This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft File: A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft (raw, json) Hash identifier: G4QvKa7EqyEE4ntwDU3tfz7d3AuGH7xoCerutdthMP8= Subject key identifier: AC:65:B3:C6:30:41:75:08:B7:00:44:95:92:C8:63:B4:95:B5:D6:5D Authority key identifier: 03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44 Certificate issuer: /CN=03f8388372dc332c7cc6f7766ad78d58a23b2544 Certificate serial: 019BB583C2317E31A6C1E7C9EEE1F37C025A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft Manifest number: 17C8 Signing time: Tue 13 Jan 2026 04:01:09 +0000 Manifest this update: Tue 13 Jan 2026 04:01:09 +0000 Manifest next update: Wed 14 Jan 2026 04:01:09 +0000 Files and hashes: 1: A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl (hash: iJjoF6b/IFScWM5PA0JpvDZBKyZcRIkLa7hqR8mgd1c=) 2: NUvHrFA2BWaljLnMJQIXISBCOCw.roa (hash: A18alchxY/YsI5uTxh8zdJwNGymtxbxWl+jED+FQCqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 04:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b5:83:c2:31:7e:31:a6:c1:e7:c9:ee:e1:f3:7c:02:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03f8388372dc332c7cc6f7766ad78d58a23b2544 Validity Not Before: Jan 13 04:01:09 2026 GMT Not After : Jan 14 04:01:09 2026 GMT Subject: CN=ac65b3c630417508b700449592c863b495b5d65d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9e:84:df:9e:7b:d6:48:32:8f:09:a2:51:18: c2:14:8c:7b:5d:fc:56:20:e3:25:32:94:ee:3d:23: 45:c1:47:16:45:dd:02:e3:9f:d3:5e:2b:61:4e:4d: 68:50:35:ae:86:65:39:e0:65:41:ee:0e:36:30:71: 26:a4:cc:25:e9:be:93:14:40:3e:f0:01:29:4e:19: c2:3a:d6:a1:13:51:50:03:33:e3:10:12:b1:e3:17: 6f:5c:c9:4f:8c:41:04:b0:7c:44:af:9c:33:5f:97: 89:80:f9:92:aa:1c:18:b7:ac:8a:db:de:53:80:3c: 4a:c4:98:42:cf:6b:8a:2b:56:4c:83:14:d6:27:1c: 01:8c:c9:ab:52:6f:c8:19:39:92:d2:53:7e:dd:22: 59:6b:ed:4b:71:0e:bd:32:7c:b0:c1:05:d1:df:36: 4d:2c:61:52:d0:4f:c8:db:4d:5c:eb:95:86:83:56: 64:ac:e4:5d:89:64:72:cd:d9:e5:ab:f6:d4:ff:7f: 22:85:1b:a6:17:69:16:5c:7e:4e:da:98:1c:0e:b0: 72:51:8e:2e:6e:eb:41:3c:e3:c2:24:95:28:fe:03: 49:5f:f4:6a:9c:b0:2f:e7:60:d5:71:02:10:15:ca: e1:cc:e2:de:9d:ad:92:d2:88:bb:29:0b:f2:4d:59: 40:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:65:B3:C6:30:41:75:08:B7:00:44:95:92:C8:63:B4:95:B5:D6:5D X509v3 Authority Key Identifier: keyid:03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b4:14:ef:fb:73:92:5a:dc:c4:72:30:3f:71:6d:85:32:fb: b8:61:4e:71:6b:fa:32:44:c7:c5:75:95:43:03:b5:a3:fb:26: 93:63:fe:a5:b2:c5:0f:31:20:79:20:30:38:29:28:4a:8d:34: e8:d1:28:aa:4d:a1:ee:44:52:c1:b2:68:ef:35:6f:cd:47:e0: 1c:90:dc:eb:69:eb:19:20:b1:7b:ca:ef:ed:1c:a7:ab:6c:3d: ec:52:20:df:47:b4:fd:02:9b:a1:a8:e3:74:00:c9:9b:54:99: 42:77:9d:85:80:17:22:28:d6:25:8b:c6:49:64:f8:7a:dd:6e: 33:5a:86:3b:63:78:10:26:8e:42:b5:0c:46:46:83:24:03:f0: 19:21:22:c4:f7:5e:9f:4d:5f:dc:13:65:fd:ac:8e:19:e3:70: 06:7c:9b:ff:31:46:b5:9e:de:01:6b:8b:9a:9c:80:66:21:81: 2d:7f:a1:c8:d1:36:ec:07:21:71:b6:5a:13:b1:ff:b9:6a:17: 82:02:d4:6f:48:eb:30:0d:72:3c:d3:9f:69:02:39:5b:24:c3: e4:a1:73:65:df:e2:8d:0a:e2:74:f9:c0:df:49:01:db:a0:66: b6:65:91:5e:0b:82:51:4e:c5:81:c7:7b:b6:c1:2e:7e:49:13: 12:33:b3:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu1g8IxfjGmwefJ7uHzfAJaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZjgzODgzNzJkYzMzMmM3Y2M2Zjc3NjZhZDc4ZDU4YTIz YjI1NDQwHhcNMjYwMTEzMDQwMTA5WhcNMjYwMTE0MDQwMTA5WjAzMTEwLwYDVQQD EyhhYzY1YjNjNjMwNDE3NTA4YjcwMDQ0OTU5MmM4NjNiNDk1YjVkNjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ6E35571kgyjwmiURjCFIx7XfxW IOMlMpTuPSNFwUcWRd0C45/TXithTk1oUDWuhmU54GVB7g42MHEmpMwl6b6TFEA+ 8AEpThnCOtahE1FQAzPjEBKx4xdvXMlPjEEEsHxEr5wzX5eJgPmSqhwYt6yK295T gDxKxJhCz2uKK1ZMgxTWJxwBjMmrUm/IGTmS0lN+3SJZa+1LcQ69MnywwQXR3zZN LGFS0E/I201c65WGg1ZkrORdiWRyzdnlq/bU/38ihRumF2kWXH5O2pgcDrByUY4u butBPOPCJJUo/gNJX/RqnLAv52DVcQIQFcrhzOLena2S0oi7KQvyTVlAKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxls8YwQXUItwBElZLIY7SVtdZdMB8GA1UdIwQY MBaAFAP4OINy3DMsfMb3dmrXjViiOyVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQV9nNGczTGNNeXg4eHZkMmF0ZU5XS0k3SlVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85ZTExNjUtYzYxMC00OTg4LWE0OWQt OTQ1NTg1OGU5YzA2LzEvQV9nNGczTGNNeXg4eHZkMmF0ZU5XS0k3SlVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85ZTExNjUtYzYxMC00OTg4LWE0OWQtOTQ1NTg1OGU5YzA2 LzEvQV9nNGczTGNNeXg4eHZkMmF0ZU5XS0k3SlVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrQU7/tz klrcxHIwP3FthTL7uGFOcWv6MkTHxXWVQwO1o/smk2P+pbLFDzEgeSAwOCkoSo00 6NEoqk2h7kRSwbJo7zVvzUfgHJDc62nrGSCxe8rv7Rynq2w97FIg30e0/QKboajj dADJm1SZQnedhYAXIijWJYvGSWT4et1uM1qGO2N4ECaOQrUMRkaDJAPwGSEixPde n01f3BNl/ayOGeNwBnyb/zFGtZ7eAWuLmpyAZiGBLX+hyNE27AchcbZaE7H/uWoX ggLUb0jrMA1yPNOfaQI5WyTD5KFzZd/ijQridPnA30kB26BmtmWRXguCUU7Fgcd7 tsEufkkTEjOzyA== -----END CERTIFICATE-----Generated at Tue Jan 13 12:27:31 2026 by rpki-client