This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft File: acl31Fwp2BvZI_3rHwkv80ZE4zw.mft (raw, json) Hash identifier: XdV5aEo07GxhR9nmt3l25B5o3zCC3jF61qwdo3axli4= Subject key identifier: A9:34:61:F3:DE:6C:05:D3:CA:6F:97:F6:F8:81:6A:A0:F9:5E:D9:22 Authority key identifier: 69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C Certificate issuer: /CN=69c977d45c29d81bd923fdeb1f092ff34644e33c Certificate serial: 019BD76BE97995DE726BAFBEEB9027A218A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft Manifest number: 17D8 Signing time: Mon 19 Jan 2026 18:02:12 +0000 Manifest this update: Mon 19 Jan 2026 18:02:12 +0000 Manifest next update: Tue 20 Jan 2026 18:02:12 +0000 Files and hashes: 1: 6GMqaoNuem-rKgHvy1GiWJWKilw.roa (hash: nwMP8vU+agP8Pszmp+8gcADemNbpqE9xOsflD5H9lfw=) 2: acl31Fwp2BvZI_3rHwkv80ZE4zw.crl (hash: oq2zQKNn4lKsKYdG10HZfjbUp+TbisZQHry4SeTOqOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:6b:e9:79:95:de:72:6b:af:be:eb:90:27:a2:18:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69c977d45c29d81bd923fdeb1f092ff34644e33c Validity Not Before: Jan 19 18:02:12 2026 GMT Not After : Jan 20 18:02:12 2026 GMT Subject: CN=a93461f3de6c05d3ca6f97f6f8816aa0f95ed922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:79:ed:f1:da:91:5a:b8:5d:97:b2:67:13:4a: bd:f3:ea:d8:6a:6b:b7:b8:58:08:25:e3:36:2e:ea: 1e:08:16:52:89:d6:bb:74:08:37:d7:ed:58:35:06: 3b:82:02:f4:94:90:b6:98:fc:c2:d8:5f:d6:f6:c6: 81:c6:70:7a:de:b1:ad:cf:ba:91:4c:71:a6:d8:99: c1:be:b2:16:d3:9c:21:be:dd:41:8f:a8:57:a8:f2: 94:d6:d6:ba:5e:8c:6b:bb:9e:9a:69:d3:93:f0:b6: aa:17:f1:46:c2:e4:41:b9:12:52:73:4e:34:2b:06: 49:67:9c:a6:60:07:c5:0b:d9:83:aa:67:f5:6b:4d: 29:00:96:5b:d5:d0:f6:86:fc:f6:a0:cb:eb:a1:97: f1:28:73:3a:b6:68:31:3e:4a:b2:ef:e9:b2:e4:64: 67:34:4e:db:42:1c:a2:4d:65:fe:f5:b3:6d:0f:ee: d5:d4:ac:cc:11:de:4e:9a:b2:67:31:53:fc:86:cb: f1:3e:a2:6f:52:1b:90:86:f4:ba:57:ac:17:25:eb: 01:b1:32:fa:dc:a1:0b:dd:46:0d:7a:7a:42:e4:58: 84:eb:60:66:73:f5:6b:c7:04:0c:60:2a:50:b2:bd: 5b:85:aa:f9:2a:1d:62:95:3d:d6:e5:23:51:05:b3: cb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:34:61:F3:DE:6C:05:D3:CA:6F:97:F6:F8:81:6A:A0:F9:5E:D9:22 X509v3 Authority Key Identifier: keyid:69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:02:35:b5:41:33:2f:d1:f1:80:37:a4:9e:0f:49:67:50:2c: 93:fe:40:1a:c7:76:88:85:8d:fe:28:a1:88:a8:00:84:8a:21: f5:62:90:4b:37:07:24:53:eb:99:61:08:59:6f:f2:65:93:d6: 39:0a:d2:1b:fb:e6:42:be:f1:60:bb:62:cb:b0:cd:cd:6f:ba: cf:2c:9e:da:73:22:d1:e4:18:b2:90:0e:7f:6f:ff:c1:6e:9b: 4c:07:82:c5:22:00:31:a2:b5:52:02:12:e8:3c:5c:40:5f:dd: f5:c4:44:ed:10:a2:e7:9d:11:32:36:e4:fd:6a:05:a3:f2:4b: 19:b5:78:09:56:e1:a8:f5:b5:1e:a5:24:17:bb:c9:dd:96:51: fc:9f:87:44:c4:9c:2c:d3:9e:5a:a5:b2:bf:e1:ad:ed:ff:79: 4c:73:9b:d0:9f:9d:7e:15:c8:60:36:ef:49:ea:82:23:ea:a6: 00:e6:d9:28:b4:85:60:8a:c5:77:6d:e5:ec:0e:95:fa:98:c3: 3b:67:09:1c:72:90:0a:6c:af:7e:f4:22:cb:5b:7e:c6:be:66: b4:d6:29:8f:81:bb:56:a2:bc:92:01:d1:f0:59:41:8f:4b:f7: 32:c8:cf:4d:1b:f3:31:2d:95:8c:d4:93:ca:57:e3:a0:c3:17: 77:44:4e:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvXa+l5ld5ya6++65AnohigMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5Yzk3N2Q0NWMyOWQ4MWJkOTIzZmRlYjFmMDkyZmYzNDY0 NGUzM2MwHhcNMjYwMTE5MTgwMjEyWhcNMjYwMTIwMTgwMjEyWjAzMTEwLwYDVQQD EyhhOTM0NjFmM2RlNmMwNWQzY2E2Zjk3ZjZmODgxNmFhMGY5NWVkOTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3nt8dqRWrhdl7JnE0q98+rYamu3 uFgIJeM2LuoeCBZSida7dAg31+1YNQY7ggL0lJC2mPzC2F/W9saBxnB63rGtz7qR THGm2JnBvrIW05whvt1Bj6hXqPKU1ta6Xoxru56aadOT8LaqF/FGwuRBuRJSc040 KwZJZ5ymYAfFC9mDqmf1a00pAJZb1dD2hvz2oMvroZfxKHM6tmgxPkqy7+my5GRn NE7bQhyiTWX+9bNtD+7V1KzMEd5OmrJnMVP8hsvxPqJvUhuQhvS6V6wXJesBsTL6 3KEL3UYNenpC5FiE62Bmc/VrxwQMYCpQsr1bhar5Kh1ilT3W5SNRBbPLxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKk0YfPebAXTym+X9viBaqD5XtkiMB8GA1UdIwQY MBaAFGnJd9RcKdgb2SP96x8JL/NGROM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWNsMzFGd3AyQnZaSV8zckh3a3Y4MFpFNHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xYzlkZGMtZGM0ZC00NTcxLTgyZGIt Y2U1MzUyNmU2Njk5LzEvYWNsMzFGd3AyQnZaSV8zckh3a3Y4MFpFNHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8xYzlkZGMtZGM0ZC00NTcxLTgyZGItY2U1MzUyNmU2Njk5 LzEvYWNsMzFGd3AyQnZaSV8zckh3a3Y4MFpFNHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgI1tUEz L9HxgDekng9JZ1Ask/5AGsd2iIWN/iihiKgAhIoh9WKQSzcHJFPrmWEIWW/yZZPW OQrSG/vmQr7xYLtiy7DNzW+6zyye2nMi0eQYspAOf2//wW6bTAeCxSIAMaK1UgIS 6DxcQF/d9cRE7RCi550RMjbk/WoFo/JLGbV4CVbhqPW1HqUkF7vJ3ZZR/J+HRMSc LNOeWqWyv+Gt7f95THOb0J+dfhXIYDbvSeqCI+qmAObZKLSFYIrFd23l7A6V+pjD O2cJHHKQCmyvfvQiy1t+xr5mtNYpj4G7VqK8kgHR8FlBj0v3MsjPTRvzMS2VjNST ylfjoMMXd0RO8g== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:39 2026 by rpki-client