This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft File: afURWpSbKIPEzDxJX_uJk97Z2F0.mft (raw, json) Hash identifier: PE6HujbRaTLcyEkgEQl0hJ+qPZ53AIg2BRHI6a4m3Po= Subject key identifier: 4C:C7:D6:58:EE:C0:1F:26:CA:66:B6:84:22:BD:73:34:D1:6E:00:A9 Authority key identifier: 69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D Certificate issuer: /CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d Certificate serial: 019BFBE55D190141925C5F728D5DD77E6A1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft Manifest number: 0209 Signing time: Mon 26 Jan 2026 20:01:11 +0000 Manifest this update: Mon 26 Jan 2026 20:01:11 +0000 Manifest next update: Tue 27 Jan 2026 20:01:11 +0000 Files and hashes: 1: F0NU8SzenQKyHyDow73tXbiGwdo.roa (hash: iOBS39tMhlNuj1wPQ/s8NHjEci7w9ozCqefNCKugJMg=) 2: afURWpSbKIPEzDxJX_uJk97Z2F0.crl (hash: 92Uu12UCQ7knN4WDrTWsBE1au7SzVwAGhEODe2shAaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e5:5d:19:01:41:92:5c:5f:72:8d:5d:d7:7e:6a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d Validity Not Before: Jan 26 20:01:11 2026 GMT Not After : Jan 27 20:01:11 2026 GMT Subject: CN=4cc7d658eec01f26ca66b68422bd7334d16e00a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:27:6b:62:98:26:ba:0f:27:57:73:ad:b2:7f: 46:d3:17:4b:f2:04:8a:18:b8:56:76:31:6c:c0:a7: 67:b4:72:b3:59:4d:b0:25:26:c7:e5:92:80:8b:78: 0c:7d:a9:43:45:40:04:52:0a:8d:8a:e0:26:ec:10: 18:44:f7:6a:8b:74:a1:be:d9:b7:17:3f:b4:3c:d5: 15:f3:43:9a:02:5e:87:4a:8a:72:d7:8f:fa:a5:ed: f3:88:2b:94:d3:7b:23:3c:70:46:85:bb:5a:ea:e9: 56:80:ab:94:5e:55:c0:99:c0:dd:e7:02:4f:d8:08: f0:e0:44:e9:a4:1b:2f:7c:6d:ab:84:e0:98:e4:a0: 74:33:a9:98:08:5f:31:4c:3d:77:7b:3e:42:d6:19: 6e:86:85:14:e7:7f:2e:8b:9f:3c:9a:e2:9b:b0:32: 6c:f4:df:10:dd:2f:28:d0:37:63:70:3c:71:37:01: fa:fd:ad:6a:89:89:5c:23:56:2c:65:be:7c:db:fb: 71:1a:32:7f:36:55:ff:e4:cc:2c:3c:f1:f7:02:b6: c4:4a:1f:e7:b5:ed:08:f1:9e:11:72:65:eb:81:8c: 30:56:ea:c3:3f:08:c0:dd:7b:e7:ae:49:44:40:7c: 7a:80:e8:f4:21:e1:ce:d2:5e:f2:95:26:05:46:bc: 24:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C7:D6:58:EE:C0:1F:26:CA:66:B6:84:22:BD:73:34:D1:6E:00:A9 X509v3 Authority Key Identifier: keyid:69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e0:e2:57:9f:87:d6:96:65:53:5c:bf:ba:c2:1d:a3:de:ad: 75:d5:6d:cd:c0:29:ea:7d:0d:27:33:3b:b9:aa:0c:04:e6:67: 81:72:50:31:4d:66:c3:22:df:17:3f:d1:f4:76:31:e2:ab:2b: 82:16:11:ca:37:ce:c5:52:5a:5e:b4:0b:b1:50:e5:a1:ce:f7: da:fa:ea:f9:ee:88:6d:fb:43:76:96:50:7f:54:16:69:61:1e: 39:0f:9b:bc:9d:5b:cf:5d:38:ab:ca:75:56:e8:82:99:f0:a1: 45:d2:4f:ac:42:93:24:59:ca:a2:bc:1e:63:41:0c:28:b7:0b: 50:06:2a:89:9b:45:1d:af:30:ed:c9:01:60:7b:0d:9c:b9:e8: 4b:d3:7f:d1:58:cc:f8:2d:59:4b:ae:b0:fa:62:4a:b7:91:70: 67:ea:f7:54:f7:22:2d:3d:53:56:37:e4:4e:0c:d1:64:fa:01: 62:62:0a:f0:44:ab:d2:c4:6d:a3:8c:42:6b:29:26:58:1a:4b: da:3b:d8:12:9b:5e:c5:b6:9a:51:4b:2c:ce:d9:d4:57:1f:0b: 6f:73:1e:80:08:1e:a8:fc:1b:ef:14:b1:e0:f6:71:54:b4:b8: 33:b2:e2:c9:dc:a5:1b:c7:1e:5d:1a:90:6d:1b:65:49:df:83: 20:4e:92:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75V0ZAUGSXF9yjV3XfmoeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZjUxMTVhOTQ5YjI4ODNjNGNjM2M0OTVmZmI4OTkzZGVk OWQ4NWQwHhcNMjYwMTI2MjAwMTExWhcNMjYwMTI3MjAwMTExWjAzMTEwLwYDVQQD Eyg0Y2M3ZDY1OGVlYzAxZjI2Y2E2NmI2ODQyMmJkNzMzNGQxNmUwMGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvydrYpgmug8nV3Otsn9G0xdL8gSK GLhWdjFswKdntHKzWU2wJSbH5ZKAi3gMfalDRUAEUgqNiuAm7BAYRPdqi3Shvtm3 Fz+0PNUV80OaAl6HSopy14/6pe3ziCuU03sjPHBGhbta6ulWgKuUXlXAmcDd5wJP 2Ajw4ETppBsvfG2rhOCY5KB0M6mYCF8xTD13ez5C1hluhoUU538ui588muKbsDJs 9N8Q3S8o0DdjcDxxNwH6/a1qiYlcI1YsZb582/txGjJ/NlX/5MwsPPH3ArbESh/n te0I8Z4RcmXrgYwwVurDPwjA3XvnrklEQHx6gOj0IeHO0l7ylSYFRrwkZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzH1ljuwB8myma2hCK9czTRbgCpMB8GA1UdIwQY MBaAFGn1EVqUmyiDxMw8SV/7iZPe2dhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWZVUldwU2JLSVBFekR4SlhfdUprOTdaMkYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jMDY1MzYtMDFhYS00ZTM5LTg5YjYt YjU4NzA0ZjI4NTkxLzEvYWZVUldwU2JLSVBFekR4SlhfdUprOTdaMkYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jMDY1MzYtMDFhYS00ZTM5LTg5YjYtYjU4NzA0ZjI4NTkx LzEvYWZVUldwU2JLSVBFekR4SlhfdUprOTdaMkYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuDiV5+H 1pZlU1y/usIdo96tddVtzcAp6n0NJzM7uaoMBOZngXJQMU1mwyLfFz/R9HYx4qsr ghYRyjfOxVJaXrQLsVDloc732vrq+e6IbftDdpZQf1QWaWEeOQ+bvJ1bz104q8p1 VuiCmfChRdJPrEKTJFnKorweY0EMKLcLUAYqiZtFHa8w7ckBYHsNnLnoS9N/0VjM +C1ZS66w+mJKt5FwZ+r3VPciLT1TVjfkTgzRZPoBYmIK8ESr0sRto4xCaykmWBpL 2jvYEptexbaaUUssztnUVx8Lb3MegAgeqPwb7xSx4PZxVLS4M7LiydylG8ceXRqQ bRtlSd+DIE6SlA== -----END CERTIFICATE-----Generated at Tue Jan 27 02:52:23 2026 by rpki-client