This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json) Hash identifier: fjJpZXEzJwugGcF4sfeUZny8L5vpmM2tDYOwZxZrU3E= Subject key identifier: F1:2A:1A:78:4E:7A:75:85:8C:11:5E:18:EB:F5:6D:51:F3:F0:B0:C2 Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29 Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129 Certificate serial: 019BF763B33495651DB2C643159ACF968BF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft Manifest number: 117F Signing time: Sun 25 Jan 2026 23:01:04 +0000 Manifest this update: Sun 25 Jan 2026 23:01:04 +0000 Manifest next update: Mon 26 Jan 2026 23:01:04 +0000 Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: B3wsiQslR5cjmalUKsg8QYGizLw3FjKk3pVeFKiV72w=) 2: Ea0xhlOm2YvTSj2LUGD3BIPNRR4.roa (hash: xQErZJEOiu3EHRTQnTGckBJupDV77OKBDm1q8oFWOjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:b3:34:95:65:1d:b2:c6:43:15:9a:cf:96:8b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129 Validity Not Before: Jan 25 23:01:04 2026 GMT Not After : Jan 26 23:01:04 2026 GMT Subject: CN=f12a1a784e7a75858c115e18ebf56d51f3f0b0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:17:bc:06:70:e6:b9:f4:0c:04:d4:11:24:e7: 10:70:d1:a3:76:f4:53:29:fb:60:24:c3:23:cf:81: 04:ff:f0:8b:c0:50:b9:c1:fd:a6:14:f7:eb:3d:10: b4:e1:12:20:dc:56:aa:29:85:d3:b8:df:a3:7b:3e: 75:0b:10:da:60:29:1f:e4:66:21:70:c6:c5:cd:1b: 90:50:d9:e1:01:97:1e:cb:ec:b1:6f:f0:1c:0a:f0: ec:fa:f3:77:c4:27:8f:d4:ee:23:a0:a5:28:54:39: 71:15:61:be:ca:46:04:f8:9a:ec:31:40:09:73:d3: b8:c7:a0:2c:fb:6c:16:7d:07:30:ad:db:ae:9e:09: 07:aa:36:f7:d5:7a:01:e4:c1:99:53:80:df:d1:9d: 21:50:fc:bc:7b:49:63:5f:69:cc:4b:7f:d4:92:c9: c8:dd:56:7c:3e:ff:5b:5a:ae:55:9a:56:c7:d8:1e: 68:ea:39:f8:8b:a5:5d:8a:d5:2a:84:6a:95:ad:4a: c4:e5:52:9e:5a:8b:7c:82:36:9a:42:f0:a2:ec:7c: c3:0e:59:53:15:eb:8a:34:25:28:55:f7:63:e2:e2: cf:ad:41:e0:48:b7:e0:aa:60:67:37:7f:52:a7:28: 20:04:cf:fb:fe:a1:59:ff:fc:b0:da:b7:ce:a8:b7: 67:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2A:1A:78:4E:7A:75:85:8C:11:5E:18:EB:F5:6D:51:F3:F0:B0:C2 X509v3 Authority Key Identifier: keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:18:9d:d1:76:b5:a9:27:f6:4e:1b:46:ef:de:2b:75:13:c3: 2f:4a:65:17:3b:a8:ac:52:43:7c:8c:66:35:f5:6c:10:f8:ff: f5:ae:02:88:60:82:a5:2f:87:d0:db:d2:78:1c:18:f2:ee:4c: 6e:b4:01:30:46:fa:60:70:d9:5c:0f:5a:a9:dc:37:52:2d:0c: 5c:a5:7f:4b:04:e0:c4:86:11:5c:e3:57:87:ae:db:bd:51:88: f8:12:ab:aa:ee:ac:5b:90:89:2c:29:45:ef:40:02:d2:41:17: 1e:27:f0:00:67:c3:4f:d1:29:48:77:ce:05:ec:38:0d:6a:f0: 92:12:4c:99:bb:0b:7d:5e:dc:d5:b4:68:a7:8b:07:96:36:b9: 36:2b:31:35:fc:06:fd:2f:f7:37:c3:3e:84:18:5c:97:f4:0a: 04:62:3e:d6:8c:d3:2f:1b:86:39:6b:2f:10:ec:eb:8a:c2:fa: 9d:8b:95:20:5a:99:86:38:92:7f:61:b7:0b:4f:d5:15:7b:d3: 40:57:9a:9f:b0:6c:0b:1b:bd:f1:83:1f:13:ce:20:cc:63:e3: 86:c4:16:a6:1c:50:13:21:cf:45:a5:fb:9c:49:af:d5:db:d4: f8:ee:da:b4:58:ce:1d:47:96:53:2c:66:08:7e:00:c0:ac:a1: 44:bd:4b:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y7M0lWUdssZDFZrPlovxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYzI4NjNhNjQzOGIzNDAyNzUyYTQ3NDBlOTBjZTQyZWI1 ODkxMjkwHhcNMjYwMTI1MjMwMTA0WhcNMjYwMTI2MjMwMTA0WjAzMTEwLwYDVQQD EyhmMTJhMWE3ODRlN2E3NTg1OGMxMTVlMThlYmY1NmQ1MWYzZjBiMGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xe8BnDmufQMBNQRJOcQcNGjdvRT KftgJMMjz4EE//CLwFC5wf2mFPfrPRC04RIg3FaqKYXTuN+jez51CxDaYCkf5GYh cMbFzRuQUNnhAZcey+yxb/AcCvDs+vN3xCeP1O4joKUoVDlxFWG+ykYE+JrsMUAJ c9O4x6As+2wWfQcwrduungkHqjb31XoB5MGZU4Df0Z0hUPy8e0ljX2nMS3/UksnI 3VZ8Pv9bWq5VmlbH2B5o6jn4i6VditUqhGqVrUrE5VKeWot8gjaaQvCi7HzDDllT FeuKNCUoVfdj4uLPrUHgSLfgqmBnN39SpyggBM/7/qFZ//yw2rfOqLdnMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEqGnhOenWFjBFeGOv1bVHz8LDCMB8GA1UdIwQY MBaAFAHChjpkOLNAJ1KkdA6QzkLrWJEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNTIzN2UtY2U2YS00MzAyLWI2YTQt YjU0MDU4MzRmMGM1LzEvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yNTIzN2UtY2U2YS00MzAyLWI2YTQtYjU0MDU4MzRmMGM1 LzEvQWNLR09tUTRzMEFuVXFSMERwRE9RdXRZa1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORid0Xa1 qSf2ThtG794rdRPDL0plFzuorFJDfIxmNfVsEPj/9a4CiGCCpS+H0NvSeBwY8u5M brQBMEb6YHDZXA9aqdw3Ui0MXKV/SwTgxIYRXONXh67bvVGI+BKrqu6sW5CJLClF 70AC0kEXHifwAGfDT9EpSHfOBew4DWrwkhJMmbsLfV7c1bRop4sHlja5NisxNfwG /S/3N8M+hBhcl/QKBGI+1ozTLxuGOWsvEOzrisL6nYuVIFqZhjiSf2G3C0/VFXvT QFean7BsCxu98YMfE84gzGPjhsQWphxQEyHPRaX7nEmv1dvU+O7atFjOHUeWUyxm CH4AwKyhRL1LCg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:57 2026 by rpki-client