This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft File: orYjcexi79D0OF-gRzBW8IgY3nM.mft (raw, json) Hash identifier: TEEVmyk1EXuqrPrJiZSg8t2A9ePp1aD7z7h+aLRfCvU= Subject key identifier: A1:D4:CC:8E:79:19:C1:4D:4B:D9:00:64:20:3A:0D:24:83:E0:23:D1 Authority key identifier: A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73 Certificate issuer: /CN=a2b62371ec62efd0f4385fa0473056f08818de73 Certificate serial: 019BFE0A16493D3BD52BBE3687A2F627700A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft Manifest number: 0508 Signing time: Tue 27 Jan 2026 06:00:32 +0000 Manifest this update: Tue 27 Jan 2026 06:00:32 +0000 Manifest next update: Wed 28 Jan 2026 06:00:32 +0000 Files and hashes: 1: 6ztTDGBSEjfUz5YPUm3xJqrFtBQ.roa (hash: NaCtdBF9yWOeFeahp2D+pL4fXJjohl4aTNmTP8dCNsQ=) 2: orYjcexi79D0OF-gRzBW8IgY3nM.crl (hash: a4hC8bWcoy4xB6lhRsQ+CBFG8O0Rv0zgCxqTrQMGB10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0a:16:49:3d:3b:d5:2b:be:36:87:a2:f6:27:70:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b62371ec62efd0f4385fa0473056f08818de73 Validity Not Before: Jan 27 06:00:32 2026 GMT Not After : Jan 28 06:00:32 2026 GMT Subject: CN=a1d4cc8e7919c14d4bd90064203a0d2483e023d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d5:55:0e:b3:37:3b:b0:41:6e:cd:91:ab:8d: d1:d1:e4:4e:6b:90:0b:18:de:00:6b:e0:a6:e0:c2: 96:b1:ff:2e:a7:b4:a2:fb:e4:78:10:a3:57:43:5d: 5d:f1:be:a8:bb:0f:00:e5:4f:a9:66:f9:a7:52:fe: 9f:56:1f:f5:aa:89:dc:92:a3:fa:d6:fe:ac:f8:d3: c1:3d:c0:1c:6e:0c:74:7c:99:62:f8:13:17:a6:00: 03:66:81:fe:df:5e:ea:5d:cd:d8:e4:d5:3d:65:d5: f0:24:a5:dc:06:d7:12:56:2b:e7:7c:a7:81:9e:be: 89:17:e3:6e:3b:b6:55:71:ed:6c:9f:85:03:7f:a9: 9d:17:a5:69:34:bf:5e:24:5f:a3:56:16:9b:b1:fa: fa:00:24:7b:f6:02:71:1a:64:4d:f4:ea:a3:8d:84: fe:97:99:15:50:d6:c9:19:41:12:9a:ef:8e:87:14: d0:a2:e4:cb:d0:7e:e4:97:80:a1:bc:a0:9d:80:d7: af:1f:5e:d5:e4:8d:74:61:79:8e:9d:45:2d:98:6d: dd:7c:ea:57:24:c9:89:17:0a:6d:76:ce:05:6c:de: 15:eb:28:bf:8a:5b:7c:b0:fc:21:dc:4b:6a:5d:fb: 70:22:f3:8d:4d:b5:9b:56:09:e9:86:e3:d1:43:b2: 67:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D4:CC:8E:79:19:C1:4D:4B:D9:00:64:20:3A:0D:24:83:E0:23:D1 X509v3 Authority Key Identifier: keyid:A2:B6:23:71:EC:62:EF:D0:F4:38:5F:A0:47:30:56:F0:88:18:DE:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orYjcexi79D0OF-gRzBW8IgY3nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0be551-d60d-49bb-8cad-675e07235657/1/orYjcexi79D0OF-gRzBW8IgY3nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:da:76:e4:29:55:f2:f9:6f:bf:4f:d6:19:da:39:e2:e0:5f: 69:a4:65:a8:0d:e1:c0:cb:da:cd:92:75:5b:e6:b4:17:98:26: 06:80:ef:cb:c9:cc:16:20:5f:f2:4d:23:87:13:a1:e6:32:e9: f5:73:7e:50:83:1c:98:2d:8e:2a:3b:a9:41:8e:64:9d:95:77: ff:60:9f:75:7f:44:9a:6d:ac:fa:1f:79:74:b8:42:c2:2e:85: 51:98:ba:5a:27:22:ed:4c:af:4c:8c:93:40:ed:18:b5:8d:55: c1:94:52:2f:f9:70:1d:1a:64:ae:5a:a1:f3:63:2c:05:bc:bd: aa:33:d3:2d:30:e1:fe:47:d8:e6:2b:2b:3f:23:44:3b:58:f2: e5:83:bc:3b:3d:19:8f:2c:aa:4d:ed:b3:5e:98:25:a2:6b:0e: 3e:89:45:72:c9:09:3a:5a:61:92:0e:38:d1:0b:b1:12:c9:76: 9f:80:68:43:16:64:ad:a5:a8:3e:1c:ae:3f:80:a3:d1:1d:85: 39:b1:72:8e:8f:64:65:f0:bc:6e:a6:af:c3:cc:0c:4e:7a:ec: ad:aa:3b:ee:1f:fd:61:95:f8:b6:0b:90:43:b0:af:90:16:2d: 1d:ad:6b:bb:c7:3b:80:d0:46:74:28:84:e0:a0:4e:30:0a:e7: b1:85:2a:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+ChZJPTvVK742h6L2J3AKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYjYyMzcxZWM2MmVmZDBmNDM4NWZhMDQ3MzA1NmYwODgx OGRlNzMwHhcNMjYwMTI3MDYwMDMyWhcNMjYwMTI4MDYwMDMyWjAzMTEwLwYDVQQD EyhhMWQ0Y2M4ZTc5MTljMTRkNGJkOTAwNjQyMDNhMGQyNDgzZTAyM2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNVVDrM3O7BBbs2Rq43R0eROa5AL GN4Aa+Cm4MKWsf8up7Si++R4EKNXQ11d8b6ouw8A5U+pZvmnUv6fVh/1qonckqP6 1v6s+NPBPcAcbgx0fJli+BMXpgADZoH+317qXc3Y5NU9ZdXwJKXcBtcSVivnfKeB nr6JF+NuO7ZVce1sn4UDf6mdF6VpNL9eJF+jVhabsfr6ACR79gJxGmRN9OqjjYT+ l5kVUNbJGUESmu+OhxTQouTL0H7kl4ChvKCdgNevH17V5I10YXmOnUUtmG3dfOpX JMmJFwptds4FbN4V6yi/ilt8sPwh3EtqXftwIvONTbWbVgnphuPRQ7JnmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHUzI55GcFNS9kAZCA6DSSD4CPRMB8GA1UdIwQY MBaAFKK2I3HsYu/Q9DhfoEcwVvCIGN5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8wYmU1NTEtZDYwZC00OWJiLThjYWQt Njc1ZTA3MjM1NjU3LzEvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8wYmU1NTEtZDYwZC00OWJiLThjYWQtNjc1ZTA3MjM1NjU3 LzEvb3JZamNleGk3OUQwT0YtZ1J6Qlc4SWdZM25NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9p25ClV 8vlvv0/WGdo54uBfaaRlqA3hwMvazZJ1W+a0F5gmBoDvy8nMFiBf8k0jhxOh5jLp 9XN+UIMcmC2OKjupQY5knZV3/2CfdX9Emm2s+h95dLhCwi6FUZi6Wici7UyvTIyT QO0YtY1VwZRSL/lwHRpkrlqh82MsBby9qjPTLTDh/kfY5isrPyNEO1jy5YO8Oz0Z jyyqTe2zXpglomsOPolFcskJOlphkg440QuxEsl2n4BoQxZkraWoPhyuP4Cj0R2F ObFyjo9kZfC8bqavw8wMTnrsrao77h/9YZX4tguQQ7CvkBYtHa1ru8c7gNBGdCiE 4KBOMArnsYUq4g== -----END CERTIFICATE-----Generated at Tue Jan 27 08:29:51 2026 by rpki-client