This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft File: aEZbnPs2jGnssOP-o7VCupxzAfQ.mft (raw, json) Hash identifier: BBCQDFvXAb/1BQUDLvNXSlxiqJmJTNyl6DordyahSHY= Subject key identifier: E0:01:41:E7:4F:1A:A1:0F:C6:5B:F0:7A:17:E4:54:E8:E6:87:19:E7 Authority key identifier: 68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4 Certificate issuer: /CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4 Certificate serial: 019BFCF805792E1208C18C64E961D8C55B45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft Manifest number: 1505 Signing time: Tue 27 Jan 2026 01:01:11 +0000 Manifest this update: Tue 27 Jan 2026 01:01:11 +0000 Manifest next update: Wed 28 Jan 2026 01:01:11 +0000 Files and hashes: 1: aEZbnPs2jGnssOP-o7VCupxzAfQ.crl (hash: bumhbDGdPuyQi+Ve/CL9H4yRXlm+LineiV7rAGa+duA=) 2: c0z-_U_7s_3lnaiWBwRIuVlkh7c.roa (hash: EAYr21bopytQdXh3mLIBfLUMzK/qGgq6jONJ7Pmqm+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:05:79:2e:12:08:c1:8c:64:e9:61:d8:c5:5b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4 Validity Not Before: Jan 27 01:01:11 2026 GMT Not After : Jan 28 01:01:11 2026 GMT Subject: CN=e00141e74f1aa10fc65bf07a17e454e8e68719e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9e:dc:c3:4a:dc:24:ae:df:d8:9f:f8:3b:f7: fd:9f:55:ad:a8:55:79:09:8c:56:11:19:43:01:98: e7:68:3c:72:9f:7f:0b:dd:0b:3c:12:24:77:01:f5: a9:eb:22:e1:6d:44:e2:6e:47:46:fe:70:6e:97:0a: 93:1d:a1:91:1b:d5:42:6b:ee:97:45:80:6c:e8:31: 5a:62:c3:2d:d3:66:72:f0:3f:39:95:33:6d:f0:be: cd:8d:52:5f:e7:6e:a2:eb:a4:f3:75:53:ad:78:41: bd:43:fa:da:fb:06:22:b0:0b:39:66:f2:e0:d6:ee: 8d:cd:1a:e2:9d:83:8c:29:0e:d7:af:14:eb:9d:30: 5a:d2:c3:00:41:0b:48:4d:18:42:54:77:3e:53:4c: f9:b9:0e:62:8b:f9:cb:49:8d:39:97:76:18:70:41: 84:f0:1c:db:70:6f:de:f2:31:82:01:dd:47:b7:2d: 8e:7e:9f:19:bd:20:ae:fb:34:77:e7:d2:15:98:15: b5:51:b7:e6:5b:6c:a9:e4:ca:bd:de:d1:86:a0:03: 5d:01:6c:f7:a4:bb:c1:8b:bd:c8:57:93:24:c0:6b: c2:bd:0f:fb:16:f6:bf:3e:d3:9f:c1:a4:0f:29:70: 1f:f6:85:4d:1f:9c:0f:68:e9:9c:cd:0e:f2:86:1b: 4f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:01:41:E7:4F:1A:A1:0F:C6:5B:F0:7A:17:E4:54:E8:E6:87:19:E7 X509v3 Authority Key Identifier: keyid:68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:8b:57:72:09:4c:cb:f0:4c:df:3b:15:38:63:18:9c:5c:a7: 1d:50:65:13:13:82:56:2f:6e:84:4a:3c:73:97:51:b8:0b:18: ac:f7:f5:c6:61:8f:9c:03:a8:7b:85:31:00:5b:36:3d:59:31: b0:23:b1:43:de:4f:49:be:f6:95:ff:7c:bd:48:84:c7:67:c2: b9:5e:07:40:7d:73:b7:2e:ed:49:c7:46:f8:2e:4c:42:7a:a4: 6a:f3:86:fe:ea:4a:7e:16:d2:33:b2:75:d4:dc:11:28:d8:96: 0a:46:4a:23:82:cb:d5:ec:92:26:34:b4:c6:d4:34:85:d7:78: d7:63:94:d8:1f:28:c7:22:0f:6e:e3:eb:e8:d6:de:d0:78:e1: 80:b0:0a:5c:e0:bc:ec:a4:da:ce:0c:fc:b4:a6:02:b9:cd:31: fc:b0:26:75:4b:b9:35:73:2b:95:71:b9:89:38:b1:ac:f5:25: 58:c5:a9:2d:e9:fb:04:47:e3:61:ca:68:94:b5:34:66:d5:6b: 70:c2:1e:73:ae:ae:c4:6d:84:a3:f7:73:cc:7c:df:eb:89:d6: 0c:72:6c:3f:25:f4:30:af:88:42:c5:56:9e:c6:0f:5b:b9:cf: 7d:66:aa:a4:47:54:d5:94:36:c4:d4:59:ba:e7:5b:a7:a9:28: e3:d6:c5:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+AV5LhIIwYxk6WHYxVtFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NDY1YjljZmIzNjhjNjllY2IwZTNmZWEzYjU0MmJhOWM3 MzAxZjQwHhcNMjYwMTI3MDEwMTExWhcNMjYwMTI4MDEwMTExWjAzMTEwLwYDVQQD EyhlMDAxNDFlNzRmMWFhMTBmYzY1YmYwN2ExN2U0NTRlOGU2ODcxOWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp7cw0rcJK7f2J/4O/f9n1WtqFV5 CYxWERlDAZjnaDxyn38L3Qs8EiR3AfWp6yLhbUTibkdG/nBulwqTHaGRG9VCa+6X RYBs6DFaYsMt02Zy8D85lTNt8L7NjVJf526i66TzdVOteEG9Q/ra+wYisAs5ZvLg 1u6NzRrinYOMKQ7XrxTrnTBa0sMAQQtITRhCVHc+U0z5uQ5ii/nLSY05l3YYcEGE 8BzbcG/e8jGCAd1Hty2Ofp8ZvSCu+zR359IVmBW1UbfmW2yp5Mq93tGGoANdAWz3 pLvBi73IV5MkwGvCvQ/7Fva/PtOfwaQPKXAf9oVNH5wPaOmczQ7yhhtPtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOABQedPGqEPxlvwehfkVOjmhxnnMB8GA1UdIwQY MBaAFGhGW5z7Noxp7LDj/qO1QrqccwH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUVaYm5QczJqR25zc09QLW83VkN1cHh6QWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yNjdmOWUtY2NjYy00NDNmLWJlYWMt MWFlYTViZTE1MGZhLzEvYUVaYm5QczJqR25zc09QLW83VkN1cHh6QWZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8yNjdmOWUtY2NjYy00NDNmLWJlYWMtMWFlYTViZTE1MGZh LzEvYUVaYm5QczJqR25zc09QLW83VkN1cHh6QWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlItXcglM y/BM3zsVOGMYnFynHVBlExOCVi9uhEo8c5dRuAsYrPf1xmGPnAOoe4UxAFs2PVkx sCOxQ95PSb72lf98vUiEx2fCuV4HQH1zty7tScdG+C5MQnqkavOG/upKfhbSM7J1 1NwRKNiWCkZKI4LL1eySJjS0xtQ0hdd412OU2B8oxyIPbuPr6Nbe0HjhgLAKXOC8 7KTazgz8tKYCuc0x/LAmdUu5NXMrlXG5iTixrPUlWMWpLen7BEfjYcpolLU0ZtVr cMIec66uxG2Eo/dzzHzf64nWDHJsPyX0MK+IQsVWnsYPW7nPfWaqpEdU1ZQ2xNRZ uudbp6ko49bFvQ== -----END CERTIFICATE-----Generated at Tue Jan 27 08:29:07 2026 by rpki-client