This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft File: Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft (raw, json) Hash identifier: YyPuDDmL6f3kmOubgqIK1eN5tgXolOOo+J6J2YbETfU= Subject key identifier: 92:51:28:4C:B1:D2:DE:CA:D6:C1:99:E6:C0:2B:49:56:ED:A7:37:77 Authority key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F Certificate issuer: /CN=028fdf719d47a10033451a83384a6db68dbd5b0f Certificate serial: 019BFAD2D01F1BBBE6A8BA10CFB8161534F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft Manifest number: 0DF3 Signing time: Mon 26 Jan 2026 15:01:18 +0000 Manifest this update: Mon 26 Jan 2026 15:01:18 +0000 Manifest next update: Tue 27 Jan 2026 15:01:18 +0000 Files and hashes: 1: Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl (hash: glTffcdnyuCfqFM5+7bOWnA5NKXcRmAvfw0r/WbEsfg=) 2: wx4jf3r0v_RD4WGbwjNb9_66YeA.roa (hash: Yg61lLQnPGGlaDhOZEVebkyWouHjvzVXcfasCV97MNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:d0:1f:1b:bb:e6:a8:ba:10:cf:b8:16:15:34:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028fdf719d47a10033451a83384a6db68dbd5b0f Validity Not Before: Jan 26 15:01:18 2026 GMT Not After : Jan 27 15:01:18 2026 GMT Subject: CN=9251284cb1d2decad6c199e6c02b4956eda73777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dd:4f:82:c3:86:85:e0:ce:02:f5:67:0f:ab: 29:a8:8d:a9:d2:15:e4:ad:dc:01:3b:97:8c:9d:1c: 42:43:5e:55:69:da:d8:e6:f6:10:1b:a1:83:45:b3: e0:fe:67:fe:93:2e:3c:bd:f6:c7:d3:e4:86:04:12: 4c:97:01:fb:61:55:8f:5a:d7:bd:14:be:98:84:67: bb:1c:20:2e:85:a3:f0:1b:10:34:87:93:0a:8c:96: 5f:85:57:2c:56:d2:4f:06:dc:ed:23:d6:10:50:55: d9:49:10:67:80:9b:e7:59:14:e9:3b:34:87:94:94: f0:7c:7a:34:2a:61:7c:d2:fa:92:f6:b3:2d:d3:59: 31:84:6e:0d:33:ef:52:bb:67:fb:7b:c8:1e:93:18: 4b:65:71:c5:e0:0d:ad:9e:f5:eb:85:76:c7:e5:a8: 4a:d4:b9:60:2e:79:dd:cc:25:34:f5:d8:d9:a2:45: fe:9d:4d:68:b2:a3:80:55:31:7b:0a:6d:6b:15:90: ba:60:c3:21:81:b0:c8:0b:d2:8d:c6:80:8f:38:07: 67:2e:09:51:f9:aa:e5:a2:74:ce:2f:77:53:70:4d: ac:a5:66:65:c8:64:96:33:e4:59:80:b7:8e:3e:9d: 75:93:c6:ef:4f:56:75:5b:e6:02:85:7e:14:5f:e2: bf:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:51:28:4C:B1:D2:DE:CA:D6:C1:99:E6:C0:2B:49:56:ED:A7:37:77 X509v3 Authority Key Identifier: keyid:02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:dd:d0:ca:4b:27:2c:66:99:c3:07:9b:0f:ec:47:c6:54:3d: 54:c3:59:fc:f9:17:c6:be:cc:4b:aa:79:0f:6c:74:4e:3b:c2: c1:75:1f:5b:fc:37:55:a2:64:e9:0b:e1:96:9a:2a:51:c5:5b: 85:f2:6d:39:ba:17:54:5c:76:aa:fc:1f:61:3b:26:ab:04:07: bf:f6:26:c1:65:c6:cb:42:5f:e6:b0:1b:d1:be:e5:28:94:09: 10:67:e2:79:45:c7:83:76:22:73:ce:bc:42:b8:37:db:3b:14: da:00:9a:0a:5e:83:c6:d1:1f:b6:d8:a9:49:81:ba:88:bf:92: 70:8b:43:4a:08:92:b2:04:9f:f5:7e:fd:e4:ad:7c:7e:a9:b6: ac:a1:dd:32:09:02:1c:1b:76:67:7c:63:9b:6c:59:2b:d7:fe: 45:9c:7a:ca:8b:49:63:74:9e:f0:d1:74:e0:06:ff:19:ca:8a: 2c:19:d3:41:25:64:bd:dd:e6:74:f4:e2:f9:1b:5a:88:81:49: ab:fa:5a:80:3f:98:4f:6a:84:7d:53:02:86:3d:5c:6f:6c:39: fc:0b:1a:ff:3c:5f:3f:ae:43:d0:86:b5:24:2d:8a:e8:a9:d5: f7:aa:94:a6:df:7b:52:4c:0e:74:47:85:32:69:ae:8e:f3:da: cd:e6:0d:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60tAfG7vmqLoQz7gWFTTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyOGZkZjcxOWQ0N2ExMDAzMzQ1MWE4MzM4NGE2ZGI2OGRi ZDViMGYwHhcNMjYwMTI2MTUwMTE4WhcNMjYwMTI3MTUwMTE4WjAzMTEwLwYDVQQD Eyg5MjUxMjg0Y2IxZDJkZWNhZDZjMTk5ZTZjMDJiNDk1NmVkYTczNzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd1PgsOGheDOAvVnD6spqI2p0hXk rdwBO5eMnRxCQ15VadrY5vYQG6GDRbPg/mf+ky48vfbH0+SGBBJMlwH7YVWPWte9 FL6YhGe7HCAuhaPwGxA0h5MKjJZfhVcsVtJPBtztI9YQUFXZSRBngJvnWRTpOzSH lJTwfHo0KmF80vqS9rMt01kxhG4NM+9Su2f7e8gekxhLZXHF4A2tnvXrhXbH5ahK 1LlgLnndzCU09djZokX+nU1osqOAVTF7Cm1rFZC6YMMhgbDIC9KNxoCPOAdnLglR +arlonTOL3dTcE2spWZlyGSWM+RZgLeOPp11k8bvT1Z1W+YChX4UX+K/fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJRKEyx0t7K1sGZ5sArSVbtpzd3MB8GA1UdIwQY MBaAFAKP33GdR6EAM0UagzhKbbaNvVsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kNDlkNTItNTBiMS00OTQ4LWIxZjct MDU1YTljYWQ4ZGY3LzEvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9kNDlkNTItNTBiMS00OTQ4LWIxZjctMDU1YTljYWQ4ZGY3 LzEvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg93Qyksn LGaZwwebD+xHxlQ9VMNZ/PkXxr7MS6p5D2x0TjvCwXUfW/w3VaJk6QvhlpoqUcVb hfJtOboXVFx2qvwfYTsmqwQHv/YmwWXGy0Jf5rAb0b7lKJQJEGfieUXHg3Yic868 Qrg32zsU2gCaCl6DxtEfttipSYG6iL+ScItDSgiSsgSf9X795K18fqm2rKHdMgkC HBt2Z3xjm2xZK9f+RZx6yotJY3Se8NF04Ab/GcqKLBnTQSVkvd3mdPTi+RtaiIFJ q/pagD+YT2qEfVMChj1cb2w5/Asa/zxfP65D0Ia1JC2K6KnV96qUpt97UkwOdEeF MmmujvPazeYNwA== -----END CERTIFICATE-----Generated at Mon Jan 26 18:58:24 2026 by rpki-client