This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft File: AozMjYF4yenS_8Uy_LXNaL6qd20.mft (raw, json) Hash identifier: WwpMUEtvRsO6QfxY0XyRR/zQkPpkDeUnapUdgM7iL3g= Subject key identifier: 7C:F3:77:05:40:43:EF:CC:3F:9E:4D:20:C4:88:EF:C0:F7:F1:7C:41 Authority key identifier: 02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D Certificate issuer: /CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d Certificate serial: 019BFD9CDA0492854F49F2683BF1FF4E090B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft Manifest number: 0235 Signing time: Tue 27 Jan 2026 04:01:13 +0000 Manifest this update: Tue 27 Jan 2026 04:01:13 +0000 Manifest next update: Wed 28 Jan 2026 04:01:13 +0000 Files and hashes: 1: AozMjYF4yenS_8Uy_LXNaL6qd20.crl (hash: y7Pvbk/JR0j1FlTWBmr/T6IQKzswbywxxKt4qZ4/aCw=) 2: nmpgPMBFt9dLqNX0M81_MpAwEgA.roa (hash: 4RQmSgy56Vqmok8SF0GYYTjto7wxmhh7LR4/RfXSDMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:9c:da:04:92:85:4f:49:f2:68:3b:f1:ff:4e:09:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d Validity Not Before: Jan 27 04:01:13 2026 GMT Not After : Jan 28 04:01:13 2026 GMT Subject: CN=7cf377054043efcc3f9e4d20c488efc0f7f17c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:91:3c:ed:ac:98:a5:87:72:e5:84:4c:70:cf: ba:18:b7:be:2a:c6:0c:ea:ad:bb:9a:4f:e8:db:38: 1e:9b:00:f5:d9:73:34:82:bb:60:aa:43:85:f5:8b: c4:41:04:12:60:ca:7d:7b:5b:23:35:04:9e:bd:f1: e1:c0:11:6d:cc:e5:48:93:72:5a:b7:62:f3:95:e0: 86:5b:f8:33:c7:3c:53:20:3f:58:1e:e3:9e:3c:76: f7:b8:3a:d4:6b:4d:0f:09:89:87:75:a4:4d:18:09: eb:8b:71:df:ba:c4:cb:dd:e3:99:d8:2b:66:c0:ff: 78:00:4f:15:7d:c9:e3:2b:97:58:a2:b7:f9:26:7c: fc:17:b6:fd:bb:85:e8:e0:53:b7:75:63:fa:ae:b2: 3e:b8:bb:9b:f7:0e:57:1c:71:71:e3:a0:aa:56:55: f8:0f:e7:5d:74:5a:0c:e2:13:cb:72:8e:d3:6a:55: 88:04:6c:2d:e6:4f:fb:7f:5c:17:83:ed:04:4b:76: 24:54:8a:50:77:dc:73:c7:55:4b:d1:00:28:12:dc: 64:69:ab:de:2e:f7:98:c8:28:78:fc:ee:a8:e6:88: 8e:26:78:b4:8c:89:b3:16:df:ad:0e:8e:ad:69:e0: a7:f8:49:ad:d7:07:c6:f2:08:f5:1d:34:a1:f8:7c: b1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F3:77:05:40:43:EF:CC:3F:9E:4D:20:C4:88:EF:C0:F7:F1:7C:41 X509v3 Authority Key Identifier: keyid:02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:6c:91:d1:d4:df:31:5b:7f:26:fe:f2:ef:7f:d0:ec:0e:07: 8e:cf:5c:fe:74:07:7d:48:3d:99:9e:fb:1d:b2:6e:cb:a1:be: 03:ae:63:07:7c:79:c7:6f:2a:8a:3e:0d:c4:22:14:64:f3:79: c4:93:f1:71:30:46:d6:47:43:c4:7e:9a:28:eb:92:de:08:86: 8e:7d:41:fe:c5:56:fb:c5:06:97:dd:5a:eb:0a:60:8c:19:8c: a7:a1:56:51:29:05:f4:76:47:16:f1:07:c2:49:ce:23:29:73: d4:e4:1f:55:af:5e:e1:d1:2a:02:6e:24:11:1f:7c:37:af:46: 2e:54:33:49:49:e7:e8:e6:94:18:90:8a:de:17:f8:a3:6c:95: 5f:db:4c:ba:43:42:4a:3a:1f:e9:e9:24:14:51:81:e1:f8:07: 29:db:dd:0a:06:1b:82:f2:b4:11:4e:6f:ea:59:3e:d4:25:b7: 87:80:1e:ae:b8:0f:f2:47:6c:4b:6c:2e:e2:6f:ce:f4:9c:60: cd:7e:40:75:89:68:d9:bf:a3:58:8e:77:65:88:69:75:df:a9: ec:0b:53:d6:f7:ea:20:3c:6a:7c:81:70:bc:d2:77:89:83:2b: de:df:5b:df:27:05:2e:78:20:6e:d9:33:5b:ff:ee:5a:c6:35: ad:ae:eb:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv9nNoEkoVPSfJoO/H/TgkLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyOGNjYzhkODE3OGM5ZTlkMmZmYzUzMmZjYjVjZDY4YmVh YTc3NmQwHhcNMjYwMTI3MDQwMTEzWhcNMjYwMTI4MDQwMTEzWjAzMTEwLwYDVQQD Eyg3Y2YzNzcwNTQwNDNlZmNjM2Y5ZTRkMjBjNDg4ZWZjMGY3ZjE3YzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5E87ayYpYdy5YRMcM+6GLe+KsYM 6q27mk/o2zgemwD12XM0grtgqkOF9YvEQQQSYMp9e1sjNQSevfHhwBFtzOVIk3Ja t2LzleCGW/gzxzxTID9YHuOePHb3uDrUa00PCYmHdaRNGAnri3HfusTL3eOZ2Ctm wP94AE8VfcnjK5dYorf5Jnz8F7b9u4Xo4FO3dWP6rrI+uLub9w5XHHFx46CqVlX4 D+dddFoM4hPLco7TalWIBGwt5k/7f1wXg+0ES3YkVIpQd9xzx1VL0QAoEtxkaave LveYyCh4/O6o5oiOJni0jImzFt+tDo6taeCn+Emt1wfG8gj1HTSh+HyxCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzzdwVAQ+/MP55NIMSI78D38XxBMB8GA1UdIwQY MBaAFAKMzI2BeMnp0v/FMvy1zWi+qndtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW96TWpZRjR5ZW5TXzhVeV9MWE5hTDZxZDIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lNDY5NTEtOGZhNC00NWI2LTg3YmYt NWE0YjdiNWU0MDA3LzEvQW96TWpZRjR5ZW5TXzhVeV9MWE5hTDZxZDIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9lNDY5NTEtOGZhNC00NWI2LTg3YmYtNWE0YjdiNWU0MDA3 LzEvQW96TWpZRjR5ZW5TXzhVeV9MWE5hTDZxZDIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGyR0dTf MVt/Jv7y73/Q7A4Hjs9c/nQHfUg9mZ77HbJuy6G+A65jB3x5x28qij4NxCIUZPN5 xJPxcTBG1kdDxH6aKOuS3giGjn1B/sVW+8UGl91a6wpgjBmMp6FWUSkF9HZHFvEH wknOIylz1OQfVa9e4dEqAm4kER98N69GLlQzSUnn6OaUGJCK3hf4o2yVX9tMukNC Sjof6ekkFFGB4fgHKdvdCgYbgvK0EU5v6lk+1CW3h4AerrgP8kdsS2wu4m/O9Jxg zX5AdYlo2b+jWI53ZYhpdd+p7AtT1vfqIDxqfIFwvNJ3iYMr3t9b3ycFLnggbtkz W//uWsY1ra7rtw== -----END CERTIFICATE-----Generated at Tue Jan 27 07:32:49 2026 by rpki-client