This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft File: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft (raw, json) Hash identifier: IYGpmgkbCHu0ThlNTi0ZQAheOZn7z+c/HiSHWygnUMc= Subject key identifier: 86:38:5C:DE:00:5B:4B:71:15:C4:47:7D:98:9C:6D:06:E1:BB:6A:41 Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40 Certificate issuer: /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240 Certificate serial: 019BFB77340728BA3105651EEB2F37F08804 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft Manifest number: 0C28 Signing time: Mon 26 Jan 2026 18:00:51 +0000 Manifest this update: Mon 26 Jan 2026 18:00:51 +0000 Manifest next update: Tue 27 Jan 2026 18:00:51 +0000 Files and hashes: 1: 1JtyFjGHKOjB6E5ymFRYHo0Cjno.roa (hash: makKU1K/a9OvfPTgKGZKj9kwQNZtoAlnHOJ1Bnu95GE=) 2: jmBPCb9DTm9fzSzAZ1_mQpVIr-k.roa (hash: FekyEXt0eMF+S2nBvz+51hHLK6v+L5cr1WGH2ZOcpgs=) 3: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl (hash: 2odsNumtTSzVcpHSJcZzwV62aC87X0JEGRUyrCEWZwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:34:07:28:ba:31:05:65:1e:eb:2f:37:f0:88:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240 Validity Not Before: Jan 26 18:00:51 2026 GMT Not After : Jan 27 18:00:51 2026 GMT Subject: CN=86385cde005b4b7115c4477d989c6d06e1bb6a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:f4:6b:30:d6:ed:f0:b7:d9:c9:63:32:0c: 33:db:4b:1c:01:c0:76:52:d4:99:9e:18:a7:3f:8b: 1b:29:b3:27:a6:44:67:9e:79:79:bb:bd:a9:64:e2: 02:0f:76:55:b3:97:4b:8e:d2:9c:15:6d:94:00:82: db:45:83:c5:96:44:94:ce:e7:69:27:bf:79:9e:f2: 09:85:88:e6:bd:c8:05:8a:da:92:3a:4d:c5:79:27: 4c:71:78:fe:7d:18:44:92:9b:c9:0f:e0:0e:07:16: c8:9b:93:02:e4:1d:0a:16:c3:ce:20:42:13:83:32: fa:06:38:3f:b3:a6:33:4b:29:22:b2:99:cc:35:8e: a4:29:08:7e:30:8c:7c:18:ae:e3:da:c9:b2:c8:25: 30:2c:45:27:31:59:64:c4:c0:69:d4:d5:5a:7f:31: 89:28:3a:61:48:56:b4:14:9c:0e:46:e4:31:2e:56: cc:4e:d0:ef:9c:1c:e0:e3:36:ab:19:35:6b:bf:f5: c1:90:a6:bd:70:16:b5:64:ad:47:3b:00:b3:36:54: 79:e7:b3:cf:83:12:77:96:cf:68:d6:5d:b0:9d:c2: de:2b:1d:5f:1b:40:05:82:9f:2e:69:38:55:c7:4f: 4e:4b:cb:9b:4a:8c:af:4f:92:0a:4f:5e:ea:4b:a0: b5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:38:5C:DE:00:5B:4B:71:15:C4:47:7D:98:9C:6D:06:E1:BB:6A:41 X509v3 Authority Key Identifier: keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:2e:6f:39:07:d9:b2:05:9d:37:9d:2d:e3:7d:4b:02:d1:9a: 75:e7:04:ff:39:6f:24:f6:0b:79:30:43:4f:dc:fb:1e:3f:25: 4a:68:7e:7f:b3:15:04:ff:80:22:91:2f:65:ec:85:e7:5c:0d: 81:e0:02:b2:ee:b0:c1:4b:51:35:c3:50:26:4f:f2:41:fb:0a: e7:45:06:e5:85:b9:1d:a8:09:c4:db:53:be:6c:b3:e8:4b:02: 49:61:40:97:ed:37:53:32:6f:84:09:fa:87:41:e2:ca:17:7e: 46:d1:44:b3:0c:9b:92:4b:1b:fc:9f:50:5e:ae:8d:93:0c:18: 8c:cf:b5:ef:26:54:64:73:6e:42:f5:a3:a4:50:7c:d2:70:48: 19:75:52:ca:6b:ae:72:b4:05:c5:87:ce:73:ff:6f:88:87:1e: 4c:b7:da:c8:ee:a6:e2:7a:1b:c3:70:ba:40:8f:43:ff:1d:98: 52:26:d3:8a:6a:ae:02:0c:fe:cd:b9:19:0d:ae:8d:48:76:48: 62:d4:66:10:bc:c9:98:fe:9c:2a:11:ae:bb:d8:e5:cc:e7:f4: a9:f8:1a:57:71:30:e6:4c:43:45:ec:33:71:8f:47:77:83:c2: 12:67:c2:fb:62:54:22:e1:ae:f7:0a:14:f3:ae:cb:9f:7a:4d: 12:71:4f:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7dzQHKLoxBWUe6y838IgEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkM2I1MjljOWRjOTUyNmYwOTliZjE2YWM4OWRjYzhhZGZl MTgyNDAwHhcNMjYwMTI2MTgwMDUxWhcNMjYwMTI3MTgwMDUxWjAzMTEwLwYDVQQD Eyg4NjM4NWNkZTAwNWI0YjcxMTVjNDQ3N2Q5ODljNmQwNmUxYmI2YTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6L0azDW7fC32cljMgwz20scAcB2 UtSZnhinP4sbKbMnpkRnnnl5u72pZOICD3ZVs5dLjtKcFW2UAILbRYPFlkSUzudp J795nvIJhYjmvcgFitqSOk3FeSdMcXj+fRhEkpvJD+AOBxbIm5MC5B0KFsPOIEIT gzL6Bjg/s6YzSykispnMNY6kKQh+MIx8GK7j2smyyCUwLEUnMVlkxMBp1NVafzGJ KDphSFa0FJwORuQxLlbMTtDvnBzg4zarGTVrv/XBkKa9cBa1ZK1HOwCzNlR557PP gxJ3ls9o1l2wncLeKx1fG0AFgp8uaThVx09OS8ubSoyvT5IKT17qS6C1ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIY4XN4AW0txFcRHfZicbQbhu2pBMB8GA1UdIwQY MBaAFK07UpydyVJvCZvxasidzIrf4YJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclR0U25KM0pVbThKbV9GcXlKM01pdF9oZ2tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hNjNmZDgtOWIzNi00OTZkLWI2ZTIt YjIwZWJlNTk1NDc1LzEvclR0U25KM0pVbThKbV9GcXlKM01pdF9oZ2tBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hNjNmZDgtOWIzNi00OTZkLWI2ZTItYjIwZWJlNTk1NDc1 LzEvclR0U25KM0pVbThKbV9GcXlKM01pdF9oZ2tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcS5vOQfZ sgWdN50t431LAtGadecE/zlvJPYLeTBDT9z7Hj8lSmh+f7MVBP+AIpEvZeyF51wN geACsu6wwUtRNcNQJk/yQfsK50UG5YW5HagJxNtTvmyz6EsCSWFAl+03UzJvhAn6 h0Hiyhd+RtFEswybkksb/J9QXq6NkwwYjM+17yZUZHNuQvWjpFB80nBIGXVSymuu crQFxYfOc/9viIceTLfayO6m4nobw3C6QI9D/x2YUibTimquAgz+zbkZDa6NSHZI YtRmELzJmP6cKhGuu9jlzOf0qfgaV3Ew5kxDRewzcY9Hd4PCEmfC+2JUIuGu9woU 867Ln3pNEnFPRA== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:20 2026 by rpki-client