This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft File: Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft (raw, json) Hash identifier: YLp3p4F52U2s7b+2922DSDA4p4eKFAvfOPcvIBzXMbI= Subject key identifier: F7:B9:25:33:85:AA:57:6F:F5:B2:42:46:27:56:7A:33:7B:40:18:E7 Authority key identifier: 01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80 Certificate issuer: /CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80 Certificate serial: 019BF91BEB90B60BC1751A6F00282164B373 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft Manifest number: 17E8 Signing time: Mon 26 Jan 2026 07:01:55 +0000 Manifest this update: Mon 26 Jan 2026 07:01:55 +0000 Manifest next update: Tue 27 Jan 2026 07:01:55 +0000 Files and hashes: 1: Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl (hash: BAoH0DFDSXn3PyplKuba6RHZKnK+YYhfFSYhMwtwhHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:eb:90:b6:0b:c1:75:1a:6f:00:28:21:64:b3:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01bae37f8b4e42dd90d9b14f60b2414287d41b80 Validity Not Before: Jan 26 07:01:55 2026 GMT Not After : Jan 27 07:01:55 2026 GMT Subject: CN=f7b9253385aa576ff5b2424627567a337b4018e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:40:24:13:1f:2a:45:cb:70:a9:56:88:b9:bb: b8:67:1a:63:c5:40:8d:23:1a:fb:f8:3a:d8:be:a5: 8e:70:14:f4:76:b0:d2:a5:25:8f:b3:12:65:90:6c: 13:b3:64:82:1b:b7:83:55:e7:67:9d:03:5f:b5:c0: ec:1b:51:da:08:50:50:55:35:3c:d3:73:85:6b:63: b7:11:54:ed:5a:57:ec:64:a3:59:1c:4b:68:9e:97: 44:0f:53:9a:a9:19:96:9e:3c:96:e9:db:9a:77:ba: 8b:14:12:d1:a1:c5:73:ff:81:dd:87:ee:b4:43:85: 09:88:e3:78:17:a6:ac:3a:a6:e5:9a:fb:b2:88:4a: 27:23:3b:3d:99:96:32:5f:1f:c2:10:a1:9e:f8:5b: e4:d0:63:43:78:ba:76:48:bf:e5:2d:80:8d:b9:c6: 12:59:27:61:38:80:c1:46:5b:33:80:b5:11:62:fc: 8a:27:f6:41:a2:2a:0e:7a:50:e8:3b:41:c1:25:61: eb:27:7b:ce:52:bd:ee:35:b1:67:50:6a:1e:a7:c5: eb:6e:7d:a0:22:ee:1e:93:46:42:8d:41:a7:23:bc: bf:ad:6c:3c:a7:71:06:d9:89:a8:16:65:53:82:e9: c1:9a:5f:8b:0a:8d:e2:48:8c:df:37:33:de:ea:14: 0e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B9:25:33:85:AA:57:6F:F5:B2:42:46:27:56:7A:33:7B:40:18:E7 X509v3 Authority Key Identifier: keyid:01:BA:E3:7F:8B:4E:42:DD:90:D9:B1:4F:60:B2:41:42:87:D4:1B:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Abrjf4tOQt2Q2bFPYLJBQofUG4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/08570e-f0a1-4c80-8801-e7c39f5290d0/1/Abrjf4tOQt2Q2bFPYLJBQofUG4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:42:4e:fb:05:4b:20:77:4c:17:08:68:2c:2d:c5:59:1d:ef: 82:aa:3d:c5:6d:fa:77:90:bc:00:59:71:f4:4c:e0:f4:a3:91: 19:0d:b6:97:2a:60:c1:3d:a0:ed:b7:2d:8b:e3:bd:b8:4b:b6: 22:a7:4a:0b:e2:77:b4:7b:49:c9:a1:e2:05:be:e6:f1:eb:21: 62:e5:a7:d7:8a:d2:f9:64:50:cd:4b:bf:e8:b7:fb:53:87:ed: d6:a9:21:0f:14:09:38:b5:1f:4d:5d:ef:f7:17:29:b7:90:7b: 1d:81:e7:04:06:69:28:ca:b9:90:17:7c:cc:70:79:d6:52:7b: 7d:17:aa:54:12:22:f8:03:23:86:a1:0f:4d:b1:54:ad:6a:ae: 4e:d5:3d:88:63:53:52:31:fa:3d:fa:d1:82:a9:71:20:67:2f: ac:e3:b2:20:51:0d:ed:b6:1e:a6:eb:c7:ba:0e:9e:60:69:cc: fa:bb:1f:3f:3e:e1:bc:10:a0:0e:1f:a6:6a:ea:5c:62:d3:b6: 37:f4:f3:45:b7:4e:87:fb:3b:79:14:f4:75:83:18:4a:cc:45: ee:17:3b:07:f9:71:c3:7e:55:40:75:cd:49:36:11:a1:99:26: 46:9c:d1:73:37:bb:e1:d8:d8:4b:ef:4b:76:0d:77:66:bc:45: 83:73:10:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G+uQtgvBdRpvACghZLNzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYmFlMzdmOGI0ZTQyZGQ5MGQ5YjE0ZjYwYjI0MTQyODdk NDFiODAwHhcNMjYwMTI2MDcwMTU1WhcNMjYwMTI3MDcwMTU1WjAzMTEwLwYDVQQD EyhmN2I5MjUzMzg1YWE1NzZmZjViMjQyNDYyNzU2N2EzMzdiNDAxOGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30AkEx8qRctwqVaIubu4ZxpjxUCN Ixr7+DrYvqWOcBT0drDSpSWPsxJlkGwTs2SCG7eDVednnQNftcDsG1HaCFBQVTU8 03OFa2O3EVTtWlfsZKNZHEtonpdED1OaqRmWnjyW6duad7qLFBLRocVz/4Hdh+60 Q4UJiON4F6asOqblmvuyiEonIzs9mZYyXx/CEKGe+Fvk0GNDeLp2SL/lLYCNucYS WSdhOIDBRlszgLURYvyKJ/ZBoioOelDoO0HBJWHrJ3vOUr3uNbFnUGoep8Xrbn2g Iu4ek0ZCjUGnI7y/rWw8p3EG2YmoFmVTgunBml+LCo3iSIzfNzPe6hQOLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPe5JTOFqldv9bJCRidWejN7QBjnMB8GA1UdIwQY MBaAFAG643+LTkLdkNmxT2CyQUKH1BuAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWJyamY0dE9RdDJRMmJGUFlMSkJRb2ZVRzRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wODU3MGUtZjBhMS00YzgwLTg4MDEt ZTdjMzlmNTI5MGQwLzEvQWJyamY0dE9RdDJRMmJGUFlMSkJRb2ZVRzRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8wODU3MGUtZjBhMS00YzgwLTg4MDEtZTdjMzlmNTI5MGQw LzEvQWJyamY0dE9RdDJRMmJGUFlMSkJRb2ZVRzRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEJO+wVL IHdMFwhoLC3FWR3vgqo9xW36d5C8AFlx9Ezg9KORGQ22lypgwT2g7bcti+O9uEu2 IqdKC+J3tHtJyaHiBb7m8eshYuWn14rS+WRQzUu/6Lf7U4ft1qkhDxQJOLUfTV3v 9xcpt5B7HYHnBAZpKMq5kBd8zHB51lJ7fReqVBIi+AMjhqEPTbFUrWquTtU9iGNT UjH6PfrRgqlxIGcvrOOyIFEN7bYepuvHug6eYGnM+rsfPz7hvBCgDh+maupcYtO2 N/TzRbdOh/s7eRT0dYMYSsxF7hc7B/lxw35VQHXNSTYRoZkmRpzRcze74djYS+9L dg13ZrxFg3MQsg== -----END CERTIFICATE-----Generated at Mon Jan 26 15:39:28 2026 by rpki-client