70:84:f6:d9: e8:06:03:ea:ce:e5:aa:bf:96:60:a8:ee:cb:14:e3:bb:db:c1: 5b:0a:33:a6:39:41:d8:6f:9d:c2:8b:13:4d:4f:75:22:3e:96: 67:5b:5f:69:72:22:7e:24:78:88:fa:56:b3:07:72:a7:ba:5b: 9b:b9:83:8c:8c:b8:db:c0:19:4b:0c:52:7a:e0:94:31:88:c1: d6:9f:d2:d5:80:87:60:6b:2c:c1:71:04:0c:9e:eb:25:d4:84: 55:2c:7c:60:b0:f8:7a:a2:f0:ac:42:c8:f8:43:c1:9f:59:ed: f3:6e:62:1a:e5:a7:21:18:a4:28:4a:95:f2:f9:6f:73:e7:48: 4b:31:6a:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29gZO5J9tI90piSvrtWn8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NzRhZjFiYmRjNGNhNDgzYzY2OWM0ZmUwYmRkNzY0Yjhh YzE2NzUwHhcNMjYwMTI1MjEwMTE2WhcNMjYwMTI2MjEwMTE2WjAzMTEwLwYDVQQD EyhhMjI4MzRmMDM2MmM0Mzk2MzliZTAwNzI4ZjEwZDVhZTEyMGMwM2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4G+1hlinmMh3Np12eu/Yyj75owv ZhAghg7ZtXkZGbZXpCgdnwQ2b05wwdZcD09yeMjQ4T3KIEVe0pug/L91eNNvVxbu 4INPJKaLGuct0v45+9SytAASxAEdK79iyZLoaJd+Hfb7fdov5SnSoH2bxyzLuQch e3L+/mK35JiUCmgiA/HtZDp2RCRBEortiJBi8orsyaJgFfAcxDtnMLYzNRLCkLt/ INdtly7JGcV5MojZu19+4w+Sfs9ma4s0LRUnCyvjpc+N1NX5tuNEb3qXp7liKg1w kJMeAQA7WIZuOqkXsn5A9Tf32UbheLXTymWWWA3WGIDJte8XAbxl7DiHzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIoNPA2LEOWOb4Aco8Q1a4SDAP7MB8GA1UdIwQY MBaAFEZ0rxu9xMpIPGacT+C912S4rBZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm5Tdkc3M0V5a2c4WnB4UDRMM1haTGlzRm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kNTQxMzgtMTMwOC00YjQyLWExNzAt NTQ5MmUwZTRlYmMzLzEvUm5Tdkc3M0V5a2c4WnB4UDRMM1haTGlzRm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kNTQxMzgtMTMwOC00YjQyLWExNzAtNTQ5MmUwZTRlYmMz LzEvUm5Tdkc3M0V5a2c4WnB4UDRMM1haTGlzRm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacfxVfQe 2XP1CuKZZbQzLsqtTHvRgCsRfCtU2wIqWLZBvBrwHjXJ5dRsKwellyklxdo2dAaI TQ3BQTSxDbuaxcxF79oBypnk+I1jmMJ9IhLBRzwBDemMAM00egi1nvfKXeWl0Vb0 0MFL1BKwdV01OgXn2k3mqjrw2dZwhPbZ6AYD6s7lqr+WYKjuyxTju9vBWwozpjlB 2G+dwosTTU91Ij6WZ1tfaXIifiR4iPpWswdyp7pbm7mDjIy428AZSwxSeuCUMYjB 1p/S1YCHYGsswXEEDJ7rJdSEVSx8YLD4eqLwrELI+EPBn1nt825iGuWnIRikKEqV 8vlvc+dISzFqSg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:13:14 2026 by rpki-client