This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft File: a30fHod8EnmCdOATNFVPiZ846sE.mft (raw, json) Hash identifier: DkZqImOYp/l1oxvc9gbLXeLdJkVhTLNUtrXB/g1uISw= Subject key identifier: 4E:3A:14:8A:EE:32:73:82:5D:A6:83:C2:9E:00:C0:29:AB:A6:BA:20 Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1 Certificate issuer: /CN=6b7d1f1e877c12798274e01334554f899f38eac1 Certificate serial: 019C1E3AAEF33909E429B7E7D7FA14058594 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft Manifest number: 128C Signing time: Mon 02 Feb 2026 12:01:28 +0000 Manifest this update: Mon 02 Feb 2026 12:01:28 +0000 Manifest next update: Tue 03 Feb 2026 12:01:28 +0000 Files and hashes: 1: T66u3sAZ1h5lcd7CohPfojjoGXM.roa (hash: b1dlk+UCa27l6BBCa3opEOMqOQC7JiJWknd1DaHG0Vo=) 2: Ud3In0OaskIaLWIkC7KZsdF241I.roa (hash: AB7KnYKNBO0Ndoa3Ocgqa4UpFDUV3mhvx0miDDfBz5E=) 3: WBUV1KvDkb2jOcRdkjFWIVt7ErY.roa (hash: ajrXPdqhe0OAtEgCrpBNnNMpZPGjD6DwlNl7HI0x0zY=) 4: a30fHod8EnmCdOATNFVPiZ846sE.crl (hash: FJa1KZbWXFIyb1MQ1jqpsme6m1aWLfa4zHSwUsJmJcg=) 5: kJEyi9t8ewQAOML32QKelXRnNQw.roa (hash: qisABknNXytALeoXTgeNFHWe1rQRJTNgqfs59Mw/Lek=) 6: n_fghfm4yvkyJN0aLgQKMYifpk8.roa (hash: s8M9V6kInMrZ8SN7cdYOAnlXWHjxa+Mtfe0ezUCITCc=) 7: zHv_4yLb29OZEPsryzQwrsubCmY.roa (hash: bf6GHsA4iW8nNCo3qaxOx39ntbWsQ60VlVEmI5fRZwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 12:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:3a:ae:f3:39:09:e4:29:b7:e7:d7:fa:14:05:85:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1 Validity Not Before: Feb 2 12:01:28 2026 GMT Not After : Feb 3 12:01:28 2026 GMT Subject: CN=4e3a148aee3273825da683c29e00c029aba6ba20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c0:83:ca:cb:7e:d7:5f:dd:26:c3:b5:b0:b1: cc:17:e8:d2:ff:cd:83:07:26:ce:1d:8b:3c:ea:8b: 41:0a:fe:f5:a5:22:66:92:06:d7:06:73:ee:a2:6e: e7:24:6d:12:a8:56:fc:35:48:4b:cd:4f:2c:15:03: 9a:36:32:15:af:f7:35:3f:84:aa:57:55:12:c0:02: 21:32:e7:b3:c4:2a:f5:71:1c:31:ce:f6:0a:19:68: c8:b5:01:5e:68:b2:c5:03:91:dd:a4:e9:1c:5d:8e: 76:27:20:32:be:06:18:ee:af:b6:50:74:0a:1c:3f: d7:d5:65:eb:c5:0f:9f:e8:f2:67:dd:45:ff:93:c1: 5a:e0:45:1b:e9:11:f1:d2:f1:c9:06:e9:ac:95:84: 6f:e3:70:16:58:d9:b9:64:42:d5:4f:91:f9:0f:45: 96:4d:ef:a1:5c:e6:bc:dd:fa:ae:b9:e7:9c:a4:de: e2:29:04:43:dc:4a:47:a6:c9:f1:0d:93:99:d7:69: d1:2c:cc:15:a3:52:e6:33:7e:9b:52:ef:be:87:5d: 2d:ad:b1:eb:1f:e5:79:cb:4c:c6:a4:67:46:5a:63: 2c:98:f8:9c:ce:d6:97:ea:f4:da:34:0d:c3:50:3f: 4b:be:a4:86:ee:86:a9:46:01:b0:bf:f9:dd:53:b8: 3c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3A:14:8A:EE:32:73:82:5D:A6:83:C2:9E:00:C0:29:AB:A6:BA:20 X509v3 Authority Key Identifier: keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ee:fe:16:17:26:d2:6f:3d:1d:77:cf:46:2c:2b:25:b4:6b:7a: 18:c0:84:c1:6a:6a:a8:2d:55:c1:8f:19:20:10:94:ec:a1:66: 7a:6b:8c:0d:e5:45:c3:27:0b:e8:0c:41:8b:37:0e:25:a4:cd: 62:6e:5c:c5:03:46:89:ee:b0:aa:3e:cf:a9:c7:5a:5a:1a:0c: 01:17:e7:91:59:98:73:7b:03:30:86:69:f1:fc:df:26:60:a3: b4:f7:58:5f:2f:8a:7f:1c:38:3b:be:e1:a8:8f:58:71:a1:28: be:d9:78:26:3d:62:b5:4a:cf:de:41:5e:5c:cc:b1:b8:19:5d: fb:ad:1e:51:39:52:bc:b5:c1:06:62:3c:9f:8f:dc:b5:32:66: 7f:7c:e5:25:6e:87:31:4a:5f:c7:04:de:96:f0:5b:e6:41:89: 0d:6a:f8:21:a4:75:ff:e3:ab:72:2f:15:e4:3d:de:35:40:0e: f6:64:81:4e:5a:52:70:a7:ad:51:bb:c3:0b:3a:31:21:6f:da: 6f:31:ef:d1:a9:da:4c:14:a0:f7:ef:a3:fb:16:4d:81:f2:15: 35:f2:e7:16:e3:f7:ae:bf:f4:3c:25:5b:73:7f:22:af:5f:e8: 50:f1:6c:10:8f:fa:6f:7b:61:85:d9:ad:7d:ec:f1:e9:ab:b7: 6a:66:d0:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZweOq7zOQnkKbfn1/oUBYWUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2QxZjFlODc3YzEyNzk4Mjc0ZTAxMzM0NTU0Zjg5OWYz OGVhYzEwHhcNMjYwMjAyMTIwMTI4WhcNMjYwMjAzMTIwMTI4WjAzMTEwLwYDVQQD Eyg0ZTNhMTQ4YWVlMzI3MzgyNWRhNjgzYzI5ZTAwYzAyOWFiYTZiYTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcCDyst+11/dJsO1sLHMF+jS/82D BybOHYs86otBCv71pSJmkgbXBnPuom7nJG0SqFb8NUhLzU8sFQOaNjIVr/c1P4Sq V1USwAIhMuezxCr1cRwxzvYKGWjItQFeaLLFA5HdpOkcXY52JyAyvgYY7q+2UHQK HD/X1WXrxQ+f6PJn3UX/k8Fa4EUb6RHx0vHJBumslYRv43AWWNm5ZELVT5H5D0WW Te+hXOa83fquueecpN7iKQRD3EpHpsnxDZOZ12nRLMwVo1LmM36bUu++h10trbHr H+V5y0zGpGdGWmMsmPicztaX6vTaNA3DUD9LvqSG7oapRgGwv/ndU7g8+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE46FIruMnOCXaaDwp4AwCmrprogMB8GA1UdIwQY MBaAFGt9Hx6HfBJ5gnTgEzRVT4mfOOrBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUt MmZhZDlhMmZjM2VmLzEvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUtMmZhZDlhMmZjM2Vm LzEvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7v4WFybS bz0dd89GLCsltGt6GMCEwWpqqC1VwY8ZIBCU7KFmemuMDeVFwycL6AxBizcOJaTN Ym5cxQNGie6wqj7PqcdaWhoMARfnkVmYc3sDMIZp8fzfJmCjtPdYXy+Kfxw4O77h qI9YcaEovtl4Jj1itUrP3kFeXMyxuBld+60eUTlSvLXBBmI8n4/ctTJmf3zlJW6H MUpfxwTelvBb5kGJDWr4IaR1/+Orci8V5D3eNUAO9mSBTlpScKetUbvDCzoxIW/a bzHv0anaTBSg9++j+xZNgfIVNfLnFuP3rr/0PCVbc38ir1/oUPFsEI/6b3thhdmt fezx6au3ambQUg== -----END CERTIFICATE-----Generated at Mon Feb 2 17:15:25 2026 by rpki-client