This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft File: pDtTIrjqOKegRNywZxp126EEPX4.mft (raw, json) Hash identifier: jQJ7qfpqTILipA5PKLhbLsKHwsqki5vSi/S+oL25e5s= Subject key identifier: 0F:1A:03:2D:86:7A:BF:5D:B0:2D:E3:A7:24:41:8C:7F:7A:A0:E8:10 Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e Certificate serial: 019BF83F63CCF87388998DDB840962F4C402 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft Manifest number: 17F1 Signing time: Mon 26 Jan 2026 03:01:02 +0000 Manifest this update: Mon 26 Jan 2026 03:01:02 +0000 Manifest next update: Tue 27 Jan 2026 03:01:02 +0000 Files and hashes: 1: AREZ7-I4dY-lVbG1KNvmj3abde0.roa (hash: 5iBy3FivOVWf36BTRuKIxy1pHWbIkHkYDe7qIgLbr7U=) 2: mMsPrtRi4JJovpyGYjWOc4wt2Ac.roa (hash: NZ9c/htksySRie6h0nflWnbh4o9NACM0t9JzBFsPMrg=) 3: pDtTIrjqOKegRNywZxp126EEPX4.crl (hash: 5+01f8ARgzkaCFSzjmPVyA7G+5T842QisCcLpwbLCGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:63:cc:f8:73:88:99:8d:db:84:09:62:f4:c4:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e Validity Not Before: Jan 26 03:01:02 2026 GMT Not After : Jan 27 03:01:02 2026 GMT Subject: CN=0f1a032d867abf5db02de3a724418c7f7aa0e810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0a:7e:78:bf:d2:12:4c:fa:58:e1:07:06:8c: 28:24:be:08:ab:15:a5:a4:10:7d:15:1e:95:01:c6: 5d:12:ee:20:33:78:69:6a:f3:13:d7:42:82:10:48: e7:fc:0e:b8:08:28:c1:b0:32:23:69:8b:71:f3:8d: f9:30:33:e6:d6:30:0d:1d:8f:f3:9a:ef:ab:b4:d0: d6:9d:7c:e8:79:09:ba:af:c4:75:d0:37:2a:27:ad: ab:f3:42:dd:21:23:7b:85:ff:91:0b:1f:f8:ac:fa: af:7a:74:95:f6:0a:c7:23:67:16:3c:41:30:2e:33: 0d:67:1d:34:55:db:e9:08:27:32:ce:85:02:83:c5: d2:cf:46:9a:36:eb:24:26:0e:22:13:ca:15:9f:b4: c7:9c:40:e6:e7:1e:4e:a1:fd:1f:33:5e:91:4b:54: a4:4b:26:99:6a:a0:85:fa:b8:7a:34:04:48:04:8e: 5e:45:f1:98:1c:83:0a:10:d4:93:63:48:6a:3b:f1: 83:d0:c3:b1:af:7e:3c:8b:eb:8c:73:30:19:e2:ed: 96:a7:66:9c:88:d8:ba:d6:ef:ea:4d:84:10:f3:20: 49:c8:1e:27:b0:d4:aa:c0:cc:0b:db:48:24:95:43: 83:4f:d9:e9:8e:bf:c5:1d:ff:5b:50:7d:5e:f6:1b: 21:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1A:03:2D:86:7A:BF:5D:B0:2D:E3:A7:24:41:8C:7F:7A:A0:E8:10 X509v3 Authority Key Identifier: keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c4:97:cb:95:22:92:3d:7d:69:37:8e:f0:77:25:69:61:c3: 0b:37:8c:5d:cf:b7:18:91:21:e5:6d:50:f2:09:28:14:68:8f: ad:3d:f3:8a:d6:75:78:bd:e2:2d:32:eb:f5:6d:48:5b:ae:31: c3:30:0a:d7:36:82:38:f5:a9:fe:5f:74:a7:4c:f7:99:d6:31: 94:83:0c:97:98:d0:0d:9f:2f:d4:1c:71:3e:02:1a:c6:18:30: 85:10:a6:64:84:50:ea:33:df:f3:dd:80:0e:7f:59:ca:5e:9c: 2c:63:8e:1b:cc:6b:a0:7c:b0:81:de:12:17:f2:11:dd:7e:b7: b3:45:8b:99:e2:9a:e4:fe:c1:1b:22:9b:da:2b:3b:56:d5:bc: 2f:3e:21:13:cb:dc:4c:a8:40:7a:46:ae:10:fd:f2:f6:99:13: 64:a0:11:7f:5e:38:03:13:6c:10:01:cf:0a:92:44:4b:c8:56: c0:7b:89:50:e2:6d:57:bb:dc:da:dc:f1:c0:6d:b8:63:ba:d6: 01:d3:ec:e4:cd:e1:c9:4f:ef:13:4c:15:0a:e6:20:68:90:99: 6a:9f:bd:5b:3d:68:cc:09:46:c6:83:73:b4:de:47:c4:64:7d: 0b:26:04:0b:50:b5:d7:8e:8c:88:3d:f0:1c:2d:f4:16:11:06: 99:d6:5f:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P2PM+HOImY3bhAli9MQCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0M2I1MzIyYjhlYTM4YTdhMDQ0ZGNiMDY3MWE3NWRiYTEw NDNkN2UwHhcNMjYwMTI2MDMwMTAyWhcNMjYwMTI3MDMwMTAyWjAzMTEwLwYDVQQD EygwZjFhMDMyZDg2N2FiZjVkYjAyZGUzYTcyNDQxOGM3ZjdhYTBlODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQp+eL/SEkz6WOEHBowoJL4IqxWl pBB9FR6VAcZdEu4gM3hpavMT10KCEEjn/A64CCjBsDIjaYtx8435MDPm1jANHY/z mu+rtNDWnXzoeQm6r8R10DcqJ62r80LdISN7hf+RCx/4rPqvenSV9grHI2cWPEEw LjMNZx00VdvpCCcyzoUCg8XSz0aaNuskJg4iE8oVn7THnEDm5x5Oof0fM16RS1Sk SyaZaqCF+rh6NARIBI5eRfGYHIMKENSTY0hqO/GD0MOxr348i+uMczAZ4u2Wp2ac iNi61u/qTYQQ8yBJyB4nsNSqwMwL20gklUODT9npjr/FHf9bUH1e9hshkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8aAy2Ger9dsC3jpyRBjH96oOgQMB8GA1UdIwQY MBaAFKQ7UyK46jinoETcsGcadduhBD1+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcER0VElyanFPS2VnUk55d1p4cDEyNkVFUFg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hZTUyMDYtYzg0My00YmQ1LTg4NjAt NzFlOTViMDRiM2VjLzEvcER0VElyanFPS2VnUk55d1p4cDEyNkVFUFg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9hZTUyMDYtYzg0My00YmQ1LTg4NjAtNzFlOTViMDRiM2Vj LzEvcER0VElyanFPS2VnUk55d1p4cDEyNkVFUFg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8SXy5Ui kj19aTeO8HclaWHDCzeMXc+3GJEh5W1Q8gkoFGiPrT3zitZ1eL3iLTLr9W1IW64x wzAK1zaCOPWp/l90p0z3mdYxlIMMl5jQDZ8v1BxxPgIaxhgwhRCmZIRQ6jPf892A Dn9Zyl6cLGOOG8xroHywgd4SF/IR3X63s0WLmeKa5P7BGyKb2is7VtW8Lz4hE8vc TKhAekauEP3y9pkTZKARf144AxNsEAHPCpJES8hWwHuJUOJtV7vc2tzxwG24Y7rW AdPs5M3hyU/vE0wVCuYgaJCZap+9Wz1ozAlGxoNztN5HxGR9CyYEC1C1146MiD3w HC30FhEGmdZfDQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:08:58 2026 by rpki-client