This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft File: rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft (raw, json) Hash identifier: V14WVbyezgfz8Oxf2ka1gBWl1gzenKxnOpobdoiLQHU= Subject key identifier: 71:E5:A7:41:5F:13:F9:29:76:00:54:97:BD:25:DB:87:65:7D:0E:0E Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A Certificate issuer: /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a Certificate serial: 019BF79A8BE8A0C14C1650107655461E6BEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 00:00:59 +0000 Manifest this update: Mon 26 Jan 2026 00:00:59 +0000 Manifest next update: Tue 27 Jan 2026 00:00:59 +0000 Files and hashes: 1: b-ZrxIt6D0a4g3ULVdCEItyOpZM.roa (hash: VDng1uCTJGN5zS/D2Ww5fMBkjxBVpzoQf6gFfDENzfQ=) 2: rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl (hash: HD2XpFWjx2eRyg0DMzCmu0zC7Wv1S+XnxoSyZRY/tHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:8b:e8:a0:c1:4c:16:50:10:76:55:46:1e:6b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a Validity Not Before: Jan 26 00:00:59 2026 GMT Not After : Jan 27 00:00:59 2026 GMT Subject: CN=71e5a7415f13f92976005497bd25db87657d0e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a7:c9:da:60:e2:1d:43:c8:79:82:b4:63:42: db:d4:14:ae:35:03:3e:f0:77:2f:7b:22:15:02:d4: 47:7f:cc:0b:c4:e7:2a:4a:2c:17:be:15:6c:44:e9: 97:d9:3c:8c:f1:70:23:68:5c:97:fa:79:ce:66:78: 07:b1:47:75:d0:bf:6f:dc:73:07:a6:08:c5:8f:e5: 8b:8c:01:ac:4a:20:12:1d:b8:1f:a1:21:3f:75:0f: 52:4e:57:65:d3:d5:d5:7d:e7:2d:bc:49:b0:e3:f6: 77:d8:be:25:5f:6e:b1:c0:cf:9e:66:c5:75:08:16: 90:9a:b9:05:70:22:0a:97:66:ba:bd:97:10:f2:db: cf:69:1a:c2:db:64:b2:e7:a9:da:69:bb:35:9a:9b: 2d:29:f1:2f:e7:9f:69:4d:4a:a9:19:d5:72:31:c6: 02:89:ec:10:9d:46:f7:45:a9:71:51:12:fc:dc:47: 73:67:18:cb:69:eb:57:7a:0c:65:9c:03:b2:5f:5e: f6:a8:f8:db:02:ce:e0:3a:7b:01:ad:b1:25:65:db: 09:b9:a9:e0:90:cd:f5:4d:d7:7e:c1:89:ea:a1:97: 21:70:dc:9b:3c:a9:39:df:a4:9b:a2:c9:24:cd:b8: 68:13:68:ed:37:26:71:48:bd:a9:51:d1:46:aa:ca: 4e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E5:A7:41:5F:13:F9:29:76:00:54:97:BD:25:DB:87:65:7D:0E:0E X509v3 Authority Key Identifier: keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:fd:21:b8:02:4c:10:a0:a1:90:98:44:54:92:b5:1f:44:0c: d3:cc:f3:64:61:59:fc:5c:08:52:68:f6:bc:b1:bd:ec:d0:39: c0:d6:d9:d8:be:6d:de:00:46:a9:03:e3:f5:de:4e:38:b3:a9: e6:8b:83:9d:3d:b9:dd:8f:13:f3:05:93:43:5c:73:cb:9c:a1: b0:a8:8c:f4:24:aa:81:75:cf:b9:58:ef:e8:db:6d:7d:9d:f8: 33:92:85:f9:a2:a4:82:9c:e2:18:9f:0f:ee:dc:9c:4d:a2:bf: e2:92:b0:3c:ed:17:77:58:b1:45:df:c1:5c:3a:74:c8:f8:23: e2:ff:05:e4:7d:5c:0d:6c:69:0d:b0:df:2c:ed:da:1d:31:9e: 07:7a:99:55:f7:a8:d8:1e:d8:e2:ee:1d:72:0f:3c:38:5d:6a: 67:d1:1b:98:21:b2:43:8b:00:50:70:e7:0a:f5:50:18:79:e4: d5:80:4b:1c:8d:21:9f:61:46:5e:37:ab:19:84:e1:9d:65:82: 38:14:20:5c:a3:70:73:4e:6b:af:d0:62:d8:b1:17:f3:a1:b4: a1:ad:a7:fa:b6:5b:8a:9a:2b:46:f3:84:81:33:da:5b:5b:79: ab:13:9c:ea:8a:40:b5:af:5c:7b:74:d5:0c:4e:09:82:85:4f: 81:34:98:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3movooMFMFlAQdlVGHmvsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMjdiYzI0NWU3NmJhNWU1YzFmYzVlOWVlNTViNGI0OGRl N2Y4NWEwHhcNMjYwMTI2MDAwMDU5WhcNMjYwMTI3MDAwMDU5WjAzMTEwLwYDVQQD Eyg3MWU1YTc0MTVmMTNmOTI5NzYwMDU0OTdiZDI1ZGI4NzY1N2QwZTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArafJ2mDiHUPIeYK0Y0Lb1BSuNQM+ 8HcveyIVAtRHf8wLxOcqSiwXvhVsROmX2TyM8XAjaFyX+nnOZngHsUd10L9v3HMH pgjFj+WLjAGsSiASHbgfoSE/dQ9STldl09XVfectvEmw4/Z32L4lX26xwM+eZsV1 CBaQmrkFcCIKl2a6vZcQ8tvPaRrC22Sy56naabs1mpstKfEv559pTUqpGdVyMcYC iewQnUb3RalxURL83EdzZxjLaetXegxlnAOyX172qPjbAs7gOnsBrbElZdsJuang kM31Tdd+wYnqoZchcNybPKk536SboskkzbhoE2jtNyZxSL2pUdFGqspO4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHlp0FfE/kpdgBUl70l24dlfQ4OMB8GA1UdIwQY MBaAFKwnvCRedrpeXB/F6e5VtLSN5/haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckNlOEpGNTJ1bDVjSDhYcDdsVzB0STNuLUZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9lODUzNzUtNDBmZi00ZTc3LWI0ZTkt YmIwNjcxZDhlYTMyLzEvckNlOEpGNTJ1bDVjSDhYcDdsVzB0STNuLUZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9lODUzNzUtNDBmZi00ZTc3LWI0ZTktYmIwNjcxZDhlYTMy LzEvckNlOEpGNTJ1bDVjSDhYcDdsVzB0STNuLUZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsf0huAJM EKChkJhEVJK1H0QM08zzZGFZ/FwIUmj2vLG97NA5wNbZ2L5t3gBGqQPj9d5OOLOp 5ouDnT253Y8T8wWTQ1xzy5yhsKiM9CSqgXXPuVjv6NttfZ34M5KF+aKkgpziGJ8P 7tycTaK/4pKwPO0Xd1ixRd/BXDp0yPgj4v8F5H1cDWxpDbDfLO3aHTGeB3qZVfeo 2B7Y4u4dcg88OF1qZ9EbmCGyQ4sAUHDnCvVQGHnk1YBLHI0hn2FGXjerGYThnWWC OBQgXKNwc05rr9Bi2LEX86G0oa2n+rZbiporRvOEgTPaW1t5qxOc6opAta9ce3TV DE4JgoVPgTSYxA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:31 2026 by rpki-client