This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft File: Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft (raw, json) Hash identifier: NVStHYGXEbQgScC8cSGmgc4s3qpDTgF6GKy1WIT+IBY= Subject key identifier: BD:F6:78:C5:30:6A:50:1F:CC:3C:66:F1:43:AF:93:4E:60:31:EA:14 Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3 Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3 Certificate serial: 019BF575224223E4644AEADA7968CDFCF266 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft Manifest number: 17F6 Signing time: Sun 25 Jan 2026 14:00:52 +0000 Manifest this update: Sun 25 Jan 2026 14:00:52 +0000 Manifest next update: Mon 26 Jan 2026 14:00:52 +0000 Files and hashes: 1: ADB2NS1OG8KwsVLAD6NYCaCtJi4.roa (hash: aji7irnO+hSBbZms7WFiwbNpASyVLJ3jxlOuf/BgaKY=) 2: Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl (hash: MItlaEQNglfuub9zO3r6mILjXgFV4v8Uq2tx6KWyVls=) 3: ETuJmIkUjvADd3UUWdC650htGXA.roa (hash: cAH43gJZX/Jo2JqBoDIwhveRaUPmMSrjgllQlOy9U+4=) 4: PUJfscloQMHgI371vUqE3n8p0O0.roa (hash: HCrGmAGRieyRrO1ZecDc/2ZONQZ1+T4NdqF9jJscfgc=) 5: TJ-NxfDDAC6I8oepMl_uJgBKeY4.roa (hash: LQb2DMXHpcDAYFTx6JeAZ71tuwMz9N0jPtDCjoOf9gM=) 6: lX8eqAs6CwoIAtAewjNrfYtrQ4s.roa (hash: z/P+PTXsb20XgLXYqeqn92M2nr8qJ+zQMUYiqOb95J8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:22:42:23:e4:64:4a:ea:da:79:68:cd:fc:f2:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3 Validity Not Before: Jan 25 14:00:52 2026 GMT Not After : Jan 26 14:00:52 2026 GMT Subject: CN=bdf678c5306a501fcc3c66f143af934e6031ea14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:52:58:2b:d3:0c:79:9f:54:3c:44:e9:69:95: 58:0e:f3:00:5e:b7:74:3e:94:07:3d:64:5c:88:45: 5c:b6:2b:43:51:35:73:e0:20:af:2a:73:bc:a1:47: b2:a2:00:06:14:74:6e:5a:0c:ca:9f:16:d5:be:52: 13:36:95:f9:8e:2c:23:ee:8d:8f:5d:a1:a1:eb:aa: c7:0f:bd:35:b0:25:e0:1a:2b:8e:2b:b6:db:b2:d6: 97:fa:06:f4:d6:02:4f:ee:43:e4:4b:44:a4:53:ce: c4:47:9a:4b:f6:1c:9d:04:12:4b:3b:ce:e4:cf:3e: 80:81:c6:8f:d1:28:d6:9f:d2:56:59:94:dd:4b:00: 9d:08:7a:1f:f0:c3:33:19:74:7b:d0:23:7f:f0:a6: 6a:db:81:90:4b:fd:05:5d:ec:69:4b:c5:fa:6e:96: a6:d3:e1:7a:50:60:3f:9f:9b:df:d3:e4:3d:ae:b1: 98:f5:fd:5e:49:87:68:8a:6c:e2:49:1d:73:19:90: f9:a6:10:f5:3a:80:61:3d:e4:39:d4:94:a9:45:f0: 3b:fd:e6:69:55:66:18:43:16:1a:5d:0b:60:97:74: 18:92:77:e8:88:c6:d7:c6:5c:20:ee:5c:77:a1:9c: 3d:4e:f3:89:03:e1:24:59:91:22:86:2a:32:57:dc: 88:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F6:78:C5:30:6A:50:1F:CC:3C:66:F1:43:AF:93:4E:60:31:EA:14 X509v3 Authority Key Identifier: keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:c1:30:31:0f:fb:6d:8d:17:f8:15:e6:ca:0b:2d:56:01:65: c7:9d:9d:95:2f:4f:30:d5:fd:f3:c6:fa:75:1b:38:78:53:4f: 7e:82:a5:f5:f6:d1:8e:82:f0:c8:00:8a:67:e3:65:1e:22:ad: c0:c9:3a:c7:1c:28:c4:02:fc:07:5a:a4:d9:aa:83:55:54:f1: 89:eb:0a:28:5b:0d:b7:b1:b4:80:73:a5:a8:a5:87:d5:c0:59: 9d:b6:55:8d:2e:bd:ec:45:fb:4d:cf:8e:7b:71:28:6a:d8:84: ec:52:7c:b1:77:62:e0:d7:30:38:d8:5d:4c:e4:c0:00:28:67: 7d:d4:8c:c9:0d:09:d3:b3:ee:0b:fd:0a:c0:61:ef:92:ed:16: 36:56:c6:26:0c:35:91:55:33:97:51:c6:eb:eb:6e:0c:36:94: e3:5a:c8:f8:77:06:b4:58:32:1c:aa:5e:3d:5f:d1:1c:d0:87: b9:4e:9d:e0:a1:c8:09:78:b8:bb:a3:30:e2:02:81:ff:e4:d7: 40:5a:16:f2:43:55:eb:03:04:6d:5a:e9:43:9a:9e:0b:2b:1f: f0:96:5b:00:c9:46:f9:31:1a:00:fb:eb:66:cc:ed:41:f2:20: 50:3c:0a:9c:d8:a6:47:c8:79:cd:62:a9:03:1b:d4:13:00:38: e6:2e:c0:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dSJCI+RkSuraeWjN/PJmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNWYyYTkzZGIxMGYyZGQ1ZjZhNTViYjJhNDQwZjY3NDg2 Y2QxYTMwHhcNMjYwMTI1MTQwMDUyWhcNMjYwMTI2MTQwMDUyWjAzMTEwLwYDVQQD EyhiZGY2NzhjNTMwNmE1MDFmY2MzYzY2ZjE0M2FmOTM0ZTYwMzFlYTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lJYK9MMeZ9UPETpaZVYDvMAXrd0 PpQHPWRciEVctitDUTVz4CCvKnO8oUeyogAGFHRuWgzKnxbVvlITNpX5jiwj7o2P XaGh66rHD701sCXgGiuOK7bbstaX+gb01gJP7kPkS0SkU87ER5pL9hydBBJLO87k zz6AgcaP0SjWn9JWWZTdSwCdCHof8MMzGXR70CN/8KZq24GQS/0FXexpS8X6bpam 0+F6UGA/n5vf0+Q9rrGY9f1eSYdoimziSR1zGZD5phD1OoBhPeQ51JSpRfA7/eZp VWYYQxYaXQtgl3QYknfoiMbXxlwg7lx3oZw9TvOJA+EkWZEihioyV9yIeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL32eMUwalAfzDxm8UOvk05gMeoUMB8GA1UdIwQY MBaAFAJfKpPbEPLdX2pVuypED2dIbNGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yMDVkMjQtMDA5Zi00ODZhLTk3NmYt MmVjZGExMWRlMTUzLzEvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8yMDVkMjQtMDA5Zi00ODZhLTk3NmYtMmVjZGExMWRlMTUz LzEvQWw4cWs5c1E4dDFmYWxXN0trUVBaMGhzMGFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsEwMQ/7 bY0X+BXmygstVgFlx52dlS9PMNX988b6dRs4eFNPfoKl9fbRjoLwyACKZ+NlHiKt wMk6xxwoxAL8B1qk2aqDVVTxiesKKFsNt7G0gHOlqKWH1cBZnbZVjS697EX7Tc+O e3EoatiE7FJ8sXdi4NcwONhdTOTAAChnfdSMyQ0J07PuC/0KwGHvku0WNlbGJgw1 kVUzl1HG6+tuDDaU41rI+HcGtFgyHKpePV/RHNCHuU6d4KHICXi4u6Mw4gKB/+TX QFoW8kNV6wMEbVrpQ5qeCysf8JZbAMlG+TEaAPvrZsztQfIgUDwKnNimR8h5zWKp AxvUEwA45i7ADw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:46 2026 by rpki-client