This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft File: AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft (raw, json) Hash identifier: iZuaGWC+KYa9EroApYqlpi3KlyQie8gcF8vY1drxta8= Subject key identifier: 10:AD:6A:82:1B:25:ED:9D:F2:AE:E1:83:2D:4B:CE:20:ED:A3:4D:E5 Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37 Certificate issuer: /CN=0241154462e5adcca9d2bcbd1443fcc637879537 Certificate serial: 019BF6BE9B8608DD406FA18847E3F733C261 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft Manifest number: 0950 Signing time: Sun 25 Jan 2026 20:00:45 +0000 Manifest this update: Sun 25 Jan 2026 20:00:45 +0000 Manifest next update: Mon 26 Jan 2026 20:00:45 +0000 Files and hashes: 1: 8ujYHAx1H4lhOYDDoA3cTzuZ1o0.roa (hash: IzeovJpSEL6TwVj5FewH6ox1OkLfK9+IYF8XYtp5rMQ=) 2: AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl (hash: p6apnctX8K6QmdDOnz4Bv8vr/ezZKj07dOXsfcPUJH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:9b:86:08:dd:40:6f:a1:88:47:e3:f7:33:c2:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537 Validity Not Before: Jan 25 20:00:45 2026 GMT Not After : Jan 26 20:00:45 2026 GMT Subject: CN=10ad6a821b25ed9df2aee1832d4bce20eda34de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3c:45:2d:a3:27:c4:e2:e6:e9:af:e9:4a:6c: 22:8d:64:78:c7:11:d2:ec:8a:c7:5b:91:9f:37:ec: d4:85:a6:7b:ee:b5:4a:ba:98:c9:00:f6:57:5c:90: 8d:f9:8b:86:93:02:52:f1:b3:2e:8b:7a:c9:ec:c6: ec:9e:ed:e8:13:ce:d3:a6:45:1a:c4:76:69:b8:e6: b8:5e:c0:9c:e0:ce:2c:31:08:b4:eb:18:3f:9c:e2: c3:5d:65:1b:4f:2f:55:64:da:24:05:d6:38:8a:ca: 3c:eb:a7:ab:a3:0e:43:61:fd:76:e1:21:d1:18:f3: c2:61:de:f5:df:b3:44:fb:ad:c1:63:59:11:90:d2: 11:f1:09:8d:3e:2a:82:ef:3d:d3:b1:c5:e0:b2:be: c0:a5:6c:bc:24:6a:41:39:2b:fd:5e:5f:d8:b0:b8: 0d:19:31:b5:59:18:b6:fa:f7:35:aa:6e:38:0f:ee: bf:d9:14:54:2d:39:45:ef:9b:3f:7f:2f:90:3d:92: 30:bb:87:fc:cc:76:46:2c:37:3b:21:23:9e:b8:bf: a7:2d:be:82:ec:30:3f:a4:79:4d:aa:11:a0:c4:5b: c8:8c:76:56:de:7a:0c:da:6d:9e:e8:49:63:a1:c9: 9d:05:a8:56:d5:24:9e:4f:79:10:67:1c:8d:4b:bf: 00:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AD:6A:82:1B:25:ED:9D:F2:AE:E1:83:2D:4B:CE:20:ED:A3:4D:E5 X509v3 Authority Key Identifier: keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:c2:36:8e:82:46:85:a3:71:65:6e:2b:07:04:2b:68:c9:31: 06:cd:18:30:ba:07:7c:81:1b:3e:ed:b8:a9:71:8c:33:1d:50: 55:ab:fe:06:e7:a4:c7:0f:4e:8c:77:15:4f:84:79:ae:5f:d5: ce:df:4a:5a:d5:33:56:d8:b2:2e:1d:35:53:a9:cf:a8:0d:48: f3:04:2c:d8:53:2e:dc:ca:60:c1:4e:ca:63:af:6e:d2:ef:47: b0:cc:8c:52:64:18:f4:ab:79:da:b0:2d:9d:51:70:7f:df:ff: 67:0f:cf:eb:01:a3:2d:97:06:9b:c1:26:f7:28:1e:7a:b5:b6: 2a:a2:52:e0:b8:a2:76:a7:8e:c7:f2:26:1b:08:52:5d:86:57: b2:bd:88:18:85:e8:34:eb:54:5c:af:06:d9:10:a8:c0:ba:0d: fc:26:20:88:58:7f:c3:7b:8b:d8:ad:b7:9a:09:d7:79:58:74: 57:0c:23:02:28:3b:93:52:bf:60:4a:91:63:f9:60:81:94:d1: 23:ff:c7:11:b7:96:36:3c:05:e1:ff:20:79:d9:49:57:78:a6: 31:c6:bb:1a:ac:0f:78:b1:d1:05:de:55:f5:a3:df:43:3f:4f: 95:b1:e1:b2:a8:8e:78:c1:c3:b6:b5:60:cc:92:5b:83:73:d2: c0:e9:f4:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vpuGCN1Ab6GIR+P3M8JhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNDExNTQ0NjJlNWFkY2NhOWQyYmNiZDE0NDNmY2M2Mzc4 Nzk1MzcwHhcNMjYwMTI1MjAwMDQ1WhcNMjYwMTI2MjAwMDQ1WjAzMTEwLwYDVQQD EygxMGFkNmE4MjFiMjVlZDlkZjJhZWUxODMyZDRiY2UyMGVkYTM0ZGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzxFLaMnxOLm6a/pSmwijWR4xxHS 7IrHW5GfN+zUhaZ77rVKupjJAPZXXJCN+YuGkwJS8bMui3rJ7Mbsnu3oE87TpkUa xHZpuOa4XsCc4M4sMQi06xg/nOLDXWUbTy9VZNokBdY4iso866erow5DYf124SHR GPPCYd7137NE+63BY1kRkNIR8QmNPiqC7z3TscXgsr7ApWy8JGpBOSv9Xl/YsLgN GTG1WRi2+vc1qm44D+6/2RRULTlF75s/fy+QPZIwu4f8zHZGLDc7ISOeuL+nLb6C 7DA/pHlNqhGgxFvIjHZW3noM2m2e6EljocmdBahW1SSeT3kQZxyNS78AWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCtaoIbJe2d8q7hgy1LziDto03lMB8GA1UdIwQY MBaAFAJBFURi5a3MqdK8vRRD/MY3h5U3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWtFVlJHTGxyY3lwMHJ5OUZFUDh4amVIbFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wOTc2MWQtNmU1Yy00NTFiLThlOGEt ZTkyZWU1ZWVkMjI2LzEvQWtFVlJHTGxyY3lwMHJ5OUZFUDh4amVIbFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8wOTc2MWQtNmU1Yy00NTFiLThlOGEtZTkyZWU1ZWVkMjI2 LzEvQWtFVlJHTGxyY3lwMHJ5OUZFUDh4amVIbFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvcI2joJG haNxZW4rBwQraMkxBs0YMLoHfIEbPu24qXGMMx1QVav+Buekxw9OjHcVT4R5rl/V zt9KWtUzVtiyLh01U6nPqA1I8wQs2FMu3MpgwU7KY69u0u9HsMyMUmQY9Kt52rAt nVFwf9//Zw/P6wGjLZcGm8Em9ygeerW2KqJS4LiidqeOx/ImGwhSXYZXsr2IGIXo NOtUXK8G2RCowLoN/CYgiFh/w3uL2K23mgnXeVh0VwwjAig7k1K/YEqRY/lggZTR I//HEbeWNjwF4f8gedlJV3imMca7GqwPeLHRBd5V9aPfQz9PlbHhsqiOeMHDtrVg zJJbg3PSwOn0yA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:00 2026 by rpki-client