This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft File: aJwdYcDzPDCwC1yoChXR0lVsB0M.mft (raw, json) Hash identifier: d7uik8Y+V9pu8O/tdvyzIezGV7+zDqPYq7PBoDBN8/I= Subject key identifier: 6C:0B:34:E9:9E:1F:68:59:C6:54:20:41:6D:DF:66:D4:34:46:44:B9 Authority key identifier: 68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43 Certificate issuer: /CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743 Certificate serial: 019BD356DC8C9DFAD7B087DB6044FF6EAA7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft Manifest number: B4 Signing time: Sun 18 Jan 2026 23:00:43 +0000 Manifest this update: Sun 18 Jan 2026 23:00:43 +0000 Manifest next update: Mon 19 Jan 2026 23:00:43 +0000 Files and hashes: 1: _TtZJ5msDlGsiXnHSOsz0-Eiy9I.roa (hash: c2TwS42atkIHb7NKIN/wGgnVceX4RG+uR7le8c7mQSI=) 2: aJwdYcDzPDCwC1yoChXR0lVsB0M.crl (hash: CEQgMhwe5PWgrDPvMEg0bYUm/BRGTqV+X8Zc6mZdUlI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 23:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d3:56:dc:8c:9d:fa:d7:b0:87:db:60:44:ff:6e:aa:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743 Validity Not Before: Jan 18 23:00:43 2026 GMT Not After : Jan 19 23:00:43 2026 GMT Subject: CN=6c0b34e99e1f6859c65420416ddf66d4344644b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:47:ac:db:96:c5:ab:ba:36:5c:90:d0:ad:01: 52:32:57:c1:76:d8:b8:43:86:6d:9c:86:52:e2:b8: 19:63:f2:4e:aa:7d:d2:40:c2:9b:73:28:33:04:98: 85:0b:69:9b:bc:c7:12:2b:10:4a:e6:bf:74:ae:93: 44:0f:ce:a4:1a:7a:09:fb:e8:d5:ee:8f:09:51:31: 09:9a:d1:76:9a:d6:c1:e7:97:bb:68:0d:9c:cb:07: dc:f7:42:31:99:54:e8:8b:8c:90:42:b5:f5:fa:eb: df:27:8f:bf:b9:72:7f:f5:63:af:76:5f:7d:d0:1f: fc:5b:32:4a:d2:a0:bb:b5:43:30:dc:9b:32:6e:61: 45:51:fe:e2:ed:1b:d7:4b:ae:d5:17:bd:50:1c:9e: 1d:fc:fa:c1:c8:72:56:3b:b0:84:0c:46:9d:ee:d3: de:4a:2e:4f:9a:bc:aa:4f:a9:7e:76:32:8d:1c:3c: ee:d4:39:ea:f0:35:ee:be:f7:6a:26:fa:46:57:1e: 05:48:a9:9e:09:dd:d7:62:b3:a7:15:c6:9d:9c:7c: 81:a9:7f:2e:8d:3d:95:d4:06:e0:fd:f1:2c:94:8e: 9d:d4:cc:c8:81:fd:2d:f4:c8:b8:64:fd:26:85:4c: db:6b:b8:2f:47:0c:d9:8d:c8:fe:7d:85:05:79:86: d4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:0B:34:E9:9E:1F:68:59:C6:54:20:41:6D:DF:66:D4:34:46:44:B9 X509v3 Authority Key Identifier: keyid:68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d2:87:12:39:49:c2:d5:fb:8d:53:f4:7d:6f:83:c0:50:78: cf:37:a6:6f:f6:c3:e8:a3:88:4f:7e:75:04:48:97:e4:ca:98: fa:2d:19:94:be:74:77:4c:ae:85:9b:4e:85:c4:8b:d7:97:a9: 00:09:2b:af:6d:0c:c4:7f:8d:6b:82:dd:27:eb:87:b6:9e:2b: 2a:13:1d:41:a1:7f:aa:46:20:a3:6d:fd:51:13:9f:9b:c8:b9: 69:b0:76:be:12:b0:d1:ec:98:49:5b:20:bd:18:29:54:82:d6: bf:8a:25:9e:0b:96:cf:77:6f:75:d9:08:ec:bb:58:c4:84:42: 8d:97:9a:ef:b1:72:26:e7:1f:c9:ca:49:7f:a7:71:45:37:d6: a3:20:a7:c3:13:32:f1:6d:af:4a:bf:f4:98:7f:99:61:94:5c: fe:ba:33:60:70:17:06:d1:52:f7:1e:b3:6d:ad:aa:6d:f6:17: fe:f0:68:94:88:75:b3:54:a0:69:c4:b9:e0:b6:62:7e:6b:a5: aa:60:59:c6:f5:b3:bf:c9:34:7b:b6:03:0b:e5:77:0e:34:8e: c5:16:cb:df:21:60:fb:c1:28:9a:5c:72:53:02:6d:b6:77:91: c3:f9:47:77:10:46:a2:ce:7d:20:5b:64:9a:b9:17:be:dc:6b: e2:bf:86:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvTVtyMnfrXsIfbYET/bqp6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4OWMxZDYxYzBmMzNjMzBiMDBiNWNhODBhMTVkMWQyNTU2 YzA3NDMwHhcNMjYwMTE4MjMwMDQzWhcNMjYwMTE5MjMwMDQzWjAzMTEwLwYDVQQD Eyg2YzBiMzRlOTllMWY2ODU5YzY1NDIwNDE2ZGRmNjZkNDM0NDY0NGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0es25bFq7o2XJDQrQFSMlfBdti4 Q4ZtnIZS4rgZY/JOqn3SQMKbcygzBJiFC2mbvMcSKxBK5r90rpNED86kGnoJ++jV 7o8JUTEJmtF2mtbB55e7aA2cywfc90IxmVToi4yQQrX1+uvfJ4+/uXJ/9WOvdl99 0B/8WzJK0qC7tUMw3JsybmFFUf7i7RvXS67VF71QHJ4d/PrByHJWO7CEDEad7tPe Si5PmryqT6l+djKNHDzu1Dnq8DXuvvdqJvpGVx4FSKmeCd3XYrOnFcadnHyBqX8u jT2V1Abg/fEslI6d1MzIgf0t9Mi4ZP0mhUzba7gvRwzZjcj+fYUFeYbU7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwLNOmeH2hZxlQgQW3fZtQ0RkS5MB8GA1UdIwQY MBaAFGicHWHA8zwwsAtcqAoV0dJVbAdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUp3ZFljRHpQREN3QzF5b0NoWFIwbFZzQjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82ZTI3MmQtYWRkMS00MWVjLTk1NGIt MjIwYmM0M2NkMjQ2LzEvYUp3ZFljRHpQREN3QzF5b0NoWFIwbFZzQjBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS82ZTI3MmQtYWRkMS00MWVjLTk1NGItMjIwYmM0M2NkMjQ2 LzEvYUp3ZFljRHpQREN3QzF5b0NoWFIwbFZzQjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdKHEjlJ wtX7jVP0fW+DwFB4zzemb/bD6KOIT351BEiX5MqY+i0ZlL50d0yuhZtOhcSL15ep AAkrr20MxH+Na4LdJ+uHtp4rKhMdQaF/qkYgo239UROfm8i5abB2vhKw0eyYSVsg vRgpVILWv4olnguWz3dvddkI7LtYxIRCjZea77FyJucfycpJf6dxRTfWoyCnwxMy 8W2vSr/0mH+ZYZRc/rozYHAXBtFS9x6zba2qbfYX/vBolIh1s1SgacS54LZifmul qmBZxvWzv8k0e7YDC+V3DjSOxRbL3yFg+8EomlxyUwJttneRw/lHdxBGos59IFtk mrkXvtxr4r+GJQ== -----END CERTIFICATE-----Generated at Mon Jan 19 06:06:19 2026 by rpki-client