This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft File: AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json) Hash identifier: r0KFCRmEfyoY8AmxfgABzPPi5bWhHuAN8HjuAArHfzM= Subject key identifier: A1:66:E3:28:9D:B1:DC:2D:76:51:47:F0:EF:F8:C0:1D:27:73:1B:8D Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F Certificate issuer: /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f Certificate serial: 019B7D5DE57CD2C8A5BCFB98AEA09EB9767E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft Manifest number: 02CE Signing time: Fri 02 Jan 2026 06:21:04 +0000 Manifest this update: Fri 02 Jan 2026 06:21:04 +0000 Manifest next update: Sat 03 Jan 2026 06:21:04 +0000 Files and hashes: 1: A9rhd59_7voAjZbMragLA3ftrbw.roa (hash: jQKHOIkJndimLRm6Iut1TREkFlVZwkrcXKBUSUJBxdk=) 2: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: Fg2wiWyfcZoD1PpGpbWNDROUuexdV8pmDNsBIIEOaQo=) 3: d9Ge2npzpsYZ4-H4VMZTmU7XIWw.roa (hash: gyeML4vxjWokwcPNE5B6qDQbqzNUghx/e5PMeQjFWBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 06:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:e5:7c:d2:c8:a5:bc:fb:98:ae:a0:9e:b9:76:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f Validity Not Before: Jan 2 06:21:04 2026 GMT Not After : Jan 3 06:21:04 2026 GMT Subject: CN=a166e3289db1dc2d765147f0eff8c01d27731b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:12:46:5a:b3:00:22:ae:ea:33:5f:a0:d3:42: 0e:43:0c:64:c0:0f:5c:eb:d7:77:d2:4e:b8:84:e5: de:2b:32:ec:80:54:bc:57:22:a6:28:27:97:ee:6e: 24:05:b6:4c:be:62:a4:ed:8d:4e:0b:70:95:9b:61: ae:5f:c2:27:2d:0d:38:31:08:eb:6d:e0:fd:54:d5: 27:02:cd:a9:2e:29:3b:ba:34:45:c4:9f:1f:d5:38: 89:82:be:fa:b4:4a:79:10:c0:82:20:51:0e:50:4a: 6e:5d:cf:5d:7e:95:25:fa:a4:01:a3:39:28:8c:2f: 95:fc:2e:43:5d:c0:ef:20:fa:20:cf:8d:5d:b4:03: f4:7d:3a:c8:5c:96:9f:9a:43:a5:85:45:f1:64:ef: ae:e8:db:5c:1e:f3:55:51:d0:cb:ec:fb:5c:75:1d: 16:b5:3c:8b:d5:ff:c2:5a:63:53:d1:4e:98:d7:72: 72:8c:af:c2:c2:57:40:95:93:51:23:3e:35:8e:24: 20:56:f8:0c:37:ac:ff:bb:d7:05:02:23:ba:1a:56: 12:52:2b:57:df:b4:ca:3c:57:29:b9:ea:8b:68:5d: ed:40:95:ca:bf:d4:e4:33:82:15:45:ab:9c:42:a7: ae:54:0c:d3:b6:73:95:fe:51:94:15:8b:dc:8a:0e: 0d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:66:E3:28:9D:B1:DC:2D:76:51:47:F0:EF:F8:C0:1D:27:73:1B:8D X509v3 Authority Key Identifier: keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c6:bb:91:2b:7e:40:3e:e2:e6:d7:bb:ff:b1:a8:e0:55:b8: 80:cd:6a:23:26:4c:f5:bc:e5:9d:c7:4c:f5:55:b4:17:4e:f9: 49:8f:dc:b2:85:a2:74:7f:5b:1b:80:41:b1:4f:1f:ea:e3:1e: 81:cf:c0:56:8f:92:c7:90:1a:d4:87:a2:68:85:58:46:a9:de: 4e:34:36:9a:d3:19:79:f9:5a:ab:6b:d3:d1:c4:bf:da:02:7d: 1b:98:7a:d7:1e:5c:39:ab:f0:73:dc:0d:55:4b:9b:52:0d:cc: 37:e6:6f:8a:02:56:de:56:c3:d7:7f:bb:ad:0f:6f:1f:6f:50: d2:02:7b:09:85:f2:8c:80:2e:43:95:a7:51:77:f5:19:41:31: 05:94:f8:07:e2:0b:5d:a8:ff:e5:f9:db:e9:d3:ce:d8:07:e9: d1:8c:7a:9a:9d:1c:2a:51:c4:32:1f:f2:94:bf:84:9e:00:dc: 04:4d:31:01:75:6e:18:ff:18:55:43:35:83:67:0a:2d:d0:6c: 36:9a:71:18:ca:af:c7:61:2f:c9:66:e1:27:ea:0e:f3:06:82: f0:fb:c8:16:a9:c4:b6:11:76:e2:ea:ec:ac:2a:f7:90:9f:51: 58:13:5b:1a:1b:24:65:44:21:7b:66:01:a2:b2:6f:5e:1c:e5: 5d:76:e8:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt9XeV80silvPuYrqCeuXZ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWYwZTY2NWE5Yzc0MjIzYzRiZmUyNzBhMTY1OWFkZTRj ZWYzMWYwHhcNMjYwMTAyMDYyMTA0WhcNMjYwMTAzMDYyMTA0WjAzMTEwLwYDVQQD EyhhMTY2ZTMyODlkYjFkYzJkNzY1MTQ3ZjBlZmY4YzAxZDI3NzMxYjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxJGWrMAIq7qM1+g00IOQwxkwA9c 69d30k64hOXeKzLsgFS8VyKmKCeX7m4kBbZMvmKk7Y1OC3CVm2GuX8InLQ04MQjr beD9VNUnAs2pLik7ujRFxJ8f1TiJgr76tEp5EMCCIFEOUEpuXc9dfpUl+qQBozko jC+V/C5DXcDvIPogz41dtAP0fTrIXJafmkOlhUXxZO+u6NtcHvNVUdDL7PtcdR0W tTyL1f/CWmNT0U6Y13JyjK/CwldAlZNRIz41jiQgVvgMN6z/u9cFAiO6GlYSUitX 37TKPFcpueqLaF3tQJXKv9TkM4IVRaucQqeuVAzTtnOV/lGUFYvcig4N4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFm4yidsdwtdlFH8O/4wB0ncxuNMB8GA1UdIwQY MBaAFAFfDmZanHQiPEv+JwoWWa3kzvMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80NmJkMzMtYjUyNy00NjJlLTgxZTAt ODY3N2IzZGQ4NzA3LzEvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80NmJkMzMtYjUyNy00NjJlLTgxZTAtODY3N2IzZGQ4NzA3 LzEvQVY4T1pscWNkQ0k4U180bkNoWlpyZVRPOHg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisa7kSt+ QD7i5te7/7Go4FW4gM1qIyZM9bzlncdM9VW0F075SY/csoWidH9bG4BBsU8f6uMe gc/AVo+Sx5Aa1IeiaIVYRqneTjQ2mtMZeflaq2vT0cS/2gJ9G5h61x5cOavwc9wN VUubUg3MN+ZvigJW3lbD13+7rQ9vH29Q0gJ7CYXyjIAuQ5WnUXf1GUExBZT4B+IL Xaj/5fnb6dPO2Afp0Yx6mp0cKlHEMh/ylL+EngDcBE0xAXVuGP8YVUM1g2cKLdBs NppxGMqvx2EvyWbhJ+oO8waC8PvIFqnEthF24ursrCr3kJ9RWBNbGhskZUQhe2YB orJvXhzlXXboow== -----END CERTIFICATE-----Generated at Fri Jan 2 17:01:58 2026 by rpki-client