This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft File: aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft (raw, json) Hash identifier: /1hn8961/H369rgTuE+kTw2xhB1Pj+AEPi8lX57JqLA= Subject key identifier: 3C:E6:04:85:CC:B2:96:21:21:AA:14:27:61:6B:F3:AE:0A:3C:25:15 Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71 Certificate issuer: /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71 Certificate serial: 019BF808B1D978EDCC5D9069094948B7F674 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft Manifest number: 06A7 Signing time: Mon 26 Jan 2026 02:01:17 +0000 Manifest this update: Mon 26 Jan 2026 02:01:17 +0000 Manifest next update: Tue 27 Jan 2026 02:01:17 +0000 Files and hashes: 1: 5JP3EEY5bnKcvSQg_d_0jzLOuso.roa (hash: nHWCClQokNNDpIYjG0ERFvivPbSmCZ+n7ir/zAxywpM=) 2: aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl (hash: yZ/xAjcAn1Apx6wBhjlxFcTZsaQJ1GwFp8ShejPLwRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:b1:d9:78:ed:cc:5d:90:69:09:49:48:b7:f6:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71 Validity Not Before: Jan 26 02:01:17 2026 GMT Not After : Jan 27 02:01:17 2026 GMT Subject: CN=3ce60485ccb2962121aa1427616bf3ae0a3c2515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:87:a1:d9:5d:62:ae:0b:66:45:e7:55:6f:cb: 0b:64:64:a7:f4:fa:22:14:ea:3d:da:b5:56:67:77: ee:f1:a3:58:1f:b3:de:13:e2:0c:c6:82:bb:a7:d0: 17:80:5e:12:76:1d:50:12:fa:d1:cd:19:05:0e:4b: 1e:ed:8e:e7:94:9b:f3:4c:3b:1f:91:95:04:98:a5: f9:2f:95:71:a0:bf:9d:57:dc:57:5a:73:51:81:cc: 58:36:7d:1b:7d:db:46:9e:20:7e:71:5b:fb:70:e8: 1c:ac:50:25:27:b8:89:84:7f:7a:e3:7c:85:1c:17: 18:ab:f4:ed:5e:14:88:56:10:83:ef:39:f5:36:df: 65:52:0f:0b:78:99:a3:1c:f7:94:56:9a:33:cf:69: 7b:84:ed:39:97:df:b3:c1:8d:1c:d6:7e:2f:ce:7f: 81:1f:75:d5:ec:f7:12:a0:7b:46:78:53:dc:fe:ec: d9:f9:79:d4:2a:94:b6:1f:a6:1c:d1:81:58:2c:16: 0e:1e:a2:20:4a:64:48:5c:a0:2e:bd:45:f2:c3:5b: 94:f1:2a:3b:ee:83:3d:40:00:3f:a9:f2:90:76:de: 2e:c1:b5:b1:33:c3:f4:e0:bd:05:50:a1:5d:e8:3f: b9:33:04:99:a2:01:b1:a4:a5:87:c5:ef:a3:82:16: 22:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E6:04:85:CC:B2:96:21:21:AA:14:27:61:6B:F3:AE:0A:3C:25:15 X509v3 Authority Key Identifier: keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:fc:aa:48:8b:ba:0e:56:3d:93:f4:9f:e4:ac:fa:f4:43:ce: 36:e9:eb:df:8f:bf:fd:89:8d:6e:d0:6f:5a:4d:05:e4:ba:7b: 9b:62:fc:48:7d:d9:99:f9:3d:ef:bf:d6:e8:7a:31:99:fe:b5: 5f:50:6b:4d:08:14:0c:2f:07:4a:18:38:c3:d8:fc:40:fa:cc: 26:fb:3b:52:db:57:94:a4:5a:0f:21:72:66:ee:e0:cb:5b:c4: cd:4c:3c:b4:9c:9e:43:8e:a3:ec:68:77:5f:42:e3:e8:57:e5: 39:04:ce:3b:fc:76:d1:99:04:bb:91:dc:d9:40:6a:53:c3:32: 16:02:16:96:31:d2:50:d2:2a:ef:c5:c0:46:3e:bc:8e:fb:7d: e3:e5:b5:ae:a4:cc:3c:b9:f0:0d:5f:60:9b:3c:45:60:3f:59: 14:69:e0:4c:56:d3:7d:45:d3:92:c1:10:05:66:1f:4e:04:a4: cb:2d:62:0b:fc:5b:9d:a0:d1:e0:fc:d1:35:04:f8:d8:6c:53: e5:d9:60:62:3c:e7:8a:06:5c:12:96:5a:40:b4:66:76:85:c3: 83:91:96:90:75:2e:cb:95:82:bc:fc:f8:2c:2f:a4:d4:3f:35: 94:82:7b:6b:3a:dd:e3:5b:48:13:e6:7e:43:b6:b8:40:e7:5f: 2f:8b:9c:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CLHZeO3MXZBpCUlIt/Z0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZjgzZTJhMzQxNDVhZDQ3ZTBjYzJiM2M3OWZjNjMxMmJh ZTJjNzEwHhcNMjYwMTI2MDIwMTE3WhcNMjYwMTI3MDIwMTE3WjAzMTEwLwYDVQQD EygzY2U2MDQ4NWNjYjI5NjIxMjFhYTE0Mjc2MTZiZjNhZTBhM2MyNTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoeh2V1irgtmRedVb8sLZGSn9Poi FOo92rVWZ3fu8aNYH7PeE+IMxoK7p9AXgF4Sdh1QEvrRzRkFDkse7Y7nlJvzTDsf kZUEmKX5L5VxoL+dV9xXWnNRgcxYNn0bfdtGniB+cVv7cOgcrFAlJ7iJhH9643yF HBcYq/TtXhSIVhCD7zn1Nt9lUg8LeJmjHPeUVpozz2l7hO05l9+zwY0c1n4vzn+B H3XV7PcSoHtGeFPc/uzZ+XnUKpS2H6Yc0YFYLBYOHqIgSmRIXKAuvUXyw1uU8So7 7oM9QAA/qfKQdt4uwbWxM8P04L0FUKFd6D+5MwSZogGxpKWHxe+jghYiMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzmBIXMspYhIaoUJ2Fr864KPCUVMB8GA1UdIwQY MBaAFGj4Pio0FFrUfgzCs8efxjErrixxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81ZTlmOTAtYTZiMC00ZmQ4LWI4ZGQt NzkyODAyYzQzOTI1LzEvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy81ZTlmOTAtYTZiMC00ZmQ4LWI4ZGQtNzkyODAyYzQzOTI1 LzEvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPyqSIu6 DlY9k/Sf5Kz69EPONunr34+//YmNbtBvWk0F5Lp7m2L8SH3Zmfk977/W6Hoxmf61 X1BrTQgUDC8HShg4w9j8QPrMJvs7UttXlKRaDyFyZu7gy1vEzUw8tJyeQ46j7Gh3 X0Lj6FflOQTOO/x20ZkEu5Hc2UBqU8MyFgIWljHSUNIq78XARj68jvt94+W1rqTM PLnwDV9gmzxFYD9ZFGngTFbTfUXTksEQBWYfTgSkyy1iC/xbnaDR4PzRNQT42GxT 5dlgYjznigZcEpZaQLRmdoXDg5GWkHUuy5WCvPz4LC+k1D81lIJ7azrd41tIE+Z+ Q7a4QOdfL4ucbg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:18:38 2026 by rpki-client