This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.mft File: rAiBXoxlA2AfJUyrNxvsRxvX6qY.mft (raw, json) Hash identifier: ckStYnOTBvguD56/5xp+91V8h6N+yHPdr0v4IEgEXT8= Subject key identifier: 10:92:21:5A:AD:40:3B:CD:27:66:8A:30:C6:5F:2C:82:6A:E9:7F:8F Authority key identifier: AC:08:81:5E:8C:65:03:60:1F:25:4C:AB:37:1B:EC:47:1B:D7:EA:A6 Certificate issuer: /CN=ac08815e8c6503601f254cab371bec471bd7eaa6 Certificate serial: 019B7FA7C0F624AB5CDD757FC9A1E6F07ABF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAiBXoxlA2AfJUyrNxvsRxvX6qY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.mft Manifest number: 0BBA Signing time: Fri 02 Jan 2026 17:00:58 +0000 Manifest this update: Fri 02 Jan 2026 17:00:58 +0000 Manifest next update: Sat 03 Jan 2026 17:00:58 +0000 Files and hashes: 1: 24WxHxaeAmm5E1Q3Id3rg_qvvPY.roa (hash: cVrKb1vSqi82yPVZCgvu5xU3xXbeXHexmU9eyiwbU3E=) 2: rAiBXoxlA2AfJUyrNxvsRxvX6qY.crl (hash: 0PEDvnGY83b/55uo4tuUZVHjbwGRbH3o0YXQyDljITI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.crl rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.mft rsync://rpki.ripe.net/repository/DEFAULT/rAiBXoxlA2AfJUyrNxvsRxvX6qY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 17:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:a7:c0:f6:24:ab:5c:dd:75:7f:c9:a1:e6:f0:7a:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac08815e8c6503601f254cab371bec471bd7eaa6 Validity Not Before: Jan 2 17:00:58 2026 GMT Not After : Jan 3 17:00:58 2026 GMT Subject: CN=1092215aad403bcd27668a30c65f2c826ae97f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:42:39:81:cd:df:2c:41:c1:df:43:bc:36:32: 3d:67:94:a7:e3:13:a0:11:d5:d9:c2:48:fa:f7:a0: 33:53:f0:4f:80:1b:ec:bf:70:77:26:2f:99:54:2e: 51:ba:1b:2b:92:bb:81:d6:d0:3f:37:39:53:d9:d1: cd:a1:e4:3a:57:98:49:c8:53:8f:c1:28:69:b4:82: cf:e1:03:00:04:bd:f8:26:29:a4:68:5e:ff:78:1d: d9:dd:dc:86:05:7b:e0:e3:db:36:da:ca:c3:b5:f8: a1:df:38:5b:fd:e1:6e:ad:06:e1:86:0a:27:90:f2: 76:9d:6c:a8:ff:a5:4a:be:f9:52:7a:12:53:01:0b: 14:0e:37:d9:4c:66:46:db:0e:22:5b:ea:b8:de:5c: e0:62:c3:b5:18:e6:50:65:b6:34:d5:ee:45:84:8c: a3:23:6f:df:d2:32:77:47:5f:b9:04:a0:80:d0:d3: 6b:64:8a:b7:b2:de:04:f4:44:2c:0a:9d:8b:89:ea: 87:15:18:57:3d:6c:f4:ec:ca:21:2c:15:57:5f:1f: ef:df:d3:1b:73:a3:72:69:6c:f9:3d:50:2b:49:1b: bd:9c:70:0f:89:6f:b3:d7:81:8c:cc:6a:a5:91:01: 06:90:5d:3e:b5:01:ab:5d:73:9d:94:5d:3a:5e:35: 84:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:92:21:5A:AD:40:3B:CD:27:66:8A:30:C6:5F:2C:82:6A:E9:7F:8F X509v3 Authority Key Identifier: keyid:AC:08:81:5E:8C:65:03:60:1F:25:4C:AB:37:1B:EC:47:1B:D7:EA:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAiBXoxlA2AfJUyrNxvsRxvX6qY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/56f2a3-7eb7-4513-9f55-677871a03355/1/rAiBXoxlA2AfJUyrNxvsRxvX6qY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:03:d0:2b:45:cd:93:23:e5:af:fe:82:ee:5d:40:4f:19:f7: 53:00:a7:bb:e4:27:f0:b5:8d:05:1b:b7:58:0a:91:b1:85:73: 9d:fa:7b:b0:5d:bf:99:5c:49:43:4a:7e:2d:d3:cc:43:7f:d6: cc:8a:a8:89:c0:01:c1:53:23:42:43:1d:cf:73:fa:62:a1:62: f2:f1:25:9b:da:d9:26:c0:18:0d:8a:63:ce:e4:4c:76:a2:cf: ad:46:87:6e:3c:44:d9:83:4a:84:75:77:bc:a4:53:d7:a3:f2: ff:83:9f:1a:50:f0:20:bb:e4:55:63:db:da:0c:dd:bb:2f:3a: d7:28:2a:92:b4:3b:5f:a5:28:48:2d:05:f3:30:b9:37:72:fd: 02:8e:b7:d5:97:44:b6:d9:5d:3e:37:9d:35:45:2e:49:d1:16: 6a:b9:2d:d0:ee:2e:49:3e:d1:cd:28:72:3e:3e:7a:23:62:00: 32:9f:e2:ba:89:8d:60:57:95:34:ee:8b:aa:25:04:2a:21:87: a9:a3:d9:9f:de:d1:49:0f:15:cc:08:57:1b:42:06:23:9c:8a: 97:9f:7d:b4:e1:ff:d1:d7:43:32:ed:65:91:4c:0a:c2:51:2f: 4b:2c:4c:47:c8:c1:39:74:0b:a5:ba:b1:f0:c6:dd:86:7b:d4: 51:d6:83:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/p8D2JKtc3XV/yaHm8Hq/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMDg4MTVlOGM2NTAzNjAxZjI1NGNhYjM3MWJlYzQ3MWJk N2VhYTYwHhcNMjYwMTAyMTcwMDU4WhcNMjYwMTAzMTcwMDU4WjAzMTEwLwYDVQQD EygxMDkyMjE1YWFkNDAzYmNkMjc2NjhhMzBjNjVmMmM4MjZhZTk3ZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUI5gc3fLEHB30O8NjI9Z5Sn4xOg EdXZwkj696AzU/BPgBvsv3B3Ji+ZVC5RuhsrkruB1tA/NzlT2dHNoeQ6V5hJyFOP wShptILP4QMABL34JimkaF7/eB3Z3dyGBXvg49s22srDtfih3zhb/eFurQbhhgon kPJ2nWyo/6VKvvlSehJTAQsUDjfZTGZG2w4iW+q43lzgYsO1GOZQZbY01e5FhIyj I2/f0jJ3R1+5BKCA0NNrZIq3st4E9EQsCp2LieqHFRhXPWz07MohLBVXXx/v39Mb c6NyaWz5PVArSRu9nHAPiW+z14GMzGqlkQEGkF0+tQGrXXOdlF06XjWEewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCSIVqtQDvNJ2aKMMZfLIJq6X+PMB8GA1UdIwQY MBaAFKwIgV6MZQNgHyVMqzcb7Ecb1+qmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckFpQlhveGxBMkFmSlV5ck54dnNSeHZYNnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC81NmYyYTMtN2ViNy00NTEzLTlmNTUt Njc3ODcxYTAzMzU1LzEvckFpQlhveGxBMkFmSlV5ck54dnNSeHZYNnFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC81NmYyYTMtN2ViNy00NTEzLTlmNTUtNjc3ODcxYTAzMzU1 LzEvckFpQlhveGxBMkFmSlV5ck54dnNSeHZYNnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAPQK0XN kyPlr/6C7l1ATxn3UwCnu+Qn8LWNBRu3WAqRsYVznfp7sF2/mVxJQ0p+LdPMQ3/W zIqoicABwVMjQkMdz3P6YqFi8vElm9rZJsAYDYpjzuRMdqLPrUaHbjxE2YNKhHV3 vKRT16Py/4OfGlDwILvkVWPb2gzduy861ygqkrQ7X6UoSC0F8zC5N3L9Ao631ZdE ttldPjedNUUuSdEWarkt0O4uST7RzShyPj56I2IAMp/iuomNYFeVNO6LqiUEKiGH qaPZn97RSQ8VzAhXG0IGI5yKl599tOH/0ddDMu1lkUwKwlEvSyxMR8jBOXQLpbqx 8MbdhnvUUdaD4A== -----END CERTIFICATE-----Generated at Sat Jan 3 02:34:59 2026 by rpki-client