This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft File: rlAYJxRKMYi-oczuWGVv1kKdj5U.mft (raw, json) Hash identifier: wllqZKwfxkUT3RsE5VH5pxfz8hI9OKCgrfoBvUM9q9Y= Subject key identifier: F3:36:82:6E:E5:21:62:5C:2C:7A:AF:6D:D0:5D:8C:D6:45:6D:49:BF Authority key identifier: AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95 Certificate issuer: /CN=ae501827144a3188bea1ccee58656fd6429d8f95 Certificate serial: 019BFA9B8A5E13F4EFCF207BB3E483183531 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft Manifest number: 17F0 Signing time: Mon 26 Jan 2026 14:00:56 +0000 Manifest this update: Mon 26 Jan 2026 14:00:56 +0000 Manifest next update: Tue 27 Jan 2026 14:00:56 +0000 Files and hashes: 1: dNleK7oqqS4JYOVbb6S3XLVUiBA.roa (hash: eOgBYtYMR3J+l0721Hpv5YsWUbXa/qSUakud5H58TI8=) 2: rlAYJxRKMYi-oczuWGVv1kKdj5U.crl (hash: 6bTD1THLDnh3m3bMo9+Vl30aFCuAcaiCd/4VeQ2GZUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:9b:8a:5e:13:f4:ef:cf:20:7b:b3:e4:83:18:35:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae501827144a3188bea1ccee58656fd6429d8f95 Validity Not Before: Jan 26 14:00:56 2026 GMT Not After : Jan 27 14:00:56 2026 GMT Subject: CN=f336826ee521625c2c7aaf6dd05d8cd6456d49bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a8:42:af:34:80:71:07:54:34:74:a3:ca:cf: 65:b1:21:2f:bb:74:ae:bd:13:fa:79:3d:3b:2f:2f: fe:7c:52:89:b1:6e:a0:43:73:a0:ac:ae:2d:63:b3: ba:d8:75:aa:10:bd:3e:e0:59:75:25:ed:35:2e:fc: 9b:f0:0d:58:68:e4:97:7a:be:78:d6:15:ea:c8:12: aa:06:a3:75:d2:ee:26:b6:8b:91:cc:bd:90:76:c9: f8:87:9c:3f:d9:b7:dc:03:79:f1:f6:ed:ea:98:c0: 1e:35:39:c0:d3:88:0e:d1:e5:ca:57:e5:9f:50:93: 13:c8:a6:85:0d:55:9b:de:2e:ec:12:d6:58:2e:0a: f7:0e:df:36:e7:65:8a:43:04:67:4a:a1:f8:89:7f: 45:c5:5c:b8:70:67:d2:89:79:d2:e0:46:5e:39:4e: 27:ac:6e:af:78:1e:85:d1:33:b7:62:77:5c:c3:98: f7:f7:34:26:0e:1f:82:f5:46:2a:90:29:79:19:c7: ac:11:7a:cd:30:7c:aa:47:55:ef:c4:14:39:46:85: d9:19:87:18:67:b7:b9:e4:25:12:f4:bb:af:53:c5: a0:ea:fc:66:b4:1a:64:96:8c:74:8a:6d:c5:f3:51: 86:95:01:07:f2:17:b6:1c:9a:49:e0:9a:8d:fc:cb: ff:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:36:82:6E:E5:21:62:5C:2C:7A:AF:6D:D0:5D:8C:D6:45:6D:49:BF X509v3 Authority Key Identifier: keyid:AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:7a:29:b9:ac:6a:ed:c4:d9:8b:c4:43:ed:c0:59:b2:8f:b4: d4:a5:62:9d:ff:65:9d:99:15:27:67:35:c0:f3:ae:2e:8c:4a: a9:e0:b0:61:d3:bf:3e:da:57:d1:e9:5b:f9:48:e1:2f:3f:60: b7:b1:82:61:36:06:fd:fd:be:81:65:de:e9:e6:00:78:77:0d: 3f:46:17:4b:7f:55:4c:7d:7f:34:be:66:20:f8:0a:8a:0a:c4: 9e:40:7c:12:bb:75:a3:9d:dd:c4:84:3b:4c:03:08:32:42:42: 7d:49:af:7c:6d:1e:d1:cd:12:78:9c:34:96:4a:dc:51:19:01: f0:d7:62:3f:0c:9d:54:4c:02:cd:ac:22:9f:5d:47:9c:e6:bd: 44:8d:4d:c2:a3:3d:00:96:ed:81:8c:35:94:fd:00:65:a5:14: 8c:9f:a3:d4:e3:8c:ef:4e:cd:0e:2a:0c:fc:45:18:b5:c1:db: 5b:78:fa:ef:02:50:41:bc:99:bb:f1:b2:21:d9:00:09:22:9d: 54:09:0d:b2:20:3f:51:9f:de:55:1a:56:a1:8e:af:05:8e:49: fb:8b:39:84:41:29:07:8c:b9:8d:43:07:57:ec:7c:07:84:97: 18:b3:57:9b:90:f6:57:ce:34:82:74:84:ab:0b:b0:33:d5:6a: 8c:93:bc:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6m4peE/TvzyB7s+SDGDUxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNTAxODI3MTQ0YTMxODhiZWExY2NlZTU4NjU2ZmQ2NDI5 ZDhmOTUwHhcNMjYwMTI2MTQwMDU2WhcNMjYwMTI3MTQwMDU2WjAzMTEwLwYDVQQD EyhmMzM2ODI2ZWU1MjE2MjVjMmM3YWFmNmRkMDVkOGNkNjQ1NmQ0OWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqhCrzSAcQdUNHSjys9lsSEvu3Su vRP6eT07Ly/+fFKJsW6gQ3OgrK4tY7O62HWqEL0+4Fl1Je01Lvyb8A1YaOSXer54 1hXqyBKqBqN10u4mtouRzL2Qdsn4h5w/2bfcA3nx9u3qmMAeNTnA04gO0eXKV+Wf UJMTyKaFDVWb3i7sEtZYLgr3Dt8252WKQwRnSqH4iX9FxVy4cGfSiXnS4EZeOU4n rG6veB6F0TO3Yndcw5j39zQmDh+C9UYqkCl5GcesEXrNMHyqR1XvxBQ5RoXZGYcY Z7e55CUS9LuvU8Wg6vxmtBpklox0im3F81GGlQEH8he2HJpJ4JqN/Mv/FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPM2gm7lIWJcLHqvbdBdjNZFbUm/MB8GA1UdIwQY MBaAFK5QGCcUSjGIvqHM7lhlb9ZCnY+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmxBWUp4UktNWWktb2N6dVdHVnYxa0tkajVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81ZjU2YWYtZWJmYi00Yzg4LWEwODIt MDk4NmQ4YjBjNmQ5LzEvcmxBWUp4UktNWWktb2N6dVdHVnYxa0tkajVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC81ZjU2YWYtZWJmYi00Yzg4LWEwODItMDk4NmQ4YjBjNmQ5 LzEvcmxBWUp4UktNWWktb2N6dVdHVnYxa0tkajVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHopuaxq 7cTZi8RD7cBZso+01KVinf9lnZkVJ2c1wPOuLoxKqeCwYdO/PtpX0elb+UjhLz9g t7GCYTYG/f2+gWXe6eYAeHcNP0YXS39VTH1/NL5mIPgKigrEnkB8Ert1o53dxIQ7 TAMIMkJCfUmvfG0e0c0SeJw0lkrcURkB8NdiPwydVEwCzawin11HnOa9RI1NwqM9 AJbtgYw1lP0AZaUUjJ+j1OOM707NDioM/EUYtcHbW3j67wJQQbyZu/GyIdkACSKd VAkNsiA/UZ/eVRpWoY6vBY5J+4s5hEEpB4y5jUMHV+x8B4SXGLNXm5D2V840gnSE qwuwM9VqjJO8Sg== -----END CERTIFICATE-----Generated at Mon Jan 26 18:18:07 2026 by rpki-client