This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft File: Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft (raw, json) Hash identifier: zwiq3C87uSNXAlaIXyULuGT8Mr2AfxlxWQIC+O+0SS4= Subject key identifier: 6C:DB:5F:B0:BD:4F:C7:06:A0:C2:8B:60:52:9F:E6:E6:18:02:EE:28 Authority key identifier: 02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0 Certificate issuer: /CN=02af3b635354b9757b9f2d68ea5d58c50742aab0 Certificate serial: 019BFC52E8A6DF8F96D96E427DEB108C8F99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft Manifest number: 86 Signing time: Mon 26 Jan 2026 22:00:50 +0000 Manifest this update: Mon 26 Jan 2026 22:00:50 +0000 Manifest next update: Tue 27 Jan 2026 22:00:50 +0000 Files and hashes: 1: Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl (hash: qZgt3s4pBSiH8k+WLYhn/3u5agmQm8kaOlLv22EPZc4=) 2: NGyMHcBWRIkoIoJ_ncGJDqHCOTQ.roa (hash: 7EeVGxOBQ9n5FgZRMYhe7gBwkfF77z2pQwSgFDZNEOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:52:e8:a6:df:8f:96:d9:6e:42:7d:eb:10:8c:8f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02af3b635354b9757b9f2d68ea5d58c50742aab0 Validity Not Before: Jan 26 22:00:50 2026 GMT Not After : Jan 27 22:00:50 2026 GMT Subject: CN=6cdb5fb0bd4fc706a0c28b60529fe6e61802ee28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5f:16:df:e9:bc:42:a1:aa:9a:b8:90:2a:fb: fa:63:f8:47:fe:55:0b:1f:0a:82:49:b0:2e:e3:a8: b2:b5:2f:2b:23:4c:49:fa:53:6b:50:6a:50:fc:fa: b0:eb:a3:11:58:ed:8b:43:20:65:30:5d:97:0d:0b: 80:e8:0e:2a:8c:06:1c:fc:39:78:c7:c0:2f:68:4e: 39:c5:fe:e3:e0:02:f8:45:06:c9:6c:5e:1c:8e:b3: 16:1e:65:29:2a:22:62:ad:ab:13:7a:00:1d:07:78: 6b:c3:46:cf:cf:53:02:ce:b9:9a:da:9d:79:f7:7c: 0d:ec:93:cb:6c:1b:f1:78:d7:35:c7:a5:89:af:ee: df:4d:d8:1d:c7:e2:37:66:bc:f2:26:6d:b8:45:aa: fc:64:ce:3f:6b:48:d0:77:68:02:5e:79:c3:00:65: 45:10:39:b1:90:98:ba:8a:76:ce:7d:64:37:64:13: f3:da:c0:af:b2:08:64:f9:75:dc:9d:50:29:01:bb: 83:7d:8f:de:9d:1e:71:e9:73:8b:79:45:ca:d0:ea: 60:f9:2d:a9:ae:ab:79:56:a2:ef:15:ac:60:27:58: 85:0f:9c:5e:7f:63:94:1d:b0:60:95:e7:3e:72:35: 30:80:c5:19:36:17:3f:5f:ef:cf:70:cd:f6:91:93: 09:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DB:5F:B0:BD:4F:C7:06:A0:C2:8B:60:52:9F:E6:E6:18:02:EE:28 X509v3 Authority Key Identifier: keyid:02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:99:ed:2b:36:6e:1d:34:19:87:64:cb:08:b9:02:dc:0f:6f: 78:5b:10:e8:03:c2:27:14:39:41:0a:37:14:bf:02:82:7b:d1: bc:1b:18:4e:75:65:06:3a:30:41:f6:71:ad:a9:b4:93:d6:85: 2f:94:22:dc:94:03:eb:e4:5d:23:8b:49:e9:64:71:24:dd:0c: 4d:f1:bf:d2:a2:f2:bf:f1:29:9a:72:f8:a7:d5:a9:85:8d:36: d0:60:e0:91:04:ef:70:36:4e:1e:68:41:bb:8f:2c:6f:10:6c: 62:3c:ec:5b:c9:31:da:c2:dd:3c:25:4e:cd:17:f9:1f:09:82: de:05:c5:77:20:9c:5d:81:1c:1d:bd:4a:ba:53:57:76:c9:9c: b1:57:48:f5:4f:93:dd:65:2c:bb:18:9e:e2:26:50:7b:cf:6e: 05:96:58:aa:e5:18:08:7c:e5:b0:9a:b2:18:ca:77:9f:cb:e6: 69:42:75:23:13:46:e9:fc:c7:fa:ab:70:9a:d5:98:b6:7a:87: 1d:90:f1:eb:b8:d8:1e:55:07:c6:b3:03:e2:e3:72:80:a0:ab: 8d:88:79:a2:ff:07:be:7a:ca:8d:b5:ad:4e:72:aa:c5:b4:75: 5f:9d:a7:1b:08:9a:33:db:40:c1:fc:21:39:d7:a1:41:f5:86: dc:55:47:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8Uuim34+W2W5CfesQjI+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYWYzYjYzNTM1NGI5NzU3YjlmMmQ2OGVhNWQ1OGM1MDc0 MmFhYjAwHhcNMjYwMTI2MjIwMDUwWhcNMjYwMTI3MjIwMDUwWjAzMTEwLwYDVQQD Eyg2Y2RiNWZiMGJkNGZjNzA2YTBjMjhiNjA1MjlmZTZlNjE4MDJlZTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF8W3+m8QqGqmriQKvv6Y/hH/lUL HwqCSbAu46iytS8rI0xJ+lNrUGpQ/Pqw66MRWO2LQyBlMF2XDQuA6A4qjAYc/Dl4 x8AvaE45xf7j4AL4RQbJbF4cjrMWHmUpKiJirasTegAdB3hrw0bPz1MCzrma2p15 93wN7JPLbBvxeNc1x6WJr+7fTdgdx+I3ZrzyJm24Rar8ZM4/a0jQd2gCXnnDAGVF EDmxkJi6inbOfWQ3ZBPz2sCvsghk+XXcnVApAbuDfY/enR5x6XOLeUXK0Opg+S2p rqt5VqLvFaxgJ1iFD5xef2OUHbBglec+cjUwgMUZNhc/X+/PcM32kZMJkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzbX7C9T8cGoMKLYFKf5uYYAu4oMB8GA1UdIwQY MBaAFAKvO2NTVLl1e58taOpdWMUHQqqwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80M2Q0Y2EtODJjYi00MTRhLWIzOWUt ODZmODhjZTQ0NzkzLzEvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80M2Q0Y2EtODJjYi00MTRhLWIzOWUtODZmODhjZTQ0Nzkz LzEvQXE4N1kxTlV1WFY3bnkxbzZsMVl4UWRDcXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpntKzZu HTQZh2TLCLkC3A9veFsQ6APCJxQ5QQo3FL8CgnvRvBsYTnVlBjowQfZxram0k9aF L5Qi3JQD6+RdI4tJ6WRxJN0MTfG/0qLyv/EpmnL4p9WphY020GDgkQTvcDZOHmhB u48sbxBsYjzsW8kx2sLdPCVOzRf5HwmC3gXFdyCcXYEcHb1KulNXdsmcsVdI9U+T 3WUsuxie4iZQe89uBZZYquUYCHzlsJqyGMp3n8vmaUJ1IxNG6fzH+qtwmtWYtnqH HZDx67jYHlUHxrMD4uNygKCrjYh5ov8HvnrKjbWtTnKqxbR1X52nGwiaM9tAwfwh OdehQfWG3FVHjw== -----END CERTIFICATE-----Generated at Tue Jan 27 04:28:59 2026 by rpki-client