This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft File: ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json) Hash identifier: prHVt6KqHot4yE5UkUvM/7jN6s9MAm//2pqyFbW5JDw= Subject key identifier: 75:89:13:54:7E:B6:08:D9:CD:39:2D:DF:75:85:F7:54:D7:9F:94:4D Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20 Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020 Certificate serial: 019BFE0ACD068082FA5CDABE0FD6CF61F8E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft Manifest number: 177E Signing time: Tue 27 Jan 2026 06:01:19 +0000 Manifest this update: Tue 27 Jan 2026 06:01:19 +0000 Manifest next update: Wed 28 Jan 2026 06:01:19 +0000 Files and hashes: 1: L0pkYoARJXEFc-gB4c5J8VXY3Mg.roa (hash: 1faOAUcr0h7qDHU3+7FacAnxC8gdfFMLQm2JVMNKznA=) 2: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: IYVs4BmeqSFRZaQ8e/WG2EhF56Mg307Xtf397dj04Ss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0a:cd:06:80:82:fa:5c:da:be:0f:d6:cf:61:f8:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020 Validity Not Before: Jan 27 06:01:19 2026 GMT Not After : Jan 28 06:01:19 2026 GMT Subject: CN=758913547eb608d9cd392ddf7585f754d79f944d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:72:e1:dc:ab:4d:b4:dc:fe:c5:f4:30:97:88: 1b:74:e9:7a:c0:00:7d:77:26:f3:0c:d4:d1:32:14: 81:68:1b:01:fd:92:c6:42:65:7f:37:e5:e9:6d:09: ca:8f:76:a8:e0:f3:fb:6d:0d:19:42:90:ac:47:fb: 13:99:bd:d4:28:4d:1b:de:52:dc:43:8a:94:9a:37: 3b:a1:22:a6:84:38:f9:98:35:0e:55:3c:2d:14:01: 64:a8:83:ee:d5:7f:03:56:c9:da:01:3a:a8:6c:1f: 89:f2:80:ca:1c:75:f2:30:dd:96:8f:0b:e9:2b:51: ea:e9:17:b3:e9:eb:ee:2a:2c:a1:ae:53:2d:d4:f5: f5:76:ed:dd:66:47:a9:3a:3e:c9:c9:0a:33:c7:f8: 7f:24:a0:9f:10:29:6f:c0:4a:04:5c:48:59:29:e2: 8e:f8:48:a5:a3:af:63:10:5f:a9:7b:08:71:d3:10: 7c:3c:51:54:8f:dd:70:17:26:94:75:a3:a3:6c:d5: 92:14:ac:c1:95:32:60:a6:20:73:f3:92:d2:36:82: 5f:8a:3c:b7:40:bb:73:b1:c3:97:8f:a1:04:be:fa: 66:7f:27:47:98:af:ce:8c:35:f6:8f:7b:f5:a2:bc: d9:c9:4c:06:d3:7f:ee:74:f4:e4:bf:3c:84:65:3c: c3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:89:13:54:7E:B6:08:D9:CD:39:2D:DF:75:85:F7:54:D7:9F:94:4D X509v3 Authority Key Identifier: keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:0f:2f:e2:1c:b9:15:c3:28:d7:88:ed:80:38:c4:41:97:d1: b8:fe:ee:7a:12:44:1f:20:13:af:f3:ec:c2:2d:0a:f4:0c:20: a3:12:e7:e2:a5:6c:8b:ba:95:4f:83:40:13:9b:f0:e0:c9:8e: 2b:25:69:26:c6:86:bd:b7:63:e9:d7:04:f3:6e:43:4a:64:30: cd:66:19:d8:ae:0c:b4:60:24:a7:37:05:b4:ea:13:8d:6f:ae: e9:4a:8b:e1:58:0b:83:c0:23:9a:aa:cc:5f:e0:8d:d3:aa:0a: 00:84:eb:e1:c0:bd:09:a4:0b:97:45:d3:2a:af:25:3d:2a:45: 18:2b:02:77:41:d2:a8:bb:3c:42:10:89:fa:5c:be:b5:7e:29: 43:96:e2:53:f1:18:a2:f1:fa:14:ab:b6:4a:60:6a:94:5d:d2: 5a:1d:e1:99:99:3e:8f:23:ef:bb:9b:9f:f8:64:65:71:9e:91: 6d:b6:6c:89:dd:44:4b:39:08:64:b2:4d:b2:79:37:ed:cf:ea: b8:7a:82:ca:e9:f1:b1:b3:13:45:af:13:0d:75:6c:76:31:fb: dd:43:fe:f5:c1:10:83:65:70:83:ce:3a:af:e1:82:b0:dd:83: ce:62:fe:62:7e:ab:a5:39:05:7e:ac:70:03:75:45:5c:67:29: f5:30:7e:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+Cs0GgIL6XNq+D9bPYfjlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhOWQ2ZDI2ZTU2YzEzMmRkYmJjMDA1YWM0MjRmYjUzNmFj YmEwMjAwHhcNMjYwMTI3MDYwMTE5WhcNMjYwMTI4MDYwMTE5WjAzMTEwLwYDVQQD Eyg3NTg5MTM1NDdlYjYwOGQ5Y2QzOTJkZGY3NTg1Zjc1NGQ3OWY5NDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnLh3KtNtNz+xfQwl4gbdOl6wAB9 dybzDNTRMhSBaBsB/ZLGQmV/N+XpbQnKj3ao4PP7bQ0ZQpCsR/sTmb3UKE0b3lLc Q4qUmjc7oSKmhDj5mDUOVTwtFAFkqIPu1X8DVsnaATqobB+J8oDKHHXyMN2Wjwvp K1Hq6Rez6evuKiyhrlMt1PX1du3dZkepOj7JyQozx/h/JKCfEClvwEoEXEhZKeKO +Eilo69jEF+pewhx0xB8PFFUj91wFyaUdaOjbNWSFKzBlTJgpiBz85LSNoJfijy3 QLtzscOXj6EEvvpmfydHmK/OjDX2j3v1orzZyUwG03/udPTkvzyEZTzDWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWJE1R+tgjZzTkt33WF91TXn5RNMB8GA1UdIwQY MBaAFGqdbSblbBMt27wAWsQk+1Nqy6AgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXAxdEp1VnNFeTNidkFCYXhDVDdVMnJMb0NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85OWRkNmUtMDg1Ni00YTI3LWFlY2Qt ZDg5MjhmNWUxYjQwLzEvYXAxdEp1VnNFeTNidkFCYXhDVDdVMnJMb0NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC85OWRkNmUtMDg1Ni00YTI3LWFlY2QtZDg5MjhmNWUxYjQw LzEvYXAxdEp1VnNFeTNidkFCYXhDVDdVMnJMb0NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATA8v4hy5 FcMo14jtgDjEQZfRuP7uehJEHyATr/Pswi0K9AwgoxLn4qVsi7qVT4NAE5vw4MmO KyVpJsaGvbdj6dcE825DSmQwzWYZ2K4MtGAkpzcFtOoTjW+u6UqL4VgLg8AjmqrM X+CN06oKAITr4cC9CaQLl0XTKq8lPSpFGCsCd0HSqLs8QhCJ+ly+tX4pQ5biU/EY ovH6FKu2SmBqlF3SWh3hmZk+jyPvu5uf+GRlcZ6RbbZsid1ESzkIZLJNsnk37c/q uHqCyunxsbMTRa8TDXVsdjH73UP+9cEQg2Vwg846r+GCsN2DzmL+Yn6rpTkFfqxw A3VFXGcp9TB+Qw== -----END CERTIFICATE-----Generated at Tue Jan 27 08:29:42 2026 by rpki-client