This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft File: _AY2gjog5gJjQv6MiOpyqPj3p0k.mft (raw, json) Hash identifier: EmtLSNSWyJ1UPVzMoMdquPZ+E1bj94BR6K/JTGfZ5H8= Subject key identifier: 2C:0F:BF:5C:D3:FE:87:A5:AD:4E:BF:82:AB:68:ED:6E:90:A2:38:10 Authority key identifier: FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49 Certificate issuer: /CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749 Certificate serial: 019BDC9128FBEFEC61DCADF4F813AB727B83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft Manifest number: 13FE Signing time: Tue 20 Jan 2026 18:00:59 +0000 Manifest this update: Tue 20 Jan 2026 18:00:59 +0000 Manifest next update: Wed 21 Jan 2026 18:00:59 +0000 Files and hashes: 1: _AY2gjog5gJjQv6MiOpyqPj3p0k.crl (hash: ULsnjLYHtuPquIq1FjOUqs+NhIYXbexzsCt+RG5NIu0=) 2: uVqY2vkhR0d7ZrMF-F13PIFCP0Y.roa (hash: B7Ssp76u9RPQonP2oCi95fudfzNjxfG0p6HpSFM8NR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 18:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:91:28:fb:ef:ec:61:dc:ad:f4:f8:13:ab:72:7b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749 Validity Not Before: Jan 20 18:00:59 2026 GMT Not After : Jan 21 18:00:59 2026 GMT Subject: CN=2c0fbf5cd3fe87a5ad4ebf82ab68ed6e90a23810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8f:dd:dd:6a:69:4d:8e:0a:da:19:ca:27:4d: 6c:88:e3:53:f6:8e:7d:f2:a3:2a:aa:9e:ed:b8:59: b9:1e:84:e8:13:92:af:87:79:06:64:6e:33:66:76: 48:43:20:6c:9b:6c:eb:a4:a9:72:d2:c4:eb:02:2a: c2:e7:f6:fb:b9:f8:e4:d4:1e:26:1a:91:1d:41:f6: 04:43:2f:dd:bf:3e:31:10:f7:a2:b8:72:31:eb:8b: fa:dc:f4:3b:dd:db:37:45:98:5f:bb:b0:4e:57:40: 62:00:66:b7:eb:4d:21:d7:6c:6a:d2:5e:71:ce:50: 60:92:14:3b:a8:e2:d9:5c:28:d2:74:21:86:06:83: 9d:f6:26:75:76:27:26:87:c1:ce:ee:33:9a:5a:88: ad:c3:26:5f:a6:fb:6c:98:2d:e1:bf:5d:85:70:a5: 9c:2b:a7:0f:e6:dc:24:8c:18:94:ab:6a:b8:25:c2: f9:4c:fb:03:6d:2a:b6:58:61:3f:a8:a3:ec:3d:17: d3:f2:d6:0c:32:e0:e7:c3:fa:3b:3c:1e:d0:5e:66: 60:7f:5c:e2:8b:35:82:f6:e6:09:92:81:e7:68:f2: 80:f2:5c:7f:b6:06:dc:8e:fa:e4:c2:60:1c:d8:db: 64:57:cf:54:41:7c:8c:f9:cc:12:e2:9e:19:1d:cf: f2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0F:BF:5C:D3:FE:87:A5:AD:4E:BF:82:AB:68:ED:6E:90:A2:38:10 X509v3 Authority Key Identifier: keyid:FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a1:d1:90:88:85:46:75:6f:8c:41:15:34:8a:51:4b:b2:7d: df:8b:d7:00:e9:de:71:3d:e5:9a:e2:2a:f4:ee:e6:dd:50:69: 2e:d9:e2:e3:4c:f5:94:b7:04:d4:65:18:38:4c:4a:4c:85:3d: 2c:69:b7:92:fd:4d:37:ab:8c:b2:3a:64:88:10:e1:84:ba:99: 73:df:d5:7f:bd:72:ec:3c:a3:fb:42:d0:8e:d8:1a:33:02:bc: 32:41:48:f1:c6:14:c3:ab:e1:42:87:1b:71:be:67:32:be:7c: e4:d2:e6:e9:1b:d9:90:be:e8:a5:6c:a5:4a:30:01:27:a4:e3: f2:f9:40:6c:40:dc:45:c7:a2:7d:e1:19:16:08:04:53:9f:0b: 43:b3:bf:9a:b5:df:7b:39:48:60:4a:87:0c:b0:30:eb:89:47: 91:98:7e:3d:8e:5b:8b:0f:e1:bd:d8:6a:3f:44:26:d1:c1:9d: 30:3d:9d:28:b1:1e:e4:1d:ff:42:b9:04:59:da:3f:35:3f:9d: 71:32:a8:d9:e0:02:bc:47:27:bd:89:16:75:9c:e6:6e:7c:c6: 18:e5:af:c3:00:97:17:00:cf:2d:bc:29:9e:5c:7a:74:af:ea: 0e:a0:34:9f:7a:aa:d1:64:03:62:e3:e2:6c:a6:a9:e8:f1:45: fa:ce:e0:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvckSj77+xh3K30+BOrcnuDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMDYzNjgyM2EyMGU2MDI2MzQyZmU4Yzg4ZWE3MmE4Zjhm N2E3NDkwHhcNMjYwMTIwMTgwMDU5WhcNMjYwMTIxMTgwMDU5WjAzMTEwLwYDVQQD EygyYzBmYmY1Y2QzZmU4N2E1YWQ0ZWJmODJhYjY4ZWQ2ZTkwYTIzODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4/d3WppTY4K2hnKJ01siONT9o59 8qMqqp7tuFm5HoToE5Kvh3kGZG4zZnZIQyBsm2zrpKly0sTrAirC5/b7ufjk1B4m GpEdQfYEQy/dvz4xEPeiuHIx64v63PQ73ds3RZhfu7BOV0BiAGa3600h12xq0l5x zlBgkhQ7qOLZXCjSdCGGBoOd9iZ1dicmh8HO7jOaWoitwyZfpvtsmC3hv12FcKWc K6cP5twkjBiUq2q4JcL5TPsDbSq2WGE/qKPsPRfT8tYMMuDnw/o7PB7QXmZgf1zi izWC9uYJkoHnaPKA8lx/tgbcjvrkwmAc2NtkV89UQXyM+cwS4p4ZHc/yAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwPv1zT/oelrU6/gqto7W6QojgQMB8GA1UdIwQY MBaAFPwGNoI6IOYCY0L+jIjqcqj496dJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0FZMmdqb2c1Z0pqUXY2TWlPcHlxUGozcDBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS85NDQ4OTYtM2M0MS00NzEwLTg2ZDIt MDA1YTkyOWFjMTI0LzEvX0FZMmdqb2c1Z0pqUXY2TWlPcHlxUGozcDBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS85NDQ4OTYtM2M0MS00NzEwLTg2ZDItMDA1YTkyOWFjMTI0 LzEvX0FZMmdqb2c1Z0pqUXY2TWlPcHlxUGozcDBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkaHRkIiF RnVvjEEVNIpRS7J934vXAOnecT3lmuIq9O7m3VBpLtni40z1lLcE1GUYOExKTIU9 LGm3kv1NN6uMsjpkiBDhhLqZc9/Vf71y7Dyj+0LQjtgaMwK8MkFI8cYUw6vhQocb cb5nMr585NLm6RvZkL7opWylSjABJ6Tj8vlAbEDcRceifeEZFggEU58LQ7O/mrXf ezlIYEqHDLAw64lHkZh+PY5biw/hvdhqP0Qm0cGdMD2dKLEe5B3/QrkEWdo/NT+d cTKo2eACvEcnvYkWdZzmbnzGGOWvwwCXFwDPLbwpnlx6dK/qDqA0n3qq0WQDYuPi bKap6PFF+s7geg== -----END CERTIFICATE-----Generated at Wed Jan 21 02:13:08 2026 by rpki-client