This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft File: 121x2IRdL-KWpG15F29ZDY208Wo.mft (raw, json) Hash identifier: nUfSvE2QP3LXs6ox2jo7XrzOfSpZQf3LEAXaT4h86G4= Subject key identifier: 5C:7C:21:90:3C:CA:C0:A8:86:AB:36:EA:C5:EA:A5:55:A3:26:D8:E1 Authority key identifier: D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A Certificate issuer: /CN=d76d71d8845d2fe296a46d79176f590d8db4f16a Certificate serial: 019BF83EE82C45775816141D69D6E7A50010 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft Manifest number: 17F2 Signing time: Mon 26 Jan 2026 03:00:30 +0000 Manifest this update: Mon 26 Jan 2026 03:00:30 +0000 Manifest next update: Tue 27 Jan 2026 03:00:30 +0000 Files and hashes: 1: 121x2IRdL-KWpG15F29ZDY208Wo.crl (hash: bAfC7v21tNlrYrx1YMAjL2RTEnYLtrrWNAyhsS2zzdY=) 2: PYC5VmfJr8R_CWcpbSFGWUPORN8.roa (hash: ni//q5JfG12C/jFNrjnRjeiKy+Pl48zK6T66mzOL5KA=) 3: x04dCWjItyDGXFoquqgz5jnrMRg.roa (hash: hVlcjFxSr+ykf+gKZRqjXZQpnt9aXT76dSufsRzsGvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3e:e8:2c:45:77:58:16:14:1d:69:d6:e7:a5:00:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76d71d8845d2fe296a46d79176f590d8db4f16a Validity Not Before: Jan 26 03:00:30 2026 GMT Not After : Jan 27 03:00:30 2026 GMT Subject: CN=5c7c21903ccac0a886ab36eac5eaa555a326d8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:83:2c:77:b4:6d:69:49:84:51:c6:11:8f:01: f4:02:8e:20:a3:95:26:f2:7d:cc:92:94:b3:6b:16: b2:60:01:c2:84:28:d3:da:39:57:67:0a:75:e9:a5: b2:81:01:4d:d2:bd:db:62:8e:9c:e8:96:64:fb:bc: 92:bd:29:06:e3:c8:d6:2a:ef:bf:2a:52:78:f8:ad: 86:af:ec:b5:ae:c7:5a:38:e5:0a:d7:c8:be:4c:06: 37:cc:70:60:c0:c1:f3:dc:6e:37:e8:50:2e:fc:14: e6:7d:96:a3:a4:bf:bf:3c:f4:2d:37:e7:79:4f:44: fe:68:df:41:df:b6:6f:65:eb:84:95:7e:64:43:3d: 38:dd:3c:4d:4d:5c:bb:ff:a1:bc:c9:71:c0:9a:cf: ef:96:bb:03:61:95:3a:c4:56:0d:da:fe:25:3c:bc: 6f:6d:86:44:aa:30:3f:88:ce:ae:19:c1:d5:8a:60: c6:54:66:af:39:93:7f:4a:71:15:ec:d7:39:10:cd: c6:e3:74:b9:46:0c:e9:84:60:7f:1e:30:b2:4e:22: 71:90:d6:3e:76:cf:19:ff:e6:6d:41:45:7c:5f:ee: c3:c1:11:58:69:4d:0c:ec:41:33:be:50:77:f1:3b: c1:90:61:e0:8a:bd:fb:d6:52:37:a9:c4:ef:31:4b: dd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7C:21:90:3C:CA:C0:A8:86:AB:36:EA:C5:EA:A5:55:A3:26:D8:E1 X509v3 Authority Key Identifier: keyid:D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:35:87:2d:fd:44:09:c4:c7:1f:b6:56:a8:3b:7f:24:2d:1b: 41:e3:b6:b7:e8:3b:9d:ef:74:5e:29:15:28:c8:79:8a:82:66: 24:e3:fb:78:72:09:a7:a7:38:db:55:0e:9a:84:cf:49:fe:f2: e7:a1:5a:9a:d9:9e:ea:36:17:1c:59:17:4b:ba:c6:3e:9a:8a: be:d5:1d:8a:fe:12:b3:8a:2e:c5:dd:22:7f:74:35:e8:00:be: 83:04:96:95:b1:50:33:42:df:a6:cf:50:31:ec:8a:a7:57:d2: 77:5c:0e:ce:61:49:43:94:7d:d5:d3:7c:ca:33:20:16:c2:9c: 90:e7:6d:09:16:be:14:5d:36:0b:7b:c8:6f:f5:c3:75:f4:bb: 81:06:cf:e9:14:dd:11:94:78:bd:75:ce:4e:e9:43:a3:c2:6c: 46:2c:4c:6d:72:e1:08:71:45:29:b3:d7:b2:b9:32:01:18:22: 68:57:e0:90:6e:22:9a:9b:22:51:96:c2:47:4c:b4:8c:f6:e2: 2a:bb:47:36:3a:b6:d8:4d:43:e7:70:4e:09:92:82:a5:ca:0c: 5a:18:7d:39:f6:f8:6f:38:95:64:d0:5c:8a:fb:aa:29:70:73: 9d:3b:1d:c6:6d:e0:ba:88:fc:ea:74:d6:3b:22:0d:ad:d0:90: 7d:40:17:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4PugsRXdYFhQdadbnpQAQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmQ3MWQ4ODQ1ZDJmZTI5NmE0NmQ3OTE3NmY1OTBkOGRi NGYxNmEwHhcNMjYwMTI2MDMwMDMwWhcNMjYwMTI3MDMwMDMwWjAzMTEwLwYDVQQD Eyg1YzdjMjE5MDNjY2FjMGE4ODZhYjM2ZWFjNWVhYTU1NWEzMjZkOGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4Msd7RtaUmEUcYRjwH0Ao4go5Um 8n3MkpSzaxayYAHChCjT2jlXZwp16aWygQFN0r3bYo6c6JZk+7ySvSkG48jWKu+/ KlJ4+K2Gr+y1rsdaOOUK18i+TAY3zHBgwMHz3G436FAu/BTmfZajpL+/PPQtN+d5 T0T+aN9B37ZvZeuElX5kQz043TxNTVy7/6G8yXHAms/vlrsDYZU6xFYN2v4lPLxv bYZEqjA/iM6uGcHVimDGVGavOZN/SnEV7Nc5EM3G43S5RgzphGB/HjCyTiJxkNY+ ds8Z/+ZtQUV8X+7DwRFYaU0M7EEzvlB38TvBkGHgir371lI3qcTvMUvdBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFx8IZA8ysCohqs26sXqpVWjJtjhMB8GA1UdIwQY MBaAFNdtcdiEXS/ilqRteRdvWQ2NtPFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTIxeDJJUmRMLUtXcEcxNUYyOVpEWTIwOFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lYzMxMDYtZTdiZi00Mjk5LWFlMTIt ZGJkOTFiMTExODQ0LzEvMTIxeDJJUmRMLUtXcEcxNUYyOVpEWTIwOFdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9lYzMxMDYtZTdiZi00Mjk5LWFlMTItZGJkOTFiMTExODQ0 LzEvMTIxeDJJUmRMLUtXcEcxNUYyOVpEWTIwOFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATWHLf1E CcTHH7ZWqDt/JC0bQeO2t+g7ne90XikVKMh5ioJmJOP7eHIJp6c421UOmoTPSf7y 56Famtme6jYXHFkXS7rGPpqKvtUdiv4Ss4ouxd0if3Q16AC+gwSWlbFQM0Lfps9Q MeyKp1fSd1wOzmFJQ5R91dN8yjMgFsKckOdtCRa+FF02C3vIb/XDdfS7gQbP6RTd EZR4vXXOTulDo8JsRixMbXLhCHFFKbPXsrkyARgiaFfgkG4impsiUZbCR0y0jPbi KrtHNjq22E1D53BOCZKCpcoMWhh9Ofb4bziVZNBcivuqKXBznTsdxm3guoj86nTW OyINrdCQfUAXsQ== -----END CERTIFICATE-----Generated at Mon Jan 26 12:25:35 2026 by rpki-client