This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft File: APTMQSzDD7L598N8PjkL7F5iVrA.mft (raw, json) Hash identifier: SODiYxWGfu/9LBB6hYSSxjuQ2CiYjRsMRaG79Qq/E3k= Subject key identifier: 2D:72:67:43:B4:34:2E:ED:07:23:DD:5D:86:E1:77:58:6E:B6:1D:97 Authority key identifier: 00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0 Certificate issuer: /CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0 Certificate serial: 019BFB775780C29A06C8B015912464597611 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft Manifest number: 1718 Signing time: Mon 26 Jan 2026 18:01:00 +0000 Manifest this update: Mon 26 Jan 2026 18:01:00 +0000 Manifest next update: Tue 27 Jan 2026 18:01:00 +0000 Files and hashes: 1: APTMQSzDD7L598N8PjkL7F5iVrA.crl (hash: DlX2JryuuMdZ1KPrT3qMDaqh5ilfzKTj8q8UQYU8yeg=) 2: e9d8j5pFRds2eyf7EtWu3Q1x5eg.roa (hash: CdFMDMixOpI+FPixrzk29327d47UICMJvvmv5LgznBY=) 3: kuiIDIypzpnRYSUj7glsmT4M63U.roa (hash: AhvHWn0Zw078JqRJpm27EiFTVl5Aqm3ouDehrx0PfD8=) 4: mxN2TKqQ4XDyt7g59_1xXJ2YiGw.roa (hash: gyYJydWjo49Ti2U/k5vphqLtIT2Tqis569ex6zcT+xk=) 5: s9ZJK2zje_SORtRoUS4vOJ62smg.roa (hash: W215uw89IUKrBniSDQnlmBxm007HZAFFpxBNjy0mZ7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:57:80:c2:9a:06:c8:b0:15:91:24:64:59:76:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0 Validity Not Before: Jan 26 18:01:00 2026 GMT Not After : Jan 27 18:01:00 2026 GMT Subject: CN=2d726743b4342eed0723dd5d86e177586eb61d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:28:6a:76:e1:34:8c:cf:6f:24:69:fc:87:04: 02:41:cd:08:98:1c:58:b6:c5:d9:79:3c:9b:59:27: 2d:db:38:6c:73:93:be:74:ed:56:6e:07:6a:1c:71: de:03:89:2c:59:e2:d8:61:24:23:ac:9c:a0:1b:27: d3:95:d8:03:b0:4c:93:af:17:f1:f7:b4:42:34:39: 12:e5:39:2a:cf:d2:34:eb:12:c0:bc:4c:46:35:7b: c3:ef:ba:a6:b7:40:81:4a:8a:5a:d3:63:ac:76:69: 62:df:63:2f:32:52:69:09:0a:8a:83:e1:00:fc:e9: e1:9c:85:ba:d4:f9:b3:c7:c6:96:5e:9b:16:75:9f: e7:6d:25:a4:91:84:14:e8:b0:f5:d8:61:ba:59:5c: 1b:9f:6f:7e:56:20:c3:be:23:be:fb:be:aa:1c:ba: 2e:37:e5:6c:fd:64:51:d7:b1:b6:c8:5d:a1:0f:f7: eb:19:fc:52:5b:aa:7c:e6:8a:4f:ef:d0:6c:8e:07: 9f:a3:2b:8f:8e:9d:50:db:c6:f1:e8:73:e2:1e:fb: 6f:09:58:35:91:19:78:1c:55:37:91:63:51:5b:9b: fe:2f:b6:3b:33:48:43:83:97:13:71:e8:18:45:3b: 24:81:0a:27:9a:47:e6:a0:2f:14:c8:cf:6d:7a:68: 56:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:72:67:43:B4:34:2E:ED:07:23:DD:5D:86:E1:77:58:6E:B6:1D:97 X509v3 Authority Key Identifier: keyid:00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:4d:a4:27:82:52:66:b4:ad:13:e7:c7:2f:db:cc:c6:16:51: 74:c6:79:cf:5c:01:d8:06:6c:3c:a5:73:e7:ad:c5:59:63:19: 94:6c:d4:29:87:04:78:27:61:44:10:b7:ca:07:0c:08:e0:8b: 60:01:f6:ff:8e:d8:1f:7b:3f:2e:48:0d:79:b0:ca:fa:ed:9b: ae:27:89:4d:64:ab:00:f4:20:56:65:2d:39:fb:e0:0a:71:fe: 2d:d9:ee:09:b5:ee:dd:1a:da:21:80:30:c1:3f:ad:cf:c2:63: 21:d3:7f:6c:b6:a4:f5:f3:5f:c3:fd:54:d1:f0:6e:c9:d9:fb: aa:27:aa:42:a8:8d:2c:60:89:98:74:60:7f:f3:04:ac:df:a3: d3:b3:bd:84:7d:c8:29:81:16:3d:80:5e:19:09:f7:ce:eb:91: 53:53:23:f9:e7:b5:ae:8a:83:11:5a:6b:22:8e:5c:f2:45:ed: 18:91:d0:c5:9a:1d:b6:a6:2e:a0:ec:b2:41:f2:fe:d9:8e:a9: 2c:7d:9d:40:6b:66:e4:73:2b:f3:a6:a3:37:4e:bc:2b:aa:52: 50:e2:b3:41:70:57:f7:b8:96:33:f2:9a:82:3c:33:8f:b9:c6: f0:63:a7:72:99:7a:1b:d3:c5:2e:52:6e:2f:68:27:5a:a5:a7: 82:9f:40:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7d1eAwpoGyLAVkSRkWXYRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZjRjYzQxMmNjMzBmYjJmOWY3YzM3YzNlMzkwYmVjNWU2 MjU2YjAwHhcNMjYwMTI2MTgwMTAwWhcNMjYwMTI3MTgwMTAwWjAzMTEwLwYDVQQD EygyZDcyNjc0M2I0MzQyZWVkMDcyM2RkNWQ4NmUxNzc1ODZlYjYxZDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvihqduE0jM9vJGn8hwQCQc0ImBxY tsXZeTybWSct2zhsc5O+dO1WbgdqHHHeA4ksWeLYYSQjrJygGyfTldgDsEyTrxfx 97RCNDkS5Tkqz9I06xLAvExGNXvD77qmt0CBSopa02Osdmli32MvMlJpCQqKg+EA /OnhnIW61Pmzx8aWXpsWdZ/nbSWkkYQU6LD12GG6WVwbn29+ViDDviO++76qHLou N+Vs/WRR17G2yF2hD/frGfxSW6p85opP79BsjgefoyuPjp1Q28bx6HPiHvtvCVg1 kRl4HFU3kWNRW5v+L7Y7M0hDg5cTcegYRTskgQonmkfmoC8UyM9temhWfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1yZ0O0NC7tByPdXYbhd1huth2XMB8GA1UdIwQY MBaAFAD0zEEsww+y+ffDfD45C+xeYlawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVBUTVFTekREN0w1OThOOFBqa0w3RjVpVnJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85Mzc1YTItM2U2Zi00NTc3LTg1ZDEt NWYxNDVjZmQyMDcwLzEvQVBUTVFTekREN0w1OThOOFBqa0w3RjVpVnJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy85Mzc1YTItM2U2Zi00NTc3LTg1ZDEtNWYxNDVjZmQyMDcw LzEvQVBUTVFTekREN0w1OThOOFBqa0w3RjVpVnJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUE2kJ4JS ZrStE+fHL9vMxhZRdMZ5z1wB2AZsPKVz563FWWMZlGzUKYcEeCdhRBC3ygcMCOCL YAH2/47YH3s/LkgNebDK+u2brieJTWSrAPQgVmUtOfvgCnH+LdnuCbXu3RraIYAw wT+tz8JjIdN/bLak9fNfw/1U0fBuydn7qieqQqiNLGCJmHRgf/MErN+j07O9hH3I KYEWPYBeGQn3zuuRU1Mj+ee1roqDEVprIo5c8kXtGJHQxZodtqYuoOyyQfL+2Y6p LH2dQGtm5HMr86ajN068K6pSUOKzQXBX97iWM/Kagjwzj7nG8GOncpl6G9PFLlJu L2gnWqWngp9A4A== -----END CERTIFICATE-----Generated at Mon Jan 26 22:39:44 2026 by rpki-client