This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft File: aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft (raw, json) Hash identifier: qvGLU5rvkpVxvXgqTeylRttTyPOTMjJVmVOzYu3zdr0= Subject key identifier: A0:A6:5E:8C:5E:72:C2:EB:B6:24:E0:51:D1:42:52:EC:77:F9:F8:FB Authority key identifier: 69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44 Certificate issuer: /CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44 Certificate serial: 019BF83F4685CB23292DDA7BC18CD250E904 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft Manifest number: 0510 Signing time: Mon 26 Jan 2026 03:00:54 +0000 Manifest this update: Mon 26 Jan 2026 03:00:54 +0000 Manifest next update: Tue 27 Jan 2026 03:00:54 +0000 Files and hashes: 1: aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl (hash: dqKnH8GnT+N4vmRqWbnIP056DuAABU7WxrEworkxYHQ=) 2: cpHuJJY8mhmaGPZw_OaTNbkNxdQ.roa (hash: UR08Hy/azzQ+483DEHzJsxzgFkrpBPCwomIM+T0eyWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:46:85:cb:23:29:2d:da:7b:c1:8c:d2:50:e9:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6912d04ab0c37a473b1fc81a369fc9ad5d9ffd44 Validity Not Before: Jan 26 03:00:54 2026 GMT Not After : Jan 27 03:00:54 2026 GMT Subject: CN=a0a65e8c5e72c2ebb624e051d14252ec77f9f8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:48:1c:62:0f:17:b3:ec:02:aa:43:10:4f:c0: 83:1b:72:8d:9b:62:18:42:0a:ad:de:55:ee:cd:3e: ee:d4:a6:b8:c8:10:60:ae:ab:26:91:4a:f5:a0:d3: 41:07:15:6e:70:6c:37:fb:1b:d8:af:8f:65:06:ad: 2b:1d:fc:f4:11:95:d8:4d:d7:d7:50:f0:b8:04:6d: 15:4f:47:78:4e:16:e3:48:a1:d9:1e:f1:70:99:7a: df:d5:a8:4e:48:41:5d:3f:36:15:2f:31:4d:4b:6a: e7:2d:dd:e8:2c:e3:46:f8:24:45:bc:93:46:de:cc: 64:c1:6d:9e:35:af:3e:0f:d7:54:9d:00:36:96:4c: e6:3d:d9:90:6a:5b:cc:f2:1a:8d:bf:6b:12:50:09: 8b:f5:7c:d9:80:06:13:b0:e6:3a:c1:83:79:ea:63: 13:58:3c:9d:b9:fa:96:fd:02:83:0b:cc:e0:b7:9e: b2:08:e3:cc:fe:c3:0d:22:4f:50:7c:3f:78:89:cf: 18:47:aa:22:63:67:57:2d:8d:2a:05:45:d2:89:41: c7:2c:42:6b:87:c7:28:a5:70:7a:a5:d8:9e:1d:40: 9a:31:82:7a:93:55:93:b9:02:e8:f1:b4:9a:7f:79: f9:16:20:96:ee:43:65:ab:52:7f:69:06:e8:b6:5b: cc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A6:5E:8C:5E:72:C2:EB:B6:24:E0:51:D1:42:52:EC:77:F9:F8:FB X509v3 Authority Key Identifier: keyid:69:12:D0:4A:B0:C3:7A:47:3B:1F:C8:1A:36:9F:C9:AD:5D:9F:FD:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRLQSrDDekc7H8gaNp_JrV2f_UQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/09b7de-ffb7-4d6b-b414-f21b4f11faf0/1/aRLQSrDDekc7H8gaNp_JrV2f_UQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:9d:db:c2:2b:cd:08:89:15:48:81:eb:4d:2b:d2:88:5f:be: eb:e7:d2:6f:e8:2c:23:89:b3:cd:3b:19:1a:63:66:ab:8a:53: cc:87:a4:da:ce:45:d4:b5:11:12:d9:cd:14:c8:13:3d:01:75: 1f:46:a2:33:58:15:47:92:45:5f:a6:20:a7:ec:08:77:6c:11: 05:ae:c6:be:8b:93:72:b9:83:61:a7:bb:75:7a:c3:d7:ff:ab: ed:67:0f:5a:b4:70:72:39:90:1f:74:1d:ef:ec:3c:3d:3d:0f: 9d:12:97:8c:3a:e6:0b:0c:61:47:4b:c3:5a:01:6d:3d:a4:72: 11:6c:3c:9e:9d:21:4c:bb:aa:13:ca:74:cc:62:fc:68:4a:44: 5e:58:e0:b5:05:97:1f:50:84:b9:55:58:21:41:c2:27:0a:0b: 76:d2:0b:af:7f:53:fb:f4:bf:dc:d3:3f:b8:22:07:03:11:a4: 08:2a:fe:13:37:f5:dd:6f:09:16:8e:81:64:95:d2:be:5b:7e: 83:a0:fb:3b:a5:14:45:c9:ce:89:7c:ea:50:fe:ad:93:30:6f: cf:c0:ba:0f:72:61:aa:e5:52:54:42:b2:e8:44:5c:18:73:9e: 4b:c9:20:cf:0e:ac:18:d1:87:76:82:06:e5:29:36:8b:ad:b2: 39:37:22:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P0aFyyMpLdp7wYzSUOkEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MTJkMDRhYjBjMzdhNDczYjFmYzgxYTM2OWZjOWFkNWQ5 ZmZkNDQwHhcNMjYwMTI2MDMwMDU0WhcNMjYwMTI3MDMwMDU0WjAzMTEwLwYDVQQD EyhhMGE2NWU4YzVlNzJjMmViYjYyNGUwNTFkMTQyNTJlYzc3ZjlmOGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0gcYg8Xs+wCqkMQT8CDG3KNm2IY Qgqt3lXuzT7u1Ka4yBBgrqsmkUr1oNNBBxVucGw3+xvYr49lBq0rHfz0EZXYTdfX UPC4BG0VT0d4ThbjSKHZHvFwmXrf1ahOSEFdPzYVLzFNS2rnLd3oLONG+CRFvJNG 3sxkwW2eNa8+D9dUnQA2lkzmPdmQalvM8hqNv2sSUAmL9XzZgAYTsOY6wYN56mMT WDydufqW/QKDC8zgt56yCOPM/sMNIk9QfD94ic8YR6oiY2dXLY0qBUXSiUHHLEJr h8copXB6pdieHUCaMYJ6k1WTuQLo8bSaf3n5FiCW7kNlq1J/aQbotlvMiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCmXoxecsLrtiTgUdFCUux3+fj7MB8GA1UdIwQY MBaAFGkS0Eqww3pHOx/IGjafya1dn/1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVJMUVNyRERla2M3SDhnYU5wX0pyVjJmX1VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wOWI3ZGUtZmZiNy00ZDZiLWI0MTQt ZjIxYjRmMTFmYWYwLzEvYVJMUVNyRERla2M3SDhnYU5wX0pyVjJmX1VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8wOWI3ZGUtZmZiNy00ZDZiLWI0MTQtZjIxYjRmMTFmYWYw LzEvYVJMUVNyRERla2M3SDhnYU5wX0pyVjJmX1VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJ3bwivN CIkVSIHrTSvSiF++6+fSb+gsI4mzzTsZGmNmq4pTzIek2s5F1LUREtnNFMgTPQF1 H0aiM1gVR5JFX6Ygp+wId2wRBa7GvouTcrmDYae7dXrD1/+r7WcPWrRwcjmQH3Qd 7+w8PT0PnRKXjDrmCwxhR0vDWgFtPaRyEWw8np0hTLuqE8p0zGL8aEpEXljgtQWX H1CEuVVYIUHCJwoLdtILr39T+/S/3NM/uCIHAxGkCCr+Ezf13W8JFo6BZJXSvlt+ g6D7O6UURcnOiXzqUP6tkzBvz8C6D3JhquVSVEKy6ERcGHOeS8kgzw6sGNGHdoIG 5Sk2i62yOTciHg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:51 2026 by rpki-client