This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft File: RNLnV4qslPQpYKeA05ltqLtGlHc.mft (raw, json) Hash identifier: xSfSPeOINd+zSwsgbH5nzLeyNnpandanIlpXKEoCiGk= Subject key identifier: 48:BF:2D:51:8C:72:4A:C3:60:B0:FB:98:90:04:2C:E3:80:75:09:53 Authority key identifier: 44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77 Certificate issuer: /CN=44d2e7578aac94f42960a780d3996da8bb469477 Certificate serial: 019BF95208AC8AA11EFE904A316EA24CE8E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft Manifest number: 0ED1 Signing time: Mon 26 Jan 2026 08:01:01 +0000 Manifest this update: Mon 26 Jan 2026 08:01:01 +0000 Manifest next update: Tue 27 Jan 2026 08:01:01 +0000 Files and hashes: 1: RNLnV4qslPQpYKeA05ltqLtGlHc.crl (hash: UdRdRc3scCuBgS872WEBB68fCESXLyBv278YnzC0dhw=) 2: mmMBLkcfazO-0rk3Rxbyg9fkIoI.roa (hash: V44Naao5RDfVhy6IuyFd+Vu8qSPEdskdDn/73lkjw0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:52:08:ac:8a:a1:1e:fe:90:4a:31:6e:a2:4c:e8:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44d2e7578aac94f42960a780d3996da8bb469477 Validity Not Before: Jan 26 08:01:01 2026 GMT Not After : Jan 27 08:01:01 2026 GMT Subject: CN=48bf2d518c724ac360b0fb9890042ce380750953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:24:22:2b:5f:cb:46:36:ae:ca:92:f0:ce:5f: 79:64:a4:61:cf:4d:79:18:78:5b:e4:0b:ec:a5:98: 63:53:0d:dd:d4:a7:c9:06:a1:f7:e5:ff:a2:7a:79: 41:20:6b:1a:6e:f8:ab:ec:0f:34:5e:00:1c:4b:88: b1:2e:d2:fd:36:96:3a:0c:6c:46:9c:dd:17:01:42: a8:ba:0f:6e:f4:04:53:ae:d3:23:5d:31:d0:4e:49: 5a:56:7a:11:75:97:39:c8:75:14:b5:64:b3:1d:c3: 5d:7a:cd:29:e5:dd:36:9a:80:da:22:fc:17:32:75: 69:be:0b:ee:7f:60:6e:db:89:5a:a1:66:52:2c:9d: eb:79:d7:94:c6:a3:81:4c:53:f4:ee:df:f2:19:b8: df:38:65:bc:11:3c:84:e6:f5:99:36:56:09:28:cf: 77:2a:9a:d5:b7:08:c1:56:6c:a4:86:e7:93:33:fc: 12:5e:33:db:b2:b1:ac:9b:e6:05:15:4c:e0:47:c7: 5b:cb:4b:46:ff:69:8f:af:67:de:aa:e3:20:31:a9: cb:e2:0e:c3:56:cb:ef:fe:bb:a6:50:e7:1d:47:60: 18:8c:89:4b:31:f6:74:41:2b:f8:e0:f8:7b:e2:8b: 13:de:c3:5f:39:64:7a:b7:5d:ba:49:85:ac:72:dc: 65:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BF:2D:51:8C:72:4A:C3:60:B0:FB:98:90:04:2C:E3:80:75:09:53 X509v3 Authority Key Identifier: keyid:44:D2:E7:57:8A:AC:94:F4:29:60:A7:80:D3:99:6D:A8:BB:46:94:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNLnV4qslPQpYKeA05ltqLtGlHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2da43d-3997-40a6-accd-f6fd6bd857b8/1/RNLnV4qslPQpYKeA05ltqLtGlHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:98:c5:20:15:4c:88:da:83:01:d7:b8:86:5f:04:35:70:35: 1b:5d:98:40:2f:0c:81:5d:34:ac:57:62:fa:b9:fb:1e:4c:71: 90:69:36:b8:90:80:6c:bd:eb:2b:f4:2a:d5:92:76:64:20:d5: 1f:d1:33:b8:ee:22:d0:07:1b:0d:d9:44:4e:83:c0:60:00:a1: 63:08:9d:fd:88:4d:dd:b6:20:83:6e:19:6d:f8:4e:1a:60:c0: e0:e8:9b:ab:2d:51:fc:2a:32:90:7c:a7:33:87:97:97:0b:f0: 21:53:a5:69:00:93:cb:29:d6:1b:df:8f:b4:0c:30:b5:16:00: f5:0e:5c:f1:a2:79:cf:5d:8b:5a:9e:e4:59:bd:8e:85:05:95: 3a:07:3b:58:18:80:60:04:a7:29:3d:2e:67:bc:17:83:22:a6: 1b:d4:33:8b:d6:1c:71:28:02:53:6e:fa:01:82:ee:74:28:89: 17:5b:ef:52:7c:d4:16:d5:47:21:c2:ec:1c:03:dc:80:03:ee: 7c:10:19:07:9f:f4:b1:bd:15:44:76:bc:1b:98:a7:59:d1:5b: 79:3a:98:00:93:b2:a6:3a:a5:8f:a6:8a:ac:cd:c8:b0:02:7d: be:d1:7f:7d:99:32:82:d5:e5:5b:0b:e6:65:fe:64:2f:f0:80: 43:a8:5d:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UgisiqEe/pBKMW6iTOjlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZDJlNzU3OGFhYzk0ZjQyOTYwYTc4MGQzOTk2ZGE4YmI0 Njk0NzcwHhcNMjYwMTI2MDgwMTAxWhcNMjYwMTI3MDgwMTAxWjAzMTEwLwYDVQQD Eyg0OGJmMmQ1MThjNzI0YWMzNjBiMGZiOTg5MDA0MmNlMzgwNzUwOTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSQiK1/LRjauypLwzl95ZKRhz015 GHhb5AvspZhjUw3d1KfJBqH35f+ienlBIGsabvir7A80XgAcS4ixLtL9NpY6DGxG nN0XAUKoug9u9ARTrtMjXTHQTklaVnoRdZc5yHUUtWSzHcNdes0p5d02moDaIvwX MnVpvgvuf2Bu24laoWZSLJ3redeUxqOBTFP07t/yGbjfOGW8ETyE5vWZNlYJKM93 KprVtwjBVmykhueTM/wSXjPbsrGsm+YFFUzgR8dby0tG/2mPr2fequMgManL4g7D Vsvv/rumUOcdR2AYjIlLMfZ0QSv44Ph74osT3sNfOWR6t126SYWsctxlHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEi/LVGMckrDYLD7mJAELOOAdQlTMB8GA1UdIwQY MBaAFETS51eKrJT0KWCngNOZbai7RpR3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk5MblY0cXNsUFFwWUtlQTA1bHRxTHRHbEhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yZGE0M2QtMzk5Ny00MGE2LWFjY2Qt ZjZmZDZiZDg1N2I4LzEvUk5MblY0cXNsUFFwWUtlQTA1bHRxTHRHbEhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8yZGE0M2QtMzk5Ny00MGE2LWFjY2QtZjZmZDZiZDg1N2I4 LzEvUk5MblY0cXNsUFFwWUtlQTA1bHRxTHRHbEhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJjFIBVM iNqDAde4hl8ENXA1G12YQC8MgV00rFdi+rn7HkxxkGk2uJCAbL3rK/Qq1ZJ2ZCDV H9EzuO4i0AcbDdlEToPAYAChYwid/YhN3bYgg24ZbfhOGmDA4Oibqy1R/CoykHyn M4eXlwvwIVOlaQCTyynWG9+PtAwwtRYA9Q5c8aJ5z12LWp7kWb2OhQWVOgc7WBiA YASnKT0uZ7wXgyKmG9Qzi9YccSgCU276AYLudCiJF1vvUnzUFtVHIcLsHAPcgAPu fBAZB5/0sb0VRHa8G5inWdFbeTqYAJOypjqlj6aKrM3IsAJ9vtF/fZkygtXlWwvm Zf5kL/CAQ6hd4Q== -----END CERTIFICATE-----Generated at Mon Jan 26 10:18:00 2026 by rpki-client