This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft File: aesALwAL1CbkpkDHHWwCAbUFDjQ.mft (raw, json) Hash identifier: jrLZy3TGln5qqgYTldG/Q6hxxHzcILEi2cWhjgNo/BQ= Subject key identifier: E3:2F:3B:47:20:90:6E:01:1E:D5:8D:64:7F:5E:58:BE:E3:19:2C:3A Authority key identifier: 69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34 Certificate issuer: /CN=69eb002f000bd426e4a640c71d6c0201b5050e34 Certificate serial: 019BFC5355D99D2395735250468E5EC4F3FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft Manifest number: 1731 Signing time: Mon 26 Jan 2026 22:01:18 +0000 Manifest this update: Mon 26 Jan 2026 22:01:18 +0000 Manifest next update: Tue 27 Jan 2026 22:01:18 +0000 Files and hashes: 1: Y8aRMIYRH1jVjryKKP1v8mGsOdc.roa (hash: 3j6bnXLc/3ckyPdMqKUjErtfoWBW1SDwWHfzwh4ftiY=) 2: aesALwAL1CbkpkDHHWwCAbUFDjQ.crl (hash: LGs5fd2qs6PQ7QNT2+gJAOFklCTmfoCgglBQxItB1rk=) 3: uFe4cVHbxr_G6s1--UuURiKCbYs.roa (hash: Fv5WNCecba9l/1dLNg+gP0QmW1CKOnk01tR8y8gBZWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 22:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:53:55:d9:9d:23:95:73:52:50:46:8e:5e:c4:f3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69eb002f000bd426e4a640c71d6c0201b5050e34 Validity Not Before: Jan 26 22:01:18 2026 GMT Not After : Jan 27 22:01:18 2026 GMT Subject: CN=e32f3b4720906e011ed58d647f5e58bee3192c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:71:e1:9f:36:93:93:90:e5:93:2d:e4:37:02: 4d:55:10:9e:9a:5d:b0:b2:4f:d8:84:41:d5:8b:05: 4e:25:fd:d1:6a:76:32:60:0d:34:d0:8c:a6:c6:cd: 3f:b7:3d:08:df:2f:c1:79:1c:15:3e:c6:8b:24:7e: 93:a7:15:8f:de:67:4f:b6:05:36:70:eb:b5:66:20: b9:22:d0:78:3f:22:1e:49:95:95:d9:a6:89:6e:2d: 0b:9d:07:12:9c:60:12:67:a1:c8:b3:7b:22:3c:34: 6f:15:7b:99:af:14:0e:52:18:1c:00:70:64:3e:ec: 01:ed:b9:1b:a2:8f:fa:6f:e8:96:9a:74:2f:5b:e7: 05:8a:e4:63:64:19:7c:83:9f:45:d6:4c:50:c3:e8: 57:cc:c0:36:e5:4c:f5:c2:80:c1:cf:6f:06:65:4c: d0:6b:78:51:92:98:7a:fb:a8:59:a9:77:32:51:c0: fc:d2:92:4a:04:ae:a7:b9:a3:0a:e4:08:e9:19:f1: f9:98:bf:d7:77:c4:41:bd:5e:8e:6e:d7:86:71:01: a9:43:9f:48:26:a6:3a:37:47:f0:5b:94:db:09:37: 44:0b:1e:b5:49:0e:89:60:b1:4a:81:90:b1:31:9f: a2:82:70:17:63:00:8a:e7:66:04:99:cb:d5:01:70: 28:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2F:3B:47:20:90:6E:01:1E:D5:8D:64:7F:5E:58:BE:E3:19:2C:3A X509v3 Authority Key Identifier: keyid:69:EB:00:2F:00:0B:D4:26:E4:A6:40:C7:1D:6C:02:01:B5:05:0E:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aesALwAL1CbkpkDHHWwCAbUFDjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d3e682-3370-4271-9437-785475c22c9b/1/aesALwAL1CbkpkDHHWwCAbUFDjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:c6:1d:b4:6e:c2:65:8e:ae:6b:bc:83:17:22:65:ad:59:cf: 4c:c2:8c:db:41:6c:4a:7c:21:77:79:0b:b7:5f:2a:f1:f6:88: 5d:53:a4:08:d4:b7:0c:84:fb:de:e8:9d:8d:fc:85:cd:70:7c: d9:ff:cf:51:fe:26:35:ee:23:1a:0b:d1:a4:39:82:d5:f1:1a: 36:6d:b4:44:39:d3:0a:01:62:4c:1f:15:22:f8:a5:60:3f:3d: 6e:7c:82:bf:11:48:61:25:89:fc:ae:fe:d7:49:7a:2f:f1:b1: 83:15:39:2a:3b:09:b1:07:ce:40:54:6b:db:ec:da:13:7b:e6: 1e:a1:fa:01:38:09:fc:e1:9d:bd:61:03:ad:21:26:9d:8d:da: ed:ee:be:2e:09:5b:32:a7:37:b0:32:99:12:7e:24:2e:47:cc: 66:7c:91:12:3d:6a:57:b5:6f:57:72:60:bc:fe:d7:34:a7:c3: d2:12:f0:ca:c9:fa:23:c8:43:5a:ae:3c:0f:e4:99:45:f0:ed: 67:a6:33:6d:ac:98:f5:2d:30:30:5a:3a:3a:76:a8:ca:ee:c7: 24:0f:88:51:77:bc:10:2c:af:af:4f:22:67:f4:b6:8b:84:2c: c7:86:b8:7b:ac:5f:f8:38:f9:a6:7d:bf:3c:ca:8a:0b:24:f4: 0a:27:a7:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8U1XZnSOVc1JQRo5exPP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZWIwMDJmMDAwYmQ0MjZlNGE2NDBjNzFkNmMwMjAxYjUw NTBlMzQwHhcNMjYwMTI2MjIwMTE4WhcNMjYwMTI3MjIwMTE4WjAzMTEwLwYDVQQD EyhlMzJmM2I0NzIwOTA2ZTAxMWVkNThkNjQ3ZjVlNThiZWUzMTkyYzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HHhnzaTk5Dlky3kNwJNVRCeml2w sk/YhEHViwVOJf3RanYyYA000Iymxs0/tz0I3y/BeRwVPsaLJH6TpxWP3mdPtgU2 cOu1ZiC5ItB4PyIeSZWV2aaJbi0LnQcSnGASZ6HIs3siPDRvFXuZrxQOUhgcAHBk PuwB7bkboo/6b+iWmnQvW+cFiuRjZBl8g59F1kxQw+hXzMA25Uz1woDBz28GZUzQ a3hRkph6+6hZqXcyUcD80pJKBK6nuaMK5AjpGfH5mL/Xd8RBvV6ObteGcQGpQ59I JqY6N0fwW5TbCTdECx61SQ6JYLFKgZCxMZ+ignAXYwCK52YEmcvVAXAomQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMvO0cgkG4BHtWNZH9eWL7jGSw6MB8GA1UdIwQY MBaAFGnrAC8AC9Qm5KZAxx1sAgG1BQ40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kM2U2ODItMzM3MC00MjcxLTk0Mzct Nzg1NDc1YzIyYzliLzEvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9kM2U2ODItMzM3MC00MjcxLTk0MzctNzg1NDc1YzIyYzli LzEvYWVzQUx3QUwxQ2JrcGtESEhXd0NBYlVGRGpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacYdtG7C ZY6ua7yDFyJlrVnPTMKM20FsSnwhd3kLt18q8faIXVOkCNS3DIT73uidjfyFzXB8 2f/PUf4mNe4jGgvRpDmC1fEaNm20RDnTCgFiTB8VIvilYD89bnyCvxFIYSWJ/K7+ 10l6L/GxgxU5KjsJsQfOQFRr2+zaE3vmHqH6ATgJ/OGdvWEDrSEmnY3a7e6+Lglb Mqc3sDKZEn4kLkfMZnyREj1qV7VvV3JgvP7XNKfD0hLwysn6I8hDWq48D+SZRfDt Z6YzbayY9S0wMFo6Onaoyu7HJA+IUXe8ECyvr08iZ/S2i4Qsx4a4e6xf+Dj5pn2/ PMqKCyT0Cienvg== -----END CERTIFICATE-----Generated at Tue Jan 27 08:29:40 2026 by rpki-client