This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft File: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json) Hash identifier: K0SvpH0d2H1ItPXjrm4OMDL4rROBL1f+K4CKN8XLLuI= Subject key identifier: 84:54:0A:EB:1C:67:13:01:2D:46:4E:2C:19:40:67:DB:68:0C:A4:0A Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce Certificate serial: 019BAFB91BA0667E8E80F84CD7752B95D776 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft Manifest number: 17C5 Signing time: Mon 12 Jan 2026 01:01:42 +0000 Manifest this update: Mon 12 Jan 2026 01:01:42 +0000 Manifest next update: Tue 13 Jan 2026 01:01:42 +0000 Files and hashes: 1: 3wUwuQwTXV5aCQTU82rWSfa5LEM.roa (hash: ZLeq9/wF1aUOdaHthHWe1UDHIfSGZmqtBr5YatoHrhk=) 2: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: +BA2fwZe1sB/sM/VsKVgh7Fx3hzC7UqGD74YVB8ztTw=) 3: t4a_vp8lFfYuPnrFd74HGQFrjpA.roa (hash: 1yVWZO4hYvbD4qGSevogaiCjdCYYHYrdz/g3xPGLVFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 01:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:b9:1b:a0:66:7e:8e:80:f8:4c:d7:75:2b:95:d7:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce Validity Not Before: Jan 12 01:01:42 2026 GMT Not After : Jan 13 01:01:42 2026 GMT Subject: CN=84540aeb1c6713012d464e2c194067db680ca40a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:58:b9:e9:7d:d1:70:f1:b1:ee:c5:59:7a:34: 95:b3:71:7c:c2:b0:62:68:0a:64:a1:59:9a:f8:54: d9:ea:44:a7:55:09:3b:ab:a8:bc:a0:52:b9:39:0d: 1a:81:e8:84:71:d4:90:55:6c:e1:43:02:6d:c0:2d: f6:d4:04:22:c3:cd:ba:5b:ca:c2:52:87:9a:27:3d: 1d:f8:bf:0c:15:b5:5d:4e:53:32:fe:cf:39:1b:82: 97:b4:0d:14:f4:94:f0:31:b2:23:59:e1:b5:67:68: 62:22:9a:a5:92:f0:cd:68:fe:ff:f2:0a:a6:66:46: 62:ff:3a:5a:e0:46:9a:20:1e:d2:41:02:4a:c2:ee: 2d:fa:07:22:61:24:7e:2e:73:a1:14:ac:ac:cf:ba: 90:2f:05:33:31:30:9b:6e:fd:87:1b:a8:ad:39:a4: d9:0c:99:55:9f:e0:6c:22:79:4d:83:00:35:36:d4: 66:81:d9:d6:5c:51:1f:14:1a:03:dd:74:5d:59:25: 98:ac:a7:f3:01:b9:c5:64:a1:34:26:4b:b4:9a:e4: a7:e9:6f:fb:a3:70:24:e0:05:9f:b7:60:a7:ac:6d: d4:71:57:2f:54:fb:1f:3e:bd:43:0c:5d:b6:2d:1a: 2f:09:74:94:73:7f:7c:f6:15:5c:9d:c0:bc:93:42: 10:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:54:0A:EB:1C:67:13:01:2D:46:4E:2C:19:40:67:DB:68:0C:A4:0A X509v3 Authority Key Identifier: keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:0d:c3:37:48:2b:42:f2:a6:25:79:ac:dd:41:8f:a3:25:4c: 0c:79:aa:72:12:1c:2f:23:ec:1b:61:c1:2f:2b:f6:23:4a:fb: c4:7b:75:fb:91:2e:6d:07:86:5c:f1:6c:1c:4e:dc:bb:fd:d0: b7:17:8c:17:e7:eb:b5:1c:2b:c6:3f:c3:2e:5c:b8:7d:ba:4b: 3a:10:be:82:f3:15:33:1d:69:31:7d:68:ec:a5:2d:bd:00:9d: 84:f9:b8:89:d2:90:8b:75:7f:60:bb:cf:96:67:24:ca:07:fe: 0e:9d:92:1d:3f:e8:c6:18:6e:91:cb:5c:98:49:18:3a:81:8f: 68:2b:ac:d6:23:d2:2f:e7:8f:3f:77:29:c9:c9:71:b2:69:12: d4:36:9a:8c:b1:2b:73:0d:c2:6d:50:44:68:8e:54:65:86:37: d2:d0:78:73:82:f3:2a:d0:b8:4d:ce:0b:09:51:7b:42:19:1d: 1f:ec:da:16:1d:82:23:03:81:36:27:f6:7b:53:37:5e:73:28: 13:51:5f:8e:2f:07:a9:13:d7:f7:22:ad:5b:dc:3b:d5:e2:97: ed:9e:70:44:86:c1:97:b8:98:b8:63:74:76:3c:17:b8:d4:86: 29:72:6c:47:5b:5a:d3:26:01:a2:1b:8e:e3:06:73:71:de:92: da:63:7c:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvuRugZn6OgPhM13Urldd2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OWM1ODFhZmYzZDBhOTAxNzhjZmFiNTY1YTM4OGNjZDli YzAxY2UwHhcNMjYwMTEyMDEwMTQyWhcNMjYwMTEzMDEwMTQyWjAzMTEwLwYDVQQD Eyg4NDU0MGFlYjFjNjcxMzAxMmQ0NjRlMmMxOTQwNjdkYjY4MGNhNDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnli56X3RcPGx7sVZejSVs3F8wrBi aApkoVma+FTZ6kSnVQk7q6i8oFK5OQ0ageiEcdSQVWzhQwJtwC321AQiw826W8rC UoeaJz0d+L8MFbVdTlMy/s85G4KXtA0U9JTwMbIjWeG1Z2hiIpqlkvDNaP7/8gqm ZkZi/zpa4EaaIB7SQQJKwu4t+gciYSR+LnOhFKysz7qQLwUzMTCbbv2HG6itOaTZ DJlVn+BsInlNgwA1NtRmgdnWXFEfFBoD3XRdWSWYrKfzAbnFZKE0Jku0muSn6W/7 o3Ak4AWft2CnrG3UcVcvVPsfPr1DDF22LRovCXSUc3989hVcncC8k0IQkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRUCuscZxMBLUZOLBlAZ9toDKQKMB8GA1UdIwQY MBaAFGmcWBr/PQqQF4z6tWWjiMzZvAHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVp4WUd2ODlDcEFYalBxMVphT0l6Tm04QWM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mYjlkNWUtYTYyOC00ZjIzLTg4YTUt ZTVkZGQyYmI1MWM1LzEvYVp4WUd2ODlDcEFYalBxMVphT0l6Tm04QWM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mYjlkNWUtYTYyOC00ZjIzLTg4YTUtZTVkZGQyYmI1MWM1 LzEvYVp4WUd2ODlDcEFYalBxMVphT0l6Tm04QWM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUg3DN0gr QvKmJXms3UGPoyVMDHmqchIcLyPsG2HBLyv2I0r7xHt1+5EubQeGXPFsHE7cu/3Q txeMF+frtRwrxj/DLly4fbpLOhC+gvMVMx1pMX1o7KUtvQCdhPm4idKQi3V/YLvP lmckygf+Dp2SHT/oxhhukctcmEkYOoGPaCus1iPSL+ePP3cpyclxsmkS1DaajLEr cw3CbVBEaI5UZYY30tB4c4LzKtC4Tc4LCVF7QhkdH+zaFh2CIwOBNif2e1M3XnMo E1Ffji8HqRPX9yKtW9w71eKX7Z5wRIbBl7iYuGN0djwXuNSGKXJsR1ta0yYBohuO 4wZzcd6S2mN8DQ== -----END CERTIFICATE-----Generated at Mon Jan 12 09:22:16 2026 by rpki-client