This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft File: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft (raw, json) Hash identifier: H2t03AUs9dCwIwwD0Q6fW+ycSSx11D6cX4gPdXtEZZc= Subject key identifier: 18:39:84:2F:B9:3D:02:82:31:B5:EF:01:3E:5B:BB:2C:B1:1F:52:5D Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5 Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5 Certificate serial: 019BFA2DC2B3FDCC024BA0F29D071B8BF080 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft Manifest number: 17F2 Signing time: Mon 26 Jan 2026 12:01:01 +0000 Manifest this update: Mon 26 Jan 2026 12:01:01 +0000 Manifest next update: Tue 27 Jan 2026 12:01:01 +0000 Files and hashes: 1: STxyqEZJdelIgYwPQkrFzkgfanw.roa (hash: s65hDXY2ql7cBoPqQwS0YK+flCpqESibXFG1uh5dHgQ=) 2: r3hgF8w2ISQEvnYVws0uagdgXaQ.roa (hash: fTPQMjGaJ6jaiZa2YYhiWQOETzK7JUfg3B1DmMWkq3g=) 3: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl (hash: xTDk4ExsmXl9egBBT6uBny+VXBl+nb4Md9oxS04xKXU=) 4: uljHeXtwPoXTWfqHenoj_DXb3ww.roa (hash: wGmp5Bh78//8aIg6gUIYujT06jT2kqD/3V641rlo7LY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:c2:b3:fd:cc:02:4b:a0:f2:9d:07:1b:8b:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5 Validity Not Before: Jan 26 12:01:01 2026 GMT Not After : Jan 27 12:01:01 2026 GMT Subject: CN=1839842fb93d028231b5ef013e5bbb2cb11f525d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4b:4c:b0:de:3a:1a:68:f2:09:42:a0:af:7f: 58:9d:bf:2f:46:8e:ae:2e:6a:bc:d2:ae:e6:19:88: f5:0b:4d:e1:bd:9e:dc:46:71:35:94:8d:f7:16:e1: 6c:e0:3f:89:00:96:13:82:1e:05:25:31:26:e2:1a: ab:1a:9c:50:08:a4:c2:05:87:03:b0:3f:47:63:65: cf:65:87:a4:b1:99:43:f1:2b:fb:88:0f:c3:7f:a0: dd:7b:35:b7:60:c7:06:5f:b4:4a:5f:bb:53:12:22: 70:3b:fa:e9:84:03:9e:95:c6:f1:a2:8e:f2:32:b5: ba:6d:25:43:78:fc:f0:a7:68:7f:19:43:41:47:e5: 9e:3f:c4:a8:4d:68:98:a0:d3:e6:77:0e:4a:dc:65: 2a:bf:2e:4b:c3:ea:96:34:c4:e1:82:a8:e4:66:86: ac:ad:a3:ad:46:0e:58:a4:74:44:e5:ba:35:b9:b0: 3f:74:74:c5:86:ea:3c:07:7b:84:32:dc:55:48:e7: ea:3e:16:11:7a:02:c2:01:e3:a0:f5:bf:2f:82:cd: 67:dd:c4:68:e2:f4:01:b4:f9:c2:3a:e2:73:d6:fc: a0:60:2b:01:61:c5:e4:ca:b4:6a:ce:67:9f:c9:8d: 43:3a:56:94:b5:7f:49:6e:6c:55:27:88:91:f7:4a: 82:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:39:84:2F:B9:3D:02:82:31:B5:EF:01:3E:5B:BB:2C:B1:1F:52:5D X509v3 Authority Key Identifier: keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:13:79:7c:87:1c:db:46:f9:fb:cd:50:bf:7c:0e:b9:72:a2: f0:e1:12:16:13:bf:62:1e:b3:2f:4e:ab:bb:9c:ff:7f:c6:8e: 50:a9:a3:60:6f:f9:7d:b2:9e:e3:aa:00:f7:a3:a7:1c:0d:09: 9e:12:59:57:4a:35:a3:de:e6:68:34:07:76:84:a2:98:b7:b3: 33:35:0b:32:62:71:75:ef:f6:f9:40:7f:cb:03:35:4c:a5:07: 50:cf:a6:ed:08:7f:40:b8:f5:a7:5c:fa:91:a9:12:39:8c:4e: 17:22:3b:93:7c:3e:12:90:d3:20:24:bf:b5:6c:af:9c:be:af: d7:e2:f4:13:9f:5a:f5:65:69:47:c7:d4:46:e6:08:6c:6d:65: 7d:35:46:10:3f:79:b8:39:ff:47:97:dd:5a:f8:db:07:a9:1e: 75:61:d8:55:82:e0:59:88:18:9b:10:e8:12:5c:44:b6:6a:c7: 07:3e:a5:d2:32:1a:4c:6d:05:e2:9c:28:0f:bc:40:76:5f:62: f7:34:04:2e:b2:07:aa:a9:5d:29:73:8e:b4:71:d9:43:ba:3e: 86:b5:10:66:68:df:48:70:8d:10:d8:dd:cf:2f:bb:43:5b:f1: 45:fd:39:c6:45:91:41:c5:35:30:3f:b0:69:f0:5e:2c:8e:05: 8e:e8:b8:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LcKz/cwCS6DynQcbi/CAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTc3YzcwOGFmMGJhMWY4MTU0OWM5Zjg3MDg5NTU5Mzkw MTY3YTUwHhcNMjYwMTI2MTIwMTAxWhcNMjYwMTI3MTIwMTAxWjAzMTEwLwYDVQQD EygxODM5ODQyZmI5M2QwMjgyMzFiNWVmMDEzZTViYmIyY2IxMWY1MjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUtMsN46GmjyCUKgr39Ynb8vRo6u Lmq80q7mGYj1C03hvZ7cRnE1lI33FuFs4D+JAJYTgh4FJTEm4hqrGpxQCKTCBYcD sD9HY2XPZYeksZlD8Sv7iA/Df6DdezW3YMcGX7RKX7tTEiJwO/rphAOelcbxoo7y MrW6bSVDePzwp2h/GUNBR+WeP8SoTWiYoNPmdw5K3GUqvy5Lw+qWNMThgqjkZoas raOtRg5YpHRE5bo1ubA/dHTFhuo8B3uEMtxVSOfqPhYRegLCAeOg9b8vgs1n3cRo 4vQBtPnCOuJz1vygYCsBYcXkyrRqzmefyY1DOlaUtX9JbmxVJ4iR90qCwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBg5hC+5PQKCMbXvAT5buyyxH1JdMB8GA1UdIwQY MBaAFKynfHCK8LofgVScn4cIlVk5AWelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktkOGNJcnd1aC1CVkp5Zmh3aVZXVGtCWjZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84ZmU3ZDgtMDE3Yi00MWFhLWE5MWYt MjhiMTllM2ZkNGE2LzEvcktkOGNJcnd1aC1CVkp5Zmh3aVZXVGtCWjZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84ZmU3ZDgtMDE3Yi00MWFhLWE5MWYtMjhiMTllM2ZkNGE2 LzEvcktkOGNJcnd1aC1CVkp5Zmh3aVZXVGtCWjZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRN5fIcc 20b5+81Qv3wOuXKi8OESFhO/Yh6zL06ru5z/f8aOUKmjYG/5fbKe46oA96OnHA0J nhJZV0o1o97maDQHdoSimLezMzULMmJxde/2+UB/ywM1TKUHUM+m7Qh/QLj1p1z6 kakSOYxOFyI7k3w+EpDTICS/tWyvnL6v1+L0E59a9WVpR8fURuYIbG1lfTVGED95 uDn/R5fdWvjbB6kedWHYVYLgWYgYmxDoElxEtmrHBz6l0jIaTG0F4pwoD7xAdl9i 9zQELrIHqqldKXOOtHHZQ7o+hrUQZmjfSHCNENjdzy+7Q1vxRf05xkWRQcU1MD+w afBeLI4Fjui4Kw== -----END CERTIFICATE-----Generated at Mon Jan 26 14:16:35 2026 by rpki-client