This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft File: aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft (raw, json) Hash identifier: LxYZo0+VFc+LLJW8G93Lz5fqT00Wqq+R3YyLHaRlzrk= Subject key identifier: 53:FB:47:9A:EE:08:2C:D2:0C:CF:4F:FF:65:43:DB:62:78:68:1D:83 Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B Certificate issuer: /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b Certificate serial: 019BF875EB2DE6DBD918D7D6C075C9A761E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 04:00:36 +0000 Manifest this update: Mon 26 Jan 2026 04:00:36 +0000 Manifest next update: Tue 27 Jan 2026 04:00:36 +0000 Files and hashes: 1: CbnygaBWTQeTgxo7VtHoGSI5Wjo.roa (hash: YABN8P02IK4MPeY+oFxkFQxQ2hLyZWLZEaI6zjoc+IM=) 2: aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl (hash: POAtO6ROfevkGnfc3F9A2usyJ395wySUWD8K0E3fOoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:75:eb:2d:e6:db:d9:18:d7:d6:c0:75:c9:a7:61:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b Validity Not Before: Jan 26 04:00:36 2026 GMT Not After : Jan 27 04:00:36 2026 GMT Subject: CN=53fb479aee082cd20ccf4fff6543db6278681d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:05:f2:0e:14:ee:24:cf:17:86:c3:10:fa:f0: 04:4d:13:c7:8f:56:87:9f:91:66:95:1b:c4:5a:d8: 11:b4:bf:be:14:f0:d3:f5:97:7c:23:c3:1f:49:74: 30:53:c0:76:7c:43:27:36:fc:5a:3a:70:ff:39:e7: a7:96:7c:49:55:7a:a3:a3:59:f9:62:4e:66:e3:91: 62:bc:09:5c:68:b9:7f:6a:7d:00:56:2f:eb:c1:4d: 3c:9d:7d:f2:72:ef:9e:cd:4b:ab:c1:75:73:5c:65: 29:6c:5a:e7:f6:a1:d2:f6:c6:18:d6:e4:b5:dc:ae: 13:90:3d:01:f5:b3:b8:94:5d:6b:d0:4e:92:59:04: 02:f4:ee:76:fd:ca:c3:f6:df:55:db:1d:66:a5:7d: c2:e0:10:b2:5f:e6:e0:a2:52:f5:dc:a3:4c:fb:d0: 31:ff:85:07:f6:1c:91:29:72:25:80:4b:11:07:1b: 54:5e:59:1f:89:5b:a3:5f:b2:cb:5c:d4:6f:bd:ae: 59:64:34:b5:b2:bd:aa:29:86:41:34:bb:21:08:7c: 33:3d:5a:08:55:a8:3d:ee:68:26:82:25:53:a0:00: 48:90:c3:fa:34:f3:ea:0a:2b:4c:9b:9a:15:8b:fa: 91:a6:db:ad:c8:d2:96:00:2f:0d:ac:b7:4f:40:0e: 36:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FB:47:9A:EE:08:2C:D2:0C:CF:4F:FF:65:43:DB:62:78:68:1D:83 X509v3 Authority Key Identifier: keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:3c:58:bf:5f:4f:d3:53:30:d6:4a:f0:a8:1c:4a:d0:7b:b4: e2:06:bb:69:3a:52:cc:c2:6a:36:de:35:b8:e7:5b:70:31:c2: 02:d0:0a:18:30:43:35:51:ae:e8:ed:4b:fe:7d:2d:fb:60:eb: b6:3d:a0:d5:60:dc:f6:5f:62:bc:52:4f:d0:0a:99:09:b9:99: e0:40:34:c4:a2:31:50:8a:8f:e7:56:cd:7c:4b:51:3d:e1:90: 2d:c8:52:ca:94:4e:90:20:06:67:4a:bd:75:a1:42:6e:20:0c: 3e:29:4d:6f:a3:cb:21:a2:0b:1a:fe:cc:26:28:1e:2b:5a:dc: a2:27:40:1c:28:05:04:de:07:0a:e3:ff:72:bc:4a:ac:98:f6: 8c:6c:93:d4:ec:67:ee:92:c8:94:64:8f:f4:9e:fd:a2:fc:55: 8e:56:53:30:b9:2c:4e:19:75:c6:eb:b9:31:3c:64:b8:b5:30: f9:ed:ae:7a:75:4b:38:d7:43:97:90:b3:26:d3:0d:e5:75:49: 55:a7:f1:a2:c0:f9:91:b0:bb:f0:bf:31:b6:97:15:c2:45:e5: 39:4e:5b:57:66:d8:9b:ea:15:67:f0:fa:76:cd:fd:b0:5b:09: 2c:f8:5f:f2:76:46:15:ea:88:23:f6:40:f5:40:c2:a1:f1:8b: cf:43:e5:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dest5tvZGNfWwHXJp2HoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NGU1MTVjYzViZTRlMjdlOWQzZDEzZTVlMWMxMWRjNzUy OTI3NGIwHhcNMjYwMTI2MDQwMDM2WhcNMjYwMTI3MDQwMDM2WjAzMTEwLwYDVQQD Eyg1M2ZiNDc5YWVlMDgyY2QyMGNjZjRmZmY2NTQzZGI2Mjc4NjgxZDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwXyDhTuJM8XhsMQ+vAETRPHj1aH n5FmlRvEWtgRtL++FPDT9Zd8I8MfSXQwU8B2fEMnNvxaOnD/OeenlnxJVXqjo1n5 Yk5m45FivAlcaLl/an0AVi/rwU08nX3ycu+ezUurwXVzXGUpbFrn9qHS9sYY1uS1 3K4TkD0B9bO4lF1r0E6SWQQC9O52/crD9t9V2x1mpX3C4BCyX+bgolL13KNM+9Ax /4UH9hyRKXIlgEsRBxtUXlkfiVujX7LLXNRvva5ZZDS1sr2qKYZBNLshCHwzPVoI Vag97mgmgiVToABIkMP6NPPqCitMm5oVi/qRptutyNKWAC8NrLdPQA42kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFP7R5ruCCzSDM9P/2VD22J4aB2DMB8GA1UdIwQY MBaAFGlOUVzFvk4n6dPRPl4cEdx1KSdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVU1UlhNVy1UaWZwMDlFLVhod1IzSFVwSjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83OTU2MjAtMjAwMy00Nzg1LTk5OWYt NTFjNzdjYzQ5MTQ2LzEvYVU1UlhNVy1UaWZwMDlFLVhod1IzSFVwSjBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS83OTU2MjAtMjAwMy00Nzg1LTk5OWYtNTFjNzdjYzQ5MTQ2 LzEvYVU1UlhNVy1UaWZwMDlFLVhod1IzSFVwSjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTxYv19P 01Mw1krwqBxK0Hu04ga7aTpSzMJqNt41uOdbcDHCAtAKGDBDNVGu6O1L/n0t+2Dr tj2g1WDc9l9ivFJP0AqZCbmZ4EA0xKIxUIqP51bNfEtRPeGQLchSypROkCAGZ0q9 daFCbiAMPilNb6PLIaILGv7MJigeK1rcoidAHCgFBN4HCuP/crxKrJj2jGyT1Oxn 7pLIlGSP9J79ovxVjlZTMLksThl1xuu5MTxkuLUw+e2uenVLONdDl5CzJtMN5XVJ VafxosD5kbC78L8xtpcVwkXlOU5bV2bYm+oVZ/D6ds39sFsJLPhf8nZGFeqII/ZA 9UDCofGLz0PlmA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:55 2026 by rpki-client