This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft File: A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json) Hash identifier: Q9clHpi/OwRpx1CmwZvwD/sKlFhPkQXI43k20bjtrdo= Subject key identifier: 69:C6:94:09:9C:A3:50:10:5C:25:29:1D:F6:4E:7D:C6:EE:B9:9C:E3 Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17 Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517 Certificate serial: 019B80B9DC491801537007F8E6F4CD40FC39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft Manifest number: 1234 Signing time: Fri 02 Jan 2026 22:00:22 +0000 Manifest this update: Fri 02 Jan 2026 22:00:22 +0000 Manifest next update: Sat 03 Jan 2026 22:00:22 +0000 Files and hashes: 1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: 1WYRRt61ZyAPNeKHD7CHmLnonVHD5i0M7T702Q80O1w=) 2: lcX_BfSjVldf0AWvAKj1fHUxC84.roa (hash: EI6Mzu5z6YSWUkBvK1kxjCqRN5l7TNUNJw5p8ATCsOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:b9:dc:49:18:01:53:70:07:f8:e6:f4:cd:40:fc:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517 Validity Not Before: Jan 2 22:00:22 2026 GMT Not After : Jan 3 22:00:22 2026 GMT Subject: CN=69c694099ca350105c25291df64e7dc6eeb99ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c9:44:ca:d8:45:00:9f:88:b4:4a:ce:b9:83: 09:19:f8:0e:50:6c:18:fe:89:89:32:f3:fd:8c:e9: 2a:15:2b:c3:54:1e:2c:de:81:0a:af:5a:01:0d:d8: 3e:27:e5:1c:99:f2:7f:2a:00:b3:2f:3d:ae:7f:f4: 7b:75:50:33:d6:2e:fd:e0:9c:9a:20:30:e6:10:45: 8e:12:7b:5d:6a:ff:b6:31:9d:ac:58:dc:89:e8:a6: 94:e5:a7:1c:d8:0e:9d:62:45:49:57:db:6c:7a:dc: 55:53:89:c9:28:f7:79:85:25:bc:50:4c:65:1a:cf: 38:b0:66:15:bd:dd:97:94:b2:4f:ec:2f:bb:bc:c3: 11:27:17:1f:c7:9c:87:c2:1e:d8:c4:3c:01:32:dd: 75:d3:d6:58:58:ba:14:59:97:e4:ea:e9:ed:43:ae: 02:04:fb:a1:13:db:90:ee:4c:ff:26:9f:52:fe:35: 8a:e4:e5:13:35:c6:c4:68:3f:d0:b2:31:65:c4:a1: dd:76:c3:a7:8e:b7:31:7b:f7:f7:c2:49:63:ad:80: 61:43:b5:01:c3:c5:82:5a:b9:b1:90:0a:64:88:56: 6e:2b:ce:47:c2:98:d1:33:8d:ba:60:8b:00:d8:c4: 87:e8:ca:e3:62:2c:a5:81:c2:e8:0e:ac:cb:f6:eb: 1f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C6:94:09:9C:A3:50:10:5C:25:29:1D:F6:4E:7D:C6:EE:B9:9C:E3 X509v3 Authority Key Identifier: keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:c0:3c:45:90:9b:35:21:26:80:f5:48:b8:c0:7c:63:42:d7: 58:60:15:f1:7d:0a:2d:2f:32:63:d9:c1:d6:f5:54:cf:01:e7: 16:7e:0e:93:85:a7:3c:70:5c:87:f4:d0:3c:6e:19:04:91:79: 11:5e:6f:69:95:f4:3d:3f:8e:59:ee:f7:e4:4b:3e:44:d9:ff: bf:b6:99:d5:ce:37:c1:cc:5e:82:f9:38:91:7b:80:64:ce:de: 3f:f1:f9:8d:ed:07:81:90:02:34:3d:b1:d6:61:3f:06:6e:b2: 12:70:f9:5d:e1:c1:39:45:3b:04:a2:1a:2d:92:3d:ce:d4:aa: e2:0b:66:c8:de:b9:8b:2c:32:b9:1a:3a:4e:7a:01:b8:5f:8e: cd:fb:19:3a:96:e2:d4:82:a6:cf:63:f2:ce:e5:1c:89:08:59: e8:3b:62:20:c6:b9:c3:2c:ba:1e:77:ec:8b:27:c8:75:19:db: 86:31:94:1a:80:4f:e8:96:6a:16:12:49:f6:8b:14:2a:78:b0: ef:16:41:22:7d:e4:23:42:be:2d:e1:88:87:c9:dc:3d:e0:e8: 90:8a:c5:dd:73:99:54:05:40:96:46:f7:78:da:a1:6e:cd:1f: b2:5f:db:c2:a1:a4:3f:5e:4e:ce:c8:fc:e6:92:f1:ed:9c:62: 30:0f:b8:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuAudxJGAFTcAf45vTNQPw5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYzZjZWEyYTgwMjIwMzYxMjMxYjZhZmJiYzhjOGNkYWE0 ZmQ1MTcwHhcNMjYwMTAyMjIwMDIyWhcNMjYwMTAzMjIwMDIyWjAzMTEwLwYDVQQD Eyg2OWM2OTQwOTljYTM1MDEwNWMyNTI5MWRmNjRlN2RjNmVlYjk5Y2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArclEythFAJ+ItErOuYMJGfgOUGwY /omJMvP9jOkqFSvDVB4s3oEKr1oBDdg+J+UcmfJ/KgCzLz2uf/R7dVAz1i794Jya IDDmEEWOEntdav+2MZ2sWNyJ6KaU5acc2A6dYkVJV9tsetxVU4nJKPd5hSW8UExl Gs84sGYVvd2XlLJP7C+7vMMRJxcfx5yHwh7YxDwBMt1109ZYWLoUWZfk6untQ64C BPuhE9uQ7kz/Jp9S/jWK5OUTNcbEaD/QsjFlxKHddsOnjrcxe/f3wkljrYBhQ7UB w8WCWrmxkApkiFZuK85HwpjRM426YIsA2MSH6MrjYiylgcLoDqzL9usf0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnGlAmco1AQXCUpHfZOfcbuuZzjMB8GA1UdIwQY MBaAFAPGzqKoAiA2EjG2r7vIyM2qT9UXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zOTM5MTEtNDlhMi00YTc2LWJlMTQt ZjQ2ZDZhYjNkMzI2LzEvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zOTM5MTEtNDlhMi00YTc2LWJlMTQtZjQ2ZDZhYjNkMzI2 LzEvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMA8RZCb NSEmgPVIuMB8Y0LXWGAV8X0KLS8yY9nB1vVUzwHnFn4Ok4WnPHBch/TQPG4ZBJF5 EV5vaZX0PT+OWe735Es+RNn/v7aZ1c43wcxegvk4kXuAZM7eP/H5je0HgZACND2x 1mE/Bm6yEnD5XeHBOUU7BKIaLZI9ztSq4gtmyN65iywyuRo6TnoBuF+OzfsZOpbi 1IKmz2PyzuUciQhZ6DtiIMa5wyy6HnfsiyfIdRnbhjGUGoBP6JZqFhJJ9osUKniw 7xZBIn3kI0K+LeGIh8ncPeDokIrF3XOZVAVAlkb3eNqhbs0fsl/bwqGkP15Ozsj8 5pLx7ZxiMA+4Rg== -----END CERTIFICATE-----Generated at Fri Jan 2 23:52:27 2026 by rpki-client