This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft File: a4T0opa84U1t7tJRFqpwtgvM5KQ.mft (raw, json) Hash identifier: kP3KogmmSLwZmFPtIAyyzDnAlz5xShtX+H61lu6Jwwg= Subject key identifier: A9:82:F6:B6:A1:23:E1:49:2C:DB:F2:5F:64:E8:90:A8:0A:36:68:A6 Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4 Certificate issuer: /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4 Certificate serial: 019BF2AABD77DA84A21A0629A6831F7D1044 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 01:00:34 +0000 Manifest this update: Sun 25 Jan 2026 01:00:34 +0000 Manifest next update: Mon 26 Jan 2026 01:00:34 +0000 Files and hashes: 1: 2RbeqdMiyrwCVLR5chpWY1wVXBs.roa (hash: FV2Q/IEBTvjzgG5NIpgTYEVedEVCT2bxukDMuyGlG3g=) 2: Lijwv8ed8pOLySWZZGE9d68r6MQ.roa (hash: 9P+vvVo2WGEbeXwE6ljHBigsAywfbwq49GCsuySXDx4=) 3: a4T0opa84U1t7tJRFqpwtgvM5KQ.crl (hash: zT/RkbbjXHIKUQDXYuHxzdJxXz2tzi2vY5WcV0RulUo=) 4: g5j5FZkvMABlDgQ1VxUj3-qHrIQ.roa (hash: GDgyOidVPTAYf13W4o/hjNWE5JEbUK7OcD6kn+Y2gxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:aa:bd:77:da:84:a2:1a:06:29:a6:83:1f:7d:10:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4 Validity Not Before: Jan 25 01:00:34 2026 GMT Not After : Jan 26 01:00:34 2026 GMT Subject: CN=a982f6b6a123e1492cdbf25f64e890a80a3668a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8a:2d:d8:b1:4b:83:9f:e3:dc:f4:33:66:6c: e5:fc:31:db:db:19:3a:36:c3:37:01:5b:47:29:d2: b1:18:25:c3:16:3c:03:58:67:56:49:d6:86:d3:36: 23:df:be:00:47:ab:9b:40:e3:23:1e:96:30:de:a8: 5c:af:b2:1b:60:97:89:60:c8:36:55:aa:b5:24:e6: db:eb:22:16:07:c2:19:d2:82:82:45:f7:39:f4:02: f2:b7:68:89:23:0e:6b:64:fb:70:af:8a:de:af:f5: 94:1e:7b:d4:21:86:0f:a8:c3:54:4e:43:8c:c4:e6: ce:91:6c:ef:60:d6:55:c5:19:d0:9d:a1:9c:a0:01: 8b:d1:64:9c:36:37:a4:44:d7:8d:cb:79:ff:91:a4: b5:88:4d:e5:02:c8:61:2e:0f:3c:3b:df:0e:73:a2: 7b:f0:7a:dd:a7:d0:43:7a:79:94:1c:69:39:72:b3: c7:a9:70:b0:73:22:f2:ff:91:d8:c8:df:ca:c0:7d: 5d:a9:ec:4d:eb:e2:d9:5c:00:51:cc:c9:ae:93:f1: 17:41:7c:cd:8c:0e:90:fc:79:f4:7e:a0:7c:12:c4: 47:ea:77:f9:99:95:e1:db:55:14:fc:cb:a4:94:9c: de:bf:f7:f4:7f:50:74:f9:fa:1a:4e:70:f7:78:8b: 91:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:82:F6:B6:A1:23:E1:49:2C:DB:F2:5F:64:E8:90:A8:0A:36:68:A6 X509v3 Authority Key Identifier: keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:9d:97:7c:a5:89:47:5b:1d:5d:b6:51:1c:ef:76:e5:f9:bd: eb:0f:05:3b:2b:a6:f3:f8:56:36:9c:8f:a3:c3:d4:91:56:ae: f0:a3:75:f7:b6:bb:af:d2:03:b3:4a:76:44:3d:83:3c:10:ff: 21:db:ab:d3:b3:ac:30:b0:7c:bc:be:74:84:35:76:c7:40:77: eb:d3:ed:b1:cc:eb:14:86:34:b0:aa:eb:74:6f:c6:6a:31:1c: 16:21:76:a3:fd:92:da:59:69:67:4d:ff:17:db:8d:a0:fb:d7: f7:6f:af:d6:3c:ac:40:9c:c1:b8:ad:22:6f:db:cb:ec:16:16: 04:cc:d0:22:74:d3:a9:c2:af:e4:5d:7a:d9:25:df:06:8c:33: 90:77:59:52:5d:fb:79:c3:e0:21:30:07:e0:af:57:5d:3a:9b: f5:6f:ba:dd:c9:47:32:dc:b5:ff:fe:d0:1f:c2:6b:52:c4:fc: 8f:dc:30:ae:50:d0:96:eb:2d:cb:e0:2a:96:56:89:a9:97:04: 67:5c:6d:95:8f:9c:f1:7e:1e:ff:58:8e:62:05:89:92:82:d2: 56:11:be:9e:0d:32:1b:33:eb:6f:69:04:a1:71:f3:c7:94:32: 19:dd:e2:23:55:78:fc:d4:d4:ec:32:a6:07:ff:aa:f9:fe:26: ef:fe:6d:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyqr132oSiGgYppoMffRBEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiODRmNGEyOTZiY2UxNGQ2ZGVlZDI1MTE2YWE3MGI2MGJj Y2U0YTQwHhcNMjYwMTI1MDEwMDM0WhcNMjYwMTI2MDEwMDM0WjAzMTEwLwYDVQQD EyhhOTgyZjZiNmExMjNlMTQ5MmNkYmYyNWY2NGU4OTBhODBhMzY2OGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Yot2LFLg5/j3PQzZmzl/DHb2xk6 NsM3AVtHKdKxGCXDFjwDWGdWSdaG0zYj374AR6ubQOMjHpYw3qhcr7IbYJeJYMg2 Vaq1JObb6yIWB8IZ0oKCRfc59ALyt2iJIw5rZPtwr4rer/WUHnvUIYYPqMNUTkOM xObOkWzvYNZVxRnQnaGcoAGL0WScNjekRNeNy3n/kaS1iE3lAshhLg88O98Oc6J7 8Hrdp9BDenmUHGk5crPHqXCwcyLy/5HYyN/KwH1dqexN6+LZXABRzMmuk/EXQXzN jA6Q/Hn0fqB8EsRH6nf5mZXh21UU/MuklJzev/f0f1B0+foaTnD3eIuRdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmC9rahI+FJLNvyX2TokKgKNmimMB8GA1UdIwQY MBaAFGuE9KKWvOFNbe7SURaqcLYLzOSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTRUMG9wYTg0VTF0N3RKUkZxcHd0Z3ZNNUtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84NDRmZDktZmVmMS00NGQ5LWE2Yzkt MTRmYWIwMjQ0OTQ4LzEvYTRUMG9wYTg0VTF0N3RKUkZxcHd0Z3ZNNUtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84NDRmZDktZmVmMS00NGQ5LWE2YzktMTRmYWIwMjQ0OTQ4 LzEvYTRUMG9wYTg0VTF0N3RKUkZxcHd0Z3ZNNUtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJ2XfKWJ R1sdXbZRHO925fm96w8FOyum8/hWNpyPo8PUkVau8KN197a7r9IDs0p2RD2DPBD/ Idur07OsMLB8vL50hDV2x0B369PtsczrFIY0sKrrdG/GajEcFiF2o/2S2llpZ03/ F9uNoPvX92+v1jysQJzBuK0ib9vL7BYWBMzQInTTqcKv5F162SXfBowzkHdZUl37 ecPgITAH4K9XXTqb9W+63clHMty1//7QH8JrUsT8j9wwrlDQlusty+AqllaJqZcE Z1xtlY+c8X4e/1iOYgWJkoLSVhG+ng0yGzPrb2kEoXHzx5QyGd3iI1V4/NTU7DKm B/+q+f4m7/5txA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:23:11 2026 by rpki-client