This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft File: a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json) Hash identifier: eagXE+dCBY5moySbUDeRTDeAX6swd+2OMU6bGEM4glw= Subject key identifier: 3E:04:74:A7:6D:AE:71:20:C7:D1:45:D8:FB:18:00:9F:14:48:77:0F Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa Certificate serial: 019BF72D5EF21B372D19A06E6DB2CAD2ABFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 22:01:44 +0000 Manifest this update: Sun 25 Jan 2026 22:01:44 +0000 Manifest next update: Mon 26 Jan 2026 22:01:44 +0000 Files and hashes: 1: 23Zi6Py4gat9DXMFNsAI-_q8-4M.roa (hash: JvpZNhbX4GuKh0NLAnQpWeYECOq74QqIFmrg5zgTOUo=) 2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: syb6Qvw47KlQD8wXyjqcqIupp6nLFbI2XPyoE+pTe90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:5e:f2:1b:37:2d:19:a0:6e:6d:b2:ca:d2:ab:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa Validity Not Before: Jan 25 22:01:44 2026 GMT Not After : Jan 26 22:01:44 2026 GMT Subject: CN=3e0474a76dae7120c7d145d8fb18009f1448770f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bb:3e:ba:9b:f7:c6:3f:ee:16:48:6d:3d:94: 9b:ca:65:29:63:37:bc:b0:e5:4f:7c:63:95:fe:a1: 62:ed:10:63:e8:05:e7:1c:27:3e:c9:bb:96:1c:0d: 94:0c:34:bd:e7:4e:c5:7e:3f:ae:86:f9:25:cb:25: b3:e5:ea:85:de:90:e8:35:c2:a1:a5:2f:98:e3:11: 8e:73:b1:9b:3e:be:f2:25:6f:0f:66:ca:07:53:ae: a5:4d:22:d6:fa:a2:c9:2e:19:d3:e8:7f:32:50:89: 20:6e:a2:9e:ae:d3:d6:b3:e8:a3:f8:e2:76:43:be: e9:ea:b1:4f:41:f6:0a:de:f9:c0:79:b1:ab:0f:44: f5:09:70:76:1d:0e:e9:31:dc:6d:d8:0b:67:fe:ba: bc:83:c6:bf:0a:b4:bd:d6:72:36:92:60:60:cd:ff: 63:44:0b:08:d2:b3:69:97:b8:de:fc:96:49:9f:68: 8c:69:52:9a:e7:07:5c:33:e6:6f:fb:c6:6d:de:61: 89:5b:a5:34:1f:09:74:a0:f6:fd:2d:50:7d:cc:29: c6:a7:2a:5f:84:d9:a2:3d:38:07:43:c8:e8:fe:bc: fb:ab:66:4d:b4:a8:28:1b:6b:81:58:08:15:09:71: f6:78:b0:71:4a:d2:db:21:d3:73:15:aa:5e:f9:26: 87:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:04:74:A7:6D:AE:71:20:C7:D1:45:D8:FB:18:00:9F:14:48:77:0F X509v3 Authority Key Identifier: keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:9a:98:e8:7a:f5:d8:d2:49:4a:1a:7b:79:4a:b8:e4:25:ed: d1:fc:00:c2:ba:e9:b0:fc:b6:d4:59:b4:7d:87:e8:6c:d3:10: f9:14:e7:15:07:60:74:62:0d:97:6e:37:8a:df:a6:16:3f:46: 4a:8a:1d:b1:33:78:56:3e:80:a7:e2:b7:75:73:60:fb:a0:cc: f8:00:c1:87:66:bf:a2:c8:e4:b1:98:ca:6e:09:5d:0e:52:a9: a3:54:58:ac:f8:df:f8:e8:c9:83:05:8f:8e:86:b1:50:f0:ef: 46:0f:08:9d:ad:59:96:81:67:4a:58:33:2d:c4:54:dd:19:8f: 77:de:0e:51:2a:1d:b3:21:79:4c:ce:43:3c:85:fe:3d:f8:25: 4a:d2:72:5b:43:71:36:5c:41:eb:9b:04:f1:e3:c3:e8:17:9c: 99:ee:ca:4f:ea:a2:a0:94:05:6e:b3:dd:8f:f0:a3:c5:54:8b: d6:36:cc:19:55:9c:43:99:99:c7:70:70:7e:05:0e:bb:4f:c1: 4a:1e:37:ae:ef:55:c3:8b:16:5c:4b:13:f0:b6:61:43:bc:7f: 1d:7b:39:88:a0:71:e0:8d:d1:5d:75:bb:e6:66:bb:0d:64:5f: cb:52:50:99:1e:88:aa:9f:e4:5a:fb:88:8e:59:c4:05:c1:c6: 5b:52:d5:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LV7yGzctGaBubbLK0qv+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNjZjNTNiMTM1NjZkMDFjNGE4OTNhZGYxMzBiYmI0ZmEx NjUzYWEwHhcNMjYwMTI1MjIwMTQ0WhcNMjYwMTI2MjIwMTQ0WjAzMTEwLwYDVQQD EygzZTA0NzRhNzZkYWU3MTIwYzdkMTQ1ZDhmYjE4MDA5ZjE0NDg3NzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLs+upv3xj/uFkhtPZSbymUpYze8 sOVPfGOV/qFi7RBj6AXnHCc+ybuWHA2UDDS9507Ffj+uhvklyyWz5eqF3pDoNcKh pS+Y4xGOc7GbPr7yJW8PZsoHU66lTSLW+qLJLhnT6H8yUIkgbqKertPWs+ij+OJ2 Q77p6rFPQfYK3vnAebGrD0T1CXB2HQ7pMdxt2Atn/rq8g8a/CrS91nI2kmBgzf9j RAsI0rNpl7je/JZJn2iMaVKa5wdcM+Zv+8Zt3mGJW6U0Hwl0oPb9LVB9zCnGpypf hNmiPTgHQ8jo/rz7q2ZNtKgoG2uBWAgVCXH2eLBxStLbIdNzFape+SaH+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4EdKdtrnEgx9FF2PsYAJ8USHcPMB8GA1UdIwQY MBaAFGtmxTsTVm0BxKiTrfEwu7T6FlOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82ZTVmZjEtMzlmOS00NjZiLTgyN2Yt N2JjMjY4YTBiNTE3LzEvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC82ZTVmZjEtMzlmOS00NjZiLTgyN2YtN2JjMjY4YTBiNTE3 LzEvYTJiRk94TldiUUhFcUpPdDhUQzd0UG9XVTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZqY6Hr1 2NJJShp7eUq45CXt0fwAwrrpsPy21Fm0fYfobNMQ+RTnFQdgdGINl243it+mFj9G SoodsTN4Vj6Ap+K3dXNg+6DM+ADBh2a/osjksZjKbgldDlKpo1RYrPjf+OjJgwWP joaxUPDvRg8Ina1ZloFnSlgzLcRU3RmPd94OUSodsyF5TM5DPIX+PfglStJyW0Nx NlxB65sE8ePD6Becme7KT+qioJQFbrPdj/CjxVSL1jbMGVWcQ5mZx3BwfgUOu0/B Sh43ru9Vw4sWXEsT8LZhQ7x/HXs5iKBx4I3RXXW75ma7DWRfy1JQmR6Iqp/kWvuI jlnEBcHGW1LVDA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:18 2026 by rpki-client