This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft File: ajqLdK1O1nN5ep9rd0nCI0VpedA.mft (raw, json) Hash identifier: 0g90LYMzUxS5NFH0orwjCLnaAOdS2BF005NSpHvRgQs= Subject key identifier: 52:72:69:A7:CF:E8:09:DE:1C:80:3D:0A:8D:C1:04:7F:29:81:96:2A Authority key identifier: 6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0 Certificate issuer: /CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0 Certificate serial: 019BF507AF1A81AAF6F12D3AD0037F700AE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft Manifest number: 16AB Signing time: Sun 25 Jan 2026 12:01:19 +0000 Manifest this update: Sun 25 Jan 2026 12:01:19 +0000 Manifest next update: Mon 26 Jan 2026 12:01:19 +0000 Files and hashes: 1: WiR_mQTYvksNuDh5PyOkyT_J_1s.roa (hash: zaouvXmVUtph8h3UF1IqoXJQFtK55FqMyr4EuKbD7oI=) 2: ajqLdK1O1nN5ep9rd0nCI0VpedA.crl (hash: wHxojGOkktO9ViGXI0a6Ii4/ONkEar5TFWgI2NQAWds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.crl rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:af:1a:81:aa:f6:f1:2d:3a:d0:03:7f:70:0a:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0 Validity Not Before: Jan 25 12:01:19 2026 GMT Not After : Jan 26 12:01:19 2026 GMT Subject: CN=527269a7cfe809de1c803d0a8dc1047f2981962a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4c:1e:ab:3c:53:a7:6b:6e:6f:80:cb:16:1f: ca:f2:ce:a9:d3:a6:78:cd:d9:6b:32:33:e5:4f:ec: 94:7a:c0:88:ab:78:77:b2:76:10:b5:ff:e8:b9:18: ea:20:28:8b:53:e3:e3:da:29:c0:20:78:b6:66:05: 79:3c:9b:9f:1c:a5:0c:b5:78:e0:6b:d1:87:2a:9c: b5:4c:e0:4d:37:7f:c5:25:de:ec:5a:e7:eb:fa:fb: 17:93:89:bb:b5:27:58:02:9b:83:30:19:b7:05:8f: 2c:b9:d6:7f:fe:75:dc:21:b8:1e:ed:48:c5:7f:f1: 00:32:a3:e7:f4:7d:76:78:93:60:02:ba:b1:00:fb: 45:ff:93:8a:1d:66:c7:2c:ce:17:de:ed:d3:be:b9: f7:79:f3:63:d2:90:48:9a:c0:61:3c:13:3c:19:74: 72:dd:56:cb:ee:3b:9f:23:63:0b:5a:16:0b:02:8b: 7f:d0:22:a5:df:cb:f3:d3:0a:b8:bb:c7:b3:2b:1d: 60:86:b7:fa:f4:40:d1:9a:7e:c9:11:f0:82:75:57: 5e:b8:95:26:15:dc:27:0f:19:69:25:84:90:65:00: 56:7a:ae:83:1c:07:01:c2:73:51:1f:00:62:09:e5: be:f5:33:52:f0:27:83:2b:06:d9:f7:fb:3e:94:ba: 09:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:72:69:A7:CF:E8:09:DE:1C:80:3D:0A:8D:C1:04:7F:29:81:96:2A X509v3 Authority Key Identifier: keyid:6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:4c:48:e5:11:94:b5:7f:c3:db:f4:6f:62:af:29:09:0e:c2: 22:da:65:4c:50:b3:fc:9f:22:07:87:70:a0:51:d2:9b:0d:df: 6b:b1:f3:06:0e:4e:0c:c4:fc:30:e0:35:fd:f5:33:75:90:a0: ff:d4:ab:a7:89:fa:00:a6:05:44:ba:37:82:e6:dc:cb:eb:2f: 82:17:71:77:71:92:e4:77:00:83:e2:eb:4c:77:38:43:22:f0: 3d:16:63:a4:3d:df:72:50:9f:c4:0a:d0:c3:e3:51:c9:c7:94: dc:fc:18:99:f1:26:c0:68:6f:2b:29:46:72:e4:66:47:bc:87: 84:2a:e9:8d:97:8b:d6:b6:a2:97:a3:da:27:df:1e:e2:f9:5e: 4e:13:5e:cf:4c:f7:86:86:16:7b:9e:94:24:51:7d:a6:bf:36: 47:d7:64:be:f5:5a:95:85:cd:2b:f9:27:29:cf:41:c1:97:78: 2c:b4:00:82:45:ed:be:de:bc:96:7d:c0:37:40:66:b8:dd:19: ef:18:ff:25:e7:fe:b5:f2:bf:e0:c2:9e:47:bf:9b:9d:64:15: 72:e6:a8:5f:1d:c3:b9:3f:65:4d:4b:a1:b7:b8:b8:93:71:fe: 69:5a:6a:fe:da:7e:db:6d:96:cd:54:c0:c3:c8:a9:2c:19:75: 04:97:0b:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B68agar28S060AN/cAriMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhM2E4Yjc0YWQ0ZWQ2NzM3OTdhOWY2Yjc3NDljMjIzNDU2 OTc5ZDAwHhcNMjYwMTI1MTIwMTE5WhcNMjYwMTI2MTIwMTE5WjAzMTEwLwYDVQQD Eyg1MjcyNjlhN2NmZTgwOWRlMWM4MDNkMGE4ZGMxMDQ3ZjI5ODE5NjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUweqzxTp2tub4DLFh/K8s6p06Z4 zdlrMjPlT+yUesCIq3h3snYQtf/ouRjqICiLU+Pj2inAIHi2ZgV5PJufHKUMtXjg a9GHKpy1TOBNN3/FJd7sWufr+vsXk4m7tSdYApuDMBm3BY8sudZ//nXcIbge7UjF f/EAMqPn9H12eJNgArqxAPtF/5OKHWbHLM4X3u3Tvrn3efNj0pBImsBhPBM8GXRy 3VbL7jufI2MLWhYLAot/0CKl38vz0wq4u8ezKx1ghrf69EDRmn7JEfCCdVdeuJUm FdwnDxlpJYSQZQBWeq6DHAcBwnNRHwBiCeW+9TNS8CeDKwbZ9/s+lLoJXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJyaafP6AneHIA9Co3BBH8pgZYqMB8GA1UdIwQY MBaAFGo6i3StTtZzeXqfa3dJwiNFaXnQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWpxTGRLMU8xbk41ZXA5cmQwbkNJMFZwZWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81M2FjYTItZTg4OC00MjFjLWI1OWEt Yzk1OGJmNGY4OTkxLzEvYWpxTGRLMU8xbk41ZXA5cmQwbkNJMFZwZWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS81M2FjYTItZTg4OC00MjFjLWI1OWEtYzk1OGJmNGY4OTkx LzEvYWpxTGRLMU8xbk41ZXA5cmQwbkNJMFZwZWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPkxI5RGU tX/D2/RvYq8pCQ7CItplTFCz/J8iB4dwoFHSmw3fa7HzBg5ODMT8MOA1/fUzdZCg /9Srp4n6AKYFRLo3gubcy+svghdxd3GS5HcAg+LrTHc4QyLwPRZjpD3fclCfxArQ w+NRyceU3PwYmfEmwGhvKylGcuRmR7yHhCrpjZeL1rail6PaJ98e4vleThNez0z3 hoYWe56UJFF9pr82R9dkvvValYXNK/knKc9BwZd4LLQAgkXtvt68ln3AN0BmuN0Z 7xj/Jef+tfK/4MKeR7+bnWQVcuaoXx3DuT9lTUuht7i4k3H+aVpq/tp+222WzVTA w8ipLBl1BJcLxg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:02 2026 by rpki-client