This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft File: Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json) Hash identifier: BC7cVkxQG+WmE9J5Udvp4etJgnYzDO6QmmH4yYTRjpw= Subject key identifier: E5:CA:1D:14:0A:D9:31:86:7C:D4:04:18:42:FA:9B:A8:59:2B:AD:97 Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f Certificate serial: 019BF8085F548BB2648BBA673D4607C5D9CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft Manifest number: 08B0 Signing time: Mon 26 Jan 2026 02:00:56 +0000 Manifest this update: Mon 26 Jan 2026 02:00:56 +0000 Manifest next update: Tue 27 Jan 2026 02:00:56 +0000 Files and hashes: 1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: ueozuvT+gxpOeoSmkakYUBs0KSuNW1agK4rWQjU3sbg=) 2: zUhUpuiJQjYFriCknaMoHa_j9nc.roa (hash: nBYPwfayco1MFhHmBX7gPY3k4pTwilgUn82s5ypu69Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:5f:54:8b:b2:64:8b:ba:67:3d:46:07:c5:d9:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f Validity Not Before: Jan 26 02:00:56 2026 GMT Not After : Jan 27 02:00:56 2026 GMT Subject: CN=e5ca1d140ad931867cd4041842fa9ba8592bad97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:52:f4:b4:f6:00:35:6c:4e:e8:be:04:05:87: 2d:94:49:64:e4:bd:9b:46:c7:1c:e2:d8:f4:ec:77: fe:d7:27:5e:cb:2d:2c:37:8c:78:4e:85:0a:85:f0: 4a:fa:cd:6e:ff:04:e9:62:3d:f5:da:9f:64:46:da: 48:ef:92:10:86:06:64:79:be:7a:0c:46:6c:50:23: 34:36:91:05:b3:c5:89:e0:66:77:b5:de:0c:c1:d5: 80:5d:c8:0f:15:e9:d1:6b:be:c2:c8:5b:2f:4d:5f: cf:5a:4b:d2:96:8d:fd:b5:b3:cc:37:fd:7d:48:31: 15:25:24:ad:5a:65:11:c7:71:2a:7f:e4:16:e8:2c: 55:19:59:84:1d:82:f9:87:9a:b3:ae:1d:6f:76:57: 7b:7f:fe:87:6a:88:de:d1:c3:7b:20:51:cc:65:22: a7:84:d4:7c:3f:3c:c3:17:ac:2a:08:6f:df:13:bc: 63:95:ca:43:2b:97:4a:1e:63:5b:89:68:44:63:25: b4:46:05:ba:70:7f:ff:92:83:26:6f:46:fa:e8:35: e6:46:79:c7:20:29:a5:7e:e2:88:70:1b:6f:e5:2f: bf:5d:a5:b2:4c:ad:5f:68:b5:1e:5f:b8:9c:58:ee: 0b:84:ef:14:6c:9f:96:b4:a2:4c:49:31:5e:38:e4: 36:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CA:1D:14:0A:D9:31:86:7C:D4:04:18:42:FA:9B:A8:59:2B:AD:97 X509v3 Authority Key Identifier: keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:94:c4:c8:82:a8:8f:4a:43:1f:33:78:12:a5:70:a9:a7:a5: c9:b5:43:26:99:47:fc:25:66:7c:e0:d4:39:6e:2a:53:f4:28: 92:11:ef:24:73:3b:e1:4b:fd:b5:4a:dd:ce:1f:2a:fb:43:8e: 23:ff:2f:7b:16:96:8d:f2:8a:39:4a:68:ce:c4:eb:9e:64:e9: 54:da:8b:ed:2c:f2:e9:8c:85:61:79:3c:8a:bf:f3:9e:7d:be: ae:49:31:3d:31:4a:5b:be:27:01:d3:3e:af:41:1e:fe:8c:6b: ca:a6:15:ba:ea:4d:c6:24:35:45:2d:07:90:da:58:e7:96:4b: 66:54:98:bd:8c:a4:fa:17:18:8d:5f:19:a1:f6:42:b4:02:b1: b1:13:d5:f7:25:14:c5:ad:36:9f:88:f7:22:7a:24:07:92:2f: 3d:05:18:a4:c6:3e:59:b4:5d:7b:11:b7:70:c3:06:28:72:bb: f7:81:eb:c4:0a:75:e0:d0:09:68:01:c6:87:a0:1f:f1:fe:ff: eb:57:67:a0:10:e4:5b:72:75:03:df:94:e4:b1:81:bc:0d:ba: 6a:84:60:79:f4:f2:31:18:e7:80:1e:b9:14:63:48:9e:61:23: 17:7e:35:a8:07:3c:f6:8e:2e:da:d7:52:3f:90:be:99:4e:53: e8:0f:7c:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CF9Ui7Jki7pnPUYHxdnLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMmU3NmU4OTk0YjY2NjEzNzQ4ZTAyMWI1ZjQwMDdmMDFi NTRkNGYwHhcNMjYwMTI2MDIwMDU2WhcNMjYwMTI3MDIwMDU2WjAzMTEwLwYDVQQD EyhlNWNhMWQxNDBhZDkzMTg2N2NkNDA0MTg0MmZhOWJhODU5MmJhZDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVL0tPYANWxO6L4EBYctlElk5L2b Rscc4tj07Hf+1ydeyy0sN4x4ToUKhfBK+s1u/wTpYj312p9kRtpI75IQhgZkeb56 DEZsUCM0NpEFs8WJ4GZ3td4MwdWAXcgPFenRa77CyFsvTV/PWkvSlo39tbPMN/19 SDEVJSStWmURx3Eqf+QW6CxVGVmEHYL5h5qzrh1vdld7f/6Haoje0cN7IFHMZSKn hNR8PzzDF6wqCG/fE7xjlcpDK5dKHmNbiWhEYyW0RgW6cH//koMmb0b66DXmRnnH ICmlfuKIcBtv5S+/XaWyTK1faLUeX7icWO4LhO8UbJ+WtKJMSTFeOOQ2JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXKHRQK2TGGfNQEGEL6m6hZK62XMB8GA1UdIwQY MBaAFAIuduiZS2ZhN0jgIbX0AH8BtU1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjIt OTcxYjBjMDY1NDYwLzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjItOTcxYjBjMDY1NDYw LzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZTEyIKo j0pDHzN4EqVwqaelybVDJplH/CVmfODUOW4qU/QokhHvJHM74Uv9tUrdzh8q+0OO I/8vexaWjfKKOUpozsTrnmTpVNqL7Szy6YyFYXk8ir/znn2+rkkxPTFKW74nAdM+ r0Ee/oxryqYVuupNxiQ1RS0HkNpY55ZLZlSYvYyk+hcYjV8ZofZCtAKxsRPV9yUU xa02n4j3InokB5IvPQUYpMY+WbRdexG3cMMGKHK794HrxAp14NAJaAHGh6Af8f7/ 61dnoBDkW3J1A9+U5LGBvA26aoRgefTyMRjngB65FGNInmEjF341qAc89o4u2tdS P5C+mU5T6A98SA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:05 2026 by rpki-client