This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft File: aA4gzPstWJjCFikA0UaAcKcCSVY.mft (raw, json) Hash identifier: lgsRo2mUA7SAgdrbJiwjcKvLGg4FmNW77yICQJ6utlg= Subject key identifier: D2:B8:CA:9F:44:35:92:34:C0:B9:EB:AF:9B:51:7B:67:9C:48:54:EA Authority key identifier: 68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56 Certificate issuer: /CN=680e20ccfb2d5898c2162900d1468070a7024956 Certificate serial: 019BF8ADA596B8BCF7499FCFFBFE94462A57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft Manifest number: 0BE2 Signing time: Mon 26 Jan 2026 05:01:28 +0000 Manifest this update: Mon 26 Jan 2026 05:01:28 +0000 Manifest next update: Tue 27 Jan 2026 05:01:28 +0000 Files and hashes: 1: MPB9CkoghVUPFrXOQKAmKQU_wx8.roa (hash: SBYmHn0Lh08hIxRKwJZvwv+ggtONWPJMq80oRcsft2g=) 2: aA4gzPstWJjCFikA0UaAcKcCSVY.crl (hash: tn4IeHcRXBf9ZrJ1VfxYrmL7a//tDzd9IGYw1m4Pwkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:a5:96:b8:bc:f7:49:9f:cf:fb:fe:94:46:2a:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=680e20ccfb2d5898c2162900d1468070a7024956 Validity Not Before: Jan 26 05:01:28 2026 GMT Not After : Jan 27 05:01:28 2026 GMT Subject: CN=d2b8ca9f44359234c0b9ebaf9b517b679c4854ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5a:75:a0:58:81:e4:bb:18:b2:9d:bd:d6:10: ab:ce:28:c7:04:fb:f9:e3:70:95:8f:10:09:7c:6e: 50:86:7f:db:68:df:3b:cd:d5:0b:41:f7:3b:50:44: 60:6a:07:3e:d9:1c:51:39:dc:0d:52:70:4d:31:7c: c3:de:b8:12:72:7f:74:aa:37:a6:a1:dc:cd:e3:3a: e2:97:0f:0d:be:d7:ca:65:5d:1b:6d:b3:24:c1:b9: 67:2c:6c:bc:08:ba:16:a0:c5:b0:f2:57:45:58:a5: 93:69:29:1a:27:f8:7c:91:6c:38:54:27:e9:56:4b: f4:fe:2f:bf:87:7d:42:01:94:50:0b:0a:e1:e4:b4: b9:53:48:10:a9:2c:83:45:b4:5e:47:99:ff:87:dd: fe:2a:de:3e:e3:45:e8:76:b6:ad:d9:06:8e:02:66: 3d:fb:0a:bd:7b:ed:88:3f:2d:e1:48:a6:b2:59:eb: 59:ed:21:f9:ec:01:06:94:18:1b:d9:fc:39:a7:75: 1c:7b:a0:f6:0a:f4:d2:eb:b9:76:20:ad:c1:18:96: fb:49:6e:cd:b6:10:40:b5:60:e2:92:3f:ac:86:1f: a7:1d:80:7c:5c:13:a6:eb:05:17:9c:98:bf:1a:9b: 97:bc:d5:bc:8b:a3:99:48:81:ff:6f:e0:da:74:23: 36:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B8:CA:9F:44:35:92:34:C0:B9:EB:AF:9B:51:7B:67:9C:48:54:EA X509v3 Authority Key Identifier: keyid:68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:61:9d:cc:13:69:8b:e2:74:34:ca:be:0c:f8:87:17:6b:59: 51:2f:51:3f:52:e9:5f:70:97:0c:9e:b8:d0:b9:f0:3c:35:96: ea:1d:3a:76:55:63:7d:b3:44:75:f0:a9:c0:59:3c:67:dd:9e: 02:b6:08:f7:61:5e:27:0e:64:7f:7b:2f:8e:06:11:56:9e:0b: de:5d:c1:39:1c:1c:9f:29:a6:b7:d7:93:4b:5a:21:63:16:c0: 9e:b5:e1:b1:23:c7:6c:91:4f:9b:0d:83:41:c6:54:bf:6f:69: 9d:b7:8a:d5:5b:30:9c:a3:8d:bd:eb:47:ac:16:bb:a0:43:09: 4a:c3:2a:c8:01:f8:9d:ef:2e:71:57:3e:4a:1c:76:45:62:f4: 88:92:48:be:70:c2:11:19:37:e4:e9:58:64:87:ae:66:50:5d: 90:81:56:bd:ca:87:4f:06:2b:e3:10:6a:5d:2a:56:8b:3b:b7: 79:72:be:dd:ed:06:8c:46:48:5a:f9:88:23:8a:6e:b0:64:e4: eb:48:ad:1e:c5:1b:1e:26:48:a5:a4:ba:9d:3b:31:69:8f:29: 8d:f6:eb:aa:e8:57:ed:03:e9:e2:02:64:b8:6b:95:cf:36:af: e6:7d:12:8b:43:8d:b7:2e:ef:16:23:90:89:9a:7c:b9:cc:e8: 61:0e:d0:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4raWWuLz3SZ/P+/6URipXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MGUyMGNjZmIyZDU4OThjMjE2MjkwMGQxNDY4MDcwYTcw MjQ5NTYwHhcNMjYwMTI2MDUwMTI4WhcNMjYwMTI3MDUwMTI4WjAzMTEwLwYDVQQD EyhkMmI4Y2E5ZjQ0MzU5MjM0YzBiOWViYWY5YjUxN2I2NzljNDg1NGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFp1oFiB5LsYsp291hCrzijHBPv5 43CVjxAJfG5Qhn/baN87zdULQfc7UERgagc+2RxROdwNUnBNMXzD3rgScn90qjem odzN4zrilw8NvtfKZV0bbbMkwblnLGy8CLoWoMWw8ldFWKWTaSkaJ/h8kWw4VCfp Vkv0/i+/h31CAZRQCwrh5LS5U0gQqSyDRbReR5n/h93+Kt4+40Xodrat2QaOAmY9 +wq9e+2IPy3hSKayWetZ7SH57AEGlBgb2fw5p3Uce6D2CvTS67l2IK3BGJb7SW7N thBAtWDikj+shh+nHYB8XBOm6wUXnJi/GpuXvNW8i6OZSIH/b+DadCM2HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNK4yp9ENZI0wLnrr5tRe2ecSFTqMB8GA1UdIwQY MBaAFGgOIMz7LViYwhYpANFGgHCnAklWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUE0Z3pQc3RXSmpDRmlrQTBVYUFjS2NDU1ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny83OTZmOGMtYmRiNy00NDFmLWJkYmIt MDM1NDFkMjMxNTc0LzEvYUE0Z3pQc3RXSmpDRmlrQTBVYUFjS2NDU1ZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny83OTZmOGMtYmRiNy00NDFmLWJkYmItMDM1NDFkMjMxNTc0 LzEvYUE0Z3pQc3RXSmpDRmlrQTBVYUFjS2NDU1ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2GdzBNp i+J0NMq+DPiHF2tZUS9RP1LpX3CXDJ640LnwPDWW6h06dlVjfbNEdfCpwFk8Z92e ArYI92FeJw5kf3svjgYRVp4L3l3BORwcnymmt9eTS1ohYxbAnrXhsSPHbJFPmw2D QcZUv29pnbeK1VswnKONvetHrBa7oEMJSsMqyAH4ne8ucVc+Shx2RWL0iJJIvnDC ERk35OlYZIeuZlBdkIFWvcqHTwYr4xBqXSpWizu3eXK+3e0GjEZIWvmII4pusGTk 60itHsUbHiZIpaS6nTsxaY8pjfbrquhX7QPp4gJkuGuVzzav5n0Si0ONty7vFiOQ iZp8uczoYQ7QBA== -----END CERTIFICATE-----Generated at Mon Jan 26 15:40:01 2026 by rpki-client