This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: Jhg3CZaFItVEd5VSIkrc4CVQh6RkQgLiv/eOUfdERiM= Subject key identifier: 38:A8:4C:23:FB:A7:67:BA:69:B8:3B:A9:D2:E0:25:A2:A9:B3:4C:12 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 019C1DCCD205A3A2D058F71D521A81CB058F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 1295 Signing time: Mon 02 Feb 2026 10:01:28 +0000 Manifest this update: Mon 02 Feb 2026 10:01:28 +0000 Manifest next update: Tue 03 Feb 2026 10:01:28 +0000 Files and hashes: 1: 1-RxvuJO_jTchUynlUq2UfaQo14s.roa (hash: RiJrCfh6jrOWp/Kdbsy9E1iiVv4aVjYDrT7ENiEz4TE=) 2: 1-a4Jfvl73sg74p_0XL8QwTt9GSg.roa (hash: FUZwlR5+IowctwR2O6qPAipX2v6y8pLQV+4UDQvBld4=) 3: 1BivsgHv80evKrJUr40JTZlUflQ.roa (hash: V8wFTbk/nUscM1lOnu4fmHl0eVlRMSa47L0o0dXKIUQ=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: HVpkWi5LUJGwLsCNP/LYwzrfYOzUls/UNWCPMp3E3W0=) 5: BYf7RoVtzwx1yTG9FshawkhjTK4.roa (hash: sDDf+aqw1FGJKYG+5FCvmvbUR9TO2CTrbICWskjL/F0=) 6: HL42GB5yCeK03X0nAabkVkH3_Aw.roa (hash: uOANZs2dCcg3I2ddPUvkq5JotkivRlYW0T26ryzPHHM=) 7: Iw5mcpwalTXPnZnnTmYTdsqiUzs.roa (hash: sk1P8Pv/vu7n71J9ytQoTHDjd9XCgIlEXHvpDdpVHFw=) 8: UReyeEdRYk-K5jTcIl8Ooq7M3tc.roa (hash: RUl0rxhnXo8q1lbp04pAM7Ge7Yr5f6OK0CqmmmjACe4=) 9: V-aCqzfb1a5nr18Dpdo59TdOJ2o.roa (hash: cKOWN1Y85BplWaYgItYhxxODhX9O9HAW97DEPTPY4i8=) 10: fl0ZAFdlfHmaO-tRgRiDI18HGbI.roa (hash: MwB5gNGA9bGWfwt6Pb+LVkIHTpzaIDIKiSps/GwLDPs=) 11: ha79IahEugt55pyXch2rl5eqNpY.roa (hash: /2Q4OxJwb2IrGYC5cRQW4yWcjEMQEg/M8fPIE1oKn0c=) 12: z9xaJu4-grqg2GhotcVjg60Bphs.roa (hash: X87I15rWlYwJRZh2iXyNZTDnLknqtSiwvXkNxh+oeds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 10:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:cc:d2:05:a3:a2:d0:58:f7:1d:52:1a:81:cb:05:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Feb 2 10:01:28 2026 GMT Not After : Feb 3 10:01:28 2026 GMT Subject: CN=38a84c23fba767ba69b83ba9d2e025a2a9b34c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3c:60:cd:2b:a2:34:59:44:bf:dd:62:03:a6: 09:7d:60:83:f3:09:3b:fc:75:ed:16:e8:4f:d6:a9: 6f:67:2c:70:cd:fa:aa:e5:c5:e5:c4:4a:84:05:1b: 59:39:cb:86:9f:67:ba:ff:87:91:a1:18:4c:68:3e: 75:65:ec:a9:2c:aa:aa:4a:8e:d9:86:c1:f2:85:bc: 95:fb:1e:34:e7:91:4e:1f:1a:a6:57:dc:ce:ad:16: c9:1f:7b:6c:bf:b8:4f:8f:86:76:ec:55:b7:7f:14: 06:c5:5c:ac:1d:72:3d:55:99:2e:86:a7:84:7f:8e: 62:ec:87:9f:4f:39:c6:c7:3d:e4:70:9e:73:de:4a: 98:08:bf:d4:7f:54:6c:29:85:37:6e:c4:95:6f:a4: 1c:e8:67:64:22:80:d5:9a:c1:02:d2:fc:4f:b6:21: 7b:f6:51:91:89:39:3b:c2:28:0c:21:46:d5:62:93: 84:c3:c4:ab:87:e8:7f:fc:d9:1a:c6:cc:73:70:b0: b4:ba:eb:86:9a:3e:2d:b4:30:71:f5:56:ed:53:66: ac:d3:d4:e4:a7:fb:2a:b3:f6:14:fe:d6:a6:5f:0f: ef:21:96:6f:cf:bb:fb:af:1f:15:8f:ec:95:7f:71: 5f:fd:01:8c:b5:93:73:01:57:77:83:26:07:93:3a: 29:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A8:4C:23:FB:A7:67:BA:69:B8:3B:A9:D2:E0:25:A2:A9:B3:4C:12 X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:bd:fd:89:58:36:ac:66:40:93:6b:40:3d:de:32:60:00:67: 19:58:98:9e:ad:73:12:1b:2f:cf:40:3a:cc:a9:94:fc:f1:03: c9:a1:48:2e:5b:52:ad:65:12:f0:a7:cc:3e:d3:1f:ed:45:f7: d2:51:1a:62:35:80:9f:8e:b3:0f:0d:35:7d:8a:1c:e7:a1:c8: a2:aa:11:82:e0:33:da:0a:81:ca:65:0e:88:3f:c0:58:21:0b: 3c:e3:74:3c:1f:eb:5d:fa:b1:a5:a7:a0:d9:4c:b6:1d:6c:de: f2:be:0f:dc:ef:78:4c:da:6a:a4:1a:6c:d5:78:66:7b:05:f7: bc:63:3f:5e:cb:74:61:f2:e7:a7:15:3b:dc:f8:8f:5e:c4:e4: 9c:9d:33:ba:ba:11:9d:28:32:3a:1d:43:fe:b4:21:39:90:aa: 39:ab:2e:c9:7c:5f:b5:06:2a:e3:8b:49:ff:c2:2c:e2:68:06: da:31:37:90:19:93:30:9f:15:32:db:7e:67:06:68:84:49:7b: 9c:3a:f0:8d:f9:43:cf:74:04:87:e9:c4:81:85:dd:1f:d0:5a: 3c:9f:f3:57:31:4d:cf:ee:ea:0a:b4:eb:32:e9:91:5f:ac:41: 28:72:9c:6a:ae:d8:66:37:a3:fd:de:8a:3f:dd:b5:1b:86:99: 8f:bd:fc:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwdzNIFo6LQWPcdUhqBywWPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjYwMjAyMTAwMTI4WhcNMjYwMjAzMTAwMTI4WjAzMTEwLwYDVQQD EygzOGE4NGMyM2ZiYTc2N2JhNjliODNiYTlkMmUwMjVhMmE5YjM0YzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zxgzSuiNFlEv91iA6YJfWCD8wk7 /HXtFuhP1qlvZyxwzfqq5cXlxEqEBRtZOcuGn2e6/4eRoRhMaD51ZeypLKqqSo7Z hsHyhbyV+x4055FOHxqmV9zOrRbJH3tsv7hPj4Z27FW3fxQGxVysHXI9VZkuhqeE f45i7IefTznGxz3kcJ5z3kqYCL/Uf1RsKYU3bsSVb6Qc6GdkIoDVmsEC0vxPtiF7 9lGRiTk7wigMIUbVYpOEw8Srh+h//NkaxsxzcLC0uuuGmj4ttDBx9VbtU2as09Tk p/sqs/YU/tamXw/vIZZvz7v7rx8Vj+yVf3Ff/QGMtZNzAVd3gyYHkzopYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDioTCP7p2e6abg7qdLgJaKps0wSMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMb39iVg2 rGZAk2tAPd4yYABnGViYnq1zEhsvz0A6zKmU/PEDyaFILltSrWUS8KfMPtMf7UX3 0lEaYjWAn46zDw01fYoc56HIoqoRguAz2gqBymUOiD/AWCELPON0PB/rXfqxpaeg 2Uy2HWze8r4P3O94TNpqpBps1XhmewX3vGM/Xst0YfLnpxU73PiPXsTknJ0zuroR nSgyOh1D/rQhOZCqOasuyXxftQYq44tJ/8Is4mgG2jE3kBmTMJ8VMtt+ZwZohEl7 nDrwjflDz3QEh+nEgYXdH9BaPJ/zVzFNz+7qCrTrMumRX6xBKHKcaq7YZjej/d6K P921G4aZj738jQ== -----END CERTIFICATE-----Generated at Mon Feb 2 17:23:43 2026 by rpki-client