This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft File: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft (raw, json) Hash identifier: QTK2XrpLBf3WXFa6kSyJ3a1fhaBHpdwaAgKtwIIxZO4= Subject key identifier: 7B:87:8C:7A:9F:95:BF:7F:03:49:75:D0:11:54:A1:00:CA:7C:D2:50 Authority key identifier: 6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8 Certificate issuer: /CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8 Certificate serial: 019BF574FA90F9CB5432787AB157645C528B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft Manifest number: 062E Signing time: Sun 25 Jan 2026 14:00:42 +0000 Manifest this update: Sun 25 Jan 2026 14:00:42 +0000 Manifest next update: Mon 26 Jan 2026 14:00:42 +0000 Files and hashes: 1: HdU5cxfsxlP0K4CqDFvCNnZmq28.roa (hash: xbyeSFIpEueYvgfQTG6iJ17W5Phz2i4KFR7f+DJwSVQ=) 2: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl (hash: ZXHWJY6UgD6KB5bacLyzu434hccWVKI/9cd7f9D4D9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:fa:90:f9:cb:54:32:78:7a:b1:57:64:5c:52:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8 Validity Not Before: Jan 25 14:00:42 2026 GMT Not After : Jan 26 14:00:42 2026 GMT Subject: CN=7b878c7a9f95bf7f034975d01154a100ca7cd250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ed:b6:c6:1d:87:e5:a6:8a:ab:95:07:25:2e: c3:c4:3b:7b:f5:bc:88:2c:bf:52:e7:80:8a:8e:be: 21:44:92:8e:6d:af:7a:ec:d0:25:93:f1:5b:fe:a7: b2:99:10:2f:a5:ce:46:d8:88:ff:21:f9:2e:a6:61: 16:8e:32:6b:b8:8a:ea:72:96:01:ee:08:cd:63:45: b9:80:51:6c:bd:08:96:c3:af:b4:dd:7b:48:10:7c: 65:a6:4c:af:be:40:5e:14:9e:a5:79:41:82:ca:f3: de:83:f0:6d:ca:ef:8d:37:a9:b6:7b:cc:db:b7:f1: 4e:eb:76:4d:c4:24:ed:9c:4e:e2:e3:66:26:12:0a: e4:08:f4:a8:0c:42:c8:f0:1c:f7:df:dc:f0:c2:71: 20:5b:31:c9:a3:78:64:97:08:d4:0d:87:75:6b:2f: b8:3f:8e:70:0e:26:ce:36:3f:4e:9c:e9:d3:70:9c: be:ed:94:47:f8:9f:9c:13:e3:e8:51:c4:34:cc:33: cb:f3:3c:1d:ca:30:d8:c9:39:23:0f:05:72:96:58: 5b:05:5b:31:8b:46:0d:a0:90:84:f2:37:91:b1:df: c6:bd:bf:9e:74:56:d4:5f:5e:23:55:63:da:c9:bb: f2:17:47:e7:af:3d:9f:f2:fc:9a:24:aa:70:4f:b4: 54:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:87:8C:7A:9F:95:BF:7F:03:49:75:D0:11:54:A1:00:CA:7C:D2:50 X509v3 Authority Key Identifier: keyid:6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:54:f2:9a:bd:5b:a5:9f:e5:cf:f7:90:8f:e8:ad:5f:cd:97: 08:d4:9b:84:d8:8a:fe:93:fd:ae:7a:07:1a:41:32:74:5d:31: f1:6d:8b:96:fa:4e:bc:e9:a4:e0:0c:a0:45:72:c0:68:fa:c4: 04:d9:3f:bb:62:67:a8:88:36:f1:aa:d0:6f:e1:95:f3:eb:86: ad:5e:cd:8a:94:98:8b:5e:d6:76:7d:4a:d7:7b:04:76:68:a2: bb:c3:4b:62:95:4f:1c:33:65:e3:05:f7:3b:2a:61:85:22:8f: 97:12:66:0a:36:d1:47:e2:39:93:3f:6c:36:6b:62:1a:6e:0d: 73:6d:8e:9d:3d:0f:8b:e1:af:a9:a9:1d:ab:42:d0:dc:d4:5c: 5f:07:50:b3:02:53:2d:9a:93:3f:0a:2e:a3:27:41:c1:c0:fe: 6e:2e:2e:4d:30:55:c7:61:2b:92:e4:7e:bc:7c:1e:8e:6b:2b: 4d:a6:5e:77:5b:76:0e:7f:c7:5f:5e:16:1d:5d:cb:8c:04:5e: b0:a4:0b:dc:7d:14:24:fe:37:13:b5:89:86:da:4d:b6:72:35: bd:4e:67:3a:4d:cf:91:0f:f6:f8:de:52:24:7b:0c:49:3b:95: 1e:ad:95:cf:80:2e:22:7a:32:11:c1:7a:d1:3d:77:f6:9b:65: 22:1c:8d:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dPqQ+ctUMnh6sVdkXFKLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZjg4ZTgyYjM1YTBhZDZkMGZmMzE1NmFmMTMxOWRmYzE2 MmY4ZTgwHhcNMjYwMTI1MTQwMDQyWhcNMjYwMTI2MTQwMDQyWjAzMTEwLwYDVQQD Eyg3Yjg3OGM3YTlmOTViZjdmMDM0OTc1ZDAxMTU0YTEwMGNhN2NkMjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe22xh2H5aaKq5UHJS7DxDt79byI LL9S54CKjr4hRJKOba967NAlk/Fb/qeymRAvpc5G2Ij/IfkupmEWjjJruIrqcpYB 7gjNY0W5gFFsvQiWw6+03XtIEHxlpkyvvkBeFJ6leUGCyvPeg/Btyu+NN6m2e8zb t/FO63ZNxCTtnE7i42YmEgrkCPSoDELI8Bz339zwwnEgWzHJo3hklwjUDYd1ay+4 P45wDibONj9OnOnTcJy+7ZRH+J+cE+PoUcQ0zDPL8zwdyjDYyTkjDwVyllhbBVsx i0YNoJCE8jeRsd/Gvb+edFbUX14jVWPaybvyF0fnrz2f8vyaJKpwT7RUNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuHjHqflb9/A0l10BFUoQDKfNJQMB8GA1UdIwQY MBaAFGv4joKzWgrW0P8xVq8TGd/BYvjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYmNiOGQtMjBhNC00MzQ3LWI4ZGEt YmZiZDU2OTRhOTRkLzEvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xYmNiOGQtMjBhNC00MzQ3LWI4ZGEtYmZiZDU2OTRhOTRk LzEvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy1Tymr1b pZ/lz/eQj+itX82XCNSbhNiK/pP9rnoHGkEydF0x8W2LlvpOvOmk4AygRXLAaPrE BNk/u2JnqIg28arQb+GV8+uGrV7NipSYi17Wdn1K13sEdmiiu8NLYpVPHDNl4wX3 OyphhSKPlxJmCjbRR+I5kz9sNmtiGm4Nc22OnT0Pi+Gvqakdq0LQ3NRcXwdQswJT LZqTPwouoydBwcD+bi4uTTBVx2ErkuR+vHwejmsrTaZed1t2Dn/HX14WHV3LjARe sKQL3H0UJP43E7WJhtpNtnI1vU5nOk3PkQ/2+N5SJHsMSTuVHq2Vz4AuInoyEcF6 0T139ptlIhyNdA== -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:28 2026 by rpki-client