This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft File: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json) Hash identifier: X5N9lMhtbCJfeXvAePGE5n9OTdsrZCXWorYI8Sm2jD0= Subject key identifier: 26:36:19:0B:E6:AD:E4:1F:A3:9D:6E:84:62:31:99:8B:4D:37:BD:A8 Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C Certificate issuer: /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c Certificate serial: 019BF42C0F1B7EFAAA36B0E2250B35DE1452 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft Manifest number: 052A Signing time: Sun 25 Jan 2026 08:01:26 +0000 Manifest this update: Sun 25 Jan 2026 08:01:26 +0000 Manifest next update: Mon 26 Jan 2026 08:01:26 +0000 Files and hashes: 1: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: HSkiWdIXH5w/+0nSfWzqzLFVn86JibUjksjRcUYxXnI=) 2: XuITUG_nXLtJk8wz6ifMhssSuak.roa (hash: 5aV6yd72Tpn0oei/wl6ltB44f+OFtaPnyUmZaPxlolc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2c:0f:1b:7e:fa:aa:36:b0:e2:25:0b:35:de:14:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c Validity Not Before: Jan 25 08:01:26 2026 GMT Not After : Jan 26 08:01:26 2026 GMT Subject: CN=2636190be6ade41fa39d6e846231998b4d37bda8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:27:32:46:74:ca:6e:0b:93:65:f0:b7:3b:51: 4e:50:56:63:89:a0:75:03:e8:ed:99:fd:31:11:20: 05:04:89:7f:79:fd:d4:70:a0:62:60:fe:1d:00:80: 32:f7:ef:f2:b2:5e:dd:58:59:3b:ee:7c:1e:4a:f1: fc:cd:6d:14:ce:7f:7f:ad:19:cb:85:05:ff:c0:99: 01:33:f5:4a:5c:cb:72:0b:f5:45:46:33:11:8d:6e: fb:ef:72:b1:a5:d5:4d:b7:24:a0:ae:c3:ea:27:c0: 03:91:e1:99:ce:93:81:fe:5d:12:bd:49:ec:39:c3: 76:00:4c:b5:09:9c:3a:33:43:1f:0f:43:df:8e:f7: 9c:67:6b:06:1d:f4:0d:ee:7c:27:22:40:cc:7b:73: f5:74:c2:20:bb:d1:30:91:47:92:3f:83:0b:a1:72: a9:ee:51:8e:62:4e:7a:27:c1:8c:1a:e3:71:d2:fd: 4b:ba:41:b5:23:24:91:66:89:e7:e9:47:b6:47:c1: 0f:f4:2c:36:43:ee:d9:17:29:64:40:62:be:5e:32: 0c:19:90:59:e3:61:b1:1f:67:55:96:fe:1e:19:c5: 06:cb:8e:eb:46:c8:d7:ef:a3:ff:f3:ae:49:1b:15: 26:9b:13:03:01:f6:41:59:a6:65:7a:37:d2:39:f9: 57:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:36:19:0B:E6:AD:E4:1F:A3:9D:6E:84:62:31:99:8B:4D:37:BD:A8 X509v3 Authority Key Identifier: keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:15:5d:71:5c:9a:cd:8d:f8:4d:ed:d5:d9:49:f2:e8:26:19: 85:c3:25:bc:28:9d:bd:23:14:44:ef:c1:1c:ed:28:47:56:8e: 22:2a:8d:db:b7:e4:b4:9a:6f:b5:88:f9:fc:43:97:21:43:51: 78:f5:b5:c7:86:5c:d5:07:b1:aa:79:68:83:92:15:3e:c9:2f: 19:f7:bd:9e:79:40:69:4a:cc:5e:d5:b5:ff:f0:60:bb:50:a9: 61:8f:5d:0f:83:88:75:c6:64:1a:27:21:ac:fc:a0:29:6e:60: 6f:45:03:e2:09:ba:02:1e:f7:f7:74:32:34:f3:16:e9:ec:ea: 12:1f:e1:e6:e3:00:71:0b:7b:78:77:4a:10:7e:24:ef:1a:67: cc:94:ee:39:20:fe:e2:f6:e4:fc:ab:86:f6:07:40:8b:fe:ff: 5e:7e:a9:04:23:f8:8b:7b:3f:67:03:c2:39:b8:78:d4:fa:83: fa:cb:1e:3a:ff:e4:d9:bf:92:c6:c3:cb:b7:ef:89:6d:ab:a4: d1:52:38:86:01:4e:0a:dc:06:b2:f8:d0:c8:3c:cf:45:77:a4: 3e:70:1f:b7:de:76:a3:9b:41:29:fb:b0:d2:0a:bb:4e:9a:11: 46:a8:1a:89:95:fa:64:32:1d:70:3c:46:e7:6f:04:e3:52:e9: 4a:8d:20:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0LA8bfvqqNrDiJQs13hRSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYTgwYzQ4MzM3YmYyN2RiMmZkMDgzYzE3MmM2YTFjYzVk MWQxN2MwHhcNMjYwMTI1MDgwMTI2WhcNMjYwMTI2MDgwMTI2WjAzMTEwLwYDVQQD EygyNjM2MTkwYmU2YWRlNDFmYTM5ZDZlODQ2MjMxOTk4YjRkMzdiZGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsScyRnTKbguTZfC3O1FOUFZjiaB1 A+jtmf0xESAFBIl/ef3UcKBiYP4dAIAy9+/ysl7dWFk77nweSvH8zW0Uzn9/rRnL hQX/wJkBM/VKXMtyC/VFRjMRjW7773KxpdVNtySgrsPqJ8ADkeGZzpOB/l0SvUns OcN2AEy1CZw6M0MfD0PfjvecZ2sGHfQN7nwnIkDMe3P1dMIgu9EwkUeSP4MLoXKp 7lGOYk56J8GMGuNx0v1LukG1IySRZonn6Ue2R8EP9Cw2Q+7ZFylkQGK+XjIMGZBZ 42GxH2dVlv4eGcUGy47rRsjX76P/865JGxUmmxMDAfZBWaZlejfSOflXXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCY2GQvmreQfo51uhGIxmYtNN72oMB8GA1UdIwQY MBaAFPOoDEgze/J9sv0IPBcsahzF0dF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82ZTE3ZGQtYjQ4My00ZTdhLWFjZjkt MjY2NGRhY2U5NTgwLzEvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC82ZTE3ZGQtYjQ4My00ZTdhLWFjZjktMjY2NGRhY2U5NTgw LzEvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRVdcVya zY34Te3V2Uny6CYZhcMlvCidvSMURO/BHO0oR1aOIiqN27fktJpvtYj5/EOXIUNR ePW1x4Zc1Qexqnlog5IVPskvGfe9nnlAaUrMXtW1//Bgu1CpYY9dD4OIdcZkGich rPygKW5gb0UD4gm6Ah7393QyNPMW6ezqEh/h5uMAcQt7eHdKEH4k7xpnzJTuOSD+ 4vbk/KuG9gdAi/7/Xn6pBCP4i3s/ZwPCObh41PqD+sseOv/k2b+SxsPLt++Jbauk 0VI4hgFOCtwGsvjQyDzPRXekPnAft952o5tBKfuw0gq7TpoRRqgaiZX6ZDIdcDxG 528E41LpSo0ghA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:23:29 2026 by rpki-client