This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft File: abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json) Hash identifier: xedVsfwA0U1vM3DGt5FHEICWnpPz4/hX5Ajna/nj/FI= Subject key identifier: 4D:F5:C6:92:ED:45:4F:8A:EF:8B:13:9B:B5:71:26:60:93:3E:79:0B Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0 Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0 Certificate serial: 019C04B1E3754FD55FD6078D40D5AEFFEEA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft Manifest number: 0C2B Signing time: Wed 28 Jan 2026 13:01:32 +0000 Manifest this update: Wed 28 Jan 2026 13:01:32 +0000 Manifest next update: Thu 29 Jan 2026 13:01:32 +0000 Files and hashes: 1: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: dWTMgzP90u7cOQ5Cg6PMbmuBtIXhlRKKrd4ZqSMNS9o=) 2: epJ5NtfvH1g3tuK4xd9nscSiEoA.roa (hash: niW0UBzEk+eWx8n4afLHbWheyJix/ATlxCY23FXANN8=) 3: hpFPFF4swm17BfKeLPrET14DerI.roa (hash: /w3PMxP9jyIQ4EgZwsRkLDa6435IO8C6U7QCr8ty+WM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:b1:e3:75:4f:d5:5f:d6:07:8d:40:d5:ae:ff:ee:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0 Validity Not Before: Jan 28 13:01:32 2026 GMT Not After : Jan 29 13:01:32 2026 GMT Subject: CN=4df5c692ed454f8aef8b139bb5712660933e790b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:16:55:31:4a:16:cd:d3:77:e5:ba:ef:83:a6: ae:d7:28:0d:f4:43:b2:83:67:4d:5f:f6:77:c0:aa: ce:a1:ef:37:99:3d:e1:71:a4:02:fa:df:90:66:62: 74:1c:40:65:af:0e:39:e9:90:29:3c:b2:06:64:ef: 18:9b:6e:4d:72:2c:37:c0:b1:52:23:ab:08:75:dd: 0c:21:e7:65:23:18:fc:14:34:f7:19:0a:31:4c:80: c2:2e:aa:98:e8:a4:0b:af:bc:cd:29:7e:78:78:2b: ce:c0:a2:84:17:9b:7c:37:68:cd:0b:bf:3d:0c:67: a3:5e:5c:32:c2:69:55:88:e4:3f:34:7f:26:d9:dd: 25:1d:f2:ba:b8:48:ea:a4:03:85:05:27:b5:3e:0d: 5f:80:29:f3:2b:37:97:0d:09:35:42:9c:76:84:38: 1b:0a:ff:3e:97:f5:d3:e1:9f:ba:38:ee:b0:df:67: 72:d9:dd:22:ac:71:7d:34:d5:2a:22:18:ad:cc:13: 8b:80:9e:38:46:a4:c9:a2:4e:37:e9:0b:c3:a0:38: ca:75:cc:b8:d9:92:c2:de:01:55:17:36:b1:6d:63: 41:9c:55:fd:71:8b:24:69:8d:73:60:4b:0a:01:15: 39:45:65:f1:02:f1:67:75:fd:10:69:97:ca:73:3b: 8a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F5:C6:92:ED:45:4F:8A:EF:8B:13:9B:B5:71:26:60:93:3E:79:0B X509v3 Authority Key Identifier: keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:f7:df:9d:7b:83:53:73:5d:11:5f:b8:96:ee:a8:5e:5b:22: 2e:bf:52:d3:e8:16:26:2d:ff:e7:75:d7:24:b9:8f:43:ff:f9: 16:e0:14:e8:0c:32:2d:1f:86:13:b6:1b:d6:02:65:09:15:ed: bf:9a:4b:c0:aa:9f:62:51:9d:0d:00:db:84:39:de:c1:75:26: 0a:19:93:c6:19:bb:08:8a:82:f4:19:05:18:ff:eb:42:50:27: bc:e8:e0:12:e4:bf:ba:9a:a2:d6:69:5e:fa:4f:29:d5:fb:46: 94:b5:7c:d6:48:d6:ee:71:34:e2:27:02:2c:cd:fd:6b:cc:41: 22:95:56:c7:3e:80:35:a4:25:62:a7:03:7a:1e:06:92:8a:65: 85:65:c8:a8:fc:ba:e4:df:0f:69:2c:9d:20:60:dd:9a:60:72: da:c2:d1:af:50:29:b5:89:dc:50:34:44:1c:f8:76:dc:1d:0e: b0:4b:1a:b0:4d:0b:cd:30:21:66:f9:1b:62:d7:f2:16:bd:4e: 2b:b8:94:7b:f2:56:a8:ae:bb:9d:8a:9c:18:df:83:cc:cb:cb: eb:4c:ac:43:24:d7:18:85:b9:82:87:82:b0:cb:97:93:11:f2: 79:17:29:38:ac:f0:52:2b:4e:02:be:00:d7:12:bc:d0:a7:0d: af:54:c5:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwEseN1T9Vf1geNQNWu/+6oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YjAxOTI3YTFhMTc3ZDQyNjEyMjFkOTQ2Mjg1MTRhNTI1 YTk2ZTAwHhcNMjYwMTI4MTMwMTMyWhcNMjYwMTI5MTMwMTMyWjAzMTEwLwYDVQQD Eyg0ZGY1YzY5MmVkNDU0ZjhhZWY4YjEzOWJiNTcxMjY2MDkzM2U3OTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+BZVMUoWzdN35brvg6au1ygN9EOy g2dNX/Z3wKrOoe83mT3hcaQC+t+QZmJ0HEBlrw456ZApPLIGZO8Ym25Nciw3wLFS I6sIdd0MIedlIxj8FDT3GQoxTIDCLqqY6KQLr7zNKX54eCvOwKKEF5t8N2jNC789 DGejXlwywmlViOQ/NH8m2d0lHfK6uEjqpAOFBSe1Pg1fgCnzKzeXDQk1Qpx2hDgb Cv8+l/XT4Z+6OO6w32dy2d0irHF9NNUqIhitzBOLgJ44RqTJok436QvDoDjKdcy4 2ZLC3gFVFzaxbWNBnFX9cYskaY1zYEsKARU5RWXxAvFndf0QaZfKczuKRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE31xpLtRU+K74sTm7VxJmCTPnkLMB8GA1UdIwQY MBaAFGmwGSehoXfUJhIh2UYoUUpSWpbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zMjhlYjMtNTYwMy00OTU1LWFhOTIt MjI1MmJjY2ZkYmY5LzEvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8zMjhlYjMtNTYwMy00OTU1LWFhOTItMjI1MmJjY2ZkYmY5 LzEvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfffnXuD U3NdEV+4lu6oXlsiLr9S0+gWJi3/53XXJLmPQ//5FuAU6AwyLR+GE7Yb1gJlCRXt v5pLwKqfYlGdDQDbhDnewXUmChmTxhm7CIqC9BkFGP/rQlAnvOjgEuS/upqi1mle +k8p1ftGlLV81kjW7nE04icCLM39a8xBIpVWxz6ANaQlYqcDeh4GkoplhWXIqPy6 5N8PaSydIGDdmmBy2sLRr1AptYncUDREHPh23B0OsEsasE0LzTAhZvkbYtfyFr1O K7iUe/JWqK67nYqcGN+DzMvL60ysQyTXGIW5goeCsMuXkxHyeRcpOKzwUitOAr4A 1xK80KcNr1TFvA== -----END CERTIFICATE-----Generated at Wed Jan 28 17:55:52 2026 by rpki-client