This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft File: Ami5ML7spR-_NUP-efmxk0XPE9U.mft (raw, json) Hash identifier: tiTLBhEh55ECeU+jlNGLxf3+FwAm4rxDBTyvhz82SU4= Subject key identifier: BB:07:A9:62:16:1D:2C:67:0B:48:A7:7C:E8:4A:DB:D3:16:32:E3:3B Authority key identifier: 02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5 Certificate issuer: /CN=0268b930beeca51fbf3543fe79f9b19345cf13d5 Certificate serial: 019C05C43842DA4F4B8166A96E3004E34546 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft Manifest number: 0DBB Signing time: Wed 28 Jan 2026 18:01:11 +0000 Manifest this update: Wed 28 Jan 2026 18:01:11 +0000 Manifest next update: Thu 29 Jan 2026 18:01:11 +0000 Files and hashes: 1: 6JbNABeVsOKFNCbnqqLsOAO6iMI.roa (hash: VdcNh4sy41V5jivfWDOrD3oeEaJzk9/cuPwCt/IQMgw=) 2: Ami5ML7spR-_NUP-efmxk0XPE9U.crl (hash: W6jpr4+h6DzMGzFNFdJO/gwzgf2vlyiMamBjOtD/5qc=) 3: fxfMRB_UZHY-VbOVlrKPxAl5rWk.roa (hash: ZMaEpYYew+t/P0a7GjZLrOHp0tj4LJDHMUsWDrgmO/I=) 4: yO7LvNiXH8dJz8-PSOEFtqq5tK8.roa (hash: AO3PZggrYOo/9vmb5ohU7nlXGncVTS7gulY25fvYV8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 17:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:c4:38:42:da:4f:4b:81:66:a9:6e:30:04:e3:45:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0268b930beeca51fbf3543fe79f9b19345cf13d5 Validity Not Before: Jan 28 18:01:11 2026 GMT Not After : Jan 29 18:01:11 2026 GMT Subject: CN=bb07a962161d2c670b48a77ce84adbd31632e33b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:25:b9:62:0a:39:dd:50:7d:d8:0b:11:8a:6e: 44:42:5d:82:f2:df:ef:34:41:a9:59:df:f0:be:66: 7a:02:13:15:da:bb:39:00:b8:3c:6b:02:47:43:41: 90:0c:6a:0b:57:12:e9:52:f5:bf:76:33:50:81:4e: da:f6:fd:b2:08:3e:f0:02:93:24:7e:d4:9e:28:da: 02:bb:07:62:7c:f4:36:65:ec:1d:32:a7:ab:26:ea: 34:ac:74:05:8b:8f:c8:2f:3e:5b:3b:08:4e:8e:5b: 45:f5:cb:f1:bc:e8:5b:7b:bd:62:6a:0f:41:af:06: 08:e2:9a:a0:d8:d2:2e:af:f0:65:96:88:f8:ef:e6: 14:33:fd:82:4e:b6:be:85:1e:73:ae:e6:fa:c7:09: b1:6e:f5:cc:de:61:8e:c4:c1:dc:78:3a:37:2b:15: 6b:e7:49:b0:a8:77:54:02:1c:ea:d8:12:3f:a5:06: f4:c0:e9:12:04:ed:53:2d:a6:28:23:5f:b7:3a:a0: c6:6d:11:16:7e:b7:13:a7:97:9c:2f:de:e2:d4:c6: 99:6c:23:b7:a8:95:d3:6e:74:d9:c2:e7:6b:ea:3b: 33:71:9a:96:f4:5f:94:0e:5e:b1:c2:26:8b:cb:06: fd:8f:7b:79:1e:9a:57:c6:95:a7:2c:72:25:e8:b8: 47:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:07:A9:62:16:1D:2C:67:0B:48:A7:7C:E8:4A:DB:D3:16:32:E3:3B X509v3 Authority Key Identifier: keyid:02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:38:25:bd:b4:53:e2:91:0e:68:7e:06:f5:2b:1f:52:ab:e5: a5:14:49:42:a2:51:49:e4:2c:98:ec:e8:cf:d1:30:0c:2e:d8: 15:e5:17:b7:74:63:94:60:b5:35:32:be:02:41:a2:3d:f1:26: c3:54:05:58:f6:ef:50:22:8f:66:5b:b0:33:2c:15:d1:05:35: c3:ae:7f:0f:cf:b5:f0:95:26:e2:29:a7:af:98:73:d7:fe:23: e1:a0:af:d9:7f:fd:79:8c:03:d5:6a:61:26:e5:74:a6:3b:73: d7:b0:63:8e:55:95:f8:c2:34:ab:e8:40:fc:36:96:ad:13:cc: 5f:d7:1b:40:ee:0b:f3:bd:56:90:e3:bd:c3:28:db:47:25:8d: 31:a2:24:d3:8f:c3:f8:31:e8:94:3f:60:68:3c:1a:7a:dc:ae: a0:ec:6c:b6:37:d2:b0:06:e1:c6:18:40:ef:bd:5d:a5:39:43: e9:5a:c8:8f:6a:4d:75:f0:18:a3:dd:86:00:b0:2e:50:95:07: 73:46:ba:8f:ab:00:80:ee:34:cc:f8:61:ee:15:4c:a1:76:2b: b2:5d:6d:77:57:92:c1:27:1e:ea:44:a0:04:fc:f9:5c:5d:01: 43:97:01:ca:50:57:26:a1:f6:31:66:da:5a:f0:75:d9:e0:b8: 80:67:7a:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwFxDhC2k9LgWapbjAE40VGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNjhiOTMwYmVlY2E1MWZiZjM1NDNmZTc5ZjliMTkzNDVj ZjEzZDUwHhcNMjYwMTI4MTgwMTExWhcNMjYwMTI5MTgwMTExWjAzMTEwLwYDVQQD EyhiYjA3YTk2MjE2MWQyYzY3MGI0OGE3N2NlODRhZGJkMzE2MzJlMzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCW5Ygo53VB92AsRim5EQl2C8t/v NEGpWd/wvmZ6AhMV2rs5ALg8awJHQ0GQDGoLVxLpUvW/djNQgU7a9v2yCD7wApMk ftSeKNoCuwdifPQ2ZewdMqerJuo0rHQFi4/ILz5bOwhOjltF9cvxvOhbe71iag9B rwYI4pqg2NIur/Blloj47+YUM/2CTra+hR5zrub6xwmxbvXM3mGOxMHceDo3KxVr 50mwqHdUAhzq2BI/pQb0wOkSBO1TLaYoI1+3OqDGbREWfrcTp5ecL97i1MaZbCO3 qJXTbnTZwudr6jszcZqW9F+UDl6xwiaLywb9j3t5HppXxpWnLHIl6LhHBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsHqWIWHSxnC0infOhK29MWMuM7MB8GA1UdIwQY MBaAFAJouTC+7KUfvzVD/nn5sZNFzxPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW1pNU1MN3NwUi1fTlVQLWVmbXhrMFhQRTlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi80M2NkOTgtNmY4YS00NGNmLTk1YmQt NDIwZjljOGVhZmE0LzEvQW1pNU1MN3NwUi1fTlVQLWVmbXhrMFhQRTlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi80M2NkOTgtNmY4YS00NGNmLTk1YmQtNDIwZjljOGVhZmE0 LzEvQW1pNU1MN3NwUi1fTlVQLWVmbXhrMFhQRTlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoDglvbRT 4pEOaH4G9SsfUqvlpRRJQqJRSeQsmOzoz9EwDC7YFeUXt3RjlGC1NTK+AkGiPfEm w1QFWPbvUCKPZluwMywV0QU1w65/D8+18JUm4imnr5hz1/4j4aCv2X/9eYwD1Wph JuV0pjtz17BjjlWV+MI0q+hA/DaWrRPMX9cbQO4L871WkOO9wyjbRyWNMaIk04/D +DHolD9gaDwaetyuoOxstjfSsAbhxhhA771dpTlD6VrIj2pNdfAYo92GALAuUJUH c0a6j6sAgO40zPhh7hVMoXYrsl1td1eSwSce6kSgBPz5XF0BQ5cBylBXJqH2MWba WvB12eC4gGd6CA== -----END CERTIFICATE-----Generated at Wed Jan 28 21:26:45 2026 by rpki-client