This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft File: Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft (raw, json) Hash identifier: 9G4cv4Z4W+1MdQCDOLsycpDBhAFLO2+ydxw2SENjHbE= Subject key identifier: 18:E0:36:A0:BC:0F:80:5D:40:39:49:37:8B:C9:AF:7E:77:22:F9:56 Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90 Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90 Certificate serial: 019BF650AC479D334ED55D542ABBB0400508 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft Manifest number: 0461 Signing time: Sun 25 Jan 2026 18:00:40 +0000 Manifest this update: Sun 25 Jan 2026 18:00:40 +0000 Manifest next update: Mon 26 Jan 2026 18:00:40 +0000 Files and hashes: 1: 0U-rEF9agnpJ5Ty3fMelv62IQ0M.roa (hash: fzpeIGTnD7Q+WUFkK4UZ/gImbOfjt8R2WwapBm5NRmI=) 2: Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl (hash: omUB6CgybdlHkya6ZgwwMqWnKBepLvZVEXWIOhyfLnY=) 3: pvD38KfkiRiyA2ciIkT3w1-D9ho.roa (hash: d0J3qo9sPsuBsDx9fbtomBKJ9mGpLuYbMo3eWUmo/lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:ac:47:9d:33:4e:d5:5d:54:2a:bb:b0:40:05:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90 Validity Not Before: Jan 25 18:00:40 2026 GMT Not After : Jan 26 18:00:40 2026 GMT Subject: CN=18e036a0bc0f805d403949378bc9af7e7722f956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bb:1f:8d:e5:18:d9:30:d1:bb:1c:fe:42:fa: 46:ae:e3:78:75:9c:e9:48:b2:eb:b8:12:c0:f9:25: a1:2a:84:a8:16:57:44:e1:a2:07:f4:0a:42:d6:a0: af:cd:67:13:22:f9:df:4b:d1:e0:ec:17:3a:2b:be: ec:50:52:0c:06:7a:f3:f7:f8:db:79:6f:f7:9e:df: 0f:80:87:fc:cc:92:3d:bf:ec:17:e4:1c:e2:95:30: d1:32:98:24:35:fd:b8:99:74:6d:e5:f6:6e:96:12: b7:1a:be:45:6f:9a:21:a8:0d:be:fc:d8:b4:ab:70: 3e:b5:55:9c:d4:b3:b7:67:14:2f:9a:65:df:08:71: 5f:f8:20:27:81:2c:fd:a2:2a:fc:4e:d8:52:3a:6e: 82:27:d4:aa:6d:6f:ca:70:d5:6b:a5:da:80:d6:5b: 4c:da:9e:c8:ca:63:a5:4a:22:62:13:db:06:15:d8: 41:b3:c6:b7:2c:e7:ef:f4:96:69:bb:09:d7:80:c9: be:9e:82:0b:56:d4:16:85:29:71:f6:d7:21:bf:5e: ab:35:8d:02:99:11:84:60:d6:c5:44:55:a7:48:f3: 3c:bf:b3:f3:5e:95:b9:92:96:dd:99:11:a4:72:9d: 71:dc:17:11:4a:32:c3:a2:63:60:e6:99:aa:ba:f1: 75:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E0:36:A0:BC:0F:80:5D:40:39:49:37:8B:C9:AF:7E:77:22:F9:56 X509v3 Authority Key Identifier: keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:69:ec:0c:04:cd:a5:f6:3e:58:d1:5a:1b:d8:d6:8b:8b:c7: fa:e7:ce:ad:ca:80:41:1a:68:ec:3e:b2:bd:46:db:33:2c:45: f8:7c:58:4c:5c:b1:1c:3e:a5:76:ff:da:f3:43:13:5e:fa:de: b2:12:a9:4e:da:35:de:fa:22:4e:10:f3:9e:b9:12:c9:df:37: b0:06:e0:fd:93:82:23:75:16:f8:af:52:b7:97:36:d9:dd:4a: 7d:c0:0c:77:4b:cd:57:55:68:02:fd:06:a0:ad:79:06:13:a0: a1:5c:3b:2d:50:bb:af:06:7d:10:d1:54:70:ea:45:de:d7:45: b3:23:27:61:25:20:ea:b6:b4:ff:b8:ed:cb:2a:45:d4:da:63: e8:99:f1:ef:fc:c5:00:17:1f:59:cd:1f:fb:3a:e6:f4:ab:fd: cc:5d:81:f2:63:82:6c:b4:4e:25:58:c4:8e:e4:43:59:90:d4: d8:19:dc:a8:5c:60:88:2a:53:93:d9:bd:39:0d:5f:03:2f:9a: b3:9e:ec:1f:fd:e6:36:35:d4:54:fd:e8:cb:1f:76:eb:e7:93: 4d:87:81:a6:8a:af:2b:8c:46:7f:33:69:e9:fe:09:2e:47:d5: 77:ce:b4:eb:91:45:1d:c8:8d:ae:4c:76:84:a5:8a:8f:8e:89: 50:b5:26:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UKxHnTNO1V1UKruwQAUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNmQ1MTFjZTNhZjkwYzRkNjAxYzdjY2Y4MzYwNTIzNzEz ZTJjOTAwHhcNMjYwMTI1MTgwMDQwWhcNMjYwMTI2MTgwMDQwWjAzMTEwLwYDVQQD EygxOGUwMzZhMGJjMGY4MDVkNDAzOTQ5Mzc4YmM5YWY3ZTc3MjJmOTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LsfjeUY2TDRuxz+QvpGruN4dZzp SLLruBLA+SWhKoSoFldE4aIH9ApC1qCvzWcTIvnfS9Hg7Bc6K77sUFIMBnrz9/jb eW/3nt8PgIf8zJI9v+wX5BzilTDRMpgkNf24mXRt5fZulhK3Gr5Fb5ohqA2+/Ni0 q3A+tVWc1LO3ZxQvmmXfCHFf+CAngSz9oir8TthSOm6CJ9SqbW/KcNVrpdqA1ltM 2p7IymOlSiJiE9sGFdhBs8a3LOfv9JZpuwnXgMm+noILVtQWhSlx9tchv16rNY0C mRGEYNbFRFWnSPM8v7PzXpW5kpbdmRGkcp1x3BcRSjLDomNg5pmquvF1nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjgNqC8D4BdQDlJN4vJr353IvlWMB8GA1UdIwQY MBaAFAJtURzjr5DE1gHHzPg2BSNxPiyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW0xUkhPT3ZrTVRXQWNmTS1EWUZJM0UtTEpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMGM0MDItZTA5ZS00YzY5LWFjYzkt ODRkYTYyMDY2ZThhLzEvQW0xUkhPT3ZrTVRXQWNmTS1EWUZJM0UtTEpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iMGM0MDItZTA5ZS00YzY5LWFjYzktODRkYTYyMDY2ZThh LzEvQW0xUkhPT3ZrTVRXQWNmTS1EWUZJM0UtTEpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGnsDATN pfY+WNFaG9jWi4vH+ufOrcqAQRpo7D6yvUbbMyxF+HxYTFyxHD6ldv/a80MTXvre shKpTto13voiThDznrkSyd83sAbg/ZOCI3UW+K9St5c22d1KfcAMd0vNV1VoAv0G oK15BhOgoVw7LVC7rwZ9ENFUcOpF3tdFsyMnYSUg6ra0/7jtyypF1Npj6Jnx7/zF ABcfWc0f+zrm9Kv9zF2B8mOCbLROJVjEjuRDWZDU2BncqFxgiCpTk9m9OQ1fAy+a s57sH/3mNjXUVP3oyx926+eTTYeBpoqvK4xGfzNp6f4JLkfVd86065FFHciNrkx2 hKWKj46JULUm0w== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:24 2026 by rpki-client