This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft File: Ai526JlLZmE3SOAhtfQAfwG1TU8.mft (raw, json) Hash identifier: eB0zsVkYlSHFy78H92+ybDA6n2acCW1uUGmnviy9z7U= Subject key identifier: 00:C4:E4:E4:C1:6C:4A:B0:4A:F7:49:8D:E3:9B:6B:5A:CD:4F:C7:59 Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f Certificate serial: 019BE0DB847121B2FA8A2E3913D0F41BE68D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft Manifest number: 08A4 Signing time: Wed 21 Jan 2026 14:00:41 +0000 Manifest this update: Wed 21 Jan 2026 14:00:41 +0000 Manifest next update: Thu 22 Jan 2026 14:00:41 +0000 Files and hashes: 1: Ai526JlLZmE3SOAhtfQAfwG1TU8.crl (hash: oVIwUQEkNGH+Cl/pFMUyjGaGztfokaIsi4XyjGMghMQ=) 2: zUhUpuiJQjYFriCknaMoHa_j9nc.roa (hash: nBYPwfayco1MFhHmBX7gPY3k4pTwilgUn82s5ypu69Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:db:84:71:21:b2:fa:8a:2e:39:13:d0:f4:1b:e6:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f Validity Not Before: Jan 21 14:00:41 2026 GMT Not After : Jan 22 14:00:41 2026 GMT Subject: CN=00c4e4e4c16c4ab04af7498de39b6b5acd4fc759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5c:0e:c1:4b:77:b1:90:35:59:de:48:fe:e9: a9:04:4e:6d:18:e7:e7:6f:d9:c1:b2:04:99:7f:b3: be:e3:52:74:45:1c:b1:f9:53:ce:07:4d:92:76:e4: c8:df:cc:25:8e:74:32:a8:b5:f6:17:e8:ca:26:4e: 35:b6:1f:e1:ba:21:f4:de:cd:f9:2a:28:85:c2:47: 41:73:1a:6d:ea:b1:2c:6a:bd:2d:9e:28:b7:2b:d5: a7:54:1e:23:14:18:d9:ec:7f:8f:c8:ef:b8:24:85: a0:7d:e2:35:03:70:6b:79:e8:b4:de:98:6f:9e:24: eb:65:98:6b:4d:5f:a3:e9:af:89:6d:89:ec:e0:48: d0:b4:03:d4:69:77:47:23:69:28:d3:bb:6a:ea:ab: 02:de:4d:f8:2b:10:59:8e:fc:2f:06:30:32:64:74: 00:20:d6:d1:49:0b:3c:5d:58:90:29:6f:49:5d:1a: e2:1c:e4:e7:dc:47:0c:12:b2:05:52:30:b5:a6:3c: 9c:b9:b8:36:7d:8a:b0:98:76:24:1b:1c:75:1a:06: 2b:2f:b0:23:ed:75:77:d0:9e:7b:ed:00:cf:2b:a9: a4:c6:4c:01:47:91:9e:62:bc:00:ba:d9:46:07:7b: 4c:4a:e1:75:9a:dc:25:18:4a:6b:ea:85:5b:22:a2: e5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C4:E4:E4:C1:6C:4A:B0:4A:F7:49:8D:E3:9B:6B:5A:CD:4F:C7:59 X509v3 Authority Key Identifier: keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:0f:65:cf:03:34:33:11:3b:bd:22:a9:bb:61:b9:ae:33:d2: f6:bb:26:6a:62:d1:68:99:1d:11:d2:9e:22:9b:64:34:66:68: 4a:4c:5d:af:c8:11:a9:9f:36:f8:ab:6a:ac:df:32:cb:8e:d3: 83:77:04:a2:d8:e5:fc:86:97:fd:08:25:dc:82:f3:6b:c0:c3: e2:3b:4b:de:0e:83:b8:55:83:14:cc:be:e9:e1:f6:66:d0:9d: d0:c2:ec:ea:c1:66:11:f0:df:18:95:0c:98:e3:a8:8d:6a:ab: d8:1f:81:b1:ce:06:bc:5c:90:91:b0:97:c1:7e:c9:d2:e1:26: 58:fd:ed:05:ee:94:9f:97:14:82:cc:39:53:a9:92:cf:df:54: a7:3a:d8:8f:18:0b:cc:79:24:a7:4f:a8:c5:6b:e5:09:a7:c1: 16:10:05:46:9f:10:d2:dc:6b:3a:d1:9a:65:57:e8:ee:79:fb: f0:88:e9:20:f3:26:7b:80:13:66:1d:49:df:c9:b6:f3:82:a0: 00:a3:57:71:53:5d:f3:f0:ca:26:50:fc:89:4e:ca:32:67:45: 74:27:a0:85:c7:5b:fa:b0:6e:a4:0f:cf:2c:5b:fe:2e:2b:7c: 70:e9:30:d8:58:cd:1b:18:09:0a:90:72:67:b5:f3:5f:ca:de: b9:31:80:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvg24RxIbL6ii45E9D0G+aNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMmU3NmU4OTk0YjY2NjEzNzQ4ZTAyMWI1ZjQwMDdmMDFi NTRkNGYwHhcNMjYwMTIxMTQwMDQxWhcNMjYwMTIyMTQwMDQxWjAzMTEwLwYDVQQD EygwMGM0ZTRlNGMxNmM0YWIwNGFmNzQ5OGRlMzliNmI1YWNkNGZjNzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFwOwUt3sZA1Wd5I/umpBE5tGOfn b9nBsgSZf7O+41J0RRyx+VPOB02SduTI38wljnQyqLX2F+jKJk41th/huiH03s35 KiiFwkdBcxpt6rEsar0tnii3K9WnVB4jFBjZ7H+PyO+4JIWgfeI1A3Breei03phv niTrZZhrTV+j6a+JbYns4EjQtAPUaXdHI2ko07tq6qsC3k34KxBZjvwvBjAyZHQA INbRSQs8XViQKW9JXRriHOTn3EcMErIFUjC1pjycubg2fYqwmHYkGxx1GgYrL7Aj 7XV30J577QDPK6mkxkwBR5GeYrwAutlGB3tMSuF1mtwlGEpr6oVbIqLlQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADE5OTBbEqwSvdJjeOba1rNT8dZMB8GA1UdIwQY MBaAFAIuduiZS2ZhN0jgIbX0AH8BtU1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjIt OTcxYjBjMDY1NDYwLzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjItOTcxYjBjMDY1NDYw LzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQA9lzwM0 MxE7vSKpu2G5rjPS9rsmamLRaJkdEdKeIptkNGZoSkxdr8gRqZ82+KtqrN8yy47T g3cEotjl/IaX/Qgl3ILza8DD4jtL3g6DuFWDFMy+6eH2ZtCd0MLs6sFmEfDfGJUM mOOojWqr2B+Bsc4GvFyQkbCXwX7J0uEmWP3tBe6Un5cUgsw5U6mSz99UpzrYjxgL zHkkp0+oxWvlCafBFhAFRp8Q0txrOtGaZVfo7nn78IjpIPMme4ATZh1J38m284Kg AKNXcVNd8/DKJlD8iU7KMmdFdCeghcdb+rBupA/PLFv+Lit8cOkw2FjNGxgJCpBy Z7XzX8reuTGAyw== -----END CERTIFICATE-----Generated at Wed Jan 21 22:45:12 2026 by rpki-client