This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft File: RKiGN0mLGI_AvOrgu_BoF2GknUs.mft (raw, json) Hash identifier: KL3I2zAurAqF6CZ9ms7FacOmiup7qsEEMGC5bvAkY4E= Subject key identifier: 5B:D0:01:5A:73:F2:FA:EE:3F:C4:E3:83:89:B2:E1:1D:A7:2D:C5:66 Authority key identifier: 44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B Certificate issuer: /CN=44a88637498b188fc0bceae0bbf0681761a49d4b Certificate serial: 019BDDA47B41542E87088315574A22D26A25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft Manifest number: 0F2E Signing time: Tue 20 Jan 2026 23:01:42 +0000 Manifest this update: Tue 20 Jan 2026 23:01:42 +0000 Manifest next update: Wed 21 Jan 2026 23:01:42 +0000 Files and hashes: 1: IlmmCphtbxCSj-g8MGUHlc5fMJI.roa (hash: ogImPjEXfsHsVXyMK+YnBJnOYbD+aI/1HsAtRVA/WoY=) 2: RKiGN0mLGI_AvOrgu_BoF2GknUs.crl (hash: bl7gnKZSl2jq9X2f+KdO869eSKYKUEeMi+U88Ome+Rg=) 3: hdC4Kn8NS6Sap65oEbc6C4-8rkI.roa (hash: shJCpeavm5lRb/pX8j4NjPSwHatzb8Ath7/zQC9o4/4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dd:a4:7b:41:54:2e:87:08:83:15:57:4a:22:d2:6a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44a88637498b188fc0bceae0bbf0681761a49d4b Validity Not Before: Jan 20 23:01:42 2026 GMT Not After : Jan 21 23:01:42 2026 GMT Subject: CN=5bd0015a73f2faee3fc4e38389b2e11da72dc566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ff:cb:c1:4a:03:09:fd:f1:25:9d:31:0e:f6: 3b:44:17:8a:d2:c9:d7:18:4d:e8:e7:a6:7d:ec:74: 71:de:13:87:d2:11:2e:86:df:b5:70:13:2e:a8:aa: c8:88:3c:9a:87:f3:a7:9d:f2:ae:17:79:d9:e6:be: 2b:3f:f4:67:0c:6f:6a:b7:8d:07:44:c3:ae:f5:28: b2:99:0a:2a:87:99:a6:81:e7:99:75:4a:2e:a3:20: 1d:e0:52:c6:8e:db:f1:66:4f:a3:7f:6f:3f:59:bc: 8d:e9:e0:60:96:6c:71:9b:6a:7f:3f:f0:a3:4d:98: 49:22:58:03:3b:09:ae:6b:0c:78:ad:7b:6b:d8:88: 4a:e1:78:8c:3c:3a:d4:56:fb:4e:e8:58:91:be:33: 90:31:45:fd:cf:79:75:0f:44:64:de:2b:6c:de:b1: aa:dd:44:44:1e:bc:4e:7a:9f:b5:35:c7:a8:43:ca: 1d:da:b6:69:1f:5f:25:0a:43:54:b2:62:f9:6c:3c: 0d:3d:c6:a7:7e:a0:a9:ae:b3:ff:e7:fb:b7:3c:3b: ab:40:55:5d:87:21:b4:01:75:bb:3b:af:ad:51:97: fc:7b:d5:7a:e7:db:e2:69:bc:a0:3c:18:22:17:d6: 20:3c:ba:e1:60:76:88:ff:70:bf:b3:3f:97:b6:dd: eb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D0:01:5A:73:F2:FA:EE:3F:C4:E3:83:89:B2:E1:1D:A7:2D:C5:66 X509v3 Authority Key Identifier: keyid:44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:de:94:72:99:df:2f:e4:50:8c:5b:b1:3f:fd:38:26:a3:cc: 4a:26:bc:bc:1a:fd:3e:32:cb:51:fc:6b:02:5b:b5:dd:31:7c: e2:79:30:5b:14:cc:37:df:6c:ac:f0:9f:95:fb:3b:ec:b9:7f: d9:b0:e9:61:56:89:20:51:02:33:80:24:79:7f:c5:4f:71:55: ce:ee:0e:c4:41:5a:37:5e:b6:a8:2e:80:27:58:c9:ee:c5:96: cf:a9:e4:cf:71:a0:e9:3f:fa:04:1e:b4:85:20:4b:aa:76:72: aa:d1:4b:c3:a5:09:62:10:7b:c0:fb:ae:39:5c:18:e5:52:23: 42:47:f1:82:b7:2f:5c:15:7b:fb:55:a3:7e:c0:d0:12:be:0a: 68:99:7c:74:88:da:56:11:3e:5d:11:24:31:ee:0f:71:1d:0d: 09:15:de:44:f8:8e:4e:06:29:d2:6a:bd:5a:e8:cc:46:e5:ed: 61:ec:b2:c3:fc:da:80:f2:4b:ea:e4:7e:3c:e6:47:40:f2:10: 91:61:1e:03:d0:9f:8d:6d:b9:07:5a:78:fc:32:36:5d:60:7d: a0:62:87:ab:35:c8:d2:64:4a:4d:5e:ac:a6:89:66:5b:92:69: 30:33:16:cc:a1:27:1f:73:8d:b4:9c:7d:23:1a:5e:a3:c1:0d: 11:5b:0a:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvdpHtBVC6HCIMVV0oi0molMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YTg4NjM3NDk4YjE4OGZjMGJjZWFlMGJiZjA2ODE3NjFh NDlkNGIwHhcNMjYwMTIwMjMwMTQyWhcNMjYwMTIxMjMwMTQyWjAzMTEwLwYDVQQD Eyg1YmQwMDE1YTczZjJmYWVlM2ZjNGUzODM4OWIyZTExZGE3MmRjNTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv/LwUoDCf3xJZ0xDvY7RBeK0snX GE3o56Z97HRx3hOH0hEuht+1cBMuqKrIiDyah/OnnfKuF3nZ5r4rP/RnDG9qt40H RMOu9SiymQoqh5mmgeeZdUouoyAd4FLGjtvxZk+jf28/WbyN6eBglmxxm2p/P/Cj TZhJIlgDOwmuawx4rXtr2IhK4XiMPDrUVvtO6FiRvjOQMUX9z3l1D0Rk3its3rGq 3UREHrxOep+1NceoQ8od2rZpH18lCkNUsmL5bDwNPcanfqCprrP/5/u3PDurQFVd hyG0AXW7O6+tUZf8e9V659viabygPBgiF9YgPLrhYHaI/3C/sz+Xtt3rrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvQAVpz8vruP8Tjg4my4R2nLcVmMB8GA1UdIwQY MBaAFESohjdJixiPwLzq4LvwaBdhpJ1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUktpR04wbUxHSV9Bdk9yZ3VfQm9GMkdrblVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS81YmU4MGItMzM4Mi00NDQ4LWExY2Mt ZGNhMDQyNzBiOWQ1LzEvUktpR04wbUxHSV9Bdk9yZ3VfQm9GMkdrblVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS81YmU4MGItMzM4Mi00NDQ4LWExY2MtZGNhMDQyNzBiOWQ1 LzEvUktpR04wbUxHSV9Bdk9yZ3VfQm9GMkdrblVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwd6Ucpnf L+RQjFuxP/04JqPMSia8vBr9PjLLUfxrAlu13TF84nkwWxTMN99srPCflfs77Ll/ 2bDpYVaJIFECM4AkeX/FT3FVzu4OxEFaN162qC6AJ1jJ7sWWz6nkz3Gg6T/6BB60 hSBLqnZyqtFLw6UJYhB7wPuuOVwY5VIjQkfxgrcvXBV7+1WjfsDQEr4KaJl8dIja VhE+XREkMe4PcR0NCRXeRPiOTgYp0mq9WujMRuXtYeyyw/zagPJL6uR+POZHQPIQ kWEeA9CfjW25B1p4/DI2XWB9oGKHqzXI0mRKTV6spolmW5JpMDMWzKEnH3ONtJx9 Ixpeo8ENEVsKJw== -----END CERTIFICATE-----Generated at Wed Jan 21 06:45:37 2026 by rpki-client