This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft File: rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft (raw, json) Hash identifier: tRaUe6bGhJjWkkunX1JdsiQ9sION0627IJSwzx8DTOA= Subject key identifier: 5F:20:F2:96:01:63:79:89:C0:FE:A2:F2:A0:2F:64:87:07:A3:9E:80 Authority key identifier: AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B Certificate issuer: /CN=acfeacea5d812f3030c557e48c53758753fb6c6b Certificate serial: 019BFB099EAAAB5C18A2329C77F2F4753BF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft Manifest number: 17E8 Signing time: Mon 26 Jan 2026 16:01:10 +0000 Manifest this update: Mon 26 Jan 2026 16:01:10 +0000 Manifest next update: Tue 27 Jan 2026 16:01:10 +0000 Files and hashes: 1: TC97HjNs0IC4EKR9enZJIqgEZ2Y.roa (hash: YzLzlBSzxjBcEeB8/fSR9TVjgk9aSxEfekBZqcoz880=) 2: rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl (hash: FgENVWysAFhSvyjw/RcWIfWa6VNloPD97GRlnUxXjGE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:9e:aa:ab:5c:18:a2:32:9c:77:f2:f4:75:3b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acfeacea5d812f3030c557e48c53758753fb6c6b Validity Not Before: Jan 26 16:01:10 2026 GMT Not After : Jan 27 16:01:10 2026 GMT Subject: CN=5f20f29601637989c0fea2f2a02f648707a39e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c3:92:ab:df:21:19:0f:a6:6f:b6:62:6a:9b: 17:ee:80:94:1a:bb:6b:69:b2:72:05:dc:81:25:86: 9e:51:2f:1f:88:02:27:17:55:8d:71:7c:9f:a8:1e: 44:aa:02:6b:06:45:4b:cc:60:32:63:dd:cf:86:2d: be:00:89:fd:76:3b:b7:31:65:ca:0b:6e:68:34:fe: cd:e4:84:98:9a:a0:9b:68:19:b3:a5:49:c6:80:8d: 07:1a:c5:e1:aa:54:02:7f:92:04:d9:66:bd:6a:a8: 55:35:b9:b7:bc:ca:6a:f5:f2:da:b5:27:41:9f:04: a7:1b:9d:59:6c:52:bc:bb:2a:6c:bf:5e:25:7e:21: 83:b6:7a:19:17:5f:78:3d:95:c7:9a:97:69:1e:2f: 77:ad:66:4e:3a:dd:ea:96:de:03:8e:36:46:d2:66: 3d:83:dc:e5:f5:f9:5b:21:c8:24:78:b9:b7:8e:4c: 41:6a:df:6c:9a:69:f3:b9:0d:80:93:5b:f4:4f:4c: 90:f8:45:73:53:45:69:55:d8:3b:02:13:50:21:c8: fa:01:55:3e:6b:21:45:34:d3:03:a7:50:fe:b1:9a: e3:fd:c1:77:b0:a8:f0:8d:6d:79:fc:8c:3d:1c:f9: 9d:81:83:48:7a:c5:00:28:fa:2e:47:41:ee:d6:36: 9e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:20:F2:96:01:63:79:89:C0:FE:A2:F2:A0:2F:64:87:07:A3:9E:80 X509v3 Authority Key Identifier: keyid:AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:bc:2c:f6:06:3c:c2:fc:a3:ef:de:07:fb:9a:e0:aa:d3:38: 2b:9a:ad:fd:b1:73:e5:28:fc:01:1e:5e:bc:9f:f2:b6:84:94: 81:5a:3b:ed:ea:a3:0d:ef:c8:e9:23:a9:64:0e:f7:0f:16:c1: 39:1a:5b:ae:8d:b5:ee:ca:11:75:b1:ea:7c:98:47:4a:48:ca: cc:20:0b:e8:d1:d9:7a:dc:23:a8:a5:12:cc:28:7b:7d:9a:79: 85:cd:f8:a0:55:a2:75:9d:6f:3b:a8:03:76:a6:c6:3c:3e:f8: 1e:cf:0c:b5:c8:7c:82:e0:8d:c9:95:b9:b4:31:0d:04:c4:0c: 0e:f5:ac:5d:72:af:f1:2e:40:3c:4b:c4:71:32:1b:8c:e5:0b: 4c:b1:bf:30:e9:5a:cc:ee:3b:91:eb:7b:e7:44:be:9e:b1:f2: be:e6:56:cc:ee:f2:01:1f:80:9b:2e:8b:58:54:e0:da:e9:8b: 4f:d3:ad:a6:5e:c5:c5:84:78:4f:8e:ee:a3:f4:7e:10:4a:45: 79:ad:c0:07:ac:4c:a2:37:2e:9d:e2:32:5b:a6:d4:f7:c0:eb: 2d:66:f5:a1:1b:8d:54:40:ff:cb:0d:6e:f0:68:71:99:96:1f: 37:92:98:d9:59:82:05:3c:bb:e0:a6:b8:42:be:97:b3:58:04: b5:42:e0:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CZ6qq1wYojKcd/L0dTv4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZmVhY2VhNWQ4MTJmMzAzMGM1NTdlNDhjNTM3NTg3NTNm YjZjNmIwHhcNMjYwMTI2MTYwMTEwWhcNMjYwMTI3MTYwMTEwWjAzMTEwLwYDVQQD Eyg1ZjIwZjI5NjAxNjM3OTg5YzBmZWEyZjJhMDJmNjQ4NzA3YTM5ZTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MOSq98hGQ+mb7ZiapsX7oCUGrtr abJyBdyBJYaeUS8fiAInF1WNcXyfqB5EqgJrBkVLzGAyY93Phi2+AIn9dju3MWXK C25oNP7N5ISYmqCbaBmzpUnGgI0HGsXhqlQCf5IE2Wa9aqhVNbm3vMpq9fLatSdB nwSnG51ZbFK8uypsv14lfiGDtnoZF194PZXHmpdpHi93rWZOOt3qlt4DjjZG0mY9 g9zl9flbIcgkeLm3jkxBat9smmnzuQ2Ak1v0T0yQ+EVzU0VpVdg7AhNQIcj6AVU+ ayFFNNMDp1D+sZrj/cF3sKjwjW15/Iw9HPmdgYNIesUAKPouR0Hu1jaebwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8g8pYBY3mJwP6i8qAvZIcHo56AMB8GA1UdIwQY MBaAFKz+rOpdgS8wMMVX5IxTdYdT+2xrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclA2czZsMkJMekF3eFZma2pGTjFoMVA3YkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yNzI3YjUtNWVjYi00ODVmLWI3ZDkt YTJmZDI4ODQwYTAzLzEvclA2czZsMkJMekF3eFZma2pGTjFoMVA3YkdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8yNzI3YjUtNWVjYi00ODVmLWI3ZDktYTJmZDI4ODQwYTAz LzEvclA2czZsMkJMekF3eFZma2pGTjFoMVA3YkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZbws9gY8 wvyj794H+5rgqtM4K5qt/bFz5Sj8AR5evJ/ytoSUgVo77eqjDe/I6SOpZA73DxbB ORpbro217soRdbHqfJhHSkjKzCAL6NHZetwjqKUSzCh7fZp5hc34oFWidZ1vO6gD dqbGPD74Hs8Mtch8guCNyZW5tDENBMQMDvWsXXKv8S5APEvEcTIbjOULTLG/MOla zO47ket750S+nrHyvuZWzO7yAR+Amy6LWFTg2umLT9Otpl7FxYR4T47uo/R+EEpF ea3AB6xMojcuneIyW6bU98DrLWb1oRuNVED/yw1u8GhxmZYfN5KY2VmCBTy74Ka4 Qr6Xs1gEtULgcg== -----END CERTIFICATE-----Generated at Mon Jan 26 23:27:17 2026 by rpki-client