This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft File: RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft (raw, json) Hash identifier: 2UOorGYf1uJDftGGlDGzen8O5jbiYnBQep5UKLpa2UU= Subject key identifier: 51:2F:A0:6E:57:22:DA:63:86:02:56:73:34:F9:E0:EC:97:96:65:45 Authority key identifier: 46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A Certificate issuer: /CN=4608d71b772a031740e1d412def6857cc4b1d45a Certificate serial: 019BA34680522ED32F6FB8A57FC2178ED3F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft Manifest number: 1A Signing time: Fri 09 Jan 2026 15:01:05 +0000 Manifest this update: Fri 09 Jan 2026 15:01:05 +0000 Manifest next update: Sat 10 Jan 2026 15:01:05 +0000 Files and hashes: 1: EN5haMM7h6Rseqp1dMvz6VQjbyk.roa (hash: eEBiN2aBr9CTgCZwms33aRc4uqxn1VzQccF+F6LwRuA=) 2: RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl (hash: cAtQ9PR4mrxhcm1/++EBZ5R6aahaLKFCx7IBpN0b6BA=) 3: wNqsuLHhhTYKZ23gcgc0p6rHlM8.roa (hash: ZHhrFP+PBglJ5Cb6Iy7houth/vPZfswwd76qnw0CEBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:46:80:52:2e:d3:2f:6f:b8:a5:7f:c2:17:8e:d3:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4608d71b772a031740e1d412def6857cc4b1d45a Validity Not Before: Jan 9 15:01:05 2026 GMT Not After : Jan 10 15:01:05 2026 GMT Subject: CN=512fa06e5722da638602567334f9e0ec97966545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0b:32:be:c8:10:b1:1a:37:7e:ef:42:8b:b2: 3c:e6:bb:19:99:38:8a:fc:bd:81:8f:e1:1b:c8:13: 0a:15:25:27:b4:4f:c2:c5:73:d4:c1:22:7e:e3:85: a6:03:4d:24:b6:39:7d:69:88:55:2f:95:c2:1a:77: 23:2d:1e:e3:59:df:b8:51:c5:8f:10:12:13:16:79: 3c:a6:a1:62:25:8e:1a:86:ee:e7:bf:56:26:59:9c: ab:79:bf:b4:f9:e0:80:dd:71:a2:6c:8a:7f:cb:f4: db:d9:1f:f3:8c:91:1b:d9:7f:59:a9:79:2d:f2:e3: ae:7e:8d:30:7e:b4:ed:ab:64:c0:e4:e7:36:8b:ad: d7:57:72:5b:45:f5:45:a2:6e:91:09:1e:50:c3:30: bd:49:ab:53:c0:53:6a:f0:1a:80:36:2b:08:46:6e: a2:f7:29:ed:b5:53:2e:f5:31:92:87:20:b3:f1:19: 9a:72:ff:69:bb:1b:4f:46:5a:8b:59:02:fe:ec:14: 25:33:f5:2a:ae:82:e3:64:ad:a4:ca:cc:2e:c1:da: 72:a7:1f:b4:51:5f:ee:3b:88:be:8a:08:c1:ca:58: 4e:2e:d6:7c:ae:93:97:ab:70:a5:73:46:b3:2a:09: 53:69:d9:a9:3f:18:fd:1d:44:4d:99:30:4e:ff:d7: 1d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2F:A0:6E:57:22:DA:63:86:02:56:73:34:F9:E0:EC:97:96:65:45 X509v3 Authority Key Identifier: keyid:46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:8b:27:66:fc:af:d4:98:3a:fc:45:b9:38:d6:02:d4:f2:e7: e8:0b:cd:de:e1:08:0a:2a:65:0b:5a:54:0b:de:40:1a:8e:26: 83:bb:f3:67:34:b5:13:57:59:f2:fe:88:19:e7:d2:15:2e:72: 44:59:ca:dc:59:99:d7:2d:45:63:67:ab:73:9e:21:01:93:9e: bf:1c:c2:9a:d4:a1:45:a1:08:ea:9e:c4:b8:51:5b:e3:24:7f: 1a:d8:5f:98:22:19:88:c1:81:4e:1b:78:3b:57:1f:53:da:42: 70:f8:1f:09:da:68:25:df:39:8d:37:87:f6:b7:3b:fa:a4:ce: 8c:36:16:7a:82:ca:ef:90:00:d0:ba:21:6c:0f:cd:e0:d8:24: 44:88:d7:3b:44:7c:db:09:c3:cd:d4:85:5f:db:f3:b2:01:30: 1a:34:c5:13:e9:ea:a5:06:d6:5a:9b:fe:1b:c2:7b:52:25:05: be:7b:2c:dc:95:d8:33:b1:58:d5:f6:ff:cf:8c:ed:22:e1:87: a0:e3:98:52:e5:b7:db:11:0a:09:ce:8d:73:67:ca:20:63:84: fa:19:d6:bf:d0:5b:45:3a:27:a2:86:11:48:8e:c4:af:33:54: db:70:e5:a6:e4:79:a5:4e:43:29:3e:c0:f0:51:6e:c1:76:21: e1:a6:a8:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZujRoBSLtMvb7ilf8IXjtP4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MDhkNzFiNzcyYTAzMTc0MGUxZDQxMmRlZjY4NTdjYzRi MWQ0NWEwHhcNMjYwMTA5MTUwMTA1WhcNMjYwMTEwMTUwMTA1WjAzMTEwLwYDVQQD Eyg1MTJmYTA2ZTU3MjJkYTYzODYwMjU2NzMzNGY5ZTBlYzk3OTY2NTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwsyvsgQsRo3fu9Ci7I85rsZmTiK /L2Bj+EbyBMKFSUntE/CxXPUwSJ+44WmA00ktjl9aYhVL5XCGncjLR7jWd+4UcWP EBITFnk8pqFiJY4ahu7nv1YmWZyreb+0+eCA3XGibIp/y/Tb2R/zjJEb2X9ZqXkt 8uOufo0wfrTtq2TA5Oc2i63XV3JbRfVFom6RCR5QwzC9SatTwFNq8BqANisIRm6i 9ynttVMu9TGShyCz8Rmacv9puxtPRlqLWQL+7BQlM/UqroLjZK2kyswuwdpypx+0 UV/uO4i+igjBylhOLtZ8rpOXq3Clc0azKglTadmpPxj9HURNmTBO/9cdIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEvoG5XItpjhgJWczT54OyXlmVFMB8GA1UdIwQY MBaAFEYI1xt3KgMXQOHUEt72hXzEsdRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmdqWEczY3FBeGRBNGRRUzN2YUZmTVN4MUZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80OTc2OGEtOGQwYi00OTBmLTk4YmUt NzRlMTE2OGExMTY0LzEvUmdqWEczY3FBeGRBNGRRUzN2YUZmTVN4MUZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS80OTc2OGEtOGQwYi00OTBmLTk4YmUtNzRlMTE2OGExMTY0 LzEvUmdqWEczY3FBeGRBNGRRUzN2YUZmTVN4MUZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYsnZvyv 1Jg6/EW5ONYC1PLn6AvN3uEICiplC1pUC95AGo4mg7vzZzS1E1dZ8v6IGefSFS5y RFnK3FmZ1y1FY2erc54hAZOevxzCmtShRaEI6p7EuFFb4yR/GthfmCIZiMGBTht4 O1cfU9pCcPgfCdpoJd85jTeH9rc7+qTOjDYWeoLK75AA0LohbA/N4NgkRIjXO0R8 2wnDzdSFX9vzsgEwGjTFE+nqpQbWWpv+G8J7UiUFvnss3JXYM7FY1fb/z4ztIuGH oOOYUuW32xEKCc6Nc2fKIGOE+hnWv9BbRTonooYRSI7ErzNU23DlpuR5pU5DKT7A 8FFuwXYh4aaoZA== -----END CERTIFICATE-----Generated at Fri Jan 9 21:36:26 2026 by rpki-client