This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft File: r2A0bQgbHFyBCzlMZuEFErv02Mk.mft (raw, json) Hash identifier: 3h9UB1yRG2vIqMqzXw8894Db1/zrp8vyhKD2QKe/c5E= Subject key identifier: FB:71:4E:F8:2E:DE:9F:11:37:AC:39:A4:C0:91:4D:C4:D6:AD:E7:6C Authority key identifier: AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9 Certificate issuer: /CN=af60346d081b1c5c810b394c66e10512bbf4d8c9 Certificate serial: 019BF83FA6457C50F98F08552F8361E2D943 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft Manifest number: 0503 Signing time: Mon 26 Jan 2026 03:01:19 +0000 Manifest this update: Mon 26 Jan 2026 03:01:19 +0000 Manifest next update: Tue 27 Jan 2026 03:01:19 +0000 Files and hashes: 1: MmHcaoSID19FRmGF5kFPH25PR2Q.roa (hash: Pv88TmQb3cGeVyGfPSrdF1R8Obs/Bo3T58FvtRvVnRM=) 2: r2A0bQgbHFyBCzlMZuEFErv02Mk.crl (hash: Yil8CRx6EutEJ7k8ru3y69i4kqnu4LjscVc5nY5lb84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:a6:45:7c:50:f9:8f:08:55:2f:83:61:e2:d9:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af60346d081b1c5c810b394c66e10512bbf4d8c9 Validity Not Before: Jan 26 03:01:19 2026 GMT Not After : Jan 27 03:01:19 2026 GMT Subject: CN=fb714ef82ede9f1137ac39a4c0914dc4d6ade76c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1f:cd:83:2f:9d:7a:90:c2:5c:b8:ed:2f:f7: a8:69:28:65:5f:6d:e3:b2:01:fa:46:66:a9:20:ef: 28:08:03:d0:04:03:d8:a6:e6:65:79:f8:3b:cb:e4: 26:d9:59:d7:80:16:72:52:e7:be:60:51:9f:c1:2b: 50:8c:e6:da:cd:61:20:d5:36:54:b4:6a:f6:ca:df: 18:f0:3f:2d:87:96:f4:0e:ea:57:3f:f5:3d:ac:ec: 67:92:57:34:e1:33:c1:a1:41:4c:c3:32:26:b4:00: 43:74:5e:dd:86:2d:cc:d0:15:a1:8e:41:fb:5e:f5: c9:dc:9f:0e:f8:19:ee:93:db:44:fb:bb:96:68:ea: fe:92:6c:78:46:a2:83:16:d9:93:99:2c:1e:04:cc: 4c:3a:c1:eb:d1:7c:cd:9b:9a:6b:66:f2:43:04:b9: 79:ec:d3:f4:06:fd:a9:00:00:e4:f7:d2:cf:6f:3f: 0f:20:dd:fb:ff:13:fd:56:c9:fc:40:b8:ce:22:d7: d0:3e:0e:54:35:4a:91:5c:f4:da:eb:dc:3f:de:bf: d7:9d:cf:07:d2:f6:f0:21:fe:c6:fd:11:d8:bd:6c: f1:bc:7d:7d:a5:01:2c:09:70:1f:61:fe:89:17:32: 9f:09:ad:47:25:85:0a:3e:f8:20:3a:dd:6b:c9:59: 6f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:71:4E:F8:2E:DE:9F:11:37:AC:39:A4:C0:91:4D:C4:D6:AD:E7:6C X509v3 Authority Key Identifier: keyid:AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:6a:bf:03:d4:b6:2e:37:04:cc:77:45:6d:7c:89:75:13:ce: 55:02:74:80:32:7e:ff:c0:c9:0e:1b:45:a5:e5:ea:0e:cb:0d: b1:5c:28:1e:1e:dd:ce:e0:8f:b5:20:e2:14:f4:c2:7f:c5:04: 6e:4d:f1:8b:13:eb:2a:94:d0:ce:d9:e2:df:d8:ae:a0:6f:77: 33:74:93:d9:65:da:5d:5f:51:46:ab:7b:82:3a:08:23:ce:6c: 6a:95:6c:22:f6:9d:5d:09:3e:53:86:85:54:7b:ce:3a:e5:86: f1:1e:39:32:1b:21:d7:34:71:38:1c:1b:05:90:1f:62:92:7d: 89:17:bf:1e:78:fa:4e:c2:aa:48:69:b0:39:eb:2c:f7:fe:ee: 9e:b1:4e:95:dd:b2:83:10:6d:6b:a4:e9:08:84:8c:2e:c5:48: ef:11:a1:eb:f3:28:46:8a:40:98:d4:75:8f:3c:8f:26:60:5e: e4:e3:52:92:0c:7a:5a:69:90:fb:87:e1:ab:69:bb:e8:c0:56: 22:04:e7:b2:e0:d6:a4:dc:67:79:59:23:8b:0d:ba:0e:4b:b7: be:76:03:93:8f:18:7e:9b:d0:08:5b:43:4a:fb:b3:3f:9b:ee: b9:c1:24:f6:4c:89:95:97:50:b9:dd:f6:29:f0:1b:ea:ea:0d: aa:ee:d2:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P6ZFfFD5jwhVL4Nh4tlDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNjAzNDZkMDgxYjFjNWM4MTBiMzk0YzY2ZTEwNTEyYmJm NGQ4YzkwHhcNMjYwMTI2MDMwMTE5WhcNMjYwMTI3MDMwMTE5WjAzMTEwLwYDVQQD EyhmYjcxNGVmODJlZGU5ZjExMzdhYzM5YTRjMDkxNGRjNGQ2YWRlNzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh/Ngy+depDCXLjtL/eoaShlX23j sgH6RmapIO8oCAPQBAPYpuZlefg7y+Qm2VnXgBZyUue+YFGfwStQjObazWEg1TZU tGr2yt8Y8D8th5b0DupXP/U9rOxnklc04TPBoUFMwzImtABDdF7dhi3M0BWhjkH7 XvXJ3J8O+Bnuk9tE+7uWaOr+kmx4RqKDFtmTmSweBMxMOsHr0XzNm5prZvJDBLl5 7NP0Bv2pAADk99LPbz8PIN37/xP9Vsn8QLjOItfQPg5UNUqRXPTa69w/3r/Xnc8H 0vbwIf7G/RHYvWzxvH19pQEsCXAfYf6JFzKfCa1HJYUKPvggOt1ryVlvVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtxTvgu3p8RN6w5pMCRTcTWredsMB8GA1UdIwQY MBaAFK9gNG0IGxxcgQs5TGbhBRK79NjJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjJBMGJRZ2JIRnlCQ3psTVp1RUZFcnYwMk1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iNjYwZjQtODhjYi00NWYzLWE3MWEt MjYzOTgzOWY4MjhkLzEvcjJBMGJRZ2JIRnlCQ3psTVp1RUZFcnYwMk1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9iNjYwZjQtODhjYi00NWYzLWE3MWEtMjYzOTgzOWY4Mjhk LzEvcjJBMGJRZ2JIRnlCQ3psTVp1RUZFcnYwMk1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2q/A9S2 LjcEzHdFbXyJdRPOVQJ0gDJ+/8DJDhtFpeXqDssNsVwoHh7dzuCPtSDiFPTCf8UE bk3xixPrKpTQztni39iuoG93M3ST2WXaXV9RRqt7gjoII85sapVsIvadXQk+U4aF VHvOOuWG8R45Mhsh1zRxOBwbBZAfYpJ9iRe/Hnj6TsKqSGmwOess9/7unrFOld2y gxBta6TpCISMLsVI7xGh6/MoRopAmNR1jzyPJmBe5ONSkgx6WmmQ+4fhq2m76MBW IgTnsuDWpNxneVkjiw26Dku3vnYDk48YfpvQCFtDSvuzP5vuucEk9kyJlZdQud32 KfAb6uoNqu7SiA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:43 2026 by rpki-client