This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft File: AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft (raw, json) Hash identifier: MmBzH5BOXMSQPw24hutPQxgktol1uryJf9/Ls+sCzFw= Subject key identifier: 78:1D:4B:11:05:5E:B2:86:09:9C:3D:0D:AB:3B:EB:97:F9:02:11:6D Authority key identifier: 00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91 Certificate issuer: /CN=00046b434526bf2836e2749ce0e36e08443d6b91 Certificate serial: 019BFF1D6F9A10855F5CFB33D99172A6AB86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft Manifest number: F7 Signing time: Tue 27 Jan 2026 11:01:17 +0000 Manifest this update: Tue 27 Jan 2026 11:01:17 +0000 Manifest next update: Wed 28 Jan 2026 11:01:17 +0000 Files and hashes: 1: AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl (hash: yZsOYR+OJdVsqNcwG77Djv1sST1xaxBX8D8JgYfaAUM=) 2: BNXRn2FDij45ZWewb-G1iDZxbsY.roa (hash: Xb2Q90m1NuPY6mGfpPbyKSE6O8ggWXxFXViYGbYai9k=) 3: oEH8nhYQ01y7WjioI86JnkPzqMo.roa (hash: xshPB3d2fKitkQGG8nbyvRROHtDOfLvy4a9oIUwsRfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:1d:6f:9a:10:85:5f:5c:fb:33:d9:91:72:a6:ab:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00046b434526bf2836e2749ce0e36e08443d6b91 Validity Not Before: Jan 27 11:01:17 2026 GMT Not After : Jan 28 11:01:17 2026 GMT Subject: CN=781d4b11055eb286099c3d0dab3beb97f902116d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ed:6b:45:87:b5:6e:06:20:f3:69:f1:e5:8b: e7:8c:4e:1a:16:eb:31:e4:65:97:3a:9c:80:45:06: 42:78:6a:05:2b:94:6c:e7:17:23:c0:8c:27:36:68: e9:82:14:c7:86:f2:a2:b6:40:ba:e1:0a:96:4e:da: de:34:be:6b:05:5e:db:76:76:76:84:cd:c1:97:4a: 26:e3:58:4b:a6:0d:48:93:32:b6:3c:4f:92:73:a9: 62:da:6f:69:d3:2e:4a:30:71:f9:1a:5a:b0:2e:70: f5:1c:0f:d1:72:06:f8:43:4f:83:14:2e:5f:80:01: 21:0e:ca:c0:a5:52:fe:81:62:c4:08:66:e1:55:02: 27:9e:d4:54:fb:f4:16:03:4f:e9:8c:5f:ab:7d:b6: ce:80:68:94:2c:fc:1e:c4:4e:33:fa:bd:15:3d:d4: 0f:25:66:9e:b0:a2:e0:39:ef:38:e7:15:7f:91:47: ff:12:89:86:c1:00:cc:14:ef:96:45:81:c3:54:26: c1:5c:df:77:c5:33:71:44:16:47:e1:eb:68:11:03: 6b:ff:63:ba:eb:58:39:fa:a5:36:d7:9f:70:6b:9e: 87:c1:55:f4:10:81:97:6a:ef:ad:df:c0:f6:12:bd: 04:5a:c4:83:5b:bd:26:54:06:56:6e:57:d3:c0:c2: 43:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1D:4B:11:05:5E:B2:86:09:9C:3D:0D:AB:3B:EB:97:F9:02:11:6D X509v3 Authority Key Identifier: keyid:00:04:6B:43:45:26:BF:28:36:E2:74:9C:E0:E3:6E:08:44:3D:6B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AARrQ0Umvyg24nSc4ONuCEQ9a5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d37f8d-410d-4518-80e6-ecd671282c1f/1/AARrQ0Umvyg24nSc4ONuCEQ9a5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ab:6c:1e:20:d1:ca:15:96:48:81:be:f6:49:ec:f5:f8:da: 7a:91:fb:ec:66:91:04:b6:a8:5d:3c:6f:e8:c0:35:29:9e:d0: 7e:f0:11:76:7d:c3:dd:de:9c:8d:c0:10:dc:8d:e1:72:ee:26: ba:9d:c3:e5:01:49:cb:96:59:9a:63:86:d4:78:c7:e1:83:56: 10:0e:eb:7b:d9:28:96:55:65:9e:0c:7b:d1:1b:6e:87:cd:da: 53:62:80:6b:4c:fd:b1:6d:ea:29:cd:38:4a:d0:e3:0e:f2:12: 34:49:a5:9d:0b:dd:5a:e2:03:47:14:85:8c:cc:14:79:b9:7a: ef:71:ff:2d:ff:dc:22:f0:47:9f:78:3c:bd:82:7d:37:78:8f: e9:73:e7:55:5a:c1:52:79:65:06:7a:52:94:9b:f9:94:4a:6d: 72:de:9d:9c:6b:14:6d:af:22:bb:6a:39:b5:e4:cb:8b:91:6e: 06:b7:8e:9a:83:da:64:80:1d:52:00:50:38:1f:e0:ea:1e:89: 84:f9:13:12:ca:e8:84:88:b3:1b:c5:09:73:a6:e7:3d:ea:28: 7d:29:aa:81:4f:79:4b:e2:9c:ef:61:a2:05:f6:ef:d8:17:d8: 3e:b4:fc:07:c4:a5:4c:d4:f1:9f:f8:64:ea:7d:a9:94:a6:38: b4:f4:f4:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv/HW+aEIVfXPsz2ZFypquGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMDQ2YjQzNDUyNmJmMjgzNmUyNzQ5Y2UwZTM2ZTA4NDQz ZDZiOTEwHhcNMjYwMTI3MTEwMTE3WhcNMjYwMTI4MTEwMTE3WjAzMTEwLwYDVQQD Eyg3ODFkNGIxMTA1NWViMjg2MDk5YzNkMGRhYjNiZWI5N2Y5MDIxMTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+1rRYe1bgYg82nx5YvnjE4aFusx 5GWXOpyARQZCeGoFK5Rs5xcjwIwnNmjpghTHhvKitkC64QqWTtreNL5rBV7bdnZ2 hM3Bl0om41hLpg1IkzK2PE+Sc6li2m9p0y5KMHH5GlqwLnD1HA/Rcgb4Q0+DFC5f gAEhDsrApVL+gWLECGbhVQInntRU+/QWA0/pjF+rfbbOgGiULPwexE4z+r0VPdQP JWaesKLgOe845xV/kUf/EomGwQDMFO+WRYHDVCbBXN93xTNxRBZH4etoEQNr/2O6 61g5+qU2159wa56HwVX0EIGXau+t38D2Er0EWsSDW70mVAZWblfTwMJDHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgdSxEFXrKGCZw9Das765f5AhFtMB8GA1UdIwQY MBaAFAAEa0NFJr8oNuJ0nODjbghEPWuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUFSclEwVW12eWcyNG5TYzRPTnVDRVE5YTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kMzdmOGQtNDEwZC00NTE4LTgwZTYt ZWNkNjcxMjgyYzFmLzEvQUFSclEwVW12eWcyNG5TYzRPTnVDRVE5YTVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9kMzdmOGQtNDEwZC00NTE4LTgwZTYtZWNkNjcxMjgyYzFm LzEvQUFSclEwVW12eWcyNG5TYzRPTnVDRVE5YTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdatsHiDR yhWWSIG+9kns9fjaepH77GaRBLaoXTxv6MA1KZ7QfvARdn3D3d6cjcAQ3I3hcu4m up3D5QFJy5ZZmmOG1HjH4YNWEA7re9kollVlngx70Rtuh83aU2KAa0z9sW3qKc04 StDjDvISNEmlnQvdWuIDRxSFjMwUebl673H/Lf/cIvBHn3g8vYJ9N3iP6XPnVVrB UnllBnpSlJv5lEptct6dnGsUba8iu2o5teTLi5FuBreOmoPaZIAdUgBQOB/g6h6J hPkTEsrohIizG8UJc6bnPeoofSmqgU95S+Kc72GiBfbv2BfYPrT8B8SlTNTxn/hk 6n2plKY4tPT0/g== -----END CERTIFICATE-----Generated at Tue Jan 27 17:11:36 2026 by rpki-client