This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft File: A3hitGCMefRQKV7FyAx8etbf4qI.mft (raw, json) Hash identifier: Sp8WPOuRzS4uK3L7kploC+ow+sGKVwmP67358eiHIlc= Subject key identifier: A0:A5:DE:34:C5:85:B6:29:9B:89:C9:67:C4:9D:A0:1A:B0:BA:52:76 Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2 Certificate issuer: /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2 Certificate serial: 019BFB4000FB7AF3EEB7D4DBFDEFF26272AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft Manifest number: 12FC Signing time: Mon 26 Jan 2026 17:00:34 +0000 Manifest this update: Mon 26 Jan 2026 17:00:34 +0000 Manifest next update: Tue 27 Jan 2026 17:00:34 +0000 Files and hashes: 1: A3hitGCMefRQKV7FyAx8etbf4qI.crl (hash: gCtSjV2spk0aDZTMLeRZAnzSpeM0BRZstzkgQ5j+Msc=) 2: WxImH-LXs0d6zerX8rbJADEs0b4.roa (hash: 1hpI1k0NLPuLhvebFCrou0mJyF8538s4/VSeky9KzZw=) 3: bL1SpyyBTi0d8Dsx8Tdvxr7qEag.roa (hash: j5UJJAXCgmYG9UJK159eJdYgk2A4TavF4TUvXoNb9wo=) 4: jEFjyAFrXDcV4VZRl6Fg4c-tBbI.roa (hash: SCNZ1jcp85B9JQOpcfN9KIw7MGVU7KDV6MeoqHXZssQ=) 5: x9MYFIf2PoZ4-7JYUxzgREaOECQ.roa (hash: pgslKdJlC5emb7XS7811wddrmA1E6OgVQZWwLKWbTac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:00:fb:7a:f3:ee:b7:d4:db:fd:ef:f2:62:72:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2 Validity Not Before: Jan 26 17:00:34 2026 GMT Not After : Jan 27 17:00:34 2026 GMT Subject: CN=a0a5de34c585b6299b89c967c49da01ab0ba5276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:99:c8:da:87:a2:ab:59:36:1b:06:87:40: cb:10:20:fb:cc:8d:36:8d:98:df:e6:e4:ec:ae:ec: fa:b6:35:d0:38:c5:c8:bc:58:9e:2a:d0:5d:d4:34: f9:81:79:f5:43:22:88:f0:2c:1f:59:5e:8d:f5:b2: 31:38:69:73:58:a2:ce:bc:b2:06:2f:45:37:56:dd: 66:c8:7f:a7:80:cf:9d:2e:bc:14:05:74:0f:b0:2c: 8f:30:02:47:cb:2e:18:32:2f:7c:5b:ea:67:21:a9: 23:48:e0:67:3e:c6:05:3e:c4:4e:83:ca:ef:7f:bc: 37:37:ba:93:02:cc:79:13:4e:cc:4c:63:01:04:2b: ea:aa:c4:8e:21:31:5b:cb:ae:69:09:12:a7:d3:6e: be:0a:7c:a1:93:b6:46:be:ed:be:ef:44:dc:ce:dd: 89:69:50:84:29:dd:ed:47:ae:5d:4b:2f:ac:bc:2d: 88:ad:83:0e:b7:46:cb:56:32:03:4b:2d:ba:87:05: f9:e5:0f:cb:d8:00:8b:ce:7d:21:d8:ea:cf:23:33: 8d:36:6a:21:42:e2:d9:13:0b:1a:23:ae:9b:c4:ed: c3:4f:2c:f9:d1:95:31:d3:d1:f1:c6:ff:29:60:94: 2f:36:30:a8:5a:6d:33:4f:d8:f4:1c:94:57:33:64: 67:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A5:DE:34:C5:85:B6:29:9B:89:C9:67:C4:9D:A0:1A:B0:BA:52:76 X509v3 Authority Key Identifier: keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:84:68:14:6b:ce:e8:d4:10:6c:cc:99:2e:ec:a6:1a:92:52: 5b:d1:76:18:c2:49:ce:e2:07:24:86:b5:84:da:ea:58:bb:5a: c7:99:3e:b5:70:47:35:fb:92:54:5f:88:d9:07:93:99:56:a6: 1b:e2:65:a1:8f:77:de:2c:01:f7:48:d5:49:71:2e:91:1c:5b: 06:a3:99:53:93:f6:7b:7a:74:fd:ff:8e:a4:03:a0:ef:8a:6a: 10:53:e3:8f:d0:86:5a:1e:46:e3:6a:20:e8:30:c9:6c:d4:dc: 6f:e9:6f:65:c6:95:0a:56:a0:98:8a:98:b5:3e:f2:01:34:3c: bc:df:d0:9f:35:f1:ec:64:83:76:58:88:4d:63:81:26:ae:e0: 60:8e:84:09:59:12:97:5d:1e:1b:3c:a0:15:f6:ea:94:83:a5: 4e:54:8f:f3:0a:e9:3c:51:3f:d2:14:22:aa:6c:ce:e5:76:ad: 8a:32:9d:bb:fd:26:a4:0a:8b:7d:1f:dd:0f:03:a6:aa:3a:fe: ec:68:2a:5a:ae:fc:8a:2a:43:ec:ee:bd:37:3e:05:4a:f9:86: 7b:21:9e:7c:2c:0d:85:13:83:de:d4:c8:64:1b:c7:e1:73:54: 8e:bf:ee:d8:6f:9a:00:ba:63:10:ca:8f:24:2a:b4:2f:a7:a9: 85:03:63:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QAD7evPut9Tb/e/yYnKsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNzg2MmI0NjA4Yzc5ZjQ1MDI5NWVjNWM4MGM3YzdhZDZk ZmUyYTIwHhcNMjYwMTI2MTcwMDM0WhcNMjYwMTI3MTcwMDM0WjAzMTEwLwYDVQQD EyhhMGE1ZGUzNGM1ODViNjI5OWI4OWM5NjdjNDlkYTAxYWIwYmE1Mjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUyZyNqHoqtZNhsGh0DLECD7zI02 jZjf5uTsruz6tjXQOMXIvFieKtBd1DT5gXn1QyKI8CwfWV6N9bIxOGlzWKLOvLIG L0U3Vt1myH+ngM+dLrwUBXQPsCyPMAJHyy4YMi98W+pnIakjSOBnPsYFPsROg8rv f7w3N7qTAsx5E07MTGMBBCvqqsSOITFby65pCRKn026+Cnyhk7ZGvu2+70Tczt2J aVCEKd3tR65dSy+svC2IrYMOt0bLVjIDSy26hwX55Q/L2ACLzn0h2OrPIzONNmoh QuLZEwsaI66bxO3DTyz50ZUx09Hxxv8pYJQvNjCoWm0zT9j0HJRXM2RnGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCl3jTFhbYpm4nJZ8SdoBqwulJ2MB8GA1UdIwQY MBaAFAN4YrRgjHn0UClexcgMfHrW3+KiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTNoaXRHQ01lZlJRS1Y3RnlBeDhldGJmNHFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xYWZlNTMtZjFiOC00MzE1LWFiMWMt ZjQ3NGY3YmQzNTMxLzEvQTNoaXRHQ01lZlJRS1Y3RnlBeDhldGJmNHFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8xYWZlNTMtZjFiOC00MzE1LWFiMWMtZjQ3NGY3YmQzNTMx LzEvQTNoaXRHQ01lZlJRS1Y3RnlBeDhldGJmNHFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4RoFGvO 6NQQbMyZLuymGpJSW9F2GMJJzuIHJIa1hNrqWLtax5k+tXBHNfuSVF+I2QeTmVam G+JloY933iwB90jVSXEukRxbBqOZU5P2e3p0/f+OpAOg74pqEFPjj9CGWh5G42og 6DDJbNTcb+lvZcaVClagmIqYtT7yATQ8vN/QnzXx7GSDdliITWOBJq7gYI6ECVkS l10eGzygFfbqlIOlTlSP8wrpPFE/0hQiqmzO5XatijKdu/0mpAqLfR/dDwOmqjr+ 7GgqWq78iipD7O69Nz4FSvmGeyGefCwNhROD3tTIZBvH4XNUjr/u2G+aALpjEMqP JCq0L6ephQNjag== -----END CERTIFICATE-----Generated at Tue Jan 27 01:07:46 2026 by rpki-client