This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft File: aPQ7W7zEligG6pMi7Ckum2bdzMU.mft (raw, json) Hash identifier: RPWW+V3Lc2u5vpoeS+ZAbZYPgLtZKEQ8zNKoP2dDm/g= Subject key identifier: EE:18:59:E1:09:CE:19:6B:5A:EF:D1:84:C8:32:C1:6E:03:19:7A:DB Authority key identifier: 68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5 Certificate issuer: /CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5 Certificate serial: 019BDEED60AD9AD6D02355A2B096BBC84DF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft Manifest number: 020F Signing time: Wed 21 Jan 2026 05:00:57 +0000 Manifest this update: Wed 21 Jan 2026 05:00:57 +0000 Manifest next update: Thu 22 Jan 2026 05:00:57 +0000 Files and hashes: 1: A5tB2m_AKkFH2MRYLSZP1qj6r7Y.roa (hash: JU4CZpqlBacShwjyBoLo9X21T9K67+NvyzH3SwXTo+Y=) 2: XHzhckAnu87gDfunEM3sM2fHJc4.roa (hash: J4SR1s2pClNQQ3/S6LW+95K5vqFvopp0j499gt2QsWY=) 3: aPQ7W7zEligG6pMi7Ckum2bdzMU.crl (hash: f3brKxwQP2ebvvx78WId5Rb+oifaZhGgOyIx/8FhvvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:de:ed:60:ad:9a:d6:d0:23:55:a2:b0:96:bb:c8:4d:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5 Validity Not Before: Jan 21 05:00:57 2026 GMT Not After : Jan 22 05:00:57 2026 GMT Subject: CN=ee1859e109ce196b5aefd184c832c16e03197adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:38:12:66:9e:10:3f:40:3f:a6:1e:ba:c9:d9: 34:3c:b0:7e:aa:14:35:b5:dc:4c:f4:21:dd:2a:34: 32:1b:69:0c:50:0e:70:3d:35:c7:d0:8e:db:9f:71: 3d:ec:36:4b:c9:b6:85:66:ab:dd:38:a9:c5:f1:74: c1:08:cc:2f:3c:a9:be:3a:61:ad:e9:60:1f:91:1e: af:4a:a5:e2:8e:78:1a:7f:bb:47:91:07:8e:6e:92: 84:35:27:81:6d:e8:3f:a3:3a:7d:9a:d5:5e:28:1a: fa:6c:80:00:97:85:95:5a:95:9e:1e:7f:e5:78:34: c2:1e:63:c2:24:7f:6c:5f:87:fc:bc:55:74:5d:44: 62:32:fc:e6:dc:de:d3:46:a0:2f:93:8d:6c:aa:2a: 3d:d5:aa:c2:40:fa:67:99:21:ba:11:d8:1e:0d:80: 1d:38:37:82:b1:c0:e8:b6:db:f8:ff:cf:8d:dc:e8: e1:cf:c6:49:75:c0:2a:cb:5f:c5:91:4e:f3:5b:a1: 26:3f:cd:5c:e9:31:3a:55:6c:50:85:73:be:43:ee: 2f:15:d8:f0:43:8d:6a:d6:f3:8a:fb:01:1d:e5:de: 7f:82:68:3c:92:37:65:eb:73:e3:11:57:37:59:be: 64:bb:8d:b9:98:a2:4d:56:71:a0:17:c1:7e:76:4f: 55:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:18:59:E1:09:CE:19:6B:5A:EF:D1:84:C8:32:C1:6E:03:19:7A:DB X509v3 Authority Key Identifier: keyid:68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:86:6c:e5:0d:f8:e6:17:51:e1:06:b4:98:e2:44:1c:e1:62: 48:3f:78:87:10:19:c1:49:86:f0:dd:78:a5:a2:0a:94:ed:5f: 7d:5b:ec:86:6d:3d:3e:b6:52:ed:1e:3d:5a:b1:ba:77:85:df: 95:36:a9:b1:17:32:09:3c:10:47:c0:ab:04:ae:30:e9:54:3f: d2:6d:c2:a8:74:a5:81:53:ca:d8:47:16:2c:ed:d7:17:c2:a5: 72:55:ad:86:54:8e:f4:5d:0e:d0:63:a9:fa:4f:0e:84:1b:c8: ca:03:6d:b1:99:ff:03:8e:9d:0c:c9:e0:5b:9a:8a:4e:42:d1: 7e:44:41:c7:fc:41:9c:58:70:7d:46:e5:15:fa:80:75:60:66: 94:cb:88:41:ad:1a:f5:f2:24:77:56:d1:54:ed:30:10:76:40: 70:cb:ea:12:01:73:d1:65:03:0c:55:1e:8b:ad:40:db:21:a8: 68:c6:75:bf:5f:ca:ff:6d:20:a1:a6:8b:dd:54:7e:70:1d:51: 3f:6b:c3:9b:3b:4d:4d:3a:06:d6:7a:59:f6:f2:c5:d8:d1:5c: 57:45:85:6a:8b:60:0c:55:bb:17:6f:6b:2d:33:93:3c:4d:a3: e4:ac:02:21:6e:10:3b:be:15:c9:35:d0:74:48:42:f9:df:79: f4:b1:ea:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZve7WCtmtbQI1WisJa7yE3xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZjQzYjViYmNjNDk2MjgwNmVhOTMyMmVjMjkyZTliNjZk ZGNjYzUwHhcNMjYwMTIxMDUwMDU3WhcNMjYwMTIyMDUwMDU3WjAzMTEwLwYDVQQD EyhlZTE4NTllMTA5Y2UxOTZiNWFlZmQxODRjODMyYzE2ZTAzMTk3YWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzgSZp4QP0A/ph66ydk0PLB+qhQ1 tdxM9CHdKjQyG2kMUA5wPTXH0I7bn3E97DZLybaFZqvdOKnF8XTBCMwvPKm+OmGt 6WAfkR6vSqXijngaf7tHkQeObpKENSeBbeg/ozp9mtVeKBr6bIAAl4WVWpWeHn/l eDTCHmPCJH9sX4f8vFV0XURiMvzm3N7TRqAvk41sqio91arCQPpnmSG6EdgeDYAd ODeCscDottv4/8+N3Ojhz8ZJdcAqy1/FkU7zW6EmP81c6TE6VWxQhXO+Q+4vFdjw Q41q1vOK+wEd5d5/gmg8kjdl63PjEVc3Wb5ku425mKJNVnGgF8F+dk9VMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4YWeEJzhlrWu/RhMgywW4DGXrbMB8GA1UdIwQY MBaAFGj0O1u8xJYoBuqTIuwpLptm3czFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVBRN1c3ekVsaWdHNnBNaTdDa3VtMmJkek1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wNDZmZmUtMDVlYi00YzhjLTg1NDUt MDI0ODNlNjQ4MmNiLzEvYVBRN1c3ekVsaWdHNnBNaTdDa3VtMmJkek1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8wNDZmZmUtMDVlYi00YzhjLTg1NDUtMDI0ODNlNjQ4MmNi LzEvYVBRN1c3ekVsaWdHNnBNaTdDa3VtMmJkek1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYZs5Q34 5hdR4Qa0mOJEHOFiSD94hxAZwUmG8N14paIKlO1ffVvshm09PrZS7R49WrG6d4Xf lTapsRcyCTwQR8CrBK4w6VQ/0m3CqHSlgVPK2EcWLO3XF8KlclWthlSO9F0O0GOp +k8OhBvIygNtsZn/A46dDMngW5qKTkLRfkRBx/xBnFhwfUblFfqAdWBmlMuIQa0a 9fIkd1bRVO0wEHZAcMvqEgFz0WUDDFUei61A2yGoaMZ1v1/K/20goaaL3VR+cB1R P2vDmztNTToG1npZ9vLF2NFcV0WFaotgDFW7F29rLTOTPE2j5KwCIW4QO74VyTXQ dEhC+d959LHqAQ== -----END CERTIFICATE-----Generated at Wed Jan 21 08:58:26 2026 by rpki-client