This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft File: AK1tg8gINynXqdhXHWXOl-BYuCE.mft (raw, json) Hash identifier: 2JCsBJWRRjNkUjgMbFEv6NOzWCX7Bt+otuQy4ALAroE= Subject key identifier: AC:F3:1C:23:71:93:75:1B:77:ED:65:E7:89:BA:CF:0E:9E:D0:DA:D3 Authority key identifier: 00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21 Certificate issuer: /CN=00ad6d83c8083729d7a9d8571d65ce97e058b821 Certificate serial: 019BFD657C9F12542FB6ADFDB4AB4F88A1E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft Manifest number: 0C82 Signing time: Tue 27 Jan 2026 03:00:45 +0000 Manifest this update: Tue 27 Jan 2026 03:00:45 +0000 Manifest next update: Wed 28 Jan 2026 03:00:45 +0000 Files and hashes: 1: AK1tg8gINynXqdhXHWXOl-BYuCE.crl (hash: JsVGzv6DKDsqr57T/8XgBJZmM/nISh9bCCPboSMpVzU=) 2: JsagPiEmN55sTDmTwaHLjITkfUM.roa (hash: +9MwVsIBoGNhZQCo9dDolHdn3lT7H9+sHTD/yJTV0oA=) 3: RDdfzHQIvdsdqJHF4YV_Xp1DNTA.roa (hash: vd/NjoqieFOKWnlLtrWuKUlxYWTJnOiCm9Hx+hskdwU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:7c:9f:12:54:2f:b6:ad:fd:b4:ab:4f:88:a1:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00ad6d83c8083729d7a9d8571d65ce97e058b821 Validity Not Before: Jan 27 03:00:45 2026 GMT Not After : Jan 28 03:00:45 2026 GMT Subject: CN=acf31c237193751b77ed65e789bacf0e9ed0dad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:98:b3:4d:79:f3:10:7f:5e:c5:76:e3:7f:2c: f3:e1:f1:c6:9d:e4:ac:c5:fc:05:22:9f:6c:64:b4: 67:78:32:84:8f:3c:ac:d1:e7:8e:1b:db:52:4b:1f: c9:e4:c5:e1:f5:a6:dd:5d:2f:50:28:30:52:80:4e: 9b:60:e2:6b:53:e5:ad:c5:90:31:d9:c7:4e:92:f4: 19:a1:b5:e3:52:15:7c:aa:48:aa:bf:38:36:85:f9: 15:4c:16:d9:0d:e2:c6:d8:1f:06:81:c9:a1:42:85: 16:cd:fd:76:98:6a:74:c8:46:9e:ce:49:77:3d:f5: 41:f3:3e:45:bb:4e:bf:ba:28:07:ce:09:6c:c8:cb: 57:29:e0:d6:3d:c4:ef:c9:66:4c:49:d3:25:f1:1a: c1:99:d9:e8:c2:2d:17:5a:d4:e7:c0:37:db:b9:77: a9:fd:36:4e:fd:af:ef:82:a0:bf:8a:66:00:dd:5d: 85:32:68:8f:47:5d:ed:35:69:c0:31:db:7c:f9:dc: 05:93:fb:3d:63:11:5c:d8:73:9f:4e:eb:78:1b:f1: 2a:f6:13:ac:a7:9b:ba:e3:63:bb:67:8a:fe:8a:04: 10:bb:bd:56:60:84:41:89:43:f5:0b:d7:82:d7:5d: 5c:fa:64:3c:96:c4:95:ac:a5:49:e7:fd:5e:7f:1e: 3b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F3:1C:23:71:93:75:1B:77:ED:65:E7:89:BA:CF:0E:9E:D0:DA:D3 X509v3 Authority Key Identifier: keyid:00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:89:7a:b7:1a:72:9a:04:1f:5c:ea:12:79:9b:2b:99:44:08: f8:34:b6:c9:f2:cb:8a:9b:5c:e4:ff:c5:81:ca:7e:8e:0f:49: 1a:c5:54:d2:3b:9f:8f:a0:1e:7c:c5:53:b8:e5:ef:a4:88:e1: 38:a8:9d:f8:66:e5:35:b0:3d:3d:b1:f6:d6:d2:58:29:b2:d9: 2d:c8:78:33:e6:11:fd:40:6a:35:87:fa:4e:a7:2f:fe:99:ad: 0b:8d:88:0c:55:0d:eb:f3:20:d3:8e:ad:43:d7:6e:5b:3f:9e: 56:a7:9b:a2:bb:a4:d3:ae:90:e4:32:d1:fa:e0:19:9f:05:b6: 19:0e:36:0a:eb:8f:db:d7:bc:d3:8f:06:16:f5:4c:90:19:f7: b2:b1:0a:32:2d:dd:2d:e6:4d:f3:2e:ff:d8:ad:8b:65:49:c9: 18:6e:6f:8d:39:d3:f3:29:3d:2b:56:31:96:4d:ca:25:3a:5b: fa:9f:b2:bc:13:39:98:5e:a6:a5:fa:1d:d8:d9:9e:75:1b:4c: f3:45:aa:7d:96:35:cb:c2:23:db:82:5e:82:6d:1e:b3:a1:69: 0e:fc:f5:3f:c8:38:b5:58:6c:8b:b8:77:7a:08:2d:e1:9f:16: ae:91:3b:46:b8:7a:91:a1:0c:dd:c9:d0:86:2f:6d:14:79:94: 4b:dc:1d:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZXyfElQvtq39tKtPiKHhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYWQ2ZDgzYzgwODM3MjlkN2E5ZDg1NzFkNjVjZTk3ZTA1 OGI4MjEwHhcNMjYwMTI3MDMwMDQ1WhcNMjYwMTI4MDMwMDQ1WjAzMTEwLwYDVQQD EyhhY2YzMWMyMzcxOTM3NTFiNzdlZDY1ZTc4OWJhY2YwZTllZDBkYWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJizTXnzEH9exXbjfyzz4fHGneSs xfwFIp9sZLRneDKEjzys0eeOG9tSSx/J5MXh9abdXS9QKDBSgE6bYOJrU+WtxZAx 2cdOkvQZobXjUhV8qkiqvzg2hfkVTBbZDeLG2B8GgcmhQoUWzf12mGp0yEaezkl3 PfVB8z5Fu06/uigHzglsyMtXKeDWPcTvyWZMSdMl8RrBmdnowi0XWtTnwDfbuXep /TZO/a/vgqC/imYA3V2FMmiPR13tNWnAMdt8+dwFk/s9YxFc2HOfTut4G/Eq9hOs p5u642O7Z4r+igQQu71WYIRBiUP1C9eC111c+mQ8lsSVrKVJ5/1efx47LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzzHCNxk3Ubd+1l54m6zw6e0NrTMB8GA1UdIwQY MBaAFACtbYPICDcp16nYVx1lzpfgWLghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUsxdGc4Z0lOeW5YcWRoWEhXWE9sLUJZdUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kYjI5MTItODlhOS00ZWU5LTgyMjkt YTU1Zjc3YjgzZTZiLzEvQUsxdGc4Z0lOeW5YcWRoWEhXWE9sLUJZdUNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9kYjI5MTItODlhOS00ZWU5LTgyMjktYTU1Zjc3YjgzZTZi LzEvQUsxdGc4Z0lOeW5YcWRoWEhXWE9sLUJZdUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYl6txpy mgQfXOoSeZsrmUQI+DS2yfLLiptc5P/Fgcp+jg9JGsVU0jufj6AefMVTuOXvpIjh OKid+GblNbA9PbH21tJYKbLZLch4M+YR/UBqNYf6Tqcv/pmtC42IDFUN6/Mg046t Q9duWz+eVqeboruk066Q5DLR+uAZnwW2GQ42CuuP29e8048GFvVMkBn3srEKMi3d LeZN8y7/2K2LZUnJGG5vjTnT8yk9K1Yxlk3KJTpb+p+yvBM5mF6mpfod2NmedRtM 80WqfZY1y8Ij24Jegm0es6FpDvz1P8g4tVhsi7h3eggt4Z8WrpE7Rrh6kaEM3cnQ hi9tFHmUS9wdzg== -----END CERTIFICATE-----Generated at Tue Jan 27 07:17:20 2026 by rpki-client