This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft File: AkHvRDYUJQbyZZODwW69oeKbT4Y.mft (raw, json) Hash identifier: eVDsa8HdhfAnvZ232dA47rYoZ4xc/LiEjJ1fRvIQ6R4= Subject key identifier: B3:19:47:4D:B0:C0:64:15:F2:35:6C:AF:9F:2D:8C:20:6F:1A:47:72 Authority key identifier: 02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86 Certificate issuer: /CN=0241ef4436142506f2659383c16ebda1e29b4f86 Certificate serial: 019BF42C18AD4F67359EC80F45E5B6C00F7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft Manifest number: 10AA Signing time: Sun 25 Jan 2026 08:01:29 +0000 Manifest this update: Sun 25 Jan 2026 08:01:29 +0000 Manifest next update: Mon 26 Jan 2026 08:01:29 +0000 Files and hashes: 1: AkHvRDYUJQbyZZODwW69oeKbT4Y.crl (hash: ilyn2CAZK49FtwBdhFDsk7EbgOgg5XaXPNMBO7M8P6U=) 2: mIZXI4mZrRbzXPh4YmTsjubQ1Zc.roa (hash: bzN5/dHvXtXSM/Oh2+pMoFqPyzgsKGPGMLfbcUvulmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2c:18:ad:4f:67:35:9e:c8:0f:45:e5:b6:c0:0f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0241ef4436142506f2659383c16ebda1e29b4f86 Validity Not Before: Jan 25 08:01:29 2026 GMT Not After : Jan 26 08:01:29 2026 GMT Subject: CN=b319474db0c06415f2356caf9f2d8c206f1a4772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:57:28:a1:3d:a1:b0:7f:10:e2:76:29:08:83: e1:86:37:0d:a3:81:e0:b5:fd:21:ae:5f:84:d1:82: 4c:c2:aa:14:08:8e:e5:ba:53:9f:1e:26:14:f2:b7: 8a:49:7b:17:6c:2e:3b:02:30:a4:78:d0:6b:68:d5: 8f:80:ef:3a:76:5a:f4:58:11:7b:68:d1:bf:09:ab: a1:f2:bd:85:8f:92:89:13:ba:44:e3:fc:f2:4c:83: ad:4e:15:78:4f:37:db:4c:73:2d:a2:45:0d:19:bf: 84:21:01:84:1c:ef:a2:7a:bc:4f:17:d3:ed:a9:5a: db:2d:62:17:c0:09:ca:da:83:d9:e5:45:88:84:e5: 15:9c:9c:5b:36:3a:28:8f:d2:76:97:b1:a3:1b:95: b1:3d:bb:8f:30:48:26:41:1f:d8:c3:b2:c7:46:6e: 00:67:d7:75:81:a1:39:68:7b:bd:77:91:0b:5c:66: 77:b6:2c:44:b6:56:77:1b:e9:33:85:fb:08:d0:6e: 2e:78:99:96:64:00:76:81:9c:53:df:b9:01:49:2e: 51:16:63:00:eb:0e:e9:85:e1:ba:7b:6e:32:50:29: 1b:01:d8:f5:a7:24:29:e8:15:5d:74:ca:43:c5:54: d8:b6:ed:ae:5e:2a:49:16:ab:1e:5b:df:a8:31:82: bb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:19:47:4D:B0:C0:64:15:F2:35:6C:AF:9F:2D:8C:20:6F:1A:47:72 X509v3 Authority Key Identifier: keyid:02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5d:c9:a9:fa:4c:58:2c:88:cb:45:81:9e:2f:f5:61:1c:c3: 67:52:2e:75:5c:c0:92:31:a1:b1:84:66:3c:11:e0:f7:1a:9e: ed:a6:d8:f9:36:cd:17:5d:49:6b:7b:30:70:b7:ac:1b:e3:91: 05:b6:68:12:f0:cf:93:f2:20:76:f2:34:76:3a:77:36:89:18: f3:9e:28:db:4d:85:54:f0:ba:91:f9:3b:70:a4:a3:a5:cc:67: 55:b0:48:2c:91:f7:28:4e:23:f0:57:44:3a:59:02:87:1a:1b: 8b:07:4d:9a:b6:5c:d8:95:6a:e0:5f:d0:87:bd:0c:23:90:76: 7e:9b:09:20:45:55:40:de:65:fe:1e:4b:28:7a:1b:15:10:7a: ac:a6:a0:1c:3f:17:a7:74:95:3d:12:6d:88:50:92:ff:78:6f: e3:08:c4:ba:79:86:4a:5d:45:65:06:51:ce:b6:0f:3e:47:47: e5:4b:f6:df:f7:1d:d6:ae:68:84:0c:58:80:7d:fc:44:48:eb: b5:cc:d6:4a:1c:cd:ee:28:66:85:64:3d:dc:bf:d6:4d:ce:cf: 9a:10:5e:8e:cc:59:ba:0f:f4:5b:49:63:5e:91:7f:3d:56:a8: c6:a0:bf:36:18:45:30:e0:54:6a:f0:b9:37:14:35:55:60:6d: f9:18:96:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0LBitT2c1nsgPReW2wA98MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNDFlZjQ0MzYxNDI1MDZmMjY1OTM4M2MxNmViZGExZTI5 YjRmODYwHhcNMjYwMTI1MDgwMTI5WhcNMjYwMTI2MDgwMTI5WjAzMTEwLwYDVQQD EyhiMzE5NDc0ZGIwYzA2NDE1ZjIzNTZjYWY5ZjJkOGMyMDZmMWE0NzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1cooT2hsH8Q4nYpCIPhhjcNo4Hg tf0hrl+E0YJMwqoUCI7lulOfHiYU8reKSXsXbC47AjCkeNBraNWPgO86dlr0WBF7 aNG/Cauh8r2Fj5KJE7pE4/zyTIOtThV4TzfbTHMtokUNGb+EIQGEHO+ierxPF9Pt qVrbLWIXwAnK2oPZ5UWIhOUVnJxbNjooj9J2l7GjG5WxPbuPMEgmQR/Yw7LHRm4A Z9d1gaE5aHu9d5ELXGZ3tixEtlZ3G+kzhfsI0G4ueJmWZAB2gZxT37kBSS5RFmMA 6w7pheG6e24yUCkbAdj1pyQp6BVddMpDxVTYtu2uXipJFqseW9+oMYK7OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMZR02wwGQV8jVsr58tjCBvGkdyMB8GA1UdIwQY MBaAFAJB70Q2FCUG8mWTg8FuvaHim0+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWtIdlJEWVVKUWJ5WlpPRHdXNjlvZUtiVDRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85ZWUyMDItYjliMy00N2YwLThjOWEt OWZkZjRjMTVmOWE2LzEvQWtIdlJEWVVKUWJ5WlpPRHdXNjlvZUtiVDRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85ZWUyMDItYjliMy00N2YwLThjOWEtOWZkZjRjMTVmOWE2 LzEvQWtIdlJEWVVKUWJ5WlpPRHdXNjlvZUtiVDRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW13JqfpM WCyIy0WBni/1YRzDZ1IudVzAkjGhsYRmPBHg9xqe7abY+TbNF11Ja3swcLesG+OR BbZoEvDPk/IgdvI0djp3NokY854o202FVPC6kfk7cKSjpcxnVbBILJH3KE4j8FdE OlkChxobiwdNmrZc2JVq4F/Qh70MI5B2fpsJIEVVQN5l/h5LKHobFRB6rKagHD8X p3SVPRJtiFCS/3hv4wjEunmGSl1FZQZRzrYPPkdH5Uv23/cd1q5ohAxYgH38REjr tczWShzN7ihmhWQ93L/WTc7PmhBejsxZug/0W0ljXpF/PVaoxqC/NhhFMOBUavC5 NxQ1VWBt+RiWWQ== -----END CERTIFICATE-----Generated at Sun Jan 25 18:15:08 2026 by rpki-client