This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft File: aVyQxtYzPUdic9L9bIg6oq2o0RU.mft (raw, json) Hash identifier: RT7TxzANw18aqeXwFJy9BGrqR/EhkJHWdKCD3oeXQWc= Subject key identifier: FB:9C:D6:4C:7B:D3:A9:EC:C9:57:AC:4E:11:7C:F1:9A:B2:40:10:3E Authority key identifier: 69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15 Certificate issuer: /CN=695c90c6d6333d476273d2fd6c883aa2ada8d115 Certificate serial: 019BFA48C0A79773761BD5C622E2ACD3AF94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft Manifest number: 03 Signing time: Mon 26 Jan 2026 12:30:30 +0000 Manifest this update: Mon 26 Jan 2026 12:30:30 +0000 Manifest next update: Tue 27 Jan 2026 12:30:30 +0000 Files and hashes: 1: 6BKU6BQ0rm_dpv7UW41lofeDVAk.roa (hash: JSPR6ApMOGB4YeRrASVSoxpHimkIGb0YoSuAw+KKkoI=) 2: aVyQxtYzPUdic9L9bIg6oq2o0RU.crl (hash: nSokf84U7dkPurY9WajojR0O3BC3cEoz8bo3QVZLtGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:48:c0:a7:97:73:76:1b:d5:c6:22:e2:ac:d3:af:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=695c90c6d6333d476273d2fd6c883aa2ada8d115 Validity Not Before: Jan 26 12:30:30 2026 GMT Not After : Jan 27 12:30:30 2026 GMT Subject: CN=fb9cd64c7bd3a9ecc957ac4e117cf19ab240103e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ac:84:55:8a:ee:1d:94:ed:fa:60:6e:b0:9f: d7:2f:de:8d:f2:68:60:36:25:5e:83:e5:c2:99:d9: 5c:c9:33:25:8a:70:59:b5:dd:25:f2:6d:fd:f5:38: fd:af:4a:e7:9c:50:fb:cf:6b:52:68:c5:7d:74:86: d4:8a:c8:eb:a6:b9:87:12:1b:b7:57:1c:06:7f:3e: 8f:5f:68:f9:4a:0c:38:d9:07:81:d2:55:1c:77:9b: 1d:a4:a3:8a:a4:6c:bf:87:70:60:7e:4e:d9:c3:14: af:58:92:20:50:d1:ad:f3:b8:6a:f5:23:6f:f0:c2: 60:a2:e5:c4:7f:5d:60:e0:51:40:a8:54:da:26:fa: e8:44:09:9a:86:ea:a5:3b:66:c5:f1:e1:f6:77:51: a7:1c:37:41:f7:5c:2d:03:66:07:80:98:88:78:d0: 1f:c4:e5:8c:84:83:df:77:72:7c:73:33:80:59:70: a8:b3:7f:9f:40:e8:ef:12:66:58:34:c7:50:c4:0c: 80:21:7f:2c:fc:a4:0e:ce:82:59:5b:37:8d:bd:6a: dc:f5:0b:80:33:97:5d:81:6c:f1:a4:11:4e:22:7f: 4f:37:80:93:30:f3:88:ef:04:20:e9:31:0c:0e:5c: 5c:af:d4:9b:84:28:3c:0d:9b:d2:b7:56:d5:de:8c: 88:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9C:D6:4C:7B:D3:A9:EC:C9:57:AC:4E:11:7C:F1:9A:B2:40:10:3E X509v3 Authority Key Identifier: keyid:69:5C:90:C6:D6:33:3D:47:62:73:D2:FD:6C:88:3A:A2:AD:A8:D1:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVyQxtYzPUdic9L9bIg6oq2o0RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1b110-cc1b-4830-8369-775e7b4fb5c5/1/aVyQxtYzPUdic9L9bIg6oq2o0RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ed:af:2b:90:69:6c:0a:24:a6:57:99:ce:83:34:57:2f:1e: d6:f6:b1:cf:2b:61:dd:e2:c4:3f:9f:1b:87:a4:96:11:18:2f: f6:94:48:a5:a8:4b:5e:8e:5a:49:45:68:3b:32:e3:23:54:5d: 0c:95:71:e8:5c:84:19:2d:70:b2:36:cd:a0:93:be:0d:52:38: 58:df:99:19:5f:ef:11:e7:de:6d:94:26:63:53:f9:33:bf:09: ae:43:9a:f9:b4:3f:25:dc:f8:a7:05:dc:69:7f:20:81:90:8e: 49:aa:64:96:51:9f:0c:82:00:04:c8:f3:d5:81:10:53:30:30: d2:67:d6:d9:80:00:a4:6e:dc:74:9b:b1:a8:c8:0b:28:74:fa: a6:3c:08:9c:78:41:cb:1f:f0:90:5f:8b:51:bb:01:f5:81:ed: cf:2e:b2:b2:e6:da:6b:45:ec:2a:89:f1:d8:b8:62:02:03:c0: e8:da:3e:7d:e9:3f:68:f8:95:95:8b:f1:5e:3c:af:13:f9:3f: 06:98:f3:9e:8b:c2:e2:e5:04:36:07:db:68:6a:cd:00:aa:1f: 52:a7:5b:85:3a:0b:33:e8:75:2a:73:31:b5:f8:12:e3:9a:5f: 20:a1:eb:3c:8e:08:52:b0:68:e1:21:6c:d8:a1:45:dc:15:16: 2c:04:f7:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6SMCnl3N2G9XGIuKs06+UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NWM5MGM2ZDYzMzNkNDc2MjczZDJmZDZjODgzYWEyYWRh OGQxMTUwHhcNMjYwMTI2MTIzMDMwWhcNMjYwMTI3MTIzMDMwWjAzMTEwLwYDVQQD EyhmYjljZDY0YzdiZDNhOWVjYzk1N2FjNGUxMTdjZjE5YWIyNDAxMDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqyEVYruHZTt+mBusJ/XL96N8mhg NiVeg+XCmdlcyTMlinBZtd0l8m399Tj9r0rnnFD7z2tSaMV9dIbUisjrprmHEhu3 VxwGfz6PX2j5Sgw42QeB0lUcd5sdpKOKpGy/h3Bgfk7ZwxSvWJIgUNGt87hq9SNv 8MJgouXEf11g4FFAqFTaJvroRAmahuqlO2bF8eH2d1GnHDdB91wtA2YHgJiIeNAf xOWMhIPfd3J8czOAWXCos3+fQOjvEmZYNMdQxAyAIX8s/KQOzoJZWzeNvWrc9QuA M5ddgWzxpBFOIn9PN4CTMPOI7wQg6TEMDlxcr9SbhCg8DZvSt1bV3oyIGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuc1kx706nsyVesThF88ZqyQBA+MB8GA1UdIwQY MBaAFGlckMbWMz1HYnPS/WyIOqKtqNEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZ5UXh0WXpQVWRpYzlMOWJJZzZvcTJvMFJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9lMWIxMTAtY2MxYi00ODMwLTgzNjkt Nzc1ZTdiNGZiNWM1LzEvYVZ5UXh0WXpQVWRpYzlMOWJJZzZvcTJvMFJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9lMWIxMTAtY2MxYi00ODMwLTgzNjktNzc1ZTdiNGZiNWM1 LzEvYVZ5UXh0WXpQVWRpYzlMOWJJZzZvcTJvMFJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhu2vK5Bp bAokpleZzoM0Vy8e1vaxzyth3eLEP58bh6SWERgv9pRIpahLXo5aSUVoOzLjI1Rd DJVx6FyEGS1wsjbNoJO+DVI4WN+ZGV/vEefebZQmY1P5M78JrkOa+bQ/Jdz4pwXc aX8ggZCOSapkllGfDIIABMjz1YEQUzAw0mfW2YAApG7cdJuxqMgLKHT6pjwInHhB yx/wkF+LUbsB9YHtzy6ysubaa0XsKonx2LhiAgPA6No+fek/aPiVlYvxXjyvE/k/ BpjznovC4uUENgfbaGrNAKofUqdbhToLM+h1KnMxtfgS45pfIKHrPI4IUrBo4SFs 2KFF3BUWLAT3zA== -----END CERTIFICATE-----Generated at Mon Jan 26 22:59:41 2026 by rpki-client