This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft File: p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft (raw, json) Hash identifier: Nxgt7TXeb4rrFP2U7odp2rAywV6oT0L2p/nxj5DdhLo= Subject key identifier: 71:10:F8:92:DA:80:86:EF:DD:15:F7:6B:52:27:4C:4A:00:F6:DC:FB Authority key identifier: A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47 Certificate issuer: /CN=a750263823402b83c11c5014d32666dcab111447 Certificate serial: 019BD131D468A84CE85C046228DD738C7215 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft Manifest number: 0278 Signing time: Sun 18 Jan 2026 13:01:02 +0000 Manifest this update: Sun 18 Jan 2026 13:01:02 +0000 Manifest next update: Mon 19 Jan 2026 13:01:02 +0000 Files and hashes: 1: P-DBjLRAhGCsnhP5dVp_tFMnlGE.roa (hash: pkN8TYGuUVnxVvKzbBZ3PyoTyNpT5OufkpOv4OKwQDY=) 2: p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl (hash: 2l4u+Hwu5yRLSxrOk3kVDxWwwovbUJNuGp9wcNVODEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d1:31:d4:68:a8:4c:e8:5c:04:62:28:dd:73:8c:72:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a750263823402b83c11c5014d32666dcab111447 Validity Not Before: Jan 18 13:01:02 2026 GMT Not After : Jan 19 13:01:02 2026 GMT Subject: CN=7110f892da8086efdd15f76b52274c4a00f6dcfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c1:9e:c6:6f:f4:9a:e3:5a:ad:b2:50:6b:44: 68:bd:2d:08:49:eb:3a:8d:81:ba:ee:0f:8e:b3:25: 4b:6d:c6:c1:f3:f0:10:87:a0:0d:39:af:9d:3c:b3: a3:2c:ef:17:20:01:14:b6:56:f5:e1:c7:2a:b6:f5: c8:fc:33:85:d3:94:16:8d:04:a4:5a:f7:f6:9f:db: 91:2e:76:2d:ed:18:72:62:76:f8:b4:df:58:dc:ce: 61:fd:be:3d:e6:50:9a:88:9e:40:03:4c:b4:4e:63: a2:12:b4:28:22:94:45:54:4a:18:1f:9e:25:54:1e: f3:8f:ee:f8:33:31:e4:59:7a:47:bc:ca:0e:69:9a: 25:40:3a:b9:ea:ab:86:cd:b2:77:ee:aa:c8:b0:76: bc:92:2a:12:81:f3:d8:a2:52:61:bc:f2:3e:79:5c: 53:fb:9f:88:42:0b:fb:3e:25:92:3c:dc:a7:62:a5: 3e:4e:e4:6a:e3:7e:64:3a:79:fb:e2:40:42:57:28: c9:9b:98:b2:c7:09:a0:58:ce:ae:b7:e9:f6:b8:f5: a8:ae:e1:b1:05:10:9d:b9:90:a5:3f:59:fd:51:00: e9:16:11:81:32:86:16:e5:69:48:da:d3:0b:2f:0e: a5:e5:35:28:77:e9:9e:19:dc:4c:9d:5a:61:61:9a: e4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:10:F8:92:DA:80:86:EF:DD:15:F7:6B:52:27:4C:4A:00:F6:DC:FB X509v3 Authority Key Identifier: keyid:A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:58:96:85:41:32:41:8e:6d:72:c6:ae:e3:c4:c1:2b:4d:1f: da:8f:cb:00:44:73:59:0a:fd:b2:0a:9e:95:ac:b7:5e:b6:4b: 5c:b3:78:60:f0:9b:87:a0:fd:19:68:8f:96:f4:9c:7a:67:0b: 7e:41:09:2b:ca:db:c1:40:fd:86:b3:12:21:24:c3:3e:72:7b: 6a:9c:62:38:68:32:45:9b:0d:0e:cb:72:88:e9:4c:6f:0b:fd: 21:9a:8f:1e:7a:c4:e6:0c:e0:a8:a7:7b:90:fa:ec:24:22:1a: 5c:49:e6:ac:03:d0:1c:f2:7b:a3:42:b8:50:18:c9:95:91:1c: 03:91:4e:a3:97:c0:a7:88:8b:08:55:7f:4c:63:a2:11:14:82: b6:ca:3f:b5:fa:65:e0:2d:6e:f9:1f:57:fa:88:6b:39:7a:64: 0b:21:a7:16:1d:86:59:65:82:f6:30:90:1b:cf:ff:1a:8c:79: 9c:05:ae:25:29:6b:95:0e:f4:bb:ad:24:98:d6:7a:b8:9d:6a: 22:e3:ab:5b:f8:52:a8:59:34:5a:30:9e:e6:b3:18:b9:fd:15: 8a:08:4a:2c:55:0b:fa:78:de:0b:6e:a2:aa:be:3e:9f:91:e3: 12:6a:a9:a6:88:34:97:d6:cb:fc:57:31:2f:39:df:19:d7:b5: 10:7d:38:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvRMdRoqEzoXARiKN1zjHIVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NTAyNjM4MjM0MDJiODNjMTFjNTAxNGQzMjY2NmRjYWIx MTE0NDcwHhcNMjYwMTE4MTMwMTAyWhcNMjYwMTE5MTMwMTAyWjAzMTEwLwYDVQQD Eyg3MTEwZjg5MmRhODA4NmVmZGQxNWY3NmI1MjI3NGM0YTAwZjZkY2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cGexm/0muNarbJQa0RovS0ISes6 jYG67g+OsyVLbcbB8/AQh6ANOa+dPLOjLO8XIAEUtlb14ccqtvXI/DOF05QWjQSk Wvf2n9uRLnYt7RhyYnb4tN9Y3M5h/b495lCaiJ5AA0y0TmOiErQoIpRFVEoYH54l VB7zj+74MzHkWXpHvMoOaZolQDq56quGzbJ37qrIsHa8kioSgfPYolJhvPI+eVxT +5+IQgv7PiWSPNynYqU+TuRq435kOnn74kBCVyjJm5iyxwmgWM6ut+n2uPWoruGx BRCduZClP1n9UQDpFhGBMoYW5WlI2tMLLw6l5TUod+meGdxMnVphYZrkrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEQ+JLagIbv3RX3a1InTEoA9tz7MB8GA1UdIwQY MBaAFKdQJjgjQCuDwRxQFNMmZtyrERRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDFBbU9DTkFLNFBCSEZBVTB5Wm0zS3NSRkVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9jY2I0ZmQtZmE2Ny00OGQ2LWE4ZmMt OWEyOWYxZjQwODFjLzEvcDFBbU9DTkFLNFBCSEZBVTB5Wm0zS3NSRkVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9jY2I0ZmQtZmE2Ny00OGQ2LWE4ZmMtOWEyOWYxZjQwODFj LzEvcDFBbU9DTkFLNFBCSEZBVTB5Wm0zS3NSRkVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACViWhUEy QY5tcsau48TBK00f2o/LAERzWQr9sgqelay3XrZLXLN4YPCbh6D9GWiPlvScemcL fkEJK8rbwUD9hrMSISTDPnJ7apxiOGgyRZsNDstyiOlMbwv9IZqPHnrE5gzgqKd7 kPrsJCIaXEnmrAPQHPJ7o0K4UBjJlZEcA5FOo5fAp4iLCFV/TGOiERSCtso/tfpl 4C1u+R9X+ohrOXpkCyGnFh2GWWWC9jCQG8//Gox5nAWuJSlrlQ70u60kmNZ6uJ1q IuOrW/hSqFk0WjCe5rMYuf0VighKLFUL+njeC26iqr4+n5HjEmqppog0l9bL/Fcx LznfGde1EH04JQ== -----END CERTIFICATE-----Generated at Sun Jan 18 17:58:14 2026 by rpki-client