This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft File: A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json) Hash identifier: UsKDB0T4H5G1Ecd7YLrEJbgGFGvqp4mB2QvI9oxuonA= Subject key identifier: DF:57:21:65:FF:31:B5:BF:A1:21:42:9F:9C:52:DE:9A:55:14:3E:82 Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC Certificate issuer: /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc Certificate serial: 019BF9F6FAA058062134DFCEAD929FA3A0E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft Manifest number: 04CE Signing time: Mon 26 Jan 2026 11:01:11 +0000 Manifest this update: Mon 26 Jan 2026 11:01:11 +0000 Manifest next update: Tue 27 Jan 2026 11:01:11 +0000 Files and hashes: 1: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: u04TCQ1P4WGo/L+qyBkfAXwvXfhX5y2AOkKVIsy9Qsc=) 2: R_tuRGNyH8maQImtyJX8ka61Rts.roa (hash: CI3pZc4MmuEvMGaaRVV9hzb41var6bWscwqeDxkewRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:fa:a0:58:06:21:34:df:ce:ad:92:9f:a3:a0:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc Validity Not Before: Jan 26 11:01:11 2026 GMT Not After : Jan 27 11:01:11 2026 GMT Subject: CN=df572165ff31b5bfa121429f9c52de9a55143e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:37:1f:5f:be:49:a8:0b:d3:8e:a1:ef:4a:6a: 7c:e0:25:57:f5:35:11:9c:25:f4:28:e4:fc:ac:1c: e9:32:ab:13:3d:90:5d:08:f2:bc:db:ad:09:8b:71: e8:4e:10:fe:90:5c:13:d6:02:b1:50:6a:2b:9c:50: d8:b5:e9:dd:96:16:75:ed:e8:40:a8:74:d8:0f:00: 57:b5:b9:ed:16:80:25:1a:d0:22:5c:b3:48:ff:a2: 45:7a:60:08:bd:65:0b:92:61:ec:c8:33:02:4d:18: 8a:16:f4:b0:06:0a:73:b2:da:12:74:a4:b8:ad:15: 3d:9d:28:af:c2:09:aa:3b:29:94:38:85:1c:f1:53: 7d:92:bc:63:0b:d1:b3:7f:cb:36:62:b0:6a:b4:d3: ac:65:4c:c8:ae:3d:3f:b9:95:21:bd:db:83:43:63: b7:f9:74:bd:0b:34:1c:b5:86:db:1a:e9:d7:e6:f4: 35:2c:f6:c3:ea:71:b7:10:cf:78:3d:98:fc:50:04: 36:53:b1:8e:14:34:dc:13:31:ff:24:37:2c:04:7c: 75:4b:63:d3:23:34:07:59:20:8a:30:b7:a0:fd:4e: 36:e9:07:f4:c5:67:58:b2:a2:29:26:dc:42:b2:15: 6e:39:b5:ab:fa:c9:d1:54:5a:f2:49:40:4b:5c:04: 76:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:57:21:65:FF:31:B5:BF:A1:21:42:9F:9C:52:DE:9A:55:14:3E:82 X509v3 Authority Key Identifier: keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:62:5e:20:fa:27:98:b5:ba:97:c8:b8:87:ab:bc:4c:6e:b2: bc:4d:48:5b:08:ae:bf:ad:51:86:5a:e2:7c:29:d8:f7:4c:98: 34:12:9c:f6:66:03:f1:35:5b:52:b2:d0:f9:39:90:e9:87:a2: 58:6b:00:9f:5c:78:8f:e7:b0:76:58:5e:df:54:18:a2:74:c8: 1a:a4:58:d6:d1:9e:78:a4:97:d7:e1:90:73:88:0a:45:4a:8b: b2:f0:e9:ec:18:41:08:87:93:b3:b4:c2:3e:8f:c0:14:a7:a9: 2d:87:60:c1:21:71:f9:c5:b1:b2:fb:48:82:a9:a0:ea:44:78: 3d:f1:28:22:fd:f4:f9:9f:fa:10:00:ef:ec:66:5c:c7:78:02: 44:71:07:b5:5d:0d:be:c0:44:6b:a4:d0:bb:27:c2:7d:a0:48: 31:aa:92:93:87:94:ed:c5:27:02:92:be:54:0c:61:9b:10:b7: 43:c8:28:7e:fc:ac:0b:4d:42:c5:26:8c:96:f2:5d:5e:80:8e: d1:8e:4b:97:37:00:a4:8c:ca:a5:c9:27:cf:7b:85:c4:42:16: 36:74:62:c6:f0:b3:d1:76:50:9c:ea:e0:b4:57:f5:f3:fb:ab: 98:0a:2a:6b:8a:69:03:36:20:d5:94:33:10:28:82:42:63:d6: 96:f7:20:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59vqgWAYhNN/OrZKfo6DjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZDZhOGE2MzlmODhhYWYxZjQzNmQ2YTIwYjQxNzdiMzhk MzkwZmMwHhcNMjYwMTI2MTEwMTExWhcNMjYwMTI3MTEwMTExWjAzMTEwLwYDVQQD EyhkZjU3MjE2NWZmMzFiNWJmYTEyMTQyOWY5YzUyZGU5YTU1MTQzZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDcfX75JqAvTjqHvSmp84CVX9TUR nCX0KOT8rBzpMqsTPZBdCPK8260Ji3HoThD+kFwT1gKxUGornFDYtendlhZ17ehA qHTYDwBXtbntFoAlGtAiXLNI/6JFemAIvWULkmHsyDMCTRiKFvSwBgpzstoSdKS4 rRU9nSivwgmqOymUOIUc8VN9krxjC9Gzf8s2YrBqtNOsZUzIrj0/uZUhvduDQ2O3 +XS9CzQctYbbGunX5vQ1LPbD6nG3EM94PZj8UAQ2U7GOFDTcEzH/JDcsBHx1S2PT IzQHWSCKMLeg/U426Qf0xWdYsqIpJtxCshVuObWr+snRVFrySUBLXAR2VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9XIWX/MbW/oSFCn5xS3ppVFD6CMB8GA1UdIwQY MBaAFAPWqKY5+IqvH0NtaiC0F3s405D8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jMTgxMDUtZDkwZi00NDJmLThiMWQt YzIwZGU1NDNjMGRmLzEvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9jMTgxMDUtZDkwZi00NDJmLThiMWQtYzIwZGU1NDNjMGRm LzEvQTlhb3BqbjRpcThmUTIxcUlMUVhlempUa1B3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2JeIPon mLW6l8i4h6u8TG6yvE1IWwiuv61RhlrifCnY90yYNBKc9mYD8TVbUrLQ+TmQ6Yei WGsAn1x4j+ewdlhe31QYonTIGqRY1tGeeKSX1+GQc4gKRUqLsvDp7BhBCIeTs7TC Po/AFKepLYdgwSFx+cWxsvtIgqmg6kR4PfEoIv30+Z/6EADv7GZcx3gCRHEHtV0N vsBEa6TQuyfCfaBIMaqSk4eU7cUnApK+VAxhmxC3Q8gofvysC01CxSaMlvJdXoCO 0Y5LlzcApIzKpcknz3uFxEIWNnRixvCz0XZQnOrgtFf18/urmAoqa4ppAzYg1ZQz ECiCQmPWlvcghQ== -----END CERTIFICATE-----Generated at Mon Jan 26 18:38:40 2026 by rpki-client