This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft File: AaVsQu18uWPyhVA87AYG1g0Ks4c.mft (raw, json) Hash identifier: 6aLzDOt9+bExSXbN7tmgtmkMTErOOcNy4z94hOfRAzI= Subject key identifier: A7:EB:63:8A:14:4E:68:2F:4E:64:E4:B2:94:68:CD:EE:A1:53:E3:A9 Authority key identifier: 01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87 Certificate issuer: /CN=01a56c42ed7cb963f285503cec0606d60d0ab387 Certificate serial: 019BFD657E68579718355F00B91CE07E72D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft Manifest number: 10B8 Signing time: Tue 27 Jan 2026 03:00:45 +0000 Manifest this update: Tue 27 Jan 2026 03:00:45 +0000 Manifest next update: Wed 28 Jan 2026 03:00:45 +0000 Files and hashes: 1: AaVsQu18uWPyhVA87AYG1g0Ks4c.crl (hash: HWoGA59VqYiwSF+REODPk4Bx4en6GXQMYAMYMUC8BX4=) 2: NSYoMgdv_GgQV27_GIPye5U9jPQ.roa (hash: 4AlK45WxtVu086BCXSG5HnwL06CQHoIesX5EAX9HMxU=) 3: RQ8JIGxsT6j17dfeEPWw2-YRi2c.roa (hash: qbacCBbHQjk4PtD2GWcsUuyb/kcc9ZQ6pfK2TjjwNeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:65:7e:68:57:97:18:35:5f:00:b9:1c:e0:7e:72:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01a56c42ed7cb963f285503cec0606d60d0ab387 Validity Not Before: Jan 27 03:00:45 2026 GMT Not After : Jan 28 03:00:45 2026 GMT Subject: CN=a7eb638a144e682f4e64e4b29468cdeea153e3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ff:5e:32:6b:72:81:0a:2c:8a:cc:da:a3:e4: ee:81:da:d5:7e:91:e7:79:1f:f1:63:85:cb:e9:c7: 54:80:83:0a:cf:cd:4f:f8:ac:e9:dc:f8:05:90:34: 8e:5f:a0:ed:23:b6:44:d3:43:1d:0f:9f:f5:2a:71: ee:11:71:c1:88:7b:a0:99:a8:ed:61:2a:c5:1c:60: 0f:64:9a:41:6e:fe:21:8d:cc:be:f0:8a:7c:6c:39: 7c:4d:81:95:f2:c8:6a:dc:b9:ea:06:81:df:43:3d: cd:e9:b2:be:2e:be:fb:6d:ad:3b:9e:2c:09:16:49: 56:dc:97:aa:b0:1b:39:bf:67:ab:e4:b8:dd:d4:48: fb:f8:d9:80:15:38:51:06:32:0b:d4:d4:39:6f:0c: 15:5b:80:77:e1:e6:82:b3:46:c4:ed:e9:5f:94:32: bb:35:6a:6b:c7:a5:16:ee:b2:c0:d6:61:b2:77:ae: 31:a2:fa:68:dc:22:be:68:07:c1:c7:e7:ba:16:4e: 92:4e:f2:db:01:6c:a5:f6:21:8b:8c:20:d7:9d:44: 0b:0b:77:13:2e:ea:e5:fd:2d:8b:de:c2:b9:69:10: 83:ab:a5:98:be:ca:4f:4c:21:b5:67:53:26:38:7e: b7:fb:5d:6c:a3:1c:26:0f:f3:d3:46:5e:42:14:86: d4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EB:63:8A:14:4E:68:2F:4E:64:E4:B2:94:68:CD:EE:A1:53:E3:A9 X509v3 Authority Key Identifier: keyid:01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ac:47:00:5a:7e:e3:1e:f4:28:4e:17:1b:37:af:6c:3f:be: 17:1b:00:76:75:05:4b:9d:a3:6b:e6:26:23:6f:27:9f:31:6d: 56:74:03:aa:d6:76:c2:d2:b1:7f:98:e1:86:2c:c8:b3:33:9e: 96:fa:c4:2f:c2:2f:9e:ed:b9:61:d7:19:61:e0:40:67:36:90: ad:ec:63:1c:51:86:f8:09:7d:e6:63:1e:75:ac:17:f3:3b:a7: 17:93:23:3b:03:bf:f6:27:87:e9:0c:ef:e2:a1:68:b0:17:7e: 86:c3:30:a1:f7:5b:06:c3:85:d8:33:a2:43:58:11:6f:7a:d5: 61:b7:0c:3f:ab:3d:b6:92:8f:bd:fe:40:e6:b9:84:ae:3f:b6: e7:8a:3d:79:f6:2e:c4:6b:e3:22:db:e5:9e:3b:7c:c7:c7:f9: 36:b7:1b:5e:b1:c3:c8:52:bb:bd:4e:f3:fb:a4:55:f4:2c:b4: 70:ed:6a:af:b9:5b:0c:f7:4e:35:5c:07:8a:a7:04:b0:0c:06: 5a:cd:d6:ff:44:b7:05:84:0d:02:b4:14:a4:3c:27:1e:1c:5f: 89:d8:45:62:6c:b1:1a:0f:20:dd:53:4f:ff:47:42:83:98:15: a7:9b:7e:55:b1:80:6b:58:57:da:28:6e:7d:6d:41:ea:9f:be: 28:e8:a0:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9ZX5oV5cYNV8AuRzgfnLVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYTU2YzQyZWQ3Y2I5NjNmMjg1NTAzY2VjMDYwNmQ2MGQw YWIzODcwHhcNMjYwMTI3MDMwMDQ1WhcNMjYwMTI4MDMwMDQ1WjAzMTEwLwYDVQQD EyhhN2ViNjM4YTE0NGU2ODJmNGU2NGU0YjI5NDY4Y2RlZWExNTNlM2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv9eMmtygQosiszao+TugdrVfpHn eR/xY4XL6cdUgIMKz81P+Kzp3PgFkDSOX6DtI7ZE00MdD5/1KnHuEXHBiHugmajt YSrFHGAPZJpBbv4hjcy+8Ip8bDl8TYGV8shq3LnqBoHfQz3N6bK+Lr77ba07niwJ FklW3JeqsBs5v2er5Ljd1Ej7+NmAFThRBjIL1NQ5bwwVW4B34eaCs0bE7elflDK7 NWprx6UW7rLA1mGyd64xovpo3CK+aAfBx+e6Fk6STvLbAWyl9iGLjCDXnUQLC3cT Lurl/S2L3sK5aRCDq6WYvspPTCG1Z1MmOH63+11soxwmD/PTRl5CFIbUwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfrY4oUTmgvTmTkspRoze6hU+OpMB8GA1UdIwQY MBaAFAGlbELtfLlj8oVQPOwGBtYNCrOHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWFWc1F1MTh1V1B5aFZBODdBWUcxZzBLczRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85OWNmZTUtNGIzNS00OWM3LTlhNzMt ZWQwN2Y1Y2FkNmQ3LzEvQWFWc1F1MTh1V1B5aFZBODdBWUcxZzBLczRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC85OWNmZTUtNGIzNS00OWM3LTlhNzMtZWQwN2Y1Y2FkNmQ3 LzEvQWFWc1F1MTh1V1B5aFZBODdBWUcxZzBLczRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqxHAFp+ 4x70KE4XGzevbD++FxsAdnUFS52ja+YmI28nnzFtVnQDqtZ2wtKxf5jhhizIszOe lvrEL8Ivnu25YdcZYeBAZzaQrexjHFGG+Al95mMedawX8zunF5MjOwO/9ieH6Qzv 4qFosBd+hsMwofdbBsOF2DOiQ1gRb3rVYbcMP6s9tpKPvf5A5rmErj+254o9efYu xGvjItvlnjt8x8f5NrcbXrHDyFK7vU7z+6RV9Cy0cO1qr7lbDPdONVwHiqcEsAwG Ws3W/0S3BYQNArQUpDwnHhxfidhFYmyxGg8g3VNP/0dCg5gVp5t+VbGAa1hX2ihu fW1B6p++KOigiQ== -----END CERTIFICATE-----Generated at Tue Jan 27 07:46:48 2026 by rpki-client