This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft File: rK9a5G8F7_NEM7XzcQYN1My95Dg.mft (raw, json) Hash identifier: lzBh/DYdpf/LPr8cxNcgnS8yY55hXRTQmIIPVImSRAU= Subject key identifier: 79:6C:6C:20:59:11:3D:CD:F1:0A:64:B9:DE:C6:AE:62:66:64:E5:6A Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38 Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438 Certificate serial: 019BF72CFCD83C65668C20BBFB92CC5B1F1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft Manifest number: 025E Signing time: Sun 25 Jan 2026 22:01:19 +0000 Manifest this update: Sun 25 Jan 2026 22:01:19 +0000 Manifest next update: Mon 26 Jan 2026 22:01:19 +0000 Files and hashes: 1: RC8W-k4eKHGPmasSbosZROUwLd0.roa (hash: 5z5Yb5fi2XNF4cg27QOu2H4cPUEEs+tF3GD1VOWpis0=) 2: rK9a5G8F7_NEM7XzcQYN1My95Dg.crl (hash: Uf4hE6I8hYqoSpVczmGCr4+CKJB5RDX88Ez+1iKNvws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:fc:d8:3c:65:66:8c:20:bb:fb:92:cc:5b:1f:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438 Validity Not Before: Jan 25 22:01:19 2026 GMT Not After : Jan 26 22:01:19 2026 GMT Subject: CN=796c6c2059113dcdf10a64b9dec6ae626664e56a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0a:84:5f:fd:93:50:45:58:b1:e3:14:a6:19: 25:38:a9:94:d0:90:1d:a6:6f:c4:f8:7b:9d:05:e5: e9:61:d8:8d:ad:61:de:5e:59:6a:ea:59:fb:de:67: b0:43:84:2d:5e:3f:5d:33:58:1d:05:9d:2a:d6:93: 56:45:75:76:22:be:46:a4:23:05:2b:d8:46:c0:1b: 43:bc:ec:14:9c:20:40:07:6d:b2:33:cc:0a:2f:6a: 41:e2:00:0d:6e:e9:94:19:cf:b1:4c:47:e8:13:00: c1:ab:5e:33:1f:d5:0d:94:a2:b0:69:e4:62:87:e2: 2c:09:05:ab:9f:fd:ea:1f:52:03:70:77:ce:a8:07: 7b:ee:db:17:bb:0e:4d:e0:49:f4:a2:7e:76:38:38: 56:6c:33:09:c7:61:35:f2:97:08:37:ef:f1:f4:72: 21:bf:b0:42:f2:f5:a5:70:21:56:93:12:44:44:57: a5:19:a5:3d:66:be:96:27:7d:c5:31:df:76:11:93: cb:28:69:8e:b1:37:be:31:e9:05:a4:43:75:4b:0c: 40:89:f4:96:5d:3b:57:75:21:cc:10:fc:d7:ba:a6: f8:ab:4f:4d:e1:e5:93:1f:48:36:40:ed:69:02:e3: 8c:63:aa:0c:5c:7b:b0:36:bd:87:a4:59:d2:2a:92: 00:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6C:6C:20:59:11:3D:CD:F1:0A:64:B9:DE:C6:AE:62:66:64:E5:6A X509v3 Authority Key Identifier: keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:78:03:51:c7:c6:4b:73:87:0d:9a:02:d3:04:bd:4f:8a:5b: 08:49:b6:3e:e1:50:f4:95:1e:0a:c5:cb:89:65:7e:8d:fd:6d: 2f:d9:da:88:9e:d1:61:f3:08:8f:f1:be:5c:77:a3:5a:5f:63: fb:9b:d2:7e:93:2c:7b:20:a6:4c:e5:2b:69:4a:b4:d6:d0:d4: f0:b7:9a:d9:f7:81:93:75:c9:c4:0b:02:47:c6:77:25:2d:b6: 97:e3:a7:19:9a:ce:ec:4e:37:13:62:71:9e:b8:94:ee:7c:af: e3:e3:f9:00:59:ed:b7:be:c5:d1:10:b1:f8:ff:80:4f:71:fe: 94:de:99:d1:77:2b:47:04:67:e7:7b:d6:ce:13:2b:11:20:78: 91:3f:da:a3:2a:40:58:b3:be:3a:32:1d:c2:20:b6:57:6b:fa: be:df:b5:7d:13:82:dd:51:39:dc:43:7d:44:75:36:b6:3a:cd: d1:0a:da:b3:ef:75:8d:4e:ab:66:b3:96:31:94:d9:2e:47:fa: 5b:27:73:63:5a:4f:ac:27:cc:72:ec:07:85:03:e0:99:12:bb: b7:f1:55:df:f8:ab:bd:e1:4b:3b:f8:39:c7:af:18:cd:8e:86: 7b:9e:8e:68:6b:45:82:c5:37:17:53:5d:eb:94:ef:4c:70:57: e0:ad:54:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LPzYPGVmjCC7+5LMWx8bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYWY1YWU0NmYwNWVmZjM0NDMzYjVmMzcxMDYwZGQ0Y2Ni ZGU0MzgwHhcNMjYwMTI1MjIwMTE5WhcNMjYwMTI2MjIwMTE5WjAzMTEwLwYDVQQD Eyg3OTZjNmMyMDU5MTEzZGNkZjEwYTY0YjlkZWM2YWU2MjY2NjRlNTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgqEX/2TUEVYseMUphklOKmU0JAd pm/E+HudBeXpYdiNrWHeXllq6ln73mewQ4QtXj9dM1gdBZ0q1pNWRXV2Ir5GpCMF K9hGwBtDvOwUnCBAB22yM8wKL2pB4gANbumUGc+xTEfoEwDBq14zH9UNlKKwaeRi h+IsCQWrn/3qH1IDcHfOqAd77tsXuw5N4En0on52ODhWbDMJx2E18pcIN+/x9HIh v7BC8vWlcCFWkxJERFelGaU9Zr6WJ33FMd92EZPLKGmOsTe+MekFpEN1SwxAifSW XTtXdSHMEPzXuqb4q09N4eWTH0g2QO1pAuOMY6oMXHuwNr2HpFnSKpIAPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlsbCBZET3N8Qpkud7GrmJmZOVqMB8GA1UdIwQY MBaAFKyvWuRvBe/zRDO183EGDdTMveQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kNmFhMTAtNzE4NS00MzdlLTlhNjgt MTNjMmVhOTJhYTllLzEvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9kNmFhMTAtNzE4NS00MzdlLTlhNjgtMTNjMmVhOTJhYTll LzEvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANngDUcfG S3OHDZoC0wS9T4pbCEm2PuFQ9JUeCsXLiWV+jf1tL9naiJ7RYfMIj/G+XHejWl9j +5vSfpMseyCmTOUraUq01tDU8Lea2feBk3XJxAsCR8Z3JS22l+OnGZrO7E43E2Jx nriU7nyv4+P5AFntt77F0RCx+P+AT3H+lN6Z0XcrRwRn53vWzhMrESB4kT/aoypA WLO+OjIdwiC2V2v6vt+1fROC3VE53EN9RHU2tjrN0Qras+91jU6rZrOWMZTZLkf6 WydzY1pPrCfMcuwHhQPgmRK7t/FV3/irveFLO/g5x68YzY6Ge56OaGtFgsU3F1Nd 65TvTHBX4K1U+Q== -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:04 2026 by rpki-client