This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft File: Ahs-o17f3ROMFVBtdKdgIt03aUs.mft (raw, json) Hash identifier: qblekREoIKEpfsEG2MR9brITwlmb1RKg3JYWlu3IIIk= Subject key identifier: 7C:7D:A8:78:09:72:DF:5F:07:AC:CF:BD:E3:3C:F3:A8:70:40:14:2B Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B Certificate issuer: /CN=021b3ea35edfdd138c15506d74a76022dd37694b Certificate serial: 019C1BDE78E45B14AC28E5A79BE9EF3FC19A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft Manifest number: 1801 Signing time: Mon 02 Feb 2026 01:01:30 +0000 Manifest this update: Mon 02 Feb 2026 01:01:30 +0000 Manifest next update: Tue 03 Feb 2026 01:01:30 +0000 Files and hashes: 1: Ahs-o17f3ROMFVBtdKdgIt03aUs.crl (hash: Mf+R5LRrJuhNl2q4VI9t5ZRRG07iXSHB9AtOwC3y/oo=) 2: LBRMtk276o1fDtnMdAqhTW7DXC4.roa (hash: 0YIiI16RKFGdQ0JcFhz3zqT49nyQkj7P8gkQ5o32XYM=) 3: M8dYp-L4dw1v-tRfvEaBeetOZDM.asa (hash: BxKqO0ZY48OCWqUnkol0bWVuXrmCWGF4F2EIRoXKyLI=) 4: QmzS2ptv4L0wreFRKwR2b7sYT9o.roa (hash: V15c6ZmrAVOZnZkD5NcAPinTv/zGPeEWxtJ3s9KDwPs=) 5: Rj9rY8c-WTz58dRjWStkxywCLns.roa (hash: 2qqmCIzo+/ipPZRDGptoSNuyqwN9eUc4eLGE8JL6fME=) 6: T64D7DIdeVevp7C-fmZ9i_3HGBI.roa (hash: kO6AaVNTX79L37zwJju08wk0fWE2dJSQ0KHv71bE1XY=) 7: U8u1b5Pq3pRMcKbM8GicLTeR9Tk.roa (hash: R5sho8p6NKUCSWgu2hqUkQHKto75y0jfre83Hes2hwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 01:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:de:78:e4:5b:14:ac:28:e5:a7:9b:e9:ef:3f:c1:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b Validity Not Before: Feb 2 01:01:30 2026 GMT Not After : Feb 3 01:01:30 2026 GMT Subject: CN=7c7da8780972df5f07accfbde33cf3a87040142b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7b:5d:f2:b9:da:9b:19:19:f5:b2:51:44:73: 3a:84:67:a9:8e:25:41:fb:22:aa:5e:0c:60:0a:ff: fb:37:da:bf:c6:f5:ee:4f:c6:63:1a:b4:76:75:03: 33:41:93:b6:5a:32:da:65:88:6e:4d:8d:01:80:ba: 42:19:84:25:a6:d5:de:1f:d4:d8:9a:32:ee:c4:f6: 69:44:c3:62:68:96:61:4d:07:9f:2a:a1:8b:58:69: 30:25:34:56:0d:66:79:9a:f1:a6:c4:e4:d4:19:ff: 9d:41:bf:73:86:16:10:92:e3:e8:d1:26:6e:ce:cf: b6:a3:cb:7c:19:ea:94:92:4c:61:57:42:78:d4:60: c3:a0:30:19:e2:1b:2c:85:d1:47:1c:44:9d:08:fb: 30:2c:2b:8c:00:b7:9e:b9:c2:c4:6c:8c:cc:6f:ef: 1a:de:94:a4:3e:df:8d:5e:24:7f:23:35:2a:ff:6e: 84:26:88:ff:ba:ff:a4:69:c0:fc:b8:86:63:9a:3d: 9e:ab:93:57:ed:49:85:c9:f6:ae:ce:cf:9b:b7:4c: 44:b4:bf:f5:7a:ee:7b:5a:71:ac:d7:fb:e5:f5:24: e9:ca:29:d3:c4:8e:19:6a:a9:d9:e2:0b:e4:36:d2: 86:0f:32:5e:6c:e6:bf:38:9f:e2:8c:79:16:44:fa: d8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7D:A8:78:09:72:DF:5F:07:AC:CF:BD:E3:3C:F3:A8:70:40:14:2B X509v3 Authority Key Identifier: keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:c9:f5:8d:89:3c:6b:27:30:52:02:86:7a:83:53:78:80:79: 2d:70:27:51:8f:b3:ea:e7:82:c7:94:66:d9:d4:7b:c4:b1:9a: ed:c5:d9:e5:1a:4d:cb:6c:71:f6:02:55:87:a1:9a:c3:17:17: 7e:ab:be:f2:8c:a2:8c:fa:d9:30:b1:96:82:53:e9:8d:fe:9e: bb:a8:a0:09:e1:d3:09:1e:36:a8:22:c2:2d:f5:24:82:19:07: 21:dc:8d:ff:92:92:a8:54:9a:1c:62:c1:f4:b0:6e:56:6a:63: 9e:b1:a3:fe:29:7c:0a:54:0c:1f:93:0b:9c:7c:92:3a:9c:2f: 58:4c:2e:66:ba:64:f7:3a:bf:54:93:c6:d7:a2:60:fd:7a:c1: 5d:58:e8:80:92:14:57:fa:d3:64:a3:03:ee:93:a3:dc:40:e7: 3d:6a:97:b8:aa:ae:b2:8b:5a:c7:9c:93:9c:d4:89:12:4e:72: 80:7b:4a:0b:24:fc:57:04:65:03:2d:9c:04:74:54:62:71:3a: 06:b2:41:df:88:cc:3d:3f:d8:0e:68:71:16:8b:43:66:ae:a9: 4c:ad:26:29:d2:1b:4c:58:42:4a:49:e3:30:23:91:8a:4a:21: 87:67:c8:40:3d:ce:c3:96:f3:79:b7:42:eb:9a:b7:72:13:22: a5:c2:16:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwb3njkWxSsKOWnm+nvP8GaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMWIzZWEzNWVkZmRkMTM4YzE1NTA2ZDc0YTc2MDIyZGQz NzY5NGIwHhcNMjYwMjAyMDEwMTMwWhcNMjYwMjAzMDEwMTMwWjAzMTEwLwYDVQQD Eyg3YzdkYTg3ODA5NzJkZjVmMDdhY2NmYmRlMzNjZjNhODcwNDAxNDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHtd8rnamxkZ9bJRRHM6hGepjiVB +yKqXgxgCv/7N9q/xvXuT8ZjGrR2dQMzQZO2WjLaZYhuTY0BgLpCGYQlptXeH9TY mjLuxPZpRMNiaJZhTQefKqGLWGkwJTRWDWZ5mvGmxOTUGf+dQb9zhhYQkuPo0SZu zs+2o8t8GeqUkkxhV0J41GDDoDAZ4hsshdFHHESdCPswLCuMALeeucLEbIzMb+8a 3pSkPt+NXiR/IzUq/26EJoj/uv+kacD8uIZjmj2eq5NX7UmFyfauzs+bt0xEtL/1 eu57WnGs1/vl9STpyinTxI4ZaqnZ4gvkNtKGDzJebOa/OJ/ijHkWRPrYsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHx9qHgJct9fB6zPveM886hwQBQrMB8GA1UdIwQY MBaAFAIbPqNe390TjBVQbXSnYCLdN2lLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWhzLW8xN2YzUk9NRlZCdGRLZGdJdDAzYVVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mODliNjQtODdiNy00OGY0LThiNjAt YzMyMDRiZGU3NzczLzEvQWhzLW8xN2YzUk9NRlZCdGRLZGdJdDAzYVVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mODliNjQtODdiNy00OGY0LThiNjAtYzMyMDRiZGU3Nzcz LzEvQWhzLW8xN2YzUk9NRlZCdGRLZGdJdDAzYVVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMn1jYk8 aycwUgKGeoNTeIB5LXAnUY+z6ueCx5Rm2dR7xLGa7cXZ5RpNy2xx9gJVh6GawxcX fqu+8oyijPrZMLGWglPpjf6eu6igCeHTCR42qCLCLfUkghkHIdyN/5KSqFSaHGLB 9LBuVmpjnrGj/il8ClQMH5MLnHySOpwvWEwuZrpk9zq/VJPG16Jg/XrBXVjogJIU V/rTZKMD7pOj3EDnPWqXuKqusotax5yTnNSJEk5ygHtKCyT8VwRlAy2cBHRUYnE6 BrJB34jMPT/YDmhxFotDZq6pTK0mKdIbTFhCSknjMCORikohh2fIQD3Ow5bzebdC 65q3chMipcIWJQ== -----END CERTIFICATE-----Generated at Mon Feb 2 12:46:02 2026 by rpki-client