This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft File: AJTA9zaMBHZD6RxX1s_an5mJc2I.mft (raw, json) Hash identifier: s7xoMcYSdmw7xFYRvNU4oqT3xKAp0MvKwnQODnBxxWY= Subject key identifier: 3C:AC:E1:AD:52:E5:3E:57:22:70:52:84:3B:F2:9E:FC:36:9C:7C:BB Authority key identifier: 00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62 Certificate issuer: /CN=0094c0f7368c047643e91c57d6cfda9f99897362 Certificate serial: 019C1CB952BBA9EDF78F23E1CABE87D611FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft Manifest number: 8E Signing time: Mon 02 Feb 2026 05:00:32 +0000 Manifest this update: Mon 02 Feb 2026 05:00:32 +0000 Manifest next update: Tue 03 Feb 2026 05:00:32 +0000 Files and hashes: 1: AJTA9zaMBHZD6RxX1s_an5mJc2I.crl (hash: g4g7dMXCrmVKEuQHA3E1Cv/WDWlQZ7xwwEpQu11gr20=) 2: xtLXOBkmExLOhfZxnhi6NjjCUdU.asa (hash: X6o8/uM0Gj5PHfFrKRa6lbIFtgg/nUvteldPAHlMGRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 05:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:b9:52:bb:a9:ed:f7:8f:23:e1:ca:be:87:d6:11:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0094c0f7368c047643e91c57d6cfda9f99897362 Validity Not Before: Feb 2 05:00:32 2026 GMT Not After : Feb 3 05:00:32 2026 GMT Subject: CN=3cace1ad52e53e57227052843bf29efc369c7cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:60:3c:b2:81:fb:95:9f:87:eb:55:1a:75:90: c0:65:a0:e6:e3:be:f9:53:53:87:80:b3:61:91:38: ec:6b:dc:64:c8:56:f4:29:d6:e9:2b:4a:c1:ac:48: 2f:19:6e:3a:f6:01:e1:63:7e:64:e9:1e:af:f5:cd: 0e:4e:47:bc:e4:b4:11:f8:a0:08:33:78:df:d9:e7: 09:01:e9:31:5c:2a:34:8f:a1:5a:47:ce:9d:58:a5: b5:74:35:84:f2:9e:77:a8:4c:1a:a9:16:c5:66:b5: 42:9b:8d:ab:b1:90:72:8a:ce:09:37:96:65:34:5f: bc:94:af:d9:97:12:94:c7:fb:87:21:29:72:64:7f: 8c:ff:7d:f5:6e:6e:46:2d:75:d9:4d:d4:09:72:70: 40:19:b5:ae:b3:2c:9e:19:59:72:99:7d:50:60:72: 60:12:b9:e2:e3:95:a9:d8:5e:e5:b8:9c:b4:92:11: b5:58:ce:96:fc:b7:48:5a:4c:7d:c0:7d:1e:69:b1: 06:c3:fe:05:75:47:01:5a:c4:df:ff:e4:c8:9e:12: 83:85:94:cc:79:0f:cf:fa:5c:a2:d4:98:f5:6c:33: 56:bc:fb:6c:eb:70:36:a2:4c:1e:6c:4a:71:c3:b5: ab:8e:7a:91:94:16:b6:44:2f:1b:e5:5d:63:3f:54: 07:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AC:E1:AD:52:E5:3E:57:22:70:52:84:3B:F2:9E:FC:36:9C:7C:BB X509v3 Authority Key Identifier: keyid:00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:bd:c1:46:83:7f:5f:54:75:8b:42:da:e6:c4:ef:99:94:10: 02:5a:f0:c9:dc:ef:e4:87:b7:d8:e6:15:ac:2e:75:d7:89:9d: b6:d0:ba:51:6e:6b:69:0d:e8:34:3c:a8:30:ef:8a:4c:e1:85: 70:61:59:a0:e1:4f:76:7f:46:41:cd:c8:22:4d:e7:0c:20:77: ab:b4:a6:a1:12:eb:2c:a1:b6:a9:75:89:72:2a:08:c7:5e:76: 9b:b4:48:3b:32:52:8a:b5:73:55:8f:05:dc:0d:22:71:37:27: 09:7f:14:2f:c2:fa:99:1e:ce:4a:73:da:14:15:88:93:e5:1f: de:09:ae:34:0c:a3:78:5b:56:f3:2b:c5:7d:39:3c:a4:e4:cc: a8:a0:73:04:af:7d:df:29:25:4a:03:67:ef:4a:5a:10:f1:60: 3a:61:93:63:15:48:1a:2a:91:97:4b:70:08:8e:ef:b9:14:82: 0f:88:dc:92:46:95:ec:76:2e:02:0f:23:11:0b:38:5d:a1:f7: 60:9e:6c:c6:f1:39:35:d6:74:74:91:bf:3a:c8:f6:91:70:0a: f2:95:53:46:4f:a9:e9:92:a5:4d:66:2a:94:6b:63:02:3e:f7: 60:8e:ab:ac:b5:27:63:45:2b:0e:14:b9:19:7e:b9:ec:ad:4f: a5:e2:b4:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcuVK7qe33jyPhyr6H1hH6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwOTRjMGY3MzY4YzA0NzY0M2U5MWM1N2Q2Y2ZkYTlmOTk4 OTczNjIwHhcNMjYwMjAyMDUwMDMyWhcNMjYwMjAzMDUwMDMyWjAzMTEwLwYDVQQD EygzY2FjZTFhZDUyZTUzZTU3MjI3MDUyODQzYmYyOWVmYzM2OWM3Y2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWA8soH7lZ+H61UadZDAZaDm4775 U1OHgLNhkTjsa9xkyFb0KdbpK0rBrEgvGW469gHhY35k6R6v9c0OTke85LQR+KAI M3jf2ecJAekxXCo0j6FaR86dWKW1dDWE8p53qEwaqRbFZrVCm42rsZByis4JN5Zl NF+8lK/ZlxKUx/uHISlyZH+M/331bm5GLXXZTdQJcnBAGbWusyyeGVlymX1QYHJg Erni45Wp2F7luJy0khG1WM6W/LdIWkx9wH0eabEGw/4FdUcBWsTf/+TInhKDhZTM eQ/P+lyi1Jj1bDNWvPts63A2okwebEpxw7WrjnqRlBa2RC8b5V1jP1QH2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDys4a1S5T5XInBShDvynvw2nHy7MB8GA1UdIwQY MBaAFACUwPc2jAR2Q+kcV9bP2p+ZiXNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUpUQTl6YU1CSFpENlJ4WDFzX2FuNW1KYzJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82M2VmYmItZmUwMi00NjhhLTk2MGQt M2MyNzQyZjI4YTNjLzEvQUpUQTl6YU1CSFpENlJ4WDFzX2FuNW1KYzJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82M2VmYmItZmUwMi00NjhhLTk2MGQtM2MyNzQyZjI4YTNj LzEvQUpUQTl6YU1CSFpENlJ4WDFzX2FuNW1KYzJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAor3BRoN/ X1R1i0La5sTvmZQQAlrwydzv5Ie32OYVrC5114mdttC6UW5raQ3oNDyoMO+KTOGF cGFZoOFPdn9GQc3IIk3nDCB3q7SmoRLrLKG2qXWJcioIx152m7RIOzJSirVzVY8F 3A0icTcnCX8UL8L6mR7OSnPaFBWIk+Uf3gmuNAyjeFtW8yvFfTk8pOTMqKBzBK99 3yklSgNn70paEPFgOmGTYxVIGiqRl0twCI7vuRSCD4jckkaV7HYuAg8jEQs4XaH3 YJ5sxvE5NdZ0dJG/Osj2kXAK8pVTRk+p6ZKlTWYqlGtjAj73YI6rrLUnY0UrDhS5 GX657K1PpeK0TA== -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:15 2026 by rpki-client