This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft File: AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft (raw, json) Hash identifier: bhDpS1QY6RD02ctVv4Vb3GSNqjbXUSEMRS4slhGk+qc= Subject key identifier: AE:DA:A6:49:65:32:19:E4:A1:DB:02:12:A8:5C:40:FC:E1:9C:97:72 Authority key identifier: 02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2 Certificate issuer: /CN=02339402c42b3f84995c4d58ef670e8d16c2afe2 Certificate serial: 019BF8E43AB6E10E648766E397A66252FA6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft Manifest number: 17EF Signing time: Mon 26 Jan 2026 06:01:05 +0000 Manifest this update: Mon 26 Jan 2026 06:01:05 +0000 Manifest next update: Tue 27 Jan 2026 06:01:05 +0000 Files and hashes: 1: AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl (hash: kJuG+1TAblPlDF31wM9TbYbTZh6/acEVx9HSGQ7LgEg=) 2: NbLi_mxC3E76Yv1xWLA3LvUWMPk.roa (hash: 41ZTj79rHdcbi2jDyyFI5602VPH0KxIVb+GgQmVExmY=) 3: n00gLZ8RizHXHcJP8n5U2lkHl_0.roa (hash: 7x9iUpgLpEtIBExQu4BUBe9xIOIqTpL6nc56pdzzQrE=) 4: xgVgpw4XtUpimdfPBGzbbCtU1Z8.roa (hash: n/FpmazjblwI/DOGbFxfAt6xbYD4J5uzhPRONKeYoOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:3a:b6:e1:0e:64:87:66:e3:97:a6:62:52:fa:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02339402c42b3f84995c4d58ef670e8d16c2afe2 Validity Not Before: Jan 26 06:01:05 2026 GMT Not After : Jan 27 06:01:05 2026 GMT Subject: CN=aedaa649653219e4a1db0212a85c40fce19c9772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e1:a0:5f:b1:8e:7d:34:e7:4e:2d:d7:e1:74: 68:94:b3:c9:f9:d0:ca:30:06:90:39:21:ec:5d:fe: 8a:bb:6b:df:2a:c1:1a:8f:76:f1:64:a9:94:5d:e6: 06:9c:be:f0:88:84:e8:16:0b:82:b3:68:6e:2b:69: d6:e3:cd:b0:64:19:fb:be:57:2f:b1:4d:41:5b:27: 5c:f3:12:f9:ac:8b:d6:2b:8b:c7:b6:1d:d4:33:0b: 40:40:3c:73:d3:ec:0f:e7:75:33:c5:74:be:88:db: ee:aa:db:c4:09:dc:54:87:8b:d2:c0:5d:df:0a:6d: 7e:7c:ce:97:10:89:3d:fa:55:d3:43:93:bc:69:98: 4a:45:a5:7d:4a:f8:63:b1:30:7e:bc:75:a6:d3:3e: 28:20:0b:f4:8e:4c:04:0a:b5:13:b8:72:12:e4:70: 8e:6e:93:d7:2e:eb:22:ea:be:7f:99:dc:dc:ba:a9: b9:67:3f:80:99:87:e7:f8:77:95:f9:32:54:54:b5: 05:2f:90:16:fd:d0:7b:60:85:1b:4d:08:8c:24:d5: d0:a9:9a:d0:22:c5:c3:2a:2a:40:d9:b7:3c:82:b1: f8:52:35:7e:99:1d:de:66:f3:29:6a:9b:66:e6:ff: 0e:27:58:a4:88:81:76:67:d7:82:86:b1:5c:b0:2a: df:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DA:A6:49:65:32:19:E4:A1:DB:02:12:A8:5C:40:FC:E1:9C:97:72 X509v3 Authority Key Identifier: keyid:02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:8c:ba:40:b1:2e:58:88:6c:e0:79:7b:c5:c8:85:40:01:5d: 1c:59:c8:44:14:0d:3a:1a:94:5d:eb:15:73:5a:93:b5:cb:c2: 48:b7:de:0b:f0:7e:0a:a1:d3:c8:ea:9a:ad:71:9e:b0:38:ef: 3a:06:1f:6d:82:37:52:24:68:b6:2a:73:b1:3d:a7:70:d6:a0: 6f:84:84:cb:7c:9f:20:d2:1a:22:30:30:43:06:50:a1:7f:cc: 1e:0f:5d:58:98:b7:3b:10:54:2e:0f:e2:fb:d2:0b:16:9a:00: aa:a1:30:2b:a6:0f:72:84:f9:71:9b:47:a5:d3:ae:27:0b:5b: 59:f9:2c:7e:cd:02:58:e2:74:9f:b8:53:2a:16:56:bc:e2:db: 56:28:e7:75:bd:9e:d0:98:7b:de:ed:d2:c7:a7:39:27:af:e7: 6d:aa:90:06:0e:53:9f:d8:29:31:70:5b:e9:4b:ba:56:ec:bc: 23:a2:0b:8b:07:0e:0b:db:f7:6e:a3:0a:32:ac:37:f7:99:d7: 73:6f:af:5a:90:f0:fb:dd:bd:20:97:62:64:dc:55:72:39:b6: 99:04:11:b2:d8:1c:74:23:6d:75:8c:c9:6f:29:ab:c3:e9:02: 26:a6:64:32:94:d5:38:0f:8d:6c:f3:6c:13:7f:a4:29:a8:c2: 4b:5b:cf:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45Dq24Q5kh2bjl6ZiUvpuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzM5NDAyYzQyYjNmODQ5OTVjNGQ1OGVmNjcwZThkMTZj MmFmZTIwHhcNMjYwMTI2MDYwMTA1WhcNMjYwMTI3MDYwMTA1WjAzMTEwLwYDVQQD EyhhZWRhYTY0OTY1MzIxOWU0YTFkYjAyMTJhODVjNDBmY2UxOWM5NzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuGgX7GOfTTnTi3X4XRolLPJ+dDK MAaQOSHsXf6Ku2vfKsEaj3bxZKmUXeYGnL7wiIToFguCs2huK2nW482wZBn7vlcv sU1BWydc8xL5rIvWK4vHth3UMwtAQDxz0+wP53UzxXS+iNvuqtvECdxUh4vSwF3f Cm1+fM6XEIk9+lXTQ5O8aZhKRaV9SvhjsTB+vHWm0z4oIAv0jkwECrUTuHIS5HCO bpPXLusi6r5/mdzcuqm5Zz+AmYfn+HeV+TJUVLUFL5AW/dB7YIUbTQiMJNXQqZrQ IsXDKipA2bc8grH4UjV+mR3eZvMpaptm5v8OJ1ikiIF2Z9eChrFcsCrfGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7apkllMhnkodsCEqhcQPzhnJdyMB8GA1UdIwQY MBaAFAIzlALEKz+EmVxNWO9nDo0Wwq/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9lYjg3N2MtOTI5ZS00MWI2LWI5Y2It ZmM2NGJmYzNkMmY5LzEvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9lYjg3N2MtOTI5ZS00MWI2LWI5Y2ItZmM2NGJmYzNkMmY5 LzEvQWpPVUFzUXJQNFNaWEUxWTcyY09qUmJDci1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtoy6QLEu WIhs4Hl7xciFQAFdHFnIRBQNOhqUXesVc1qTtcvCSLfeC/B+CqHTyOqarXGesDjv OgYfbYI3UiRotipzsT2ncNagb4SEy3yfINIaIjAwQwZQoX/MHg9dWJi3OxBULg/i +9ILFpoAqqEwK6YPcoT5cZtHpdOuJwtbWfksfs0CWOJ0n7hTKhZWvOLbVijndb2e 0Jh73u3Sx6c5J6/nbaqQBg5Tn9gpMXBb6Uu6Vuy8I6ILiwcOC9v3bqMKMqw395nX c2+vWpDw+929IJdiZNxVcjm2mQQRstgcdCNtdYzJbymrw+kCJqZkMpTVOA+NbPNs E3+kKajCS1vPew== -----END CERTIFICATE-----Generated at Mon Jan 26 15:39:50 2026 by rpki-client