This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft File: pOcgX11BJXpruV-QDuwKESPnUWQ.mft (raw, json) Hash identifier: fa0Y5wwdkLreV7D0liDjK0p5HN0h57Sn885OPGD6FDE= Subject key identifier: 01:09:22:68:6D:5C:D1:F0:DB:E1:27:A0:D8:E0:3A:18:74:44:95:9A Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64 Certificate issuer: /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164 Certificate serial: 019BF76390D23BE8CBD7E5678ACCA089AF7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft Manifest number: 1800 Signing time: Sun 25 Jan 2026 23:00:56 +0000 Manifest this update: Sun 25 Jan 2026 23:00:56 +0000 Manifest next update: Mon 26 Jan 2026 23:00:56 +0000 Files and hashes: 1: 75usjphnflTK9ekaeXTmIOUK9No.roa (hash: 6EuKwuh4YvgBCa5Zr1EQEmvX8bawaDXoEyNUirI2tqE=) 2: BYJeOMTp9VHrWuoMjPnGgfKwrc0.roa (hash: BFrY9/6iplAYN4CNa21BmE/m83H1ufk5TI5FpOMq62I=) 3: OhtO9gQuXsBPS-Q3O3FN8E4x348.roa (hash: o+Nr9wOEwTpH2Y6JMdDgtincCGDhZv31TNiZL0Hk3Bs=) 4: fEY123WrG17ZCUyz9dcKnTc2Qkc.roa (hash: ehi6sBGZP2OSU+JX6wLoNRrh9WIbrRaxXboak3XDqVc=) 5: pOcgX11BJXpruV-QDuwKESPnUWQ.crl (hash: hzNGWC1y7qe6kIVq3Il9meQHG0HO3HbxuYkibTFlyg0=) 6: xJFI4mrIs8uN5TlhHVLxpsA2hsU.roa (hash: 7LWb0I2IanjDr9ngdvZoV0Vpn7u1mnQr4dTehW6hxdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:90:d2:3b:e8:cb:d7:e5:67:8a:cc:a0:89:af:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164 Validity Not Before: Jan 25 23:00:56 2026 GMT Not After : Jan 26 23:00:56 2026 GMT Subject: CN=010922686d5cd1f0dbe127a0d8e03a187444959a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7d:d4:d4:89:0d:a3:02:27:54:d6:ad:5d:eb: 25:7b:4b:5b:d1:10:58:c2:e4:7c:78:eb:f3:a8:23: 43:b8:b9:65:32:f8:08:35:7d:48:b3:79:5e:9b:79: 2b:4b:be:2a:f4:a9:e0:d2:7a:5d:76:98:51:9d:a6: 76:ee:a4:29:b6:ed:62:82:fb:79:84:fb:f2:f9:88: c7:93:dc:8f:3d:c7:9e:c0:08:ab:a0:80:77:a3:0a: 4e:c6:e4:9c:57:e0:69:c2:f2:b3:0c:61:e7:7a:41: 4b:c6:74:a2:ea:0d:07:04:10:01:26:f1:21:cc:af: b5:71:bd:1c:60:3a:05:3b:29:d1:00:5e:84:74:9e: 19:a5:3c:6d:da:3f:ad:08:d6:29:67:0b:f5:0f:5b: 24:4b:6d:99:98:88:2e:a4:0b:27:6a:bb:bb:28:32: 39:2c:47:b9:22:b5:f7:16:be:94:6d:5a:81:b3:d1: 2c:a2:f9:04:ac:86:fa:24:90:35:60:6f:e8:69:d4: 10:51:59:e9:99:c7:c3:54:4d:b6:e2:53:0f:63:47: a2:98:3b:bc:83:d2:da:fc:bb:ef:9a:4d:51:92:6e: b5:6f:71:97:94:e5:02:0f:2b:50:c3:3d:a5:3d:d6: 77:65:b3:d9:71:c9:74:f2:41:9d:1b:b0:45:74:f7: 55:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:09:22:68:6D:5C:D1:F0:DB:E1:27:A0:D8:E0:3A:18:74:44:95:9A X509v3 Authority Key Identifier: keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:cc:70:15:0d:f4:f6:dd:9f:67:99:2d:9d:de:d4:0b:98:f3: f9:af:6e:40:2b:94:2a:9a:f5:e2:ca:ac:63:3f:3a:6a:ed:eb: 08:71:ac:0c:90:90:b2:e3:6a:17:2d:a6:c3:81:65:d3:43:be: 08:e9:95:3c:1b:2c:14:6c:4a:60:48:1c:4c:97:4c:02:43:e5: da:e6:fe:62:6a:1b:7d:b3:9c:56:57:8e:68:93:6c:ba:f7:04: 50:d3:e3:aa:b3:c0:1c:6a:4b:6c:c0:27:75:58:0a:cb:0a:08: 61:f2:fd:2a:9c:e9:9d:1f:fd:3c:9a:90:2b:c9:57:a3:eb:20: d9:d1:b3:30:3f:bb:a5:b5:fc:f1:62:61:61:a8:70:f2:66:66: 14:87:c7:fe:2b:b4:51:e3:99:1b:46:7f:01:c0:88:c2:f4:01: e9:7f:7c:f5:74:9d:54:d5:63:27:6d:93:18:ee:90:db:01:3c: 34:06:99:be:5f:15:f9:f5:19:aa:96:62:06:1d:b8:4b:6d:e0: 44:fa:ef:21:c9:1d:4f:27:5a:f3:c5:29:5f:0e:55:46:f7:3a: 76:b3:75:4b:82:39:a0:b6:ab:18:68:47:4f:95:48:d2:06:25: a6:17:ce:a8:35:22:f4:6f:3e:5a:c9:2d:9f:a9:09:8b:69:cc: c3:6e:45:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y5DSO+jL1+Vnisygia99MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ZTcyMDVmNWQ0MTI1N2E2YmI5NWY5MDBlZWMwYTExMjNl NzUxNjQwHhcNMjYwMTI1MjMwMDU2WhcNMjYwMTI2MjMwMDU2WjAzMTEwLwYDVQQD EygwMTA5MjI2ODZkNWNkMWYwZGJlMTI3YTBkOGUwM2ExODc0NDQ5NTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX3U1IkNowInVNatXesle0tb0RBY wuR8eOvzqCNDuLllMvgINX1Is3lem3krS74q9Kng0npddphRnaZ27qQptu1igvt5 hPvy+YjHk9yPPceewAiroIB3owpOxuScV+BpwvKzDGHnekFLxnSi6g0HBBABJvEh zK+1cb0cYDoFOynRAF6EdJ4ZpTxt2j+tCNYpZwv1D1skS22ZmIgupAsnaru7KDI5 LEe5IrX3Fr6UbVqBs9EsovkErIb6JJA1YG/oadQQUVnpmcfDVE224lMPY0eimDu8 g9La/Lvvmk1Rkm61b3GXlOUCDytQwz2lPdZ3ZbPZccl08kGdG7BFdPdVewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEJImhtXNHw2+EnoNjgOhh0RJWaMB8GA1UdIwQY MBaAFKTnIF9dQSV6a7lfkA7sChEj51FkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDkt M2U1OWNlNDQ1YjFjLzEvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDktM2U1OWNlNDQ1YjFj LzEvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsxwFQ30 9t2fZ5ktnd7UC5jz+a9uQCuUKpr14sqsYz86au3rCHGsDJCQsuNqFy2mw4Fl00O+ COmVPBssFGxKYEgcTJdMAkPl2ub+YmobfbOcVleOaJNsuvcEUNPjqrPAHGpLbMAn dVgKywoIYfL9KpzpnR/9PJqQK8lXo+sg2dGzMD+7pbX88WJhYahw8mZmFIfH/iu0 UeOZG0Z/AcCIwvQB6X989XSdVNVjJ22TGO6Q2wE8NAaZvl8V+fUZqpZiBh24S23g RPrvIckdTyda88UpXw5VRvc6drN1S4I5oLarGGhHT5VI0gYlphfOqDUi9G8+Wskt n6kJi2nMw25FRQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:28:44 2026 by rpki-client