This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft File: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft (raw, json) Hash identifier: VQAECkRiOt+3TCyY5IapzJVKNcMUQWNRLGMJo/o5kyA= Subject key identifier: 1A:EF:B8:B3:62:EC:E1:8C:7B:67:8A:86:60:DD:52:D8:CE:F7:53:3D Authority key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7 Certificate issuer: /CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7 Certificate serial: 019BF83F5DF4730177143DA9A27D7D3C416B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft Manifest number: 07AC Signing time: Mon 26 Jan 2026 03:01:00 +0000 Manifest this update: Mon 26 Jan 2026 03:01:00 +0000 Manifest next update: Tue 27 Jan 2026 03:01:00 +0000 Files and hashes: 1: DWZ7HjSRCLESUgo7i9Znv3F8WPI.roa (hash: 8dYfzKxyh8S4a9rEf+ls3bA5hsUeQ004H6oQiSZHoVw=) 2: a3gSQ9IQVQweYEMK-gNDpqDeUyE.roa (hash: X9hTJQV75Af9HWfAGJL8jpedHMgdZakYiBqDBBKMiVQ=) 3: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl (hash: F6WPsTAm/CNlTP2dd7XvyRnsvbcqm+bJ3DvuKlF6eMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:5d:f4:73:01:77:14:3d:a9:a2:7d:7d:3c:41:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7 Validity Not Before: Jan 26 03:01:00 2026 GMT Not After : Jan 27 03:01:00 2026 GMT Subject: CN=1aefb8b362ece18c7b678a8660dd52d8cef7533d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ba:03:25:86:7c:60:a4:5a:7f:d3:dd:e3:c1: 66:b8:0a:10:f8:02:8c:9e:ac:5f:36:ac:cd:7a:c3: 6c:3e:fa:35:7d:23:6f:b9:e3:16:e8:0d:5e:2d:2e: 08:65:d0:9a:44:1d:fc:ed:09:2f:a8:62:ec:8a:18: 88:db:6b:70:28:d4:e8:60:59:29:95:16:31:48:f4: 97:3f:30:ea:9c:4c:a1:2a:c2:d1:3a:3b:55:47:5b: 8b:81:d6:d2:33:43:66:2e:4d:b9:c8:8c:9b:9d:f0: 6b:f4:b2:d4:3e:aa:30:34:8e:f0:ae:79:e6:57:c1: 20:e0:d3:fd:db:00:5a:6d:28:f6:69:48:92:dd:75: 65:50:7b:0c:00:a1:7a:87:56:18:44:76:b9:39:d0: 5c:50:69:fa:e5:d6:89:ba:75:a9:d7:eb:37:12:a5: b8:ec:5f:ad:93:da:10:9a:52:d2:a7:77:09:eb:28: 64:36:03:50:54:d2:b7:73:49:3d:1e:dc:4d:e3:41: 0f:b1:5d:af:d8:9a:b0:0d:62:68:b8:c6:62:d7:d4: 58:12:bb:50:04:fc:9c:5b:79:34:9e:0e:de:29:56: 7f:ff:2b:5e:b2:1d:70:ef:08:7e:a9:3c:4c:58:84: a9:e3:20:1a:cf:c5:86:e4:e2:cb:50:8e:93:cc:c1: 52:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EF:B8:B3:62:EC:E1:8C:7B:67:8A:86:60:DD:52:D8:CE:F7:53:3D X509v3 Authority Key Identifier: keyid:AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:5d:6b:6f:e2:e7:82:c3:18:f8:09:24:6f:e4:b0:1c:89:e2: b5:01:7b:23:1c:53:c0:12:b0:d4:ed:cc:03:d1:dd:11:05:fb: 3e:ad:aa:e5:97:91:01:32:be:74:18:30:dc:fe:7f:14:07:db: 25:28:b5:e8:06:e8:ad:00:11:9e:9a:08:f5:60:a5:d6:70:9d: 74:a2:a9:c4:cf:01:31:23:07:90:96:cc:58:04:48:5a:32:9c: cd:ce:be:bd:5f:78:70:f2:42:98:d6:4e:01:b0:fb:26:ce:41: 2f:0f:c6:d6:55:f8:7e:54:7f:9a:fb:89:20:11:0f:4d:f5:56: 94:22:a8:e5:17:90:b5:60:34:50:30:51:ec:f7:ae:e5:c9:06: d1:7a:f6:81:93:54:3b:32:6e:5e:4c:a4:49:6c:17:b2:35:25: cf:18:60:88:b5:ab:fa:fb:62:b2:d4:7c:8f:ff:cf:ca:16:97: 38:9e:b3:41:01:19:3f:1f:50:5e:25:ee:84:e2:62:ca:bc:19: b7:0f:7f:93:c2:b2:60:83:2b:f1:8b:13:db:5e:cc:f0:17:e6: 6f:78:ad:49:1a:13:9b:71:1f:c3:51:fe:e1:b4:a8:88:be:56: af:c3:e8:45:6b:81:39:0d:cd:cc:1c:02:d9:84:26:de:2c:20: 7c:e7:e0:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P130cwF3FD2pon19PEFrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNGFkMmQ0YjBiNzMzMGU0YTliNWFmYTExYTYxOThmY2I2 NTFiZjcwHhcNMjYwMTI2MDMwMTAwWhcNMjYwMTI3MDMwMTAwWjAzMTEwLwYDVQQD EygxYWVmYjhiMzYyZWNlMThjN2I2NzhhODY2MGRkNTJkOGNlZjc1MzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqroDJYZ8YKRaf9Pd48FmuAoQ+AKM nqxfNqzNesNsPvo1fSNvueMW6A1eLS4IZdCaRB387QkvqGLsihiI22twKNToYFkp lRYxSPSXPzDqnEyhKsLROjtVR1uLgdbSM0NmLk25yIybnfBr9LLUPqowNI7wrnnm V8Eg4NP92wBabSj2aUiS3XVlUHsMAKF6h1YYRHa5OdBcUGn65daJunWp1+s3EqW4 7F+tk9oQmlLSp3cJ6yhkNgNQVNK3c0k9HtxN40EPsV2v2JqwDWJouMZi19RYErtQ BPycW3k0ng7eKVZ//ytesh1w7wh+qTxMWISp4yAaz8WG5OLLUI6TzMFSmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrvuLNi7OGMe2eKhmDdUtjO91M9MB8GA1UdIwQY MBaAFK5K0tSwtzMOSpta+hGmGY/LZRv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85YzhlNTktYWZkZi00MmE2LTgwZDct OGE5NjY3ZDc2MmE1LzEvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy85YzhlNTktYWZkZi00MmE2LTgwZDctOGE5NjY3ZDc2MmE1 LzEvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQF1rb+Ln gsMY+Akkb+SwHInitQF7IxxTwBKw1O3MA9HdEQX7Pq2q5ZeRATK+dBgw3P5/FAfb JSi16AborQARnpoI9WCl1nCddKKpxM8BMSMHkJbMWARIWjKczc6+vV94cPJCmNZO AbD7Js5BLw/G1lX4flR/mvuJIBEPTfVWlCKo5ReQtWA0UDBR7Peu5ckG0Xr2gZNU OzJuXkykSWwXsjUlzxhgiLWr+vtistR8j//PyhaXOJ6zQQEZPx9QXiXuhOJiyrwZ tw9/k8KyYIMr8YsT217M8Bfmb3itSRoTm3Efw1H+4bSoiL5Wr8PoRWuBOQ3NzBwC 2YQm3iwgfOfgOQ== -----END CERTIFICATE-----Generated at Mon Jan 26 08:02:17 2026 by rpki-client