This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft File: aMDy0Hdvfh00kHWIHDXp04dGNAU.mft (raw, json) Hash identifier: dXN86XQG8V1xPnRCtctdY80dipp399bRWHuy8I/hp8A= Subject key identifier: CB:C6:02:01:12:1F:44:86:F8:A9:4B:D6:2C:1E:DE:7F:B4:D6:63:6A Authority key identifier: 68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05 Certificate issuer: /CN=68c0f2d0776f7e1d349075881c35e9d387463405 Certificate serial: 019BFCC10A3346504C3872C0C288C7FE9BC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft Manifest number: 0943 Signing time: Tue 27 Jan 2026 00:01:08 +0000 Manifest this update: Tue 27 Jan 2026 00:01:08 +0000 Manifest next update: Wed 28 Jan 2026 00:01:08 +0000 Files and hashes: 1: 5xcULEXJhAck2X3qSP8xz7T9G-o.roa (hash: L1vo/nUKyB+0yUrl8+pdC9ZQEzyHlRxVr24n4uul9bE=) 2: aMDy0Hdvfh00kHWIHDXp04dGNAU.crl (hash: tXJqkyeudYMYXoBZ6NQ3MOh9FmKfUxOzXlL0llaWUXI=) 3: dApPkRCoN-4Urelwm8bwQW1vX9s.roa (hash: 7RPQ25TwZLmclWDefX866Q2Hh9AqUtARbcj7dGOX/SY=) 4: idnfdrhgXtDVR1aINwgs1pF-5Z0.roa (hash: Zsu78wjZemkpbnYJp/D0qkjG+mU9xm9vmrGoqAJVwMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c1:0a:33:46:50:4c:38:72:c0:c2:88:c7:fe:9b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c0f2d0776f7e1d349075881c35e9d387463405 Validity Not Before: Jan 27 00:01:08 2026 GMT Not After : Jan 28 00:01:08 2026 GMT Subject: CN=cbc60201121f4486f8a94bd62c1ede7fb4d6636a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9b:f9:eb:5b:3b:08:9c:da:64:1e:2e:38:e6: 36:ae:ac:f4:d0:55:74:5e:4c:73:29:46:7c:3d:92: 51:d2:4f:2e:18:ed:f4:de:cb:ec:e8:fc:a6:bb:de: 40:23:89:1d:df:b9:9f:be:d3:cf:03:e2:3f:fd:2c: 54:da:ed:91:e3:95:be:b7:19:0e:bc:05:0e:56:53: 20:d1:cd:02:2d:8c:98:ad:da:43:cc:43:0a:a8:15: 7a:45:61:0d:71:e9:37:4b:1a:4c:51:c4:4e:4f:95: e0:b6:df:c4:bd:d5:87:f4:f2:c3:82:d5:71:8b:38: c0:69:c4:32:f3:00:be:bf:99:31:5a:b0:5d:24:30: 48:72:3e:09:09:43:e5:d3:1a:e3:b3:54:3e:c7:ae: 9a:7c:12:c0:1d:d9:50:07:70:bd:3c:1c:26:3c:54: a8:d7:2b:5f:11:d4:45:6e:5c:39:5f:53:20:f6:01: b1:1d:b7:15:f5:7e:c9:6a:35:75:9d:1f:64:54:6f: e3:5c:78:2a:c9:03:b6:10:8f:e1:1d:51:d0:8b:7e: e9:b9:4d:ce:b6:7c:ca:41:21:6a:e5:8c:9c:32:7e: 26:85:f1:83:a7:27:c9:07:49:a4:d1:c2:8e:33:60: 1f:e8:e8:d2:0c:24:f7:bb:91:b2:5d:00:f9:e5:b6: 08:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C6:02:01:12:1F:44:86:F8:A9:4B:D6:2C:1E:DE:7F:B4:D6:63:6A X509v3 Authority Key Identifier: keyid:68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:f9:98:65:90:f0:8b:02:3c:98:02:c1:d1:06:a6:e6:9e:45: 48:a2:ce:c2:52:0f:e9:5b:0f:75:b5:97:45:d0:87:ca:d0:3e: 8c:88:41:5c:d0:a0:2b:45:a9:d5:b3:80:d5:5d:52:25:5d:e2: 94:f3:0a:6f:6f:a4:83:78:68:47:8e:d8:48:95:dd:f6:ca:5e: 7c:69:01:72:0a:a6:4e:34:40:7e:b5:e9:4f:09:ae:b9:a0:1b: 6b:9c:1b:59:19:e6:be:d6:7d:62:a7:29:43:27:02:1b:80:16: 08:19:f6:89:88:9f:a2:da:aa:47:d6:38:6e:81:50:67:b7:00: e9:68:78:c8:0f:4b:99:70:f3:88:9c:1f:be:f3:34:f7:b9:d8: 80:f6:d3:f7:3b:f4:0f:69:b9:d3:4c:ec:2f:de:0e:ab:40:f1: 7d:bb:a9:7a:7d:44:9a:29:ca:7d:74:c0:2b:34:c9:12:3b:8c: e3:9f:46:53:66:c2:9e:24:01:1f:34:6c:e8:96:aa:bb:ec:d2: fc:33:8a:ef:a0:77:6d:8e:df:9b:f5:6c:a4:7b:9c:b4:82:83: ff:4a:05:9b:25:ca:0f:d1:57:f2:e9:d7:55:59:ff:8a:80:94: 70:d3:1e:73:b6:78:fc:d5:3d:e4:1a:94:6c:ef:36:ab:fa:dc: 91:26:0f:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wQozRlBMOHLAwojH/pvHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzBmMmQwNzc2ZjdlMWQzNDkwNzU4ODFjMzVlOWQzODc0 NjM0MDUwHhcNMjYwMTI3MDAwMTA4WhcNMjYwMTI4MDAwMTA4WjAzMTEwLwYDVQQD EyhjYmM2MDIwMTEyMWY0NDg2ZjhhOTRiZDYyYzFlZGU3ZmI0ZDY2MzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJv561s7CJzaZB4uOOY2rqz00FV0 XkxzKUZ8PZJR0k8uGO303svs6Pymu95AI4kd37mfvtPPA+I//SxU2u2R45W+txkO vAUOVlMg0c0CLYyYrdpDzEMKqBV6RWENcek3SxpMUcROT5Xgtt/EvdWH9PLDgtVx izjAacQy8wC+v5kxWrBdJDBIcj4JCUPl0xrjs1Q+x66afBLAHdlQB3C9PBwmPFSo 1ytfEdRFblw5X1Mg9gGxHbcV9X7JajV1nR9kVG/jXHgqyQO2EI/hHVHQi37puU3O tnzKQSFq5YycMn4mhfGDpyfJB0mk0cKOM2Af6OjSDCT3u5GyXQD55bYIKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvGAgESH0SG+KlL1iwe3n+01mNqMB8GA1UdIwQY MBaAFGjA8tB3b34dNJB1iBw16dOHRjQFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1EeTBIZHZmaDAwa0hXSUhEWHAwNGRHTkFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84NGVlZGMtYTJmNi00YTM5LWE5MTgt ZjlkOWMwM2Q0YjRjLzEvYU1EeTBIZHZmaDAwa0hXSUhEWHAwNGRHTkFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS84NGVlZGMtYTJmNi00YTM5LWE5MTgtZjlkOWMwM2Q0YjRj LzEvYU1EeTBIZHZmaDAwa0hXSUhEWHAwNGRHTkFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPmYZZDw iwI8mALB0Qam5p5FSKLOwlIP6VsPdbWXRdCHytA+jIhBXNCgK0Wp1bOA1V1SJV3i lPMKb2+kg3hoR47YSJXd9spefGkBcgqmTjRAfrXpTwmuuaAba5wbWRnmvtZ9Yqcp QycCG4AWCBn2iYifotqqR9Y4boFQZ7cA6Wh4yA9LmXDziJwfvvM097nYgPbT9zv0 D2m500zsL94Oq0Dxfbupen1EminKfXTAKzTJEjuM459GU2bCniQBHzRs6Jaqu+zS /DOK76B3bY7fm/VspHuctIKD/0oFmyXKD9FX8unXVVn/ioCUcNMec7Z4/NU95BqU bO82q/rckSYPNQ== -----END CERTIFICATE-----Generated at Tue Jan 27 06:06:54 2026 by rpki-client