This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json) Hash identifier: j028yuoXUXN7SE6UWuiMOw/c3jlgVlTTNI9EMJ8pFn4= Subject key identifier: 43:17:2C:D9:66:4A:F1:EE:39:AD:18:A8:76:09:C2:17:9B:92:EC:53 Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09 Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209 Certificate serial: 019BF65174D3A5CA250F40BC6F07DCD84B8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 18:01:31 +0000 Manifest this update: Sun 25 Jan 2026 18:01:31 +0000 Manifest next update: Mon 26 Jan 2026 18:01:31 +0000 Files and hashes: 1: 8Ivw6aiJokZ_OUCEulnk2OeUJTY.roa (hash: 6xrWGdyxawdEMK6O4Q1cicRgrEdyMGUN76CAC9qMeQs=) 2: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: 40mk9a69/HvQPE2I6iAg18G6I4YV6ctBJTf/wv5RBvc=) 3: pHyfE-IkMhxcPHPc-HwDzXsFVjQ.roa (hash: uyoFgMWyTuoY09i37tyWsmZah+QoAHk4CSzGk/eiO5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:74:d3:a5:ca:25:0f:40:bc:6f:07:dc:d8:4b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209 Validity Not Before: Jan 25 18:01:31 2026 GMT Not After : Jan 26 18:01:31 2026 GMT Subject: CN=43172cd9664af1ee39ad18a87609c2179b92ec53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:eb:74:4c:ff:2a:e2:bd:da:8f:32:2f:15:d4: a8:f7:b5:15:f0:2c:35:57:36:97:72:a1:6b:93:f9: 2b:cd:09:87:ee:74:bb:a8:42:3c:ec:d9:cd:f8:5a: d8:dd:ef:44:d9:9d:ea:f2:76:e2:a8:96:23:d0:c3: 14:5c:c8:a0:85:b2:05:18:cc:1a:f5:52:eb:ec:fa: c6:22:7d:89:9c:e8:b9:32:22:c8:ce:4d:aa:af:bd: d1:db:20:94:7d:84:29:fe:bf:12:6b:c7:68:47:90: 88:ca:8a:78:76:05:5a:d3:c7:8b:5a:15:b7:8f:ea: 3b:b1:cc:f0:81:f0:d7:cc:22:8e:2e:ad:59:6a:16: 4f:f1:26:8f:07:cd:0a:ee:0c:73:6b:18:cb:9b:8c: ad:b1:fe:69:00:e1:67:59:2a:3b:eb:6b:98:cd:35: bb:fd:09:4f:ff:46:95:3e:4b:39:d5:08:dd:b4:1a: 1a:9b:b7:f3:9b:e4:dc:31:81:b8:cf:a8:19:0d:c6: f9:ef:d5:b5:ac:79:e0:0b:01:d0:80:dc:92:f0:d3: 49:03:4c:d9:2f:d8:7a:73:38:8d:ce:be:bf:a2:1e: b8:a9:74:0d:1c:0e:c9:db:3d:d5:68:18:1a:52:c0: 27:81:57:09:ca:30:42:97:9d:cc:60:a4:73:00:5f: a1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:17:2C:D9:66:4A:F1:EE:39:AD:18:A8:76:09:C2:17:9B:92:EC:53 X509v3 Authority Key Identifier: keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a1:5e:2e:21:3e:a2:d5:a5:d8:2f:4f:ac:2c:6e:81:f9:69: 3e:ad:89:0a:bf:a7:3b:34:04:be:ff:41:6c:2e:c4:f6:4a:0f: 6c:0f:79:f5:10:1d:ee:30:60:be:e8:0b:f9:88:a8:ad:0f:9f: 7b:85:af:92:9e:06:60:50:d1:c1:36:56:fa:91:e5:94:7d:59: 51:58:e4:ba:b6:65:f9:3f:9a:7b:7d:38:a6:22:28:ab:73:5d: bd:fe:c8:0e:6c:9e:22:79:4c:02:d6:ed:7b:2f:3c:95:fc:f3: c1:8d:78:2e:e8:66:fa:43:aa:0c:e8:1b:a7:e4:21:c3:33:31: 65:77:56:0c:8e:56:83:c8:fb:20:fa:d0:17:09:1b:4d:39:c6: 05:69:40:ae:9d:47:0a:70:ca:12:27:f1:82:a4:b9:e2:d4:5d: 27:7f:7b:c0:82:65:0a:47:8c:f4:a2:b0:c8:f7:15:fe:e6:bf: 66:fb:6f:5d:81:6b:a1:0d:6f:e2:dc:61:59:f0:9b:9e:65:eb: 74:c2:80:b4:63:3a:bc:92:f4:67:61:01:31:8f:8a:50:49:01: d2:19:8c:ca:9e:89:17:2a:5e:c2:d5:de:ee:8d:e4:6d:2f:b8: 61:e7:9e:3d:fb:d2:61:02:bc:af:7f:30:21:43:17:bf:08:79: 89:45:32:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UXTTpcolD0C8bwfc2EuOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYWIwMTBjZjVjMTFjMWIzMDY5M2QxMTQxN2I2MGNmNDVm YjEyMDkwHhcNMjYwMTI1MTgwMTMxWhcNMjYwMTI2MTgwMTMxWjAzMTEwLwYDVQQD Eyg0MzE3MmNkOTY2NGFmMWVlMzlhZDE4YTg3NjA5YzIxNzliOTJlYzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOt0TP8q4r3ajzIvFdSo97UV8Cw1 VzaXcqFrk/krzQmH7nS7qEI87NnN+FrY3e9E2Z3q8nbiqJYj0MMUXMighbIFGMwa 9VLr7PrGIn2JnOi5MiLIzk2qr73R2yCUfYQp/r8Sa8doR5CIyop4dgVa08eLWhW3 j+o7sczwgfDXzCKOLq1ZahZP8SaPB80K7gxzaxjLm4ytsf5pAOFnWSo762uYzTW7 /QlP/0aVPks51QjdtBoam7fzm+TcMYG4z6gZDcb579W1rHngCwHQgNyS8NNJA0zZ L9h6cziNzr6/oh64qXQNHA7J2z3VaBgaUsAngVcJyjBCl53MYKRzAF+htwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMXLNlmSvHuOa0YqHYJwhebkuxTMB8GA1UdIwQY MBaAFAKrAQz1wRwbMGk9EUF7YM9F+xIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83OWMwYTktZTVlNC00N2MzLTgyM2Yt MGI4YjA3NWU4NmRiLzEvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83OWMwYTktZTVlNC00N2MzLTgyM2YtMGI4YjA3NWU4NmRi LzEvQXFzQkRQWEJIQnN3YVQwUlFYdGd6MFg3RWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK6FeLiE+ otWl2C9PrCxugflpPq2JCr+nOzQEvv9BbC7E9koPbA959RAd7jBgvugL+YiorQ+f e4Wvkp4GYFDRwTZW+pHllH1ZUVjkurZl+T+ae304piIoq3Ndvf7IDmyeInlMAtbt ey88lfzzwY14Luhm+kOqDOgbp+QhwzMxZXdWDI5Wg8j7IPrQFwkbTTnGBWlArp1H CnDKEifxgqS54tRdJ397wIJlCkeM9KKwyPcV/ua/ZvtvXYFroQ1v4txhWfCbnmXr dMKAtGM6vJL0Z2EBMY+KUEkB0hmMyp6JFypewtXe7o3kbS+4YeeePfvSYQK8r38w IUMXvwh5iUUyEg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:36:36 2026 by rpki-client