This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json) Hash identifier: +gE43dFDoYRyilSTIc3821nsldVcBzOgQcVj52alGmM= Subject key identifier: A4:CE:A1:29:E7:8E:3B:C1:A7:EC:32:90:91:39:45:2F:62:D4:86:8E Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45 Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045 Certificate serial: 019BFCF7BCBF7E8DB7433D938033C9598337 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft Manifest number: 17ED Signing time: Tue 27 Jan 2026 01:00:52 +0000 Manifest this update: Tue 27 Jan 2026 01:00:52 +0000 Manifest next update: Wed 28 Jan 2026 01:00:52 +0000 Files and hashes: 1: Wapc6Zx4OMN_VO0S67d5ibZ5710.roa (hash: Y3NNed793NnfHappH6bAqpYLngigkEFCr29UQdBuPQM=) 2: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: n67kvn7bq5RO5QFKZTRSpxiVVzeZmIqewd5FW3FSAbY=) 3: rXih05-yjhK1RRUZMN39mSUsOFU.roa (hash: OherWUykDRS3B1u39xufQBOtSXhj9wb49HkAqU/CGvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f7:bc:bf:7e:8d:b7:43:3d:93:80:33:c9:59:83:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045 Validity Not Before: Jan 27 01:00:52 2026 GMT Not After : Jan 28 01:00:52 2026 GMT Subject: CN=a4cea129e78e3bc1a7ec32909139452f62d4868e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b1:b0:9a:ee:14:68:c2:ad:71:62:8b:06:16: 3a:fe:df:6a:df:32:eb:67:3a:37:ae:ea:76:41:a4: 1a:06:2e:76:0c:09:83:26:f2:b2:08:3d:3f:7e:c8: e2:ec:51:b1:15:cf:75:21:fc:ea:2c:56:e1:33:5c: 0e:7c:66:7c:a4:2a:38:3e:8e:f5:b6:90:80:93:06: f7:5a:4c:ab:a5:68:b3:0f:3d:ec:32:98:63:7b:50: e2:2f:83:b7:eb:9e:6c:e0:8b:84:9f:ac:11:a5:9e: ac:2b:12:21:39:e8:86:73:7f:ce:74:69:b6:6f:18: 89:5d:be:13:51:b1:b5:20:34:f6:72:6e:ae:db:98: 40:95:7d:4d:c9:7e:d2:cd:6c:fd:bd:15:b2:ec:20: 52:d4:47:38:64:55:cd:9d:61:8d:3c:60:4d:9f:97: b6:c9:ba:cc:82:89:64:55:3f:23:bd:30:6a:02:5c: 02:57:0c:c0:95:5d:19:95:47:3d:d9:65:34:2f:17: 8f:09:eb:77:29:a8:2a:cf:e6:de:df:02:69:ae:46: 8f:e8:fc:30:a3:f9:82:49:b1:fa:f9:13:2f:68:ab: 88:da:82:d4:ac:3c:45:30:11:e6:97:4e:b4:f3:36: b6:d7:93:6e:af:90:db:3e:ce:ea:79:32:2c:a4:bf: 02:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CE:A1:29:E7:8E:3B:C1:A7:EC:32:90:91:39:45:2F:62:D4:86:8E X509v3 Authority Key Identifier: keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:32:9a:2d:12:80:23:9a:c6:ff:47:32:92:97:e0:ab:b7:2f: af:65:72:61:cb:3f:2e:cf:2f:af:90:58:3d:dd:43:50:39:0b: 28:7f:c8:b5:46:e4:1e:ec:96:75:9f:4d:e0:f9:97:94:a8:e8: f6:b1:f4:6b:6c:aa:fc:dd:a5:9b:d4:4a:68:48:5d:7a:e6:93: f2:83:bd:58:69:aa:00:7e:c5:89:c7:e4:81:83:e2:4a:1c:d2: 14:d4:07:bd:b3:fc:23:82:cb:a3:0c:8d:d6:25:48:5b:c1:76: 12:ed:a9:80:d7:39:5d:4f:1d:a8:b4:15:0c:c5:52:3f:a6:a1: 79:5f:2a:9f:f9:f8:dc:34:0d:6d:f8:52:0e:b7:c3:d3:ed:19: ac:79:23:e4:bd:b6:9b:a9:d2:47:27:a9:0c:a7:02:ec:e9:c4: 60:e9:70:56:dd:f1:e3:a3:37:3f:10:ce:14:65:39:1b:a5:08: df:b1:73:9e:8b:de:00:92:97:14:15:2e:85:ac:d8:e3:09:1f: 9e:61:3b:e0:06:cf:43:03:5d:cd:b2:3f:97:77:14:c5:9c:45: dd:34:f2:c2:56:b6:ca:c1:dc:26:79:92:43:af:2a:32:45:f1: 96:c6:7a:58:7d:99:c7:ce:a1:ab:28:36:b7:63:9d:7b:94:9a: 66:0c:7c:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv897y/fo23Qz2TgDPJWYM3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YWY3MGJkYTc3Y2Y4NThlMTY0ZDZiN2M3MDllODc4ZmQx YTYwNDUwHhcNMjYwMTI3MDEwMDUyWhcNMjYwMTI4MDEwMDUyWjAzMTEwLwYDVQQD EyhhNGNlYTEyOWU3OGUzYmMxYTdlYzMyOTA5MTM5NDUyZjYyZDQ4NjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobGwmu4UaMKtcWKLBhY6/t9q3zLr Zzo3rup2QaQaBi52DAmDJvKyCD0/fsji7FGxFc91IfzqLFbhM1wOfGZ8pCo4Po71 tpCAkwb3WkyrpWizDz3sMphje1DiL4O3655s4IuEn6wRpZ6sKxIhOeiGc3/OdGm2 bxiJXb4TUbG1IDT2cm6u25hAlX1NyX7SzWz9vRWy7CBS1Ec4ZFXNnWGNPGBNn5e2 ybrMgolkVT8jvTBqAlwCVwzAlV0ZlUc92WU0LxePCet3Kagqz+be3wJprkaP6Pww o/mCSbH6+RMvaKuI2oLUrDxFMBHml0608za215Nur5DbPs7qeTIspL8C5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTOoSnnjjvBp+wykJE5RS9i1IaOMB8GA1UdIwQY MBaAFGmvcL2nfPhY4WTWt8cJ6Hj9GmBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mYzk5MjctNjNmZS00ZTNiLWJmMjgt NjI4NzdmZTQ4NjE4LzEvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mYzk5MjctNjNmZS00ZTNiLWJmMjgtNjI4NzdmZTQ4NjE4 LzEvYWE5d3ZhZDgtRmpoWk5hM3h3bm9lUDBhWUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0jKaLRKA I5rG/0cykpfgq7cvr2VyYcs/Ls8vr5BYPd1DUDkLKH/ItUbkHuyWdZ9N4PmXlKjo 9rH0a2yq/N2lm9RKaEhdeuaT8oO9WGmqAH7FicfkgYPiShzSFNQHvbP8I4LLowyN 1iVIW8F2Eu2pgNc5XU8dqLQVDMVSP6aheV8qn/n43DQNbfhSDrfD0+0ZrHkj5L22 m6nSRyepDKcC7OnEYOlwVt3x46M3PxDOFGU5G6UI37FznoveAJKXFBUuhazY4wkf nmE74AbPQwNdzbI/l3cUxZxF3TTywla2ysHcJnmSQ68qMkXxlsZ6WH2Zx86hqyg2 t2Ode5SaZgx8Uw== -----END CERTIFICATE-----Generated at Tue Jan 27 06:06:49 2026 by rpki-client