This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft File: a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json) Hash identifier: tS2XE9hbxSEiijwRVSE9fC3zYJuQezfr14S4yTOBmBQ= Subject key identifier: E6:ED:C5:E2:41:22:3C:E4:DA:5B:7E:04:48:E8:CF:50:3A:80:9A:24 Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB Certificate issuer: /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb Certificate serial: 019BF80878DD3862654F46CAFA9FDFC56F50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft Manifest number: 16E4 Signing time: Mon 26 Jan 2026 02:01:03 +0000 Manifest this update: Mon 26 Jan 2026 02:01:03 +0000 Manifest next update: Tue 27 Jan 2026 02:01:03 +0000 Files and hashes: 1: CaMOrAz-3VjPqu-gbyeJ5_Cx7NM.roa (hash: rD2u98MLb0jiD+OOiIWSkvqJ6RlBaZKAcES5KA3b+A4=) 2: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: +ostiw03St3xs7XaAouu88nI3IOs/9OnMtH7gMJ+oBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 02:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:78:dd:38:62:65:4f:46:ca:fa:9f:df:c5:6f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb Validity Not Before: Jan 26 02:01:03 2026 GMT Not After : Jan 27 02:01:03 2026 GMT Subject: CN=e6edc5e241223ce4da5b7e0448e8cf503a809a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:35:04:98:5a:55:f9:e8:98:cf:17:17:51:0d: 79:98:b7:7e:70:14:92:b1:37:d8:8d:f2:f5:10:48: 21:aa:4b:7f:d6:2a:a9:2f:61:62:b1:2f:d6:ea:ff: 54:df:cb:09:c9:5a:d4:7b:16:87:f8:45:4a:32:dc: b3:ff:be:35:27:a1:86:5f:fe:48:64:55:80:29:26: 0e:98:1d:ed:7e:21:65:da:f6:b5:d6:98:0e:5f:0f: f8:fd:52:6e:e3:07:a5:00:c1:b5:d6:a9:d9:2f:76: c6:e6:4b:4c:e2:48:ef:cb:7c:de:c6:f0:0f:d3:b3: 56:97:ee:18:09:40:b9:a4:66:38:b9:d2:59:99:13: 68:af:89:c3:93:6c:bf:07:3e:63:c5:a3:74:35:64: 2f:57:a7:1e:08:fd:f2:0a:a1:16:30:cc:c4:68:2e: ee:10:51:5b:b9:5b:a9:ad:cf:61:1a:fb:97:5c:4f: 94:4d:d9:b5:17:e4:8d:e2:3d:5f:e0:e2:98:6e:62: a6:2d:ff:bf:74:04:84:c8:72:05:9b:8d:fd:48:b2: a4:7a:eb:5a:a5:78:87:f2:7a:f7:e2:77:9a:02:1f: 69:0f:a9:ba:01:d2:d0:d9:7a:77:b4:bf:bc:c2:a0: 95:fa:c8:1e:9c:5a:19:0d:1a:e7:9f:67:97:73:a2: 8f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:ED:C5:E2:41:22:3C:E4:DA:5B:7E:04:48:E8:CF:50:3A:80:9A:24 X509v3 Authority Key Identifier: keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:a6:99:8b:7c:c3:2f:b8:02:ed:b4:a2:3b:f3:38:cd:a7:21: 81:b1:3d:26:0f:6a:b3:17:ee:ba:19:9b:bc:2e:43:cb:19:ee: e9:46:a7:27:16:e3:c4:f0:15:d7:d0:a4:9c:d9:1c:29:ba:d5: a8:a7:8f:70:e2:96:a4:35:bc:59:4d:0e:74:b4:67:8a:a4:0b: 3e:e9:53:b7:d9:b2:3f:58:f8:6c:25:32:ef:a0:fe:38:f2:1f: a1:c9:44:db:dc:30:f0:70:df:d0:3d:67:5d:76:6a:e7:bb:92: ff:7b:82:a1:63:55:64:0b:e2:c9:a0:f3:52:22:d0:94:02:6f: 96:0b:aa:3d:30:0e:e9:8c:7d:bf:95:34:be:13:9e:78:48:bd: f9:f0:83:31:bf:35:71:ff:5b:ca:10:e3:13:17:82:51:fd:60: d9:8d:0b:1d:31:a3:56:f8:62:3d:e8:d2:6d:b2:b4:95:c9:26: fd:d3:ea:59:e6:d0:d8:6e:6b:8d:ad:90:a7:3e:21:9a:a7:f8: 07:ea:e5:f8:36:d8:49:af:e0:59:65:ff:2d:0a:48:3f:79:5a: 53:76:bd:77:bf:20:1f:5d:51:e8:71:64:5a:33:79:7e:3b:2d: bb:e5:1e:22:04:78:e5:e9:55:26:ed:4d:78:71:29:5f:2c:c4: 23:63:87:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CHjdOGJlT0bK+p/fxW9QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiY2JkYjZmZDM5ZTc2ZjAwNDg0MDEyZTEzMTQ2YjIxODc1 NWMzZmIwHhcNMjYwMTI2MDIwMTAzWhcNMjYwMTI3MDIwMTAzWjAzMTEwLwYDVQQD EyhlNmVkYzVlMjQxMjIzY2U0ZGE1YjdlMDQ0OGU4Y2Y1MDNhODA5YTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTUEmFpV+eiYzxcXUQ15mLd+cBSS sTfYjfL1EEghqkt/1iqpL2FisS/W6v9U38sJyVrUexaH+EVKMtyz/741J6GGX/5I ZFWAKSYOmB3tfiFl2va11pgOXw/4/VJu4welAMG11qnZL3bG5ktM4kjvy3zexvAP 07NWl+4YCUC5pGY4udJZmRNor4nDk2y/Bz5jxaN0NWQvV6ceCP3yCqEWMMzEaC7u EFFbuVuprc9hGvuXXE+UTdm1F+SN4j1f4OKYbmKmLf+/dASEyHIFm439SLKkeuta pXiH8nr34neaAh9pD6m6AdLQ2Xp3tL+8wqCV+sgenFoZDRrnn2eXc6KPjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObtxeJBIjzk2lt+BEjoz1A6gJokMB8GA1UdIwQY MBaAFGvL22/TnnbwBIQBLhMUayGHVcP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83NGQ4NzYtMDVhOC00YjEwLTkwZTIt YzlkYTAzMGFmMzI2LzEvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83NGQ4NzYtMDVhOC00YjEwLTkwZTItYzlkYTAzMGFmMzI2 LzEvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqaZi3zD L7gC7bSiO/M4zachgbE9Jg9qsxfuuhmbvC5Dyxnu6UanJxbjxPAV19CknNkcKbrV qKePcOKWpDW8WU0OdLRniqQLPulTt9myP1j4bCUy76D+OPIfoclE29ww8HDf0D1n XXZq57uS/3uCoWNVZAviyaDzUiLQlAJvlguqPTAO6Yx9v5U0vhOeeEi9+fCDMb81 cf9byhDjExeCUf1g2Y0LHTGjVvhiPejSbbK0lckm/dPqWebQ2G5rja2Qpz4hmqf4 B+rl+DbYSa/gWWX/LQpIP3laU3a9d78gH11R6HFkWjN5fjstu+UeIgR45elVJu1N eHEpXyzEI2OHbw== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:08 2026 by rpki-client