This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft File: ajqLdK1O1nN5ep9rd0nCI0VpedA.mft (raw, json) Hash identifier: kO343RcCMccNVDI5JQ+CGgD0J6qX3zaSXHM4LXH5Ba4= Subject key identifier: 52:21:27:F6:A5:94:94:87:D1:AE:B7:1A:BF:FC:24:7C:23:2F:C5:42 Authority key identifier: 6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0 Certificate issuer: /CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0 Certificate serial: 019BF6F5B3FAEFB40D5419387A8CF6077F62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft Manifest number: 16AC Signing time: Sun 25 Jan 2026 21:00:55 +0000 Manifest this update: Sun 25 Jan 2026 21:00:55 +0000 Manifest next update: Mon 26 Jan 2026 21:00:55 +0000 Files and hashes: 1: WiR_mQTYvksNuDh5PyOkyT_J_1s.roa (hash: zaouvXmVUtph8h3UF1IqoXJQFtK55FqMyr4EuKbD7oI=) 2: ajqLdK1O1nN5ep9rd0nCI0VpedA.crl (hash: BWWIvhq50Q5nn4NNEAZslnu55WadX4s5L1mOtVXwLgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.crl rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:b3:fa:ef:b4:0d:54:19:38:7a:8c:f6:07:7f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0 Validity Not Before: Jan 25 21:00:55 2026 GMT Not After : Jan 26 21:00:55 2026 GMT Subject: CN=522127f6a5949487d1aeb71abffc247c232fc542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e7:53:20:38:0e:1c:68:f3:35:a9:2f:ac:0d: 75:34:3a:10:de:e6:b7:b9:a3:8f:c3:83:86:3d:78: 65:2f:46:78:1d:1b:50:c0:a9:4f:06:ec:b5:16:fc: f7:a6:42:22:c9:a8:20:a8:35:fa:99:9e:ad:7e:14: 85:eb:75:bd:5e:68:ac:15:c0:23:20:04:43:8d:7e: 3d:1e:76:82:aa:e3:89:b4:44:1b:05:f8:e9:af:e6: 87:df:ee:f0:7c:30:ed:96:71:e6:aa:f2:66:3d:85: 97:2d:48:b9:da:47:a9:19:ed:2e:47:01:76:3d:4d: 1b:4e:d9:d1:28:c9:ad:a5:a2:ec:9f:80:4d:7d:73: 44:ee:f6:e6:64:3e:a5:f3:ef:35:7f:5f:96:8a:99: 03:56:e7:85:c9:c0:78:c1:58:63:d4:f6:40:d2:d2: 08:95:05:34:08:59:10:cf:b3:90:ca:19:35:1c:8d: 40:24:d5:0b:e7:f7:57:45:14:10:b1:41:ac:66:f6: 11:4d:20:26:63:bb:de:09:bf:e7:3c:49:5a:d9:5f: d2:f1:f6:57:e8:9e:a5:61:da:36:80:15:8d:ab:f6: 79:17:d9:ed:15:3a:22:ea:a7:03:dd:41:a9:ff:09: 95:a7:17:fa:f7:cd:0e:49:46:e6:6b:cf:3d:ba:02: b2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:21:27:F6:A5:94:94:87:D1:AE:B7:1A:BF:FC:24:7C:23:2F:C5:42 X509v3 Authority Key Identifier: keyid:6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:82:45:61:19:e5:94:3c:50:e9:f9:ef:d5:b6:05:ce:db:81: 44:c7:28:b5:8d:7a:27:db:9b:15:20:f2:c7:e4:46:86:06:91: c1:a7:f2:29:fa:27:39:b3:8a:ec:e7:ed:9c:f9:07:3b:0b:11: 6b:fd:49:c4:4d:0c:6e:2d:78:e8:ad:67:f5:e3:a3:81:c4:e4: fa:14:19:a4:b3:8e:b2:57:ad:f0:5d:7a:6b:3f:b2:d7:32:51: eb:10:c0:76:5a:f4:20:51:c1:47:f2:96:9b:00:e7:b4:9d:7a: e5:26:3f:11:2a:bc:de:19:90:24:28:b6:23:ad:50:0d:f0:15: ef:a8:b3:71:86:33:39:75:d6:af:54:2f:95:75:bf:16:94:e9: 54:26:e4:4c:ca:ba:08:ae:72:d9:04:c2:bb:3a:be:ae:03:9d: 42:60:a0:1c:2c:77:f3:ef:b9:e3:9b:61:9d:68:ce:91:a9:3c: ee:2b:bb:b0:ee:97:c5:5c:5b:66:45:57:b7:46:3c:28:fe:a6: 55:dd:13:c6:d0:90:d7:ef:6f:5d:b8:6d:f5:63:e1:fd:63:64: eb:ad:9e:76:e1:d4:24:07:c9:da:80:e5:1e:f5:15:b7:b9:0c: 2d:e8:04:4d:7a:6e:19:c9:c4:21:c2:ee:9e:bc:90:79:a7:65: 97:3d:79:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29bP677QNVBk4eoz2B39iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhM2E4Yjc0YWQ0ZWQ2NzM3OTdhOWY2Yjc3NDljMjIzNDU2 OTc5ZDAwHhcNMjYwMTI1MjEwMDU1WhcNMjYwMTI2MjEwMDU1WjAzMTEwLwYDVQQD Eyg1MjIxMjdmNmE1OTQ5NDg3ZDFhZWI3MWFiZmZjMjQ3YzIzMmZjNTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOdTIDgOHGjzNakvrA11NDoQ3ua3 uaOPw4OGPXhlL0Z4HRtQwKlPBuy1Fvz3pkIiyaggqDX6mZ6tfhSF63W9XmisFcAj IARDjX49HnaCquOJtEQbBfjpr+aH3+7wfDDtlnHmqvJmPYWXLUi52kepGe0uRwF2 PU0bTtnRKMmtpaLsn4BNfXNE7vbmZD6l8+81f1+WipkDVueFycB4wVhj1PZA0tII lQU0CFkQz7OQyhk1HI1AJNUL5/dXRRQQsUGsZvYRTSAmY7veCb/nPEla2V/S8fZX 6J6lYdo2gBWNq/Z5F9ntFToi6qcD3UGp/wmVpxf6980OSUbma889ugKyoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFIhJ/allJSH0a63Gr/8JHwjL8VCMB8GA1UdIwQY MBaAFGo6i3StTtZzeXqfa3dJwiNFaXnQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWpxTGRLMU8xbk41ZXA5cmQwbkNJMFZwZWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81M2FjYTItZTg4OC00MjFjLWI1OWEt Yzk1OGJmNGY4OTkxLzEvYWpxTGRLMU8xbk41ZXA5cmQwbkNJMFZwZWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS81M2FjYTItZTg4OC00MjFjLWI1OWEtYzk1OGJmNGY4OTkx LzEvYWpxTGRLMU8xbk41ZXA5cmQwbkNJMFZwZWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIJFYRnl lDxQ6fnv1bYFztuBRMcotY16J9ubFSDyx+RGhgaRwafyKfonObOK7OftnPkHOwsR a/1JxE0Mbi146K1n9eOjgcTk+hQZpLOOslet8F16az+y1zJR6xDAdlr0IFHBR/KW mwDntJ165SY/ESq83hmQJCi2I61QDfAV76izcYYzOXXWr1QvlXW/FpTpVCbkTMq6 CK5y2QTCuzq+rgOdQmCgHCx38++545thnWjOkak87iu7sO6XxVxbZkVXt0Y8KP6m Vd0TxtCQ1+9vXbht9WPh/WNk662eduHUJAfJ2oDlHvUVt7kMLegETXpuGcnEIcLu nryQeadllz15fQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:21 2026 by rpki-client