This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft File: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft (raw, json) Hash identifier: P2e/vyPyv5ch8NK9SpBCa2PxnY2h42Z6pF8aMkOWvZo= Subject key identifier: E5:ED:13:E5:42:A7:D6:29:D5:23:14:1B:58:6B:6E:0A:7E:83:BB:D5 Authority key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E Certificate issuer: /CN=a50f21c3dc93757fc03282a835600d659f961e8e Certificate serial: 019BF988F072B6F6AF4AA520AA869DE83900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft Manifest number: 0CCC Signing time: Mon 26 Jan 2026 09:00:59 +0000 Manifest this update: Mon 26 Jan 2026 09:00:59 +0000 Manifest next update: Tue 27 Jan 2026 09:00:59 +0000 Files and hashes: 1: IyFwnbWnoKfZVMOw4siaFLOw0dM.roa (hash: I/fImPBHiDykSEzgNGq+cfAayabaV17LU6Onzjp6x+A=) 2: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl (hash: IKEpeIgP4b4ibFZOaV4a522OQQQfspb9I6oDcfT49MM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:88:f0:72:b6:f6:af:4a:a5:20:aa:86:9d:e8:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a50f21c3dc93757fc03282a835600d659f961e8e Validity Not Before: Jan 26 09:00:59 2026 GMT Not After : Jan 27 09:00:59 2026 GMT Subject: CN=e5ed13e542a7d629d523141b586b6e0a7e83bbd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ed:ad:ee:5c:4a:b1:3e:e0:67:4d:7f:ad:06: be:ac:1a:2c:ff:78:98:52:7d:68:46:96:64:8a:12: c5:6e:15:4b:67:e7:d9:8b:b5:37:c5:10:1f:0b:30: 43:39:94:d6:63:4b:92:bd:db:40:27:a7:8b:98:d0: 81:4b:05:91:f9:85:89:d1:c9:8e:4a:d7:7a:58:5c: ff:83:ea:00:f1:49:1b:fe:6b:db:8c:25:e4:b4:78: 3b:33:35:fb:32:1f:0b:4c:a6:f2:52:53:58:13:8a: d6:cd:08:91:e5:d2:89:b4:62:33:be:57:60:e7:c0: b2:64:02:c1:2a:1f:f6:ec:bd:f1:64:c3:b3:41:82: 2e:d6:ea:94:43:2d:95:ae:94:5b:12:b3:66:ce:94: f8:36:40:a3:82:65:4d:cd:85:b3:c1:82:73:ec:75: f6:dd:a4:2d:b5:05:f8:c2:db:6d:3a:73:b4:87:55: b5:80:87:e2:41:2b:4b:06:97:b0:fa:a8:8a:9d:38: 64:46:7c:aa:f4:5c:59:19:90:4c:b2:ba:52:64:36: 23:67:d4:1e:d8:b3:7a:1f:ae:ac:28:37:fc:28:5b: be:9e:df:05:d1:e2:37:78:9b:bb:44:45:8d:fb:72: fd:b4:3c:97:ea:5e:6e:1f:c4:48:e7:36:b7:ee:5a: 52:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:ED:13:E5:42:A7:D6:29:D5:23:14:1B:58:6B:6E:0A:7E:83:BB:D5 X509v3 Authority Key Identifier: keyid:A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:e3:ed:21:a2:eb:f8:90:72:17:7f:3f:95:18:1c:ef:f0:8e: 5a:fd:24:e2:3c:77:03:da:51:00:3e:fd:24:c0:d6:f0:f6:0b: 1d:a8:6c:24:a2:f3:16:5f:d1:5e:b7:16:e7:23:1e:fe:e3:5c: d1:63:76:cf:15:de:33:a2:0f:3d:6b:81:38:e8:bd:71:2e:2e: ea:e5:99:e5:61:e5:29:2a:74:fc:1d:c3:e4:44:af:f1:ec:a7: 09:17:cd:a7:c4:69:0c:3a:a1:c7:b4:cb:7b:c3:69:b3:8a:22: 91:c5:60:7e:9d:4c:bc:89:ca:67:ed:fc:a9:9f:38:71:a9:a8: d6:8d:28:78:bb:c1:cd:68:1c:62:80:a4:12:95:e9:ce:ff:22: 60:5a:8d:76:7f:7f:11:e6:be:6c:94:46:20:67:a6:23:de:f7: a4:0a:e2:36:f4:8e:f4:fb:f7:b0:20:fe:e1:3f:82:13:0e:19: 6b:4a:84:8d:7e:2a:53:e0:eb:5a:4e:43:d6:63:2f:90:19:02: 94:ec:bc:3b:12:cf:f3:bd:16:99:a1:08:f0:6d:9c:ff:77:f8: 45:6b:43:67:91:06:59:39:84:e4:2a:65:9c:fd:54:87:99:9f: 93:7c:cf:78:d7:e7:22:49:81:2a:78:f1:86:1c:5f:8f:96:44: cc:c8:8c:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iPBytvavSqUgqoad6DkAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MGYyMWMzZGM5Mzc1N2ZjMDMyODJhODM1NjAwZDY1OWY5 NjFlOGUwHhcNMjYwMTI2MDkwMDU5WhcNMjYwMTI3MDkwMDU5WjAzMTEwLwYDVQQD EyhlNWVkMTNlNTQyYTdkNjI5ZDUyMzE0MWI1ODZiNmUwYTdlODNiYmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu2t7lxKsT7gZ01/rQa+rBos/3iY Un1oRpZkihLFbhVLZ+fZi7U3xRAfCzBDOZTWY0uSvdtAJ6eLmNCBSwWR+YWJ0cmO Std6WFz/g+oA8Ukb/mvbjCXktHg7MzX7Mh8LTKbyUlNYE4rWzQiR5dKJtGIzvldg 58CyZALBKh/27L3xZMOzQYIu1uqUQy2VrpRbErNmzpT4NkCjgmVNzYWzwYJz7HX2 3aQttQX4wtttOnO0h1W1gIfiQStLBpew+qiKnThkRnyq9FxZGZBMsrpSZDYjZ9Qe 2LN6H66sKDf8KFu+nt8F0eI3eJu7REWN+3L9tDyX6l5uH8RI5za37lpSQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXtE+VCp9Yp1SMUG1hrbgp+g7vVMB8GA1UdIwQY MBaAFKUPIcPck3V/wDKCqDVgDWWflh6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFE4aHc5eVRkWF9BTW9Lb05XQU5aWi1XSG80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9lYTFkZjctODA4YS00N2MzLWFlNTEt YjA4NDNlYzM4ODIzLzEvcFE4aHc5eVRkWF9BTW9Lb05XQU5aWi1XSG80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9lYTFkZjctODA4YS00N2MzLWFlNTEtYjA4NDNlYzM4ODIz LzEvcFE4aHc5eVRkWF9BTW9Lb05XQU5aWi1XSG80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUuPtIaLr +JByF38/lRgc7/COWv0k4jx3A9pRAD79JMDW8PYLHahsJKLzFl/RXrcW5yMe/uNc 0WN2zxXeM6IPPWuBOOi9cS4u6uWZ5WHlKSp0/B3D5ESv8eynCRfNp8RpDDqhx7TL e8Nps4oikcVgfp1MvInKZ+38qZ84camo1o0oeLvBzWgcYoCkEpXpzv8iYFqNdn9/ Eea+bJRGIGemI973pAriNvSO9Pv3sCD+4T+CEw4Za0qEjX4qU+DrWk5D1mMvkBkC lOy8OxLP870WmaEI8G2c/3f4RWtDZ5EGWTmE5CplnP1Uh5mfk3zPeNfnIkmBKnjx hhxfj5ZEzMiMBA== -----END CERTIFICATE-----Generated at Mon Jan 26 12:36:39 2026 by rpki-client