This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft File: AApnGNU5FVwnMAQB8sRmdRPuxbE.mft (raw, json) Hash identifier: floVK2PP+c/cJpvd5vzdGz96qwD+DFdNxWHi00OjGwE= Subject key identifier: 5F:C5:00:03:79:8B:F8:5D:BD:8C:6F:70:B3:3C:50:69:3E:46:EF:C4 Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1 Certificate issuer: /CN=000a6718d539155c27300401f2c4667513eec5b1 Certificate serial: 019BF7D205633D790EE62ABB157BEE979979 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 01:01:34 +0000 Manifest this update: Mon 26 Jan 2026 01:01:34 +0000 Manifest next update: Tue 27 Jan 2026 01:01:34 +0000 Files and hashes: 1: AApnGNU5FVwnMAQB8sRmdRPuxbE.crl (hash: qSva7Nor180tqdsi6MZqV9jMUUwiDAJ7XhHUJrCH0Ss=) 2: C3g4bPj0WpteooCh1kAuPYqRZBg.roa (hash: 0XrpEklayrORIBGmjGj7RMMjUbxEU4fiPGHiYSn1AmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:05:63:3d:79:0e:e6:2a:bb:15:7b:ee:97:99:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1 Validity Not Before: Jan 26 01:01:34 2026 GMT Not After : Jan 27 01:01:34 2026 GMT Subject: CN=5fc50003798bf85dbd8c6f70b33c50693e46efc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:66:2f:e3:01:e6:c8:6e:de:6b:99:55:fe:f2: 67:bf:e4:73:13:c5:32:63:1e:3b:99:4c:85:62:5c: 38:e7:ef:9c:ce:0d:a5:a9:f4:a6:c4:66:75:4a:cb: de:ce:3a:17:95:22:ef:fa:97:de:c1:bd:b6:f1:82: 5c:1d:fc:e7:5d:33:3f:6c:74:4a:16:9f:42:21:79: 0f:23:89:c6:44:4c:34:c1:03:0c:0f:8f:4f:88:83: 97:6c:5f:4d:8e:fe:ac:c1:5a:e0:86:1d:ea:12:7e: 65:97:a7:d3:64:04:39:92:66:ef:cf:46:46:cf:fd: 55:0e:6a:26:69:0c:da:27:09:51:8b:47:1b:cc:d3: 06:7b:07:e5:dc:2b:92:73:79:83:d1:44:1b:85:cb: 6d:62:3d:a0:cc:af:df:9e:1f:b7:cb:f7:27:42:46: dd:5a:f7:ed:f9:b0:c0:09:19:97:f6:17:f6:54:f8: d9:85:80:58:e0:a4:d6:8a:ab:b2:d6:58:89:57:1c: 37:aa:bd:62:49:dc:20:91:47:35:83:4f:cf:1f:58: 19:6c:fe:79:a8:8d:1f:a9:0b:13:b1:fe:f9:11:86: 39:e3:9e:c9:3b:6d:86:ee:d8:41:1c:3c:e5:42:42: 6d:d0:2a:82:47:75:32:17:06:88:26:47:ab:50:53: 7f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C5:00:03:79:8B:F8:5D:BD:8C:6F:70:B3:3C:50:69:3E:46:EF:C4 X509v3 Authority Key Identifier: keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:4e:00:15:41:d6:a4:5e:86:9c:2b:d8:9a:f4:ab:21:f0:a1: 81:da:76:d9:b4:ca:6a:65:e4:00:32:c4:1c:26:c6:1a:ca:1b: 8a:e6:53:e3:9d:22:ac:e5:cd:e2:93:43:79:d2:26:3e:90:e9: f6:08:fc:18:60:95:28:81:95:dd:25:71:bf:e3:1b:23:52:d8: 28:93:13:1c:e8:95:a8:81:2d:08:de:2c:74:2b:d8:9b:88:8a: 61:6c:b2:de:6b:fc:24:37:8f:d4:6b:39:2b:17:70:e2:2a:73: 5d:ef:06:cd:09:18:15:64:6f:61:95:b1:87:f9:0b:4d:32:92: 14:d2:85:6c:a0:78:9d:cf:8b:71:3f:72:c9:03:80:ab:44:98: 55:19:33:a6:b2:5d:9e:69:e4:d1:27:d2:c7:99:de:7a:11:35: e7:86:49:ff:6c:de:41:9a:14:2d:d3:df:1c:80:d9:13:5d:f9: 70:65:cf:de:36:46:f5:3e:37:e0:e6:5e:0d:4f:e6:b5:c4:b4: 24:4f:21:50:e6:b2:e5:21:a4:d4:9e:bd:20:26:a6:5b:a6:52: ef:4a:09:7f:4e:19:01:d3:17:5b:f1:7b:50:aa:7c:85:fc:88: cc:1c:83:9c:54:b4:5c:1f:7c:8d:9b:bc:d0:00:3c:39:90:aa: e3:70:08:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30gVjPXkO5iq7FXvul5l5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMGE2NzE4ZDUzOTE1NWMyNzMwMDQwMWYyYzQ2Njc1MTNl ZWM1YjEwHhcNMjYwMTI2MDEwMTM0WhcNMjYwMTI3MDEwMTM0WjAzMTEwLwYDVQQD Eyg1ZmM1MDAwMzc5OGJmODVkYmQ4YzZmNzBiMzNjNTA2OTNlNDZlZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmYv4wHmyG7ea5lV/vJnv+RzE8Uy Yx47mUyFYlw45++czg2lqfSmxGZ1SsvezjoXlSLv+pfewb228YJcHfznXTM/bHRK Fp9CIXkPI4nGREw0wQMMD49PiIOXbF9Njv6swVrghh3qEn5ll6fTZAQ5kmbvz0ZG z/1VDmomaQzaJwlRi0cbzNMGewfl3CuSc3mD0UQbhcttYj2gzK/fnh+3y/cnQkbd Wvft+bDACRmX9hf2VPjZhYBY4KTWiquy1liJVxw3qr1iSdwgkUc1g0/PH1gZbP55 qI0fqQsTsf75EYY5457JO22G7thBHDzlQkJt0CqCR3UyFwaIJkerUFN/AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/FAAN5i/hdvYxvcLM8UGk+Ru/EMB8GA1UdIwQY MBaAFAAKZxjVORVcJzAEAfLEZnUT7sWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMjMzNDgtNjJjZi00YWZhLTk0ZmMt OWRkODU2MWNhZWRlLzEvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hMjMzNDgtNjJjZi00YWZhLTk0ZmMtOWRkODU2MWNhZWRl LzEvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdk4AFUHW pF6GnCvYmvSrIfChgdp22bTKamXkADLEHCbGGsobiuZT450irOXN4pNDedImPpDp 9gj8GGCVKIGV3SVxv+MbI1LYKJMTHOiVqIEtCN4sdCvYm4iKYWyy3mv8JDeP1Gs5 Kxdw4ipzXe8GzQkYFWRvYZWxh/kLTTKSFNKFbKB4nc+LcT9yyQOAq0SYVRkzprJd nmnk0SfSx5neehE154ZJ/2zeQZoULdPfHIDZE135cGXP3jZG9T434OZeDU/mtcS0 JE8hUOay5SGk1J69ICamW6ZS70oJf04ZAdMXW/F7UKp8hfyIzByDnFS0XB98jZu8 0AA8OZCq43AIiQ== -----END CERTIFICATE-----Generated at Mon Jan 26 11:10:33 2026 by rpki-client