This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft File: AdKI5UcwsQk69JmTgDQvhdgZjQo.mft (raw, json) Hash identifier: kD1NFsla89HXXnk3AjeNTQqxqwfAI4zOuOUw2PQIE2I= Subject key identifier: 46:4C:1D:B3:68:C3:02:18:24:CC:95:86:4F:07:C3:5D:21:E1:17:30 Authority key identifier: 01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A Certificate issuer: /CN=01d288e54730b1093af4999380342f85d8198d0a Certificate serial: 019BF8AD445A8D287187952DB1CBBACC831C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft Manifest number: 0A24 Signing time: Mon 26 Jan 2026 05:01:03 +0000 Manifest this update: Mon 26 Jan 2026 05:01:03 +0000 Manifest next update: Tue 27 Jan 2026 05:01:03 +0000 Files and hashes: 1: AdKI5UcwsQk69JmTgDQvhdgZjQo.crl (hash: DQSIzyb+FrDS+daa5gzdTw6UiDL7T86o9l6xZyMX8hw=) 2: fg1ZDaE-Jw3uqLF5HiZidz3xbjg.roa (hash: EEwrRzOKdmaJZWY6WRbn+FygexN1DQqGjCid31GjTaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:44:5a:8d:28:71:87:95:2d:b1:cb:ba:cc:83:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01d288e54730b1093af4999380342f85d8198d0a Validity Not Before: Jan 26 05:01:03 2026 GMT Not After : Jan 27 05:01:03 2026 GMT Subject: CN=464c1db368c3021824cc95864f07c35d21e11730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:29:ab:ca:b7:7f:75:2f:8f:f5:7a:f8:c1:3e: 64:43:9a:bc:24:67:e7:85:d5:1f:10:a6:66:5f:a8: 39:c1:51:28:c8:47:72:cc:83:67:b1:a4:21:d2:d2: 3c:a2:59:a0:35:7e:9e:b5:8a:65:00:96:8b:81:a4: dd:36:08:22:21:09:1c:0d:07:5a:88:45:7f:78:2e: 2a:41:fa:ea:27:ab:48:7d:d2:0c:a9:7f:b8:61:22: d5:5e:82:12:1a:bd:e6:35:08:59:25:e5:48:3a:54: ba:c2:41:1a:52:ad:11:a1:c4:d2:df:04:6c:36:ec: be:7e:b6:64:83:40:e0:80:f1:74:f4:79:34:8f:aa: bd:d4:c3:53:ab:1f:ca:1a:fd:74:ad:6e:d4:6a:d7: 36:5a:49:d6:e4:86:ad:ae:6f:bc:22:40:e4:1c:07: 02:72:de:d2:91:0b:42:70:aa:2a:8b:34:6a:c4:4b: 60:5b:64:a0:38:16:3a:2f:1c:f4:c8:9c:54:ec:7d: c8:21:84:92:12:77:3a:30:d5:40:b2:ea:87:c0:e3: d9:63:85:04:a9:03:76:a6:0b:21:46:0d:a9:a9:49: 9e:47:53:85:ee:cc:9b:9d:4d:b4:ac:af:f8:4a:28: a6:17:03:ec:29:b1:a8:a5:84:f4:40:60:28:73:04: ca:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:4C:1D:B3:68:C3:02:18:24:CC:95:86:4F:07:C3:5D:21:E1:17:30 X509v3 Authority Key Identifier: keyid:01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:bf:6b:e5:f9:cd:4f:34:5d:e3:54:a5:32:94:49:c1:0c:a1: d6:d2:c4:dc:5e:4a:aa:bf:df:c7:e6:42:8d:23:17:87:d5:79: 4c:f7:96:4e:c6:02:1d:79:81:25:42:0e:41:99:33:fd:02:85: 00:b0:64:03:b9:2b:81:6b:11:d6:a9:97:87:4f:b0:3d:8a:66: 89:5c:d8:60:f0:4c:70:6c:47:66:b6:be:6a:ad:00:07:37:77: 6b:07:9a:96:52:49:ac:db:ff:e8:06:08:86:27:6a:86:8e:23: fd:55:56:e5:53:7c:37:e9:de:bf:e5:64:72:38:f0:8e:c6:8f: 5d:09:96:63:55:c1:67:c2:04:22:20:d2:d0:34:90:18:79:2e: 1e:21:03:dc:74:53:99:4c:80:b6:19:70:c8:35:94:3e:ee:dd: 4e:21:ff:71:16:6d:bd:a2:f7:76:cd:f3:de:19:93:fa:dd:4d: 0b:ec:b9:74:9d:3a:cb:fa:a7:6c:8b:28:06:a5:a1:4f:cc:1b: 88:f2:2b:d7:0b:36:96:c5:1c:cc:fb:49:27:e8:71:47:62:16: 77:8d:aa:34:58:ca:64:bc:4d:86:65:b1:79:f1:c1:6e:fb:0a: 1d:05:83:29:de:48:5c:82:cd:cb:cc:16:f2:9e:92:10:1a:7a: d8:e8:50:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rURajShxh5Utscu6zIMcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZDI4OGU1NDczMGIxMDkzYWY0OTk5MzgwMzQyZjg1ZDgx OThkMGEwHhcNMjYwMTI2MDUwMTAzWhcNMjYwMTI3MDUwMTAzWjAzMTEwLwYDVQQD Eyg0NjRjMWRiMzY4YzMwMjE4MjRjYzk1ODY0ZjA3YzM1ZDIxZTExNzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuimryrd/dS+P9Xr4wT5kQ5q8JGfn hdUfEKZmX6g5wVEoyEdyzINnsaQh0tI8olmgNX6etYplAJaLgaTdNggiIQkcDQda iEV/eC4qQfrqJ6tIfdIMqX+4YSLVXoISGr3mNQhZJeVIOlS6wkEaUq0RocTS3wRs Nuy+frZkg0DggPF09Hk0j6q91MNTqx/KGv10rW7Uatc2WknW5Iatrm+8IkDkHAcC ct7SkQtCcKoqizRqxEtgW2SgOBY6Lxz0yJxU7H3IIYSSEnc6MNVAsuqHwOPZY4UE qQN2pgshRg2pqUmeR1OF7sybnU20rK/4SiimFwPsKbGopYT0QGAocwTKdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZMHbNowwIYJMyVhk8Hw10h4RcwMB8GA1UdIwQY MBaAFAHSiOVHMLEJOvSZk4A0L4XYGY0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWRLSTVVY3dzUWs2OUptVGdEUXZoZGdaalFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85MmMwYTctMmMwMC00YTBkLWIwZjkt YmNlM2ViNTc3NWViLzEvQWRLSTVVY3dzUWs2OUptVGdEUXZoZGdaalFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS85MmMwYTctMmMwMC00YTBkLWIwZjktYmNlM2ViNTc3NWVi LzEvQWRLSTVVY3dzUWs2OUptVGdEUXZoZGdaalFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACL9r5fnN TzRd41SlMpRJwQyh1tLE3F5Kqr/fx+ZCjSMXh9V5TPeWTsYCHXmBJUIOQZkz/QKF ALBkA7krgWsR1qmXh0+wPYpmiVzYYPBMcGxHZra+aq0ABzd3aweallJJrNv/6AYI hidqho4j/VVW5VN8N+nev+VkcjjwjsaPXQmWY1XBZ8IEIiDS0DSQGHkuHiED3HRT mUyAthlwyDWUPu7dTiH/cRZtvaL3ds3z3hmT+t1NC+y5dJ06y/qnbIsoBqWhT8wb iPIr1ws2lsUczPtJJ+hxR2IWd42qNFjKZLxNhmWxefHBbvsKHQWDKd5IXILNy8wW 8p6SEBp62OhQeg== -----END CERTIFICATE-----Generated at Mon Jan 26 14:16:36 2026 by rpki-client