This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft File: aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft (raw, json) Hash identifier: BIOlLgFFgC26n3b0R6jJRDmFnbihl5u+n/USOn4kbDA= Subject key identifier: DE:AE:9D:76:27:73:34:0B:77:95:0C:FD:51:CF:E0:A9:76:73:BE:B7 Authority key identifier: 69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E Certificate issuer: /CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e Certificate serial: 019BF651903623F5702F44630C9B0692319E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft Manifest number: 05AC Signing time: Sun 25 Jan 2026 18:01:38 +0000 Manifest this update: Sun 25 Jan 2026 18:01:38 +0000 Manifest next update: Mon 26 Jan 2026 18:01:38 +0000 Files and hashes: 1: aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl (hash: 9mLWasnYZTvTsdiwlQJxNRwo84fK7vTrex6AgaATAYU=) 2: yI-A8PHtvjvf-Yehk66EwwvQBvE.roa (hash: tQP/tAeuAd/9zuaEs+Y9uFs2XbBeizEpe3XPxikwLpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:90:36:23:f5:70:2f:44:63:0c:9b:06:92:31:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6961869099145e31d7b4b5c55ec5f9a724ffca7e Validity Not Before: Jan 25 18:01:38 2026 GMT Not After : Jan 26 18:01:38 2026 GMT Subject: CN=deae9d762773340b77950cfd51cfe0a97673beb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:de:51:1b:80:a1:9d:22:4c:eb:d1:97:5f:57: ea:0e:c9:d5:52:f1:6f:be:38:ca:3d:f4:b5:d6:36: 7f:cb:6d:bd:16:29:1e:7a:ce:88:78:43:05:79:62: c4:b4:35:52:92:fe:f7:8c:64:e5:ce:6c:e6:18:f1: c8:33:cd:c2:9d:8a:cf:eb:5b:8c:a3:ce:ba:ba:87: 26:d2:cc:49:de:b2:bc:ff:45:61:52:7e:0b:ce:1b: 67:42:fa:2f:7c:c3:31:84:1b:0e:82:90:12:54:31: 6b:84:71:da:92:81:b0:59:59:8e:bc:a7:ed:a5:0a: 09:44:b1:c3:b3:65:86:fe:d3:ba:62:72:6d:4c:1e: e9:d1:9d:67:ee:a1:59:64:0d:fd:79:06:b4:8b:6c: 03:19:d0:37:eb:f4:44:d1:29:e3:41:63:0c:92:ea: b5:ae:59:15:0c:30:45:61:41:fc:18:c7:a6:62:08: 3c:5e:c2:68:e7:a8:cc:b7:8f:bc:bb:c6:94:26:89: cf:72:18:fb:b2:2d:cb:27:dd:8d:f9:bc:68:0d:37: c2:be:39:a5:ae:7d:9a:d3:2e:65:ae:e2:6e:e8:99: 51:1e:47:57:a9:2f:1d:39:ba:e8:c4:59:fc:f3:54: 58:78:f9:29:74:0b:dc:eb:d8:8d:a6:54:02:ae:3f: 65:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AE:9D:76:27:73:34:0B:77:95:0C:FD:51:CF:E0:A9:76:73:BE:B7 X509v3 Authority Key Identifier: keyid:69:61:86:90:99:14:5E:31:D7:B4:B5:C5:5E:C5:F9:A7:24:FF:CA:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGGkJkUXjHXtLXFXsX5pyT_yn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1ef061-e581-49e4-b8e4-2bccc275e696/1/aWGGkJkUXjHXtLXFXsX5pyT_yn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:0f:9b:25:77:fb:71:c1:bc:15:7c:21:9d:5a:e8:89:c6:c4: 83:a8:9c:ac:31:c3:e4:1c:79:85:c6:d8:91:7f:92:bd:c1:0f: d6:05:bd:7c:be:ec:b8:90:d1:63:bc:07:37:b4:2c:c8:52:e0: 70:a6:26:b7:71:8f:26:a4:5f:9d:f5:e3:86:8a:2c:43:62:08: 92:5b:2b:08:1d:45:89:4d:de:7f:c4:11:c1:c6:77:ad:6d:e6: 9a:4b:5b:2e:0e:34:2f:93:84:09:a8:0b:72:84:34:51:08:30: 10:1b:13:29:58:0c:3e:9d:21:9d:bb:46:af:dc:9b:76:32:d8: ea:94:a3:b3:4a:9c:b9:7a:46:30:d4:29:17:0b:b7:d9:a9:79: 9c:2b:47:0f:b7:66:6e:9e:94:8c:99:62:38:fe:23:fa:25:15: 5b:95:ac:1e:33:f2:61:1e:43:63:ae:76:38:72:c2:cf:a9:00: 33:bc:40:4d:38:f7:b6:38:ff:6c:92:51:80:31:7f:82:ac:04: f9:26:42:70:f2:8d:bf:37:e7:37:27:68:68:bf:66:51:14:7b: a7:65:24:a2:4e:8d:09:49:a0:44:73:0a:32:a2:11:ca:36:20: 1d:e0:f6:eb:60:11:ad:75:ee:63:64:47:fc:ff:20:e4:a3:ae: 1a:a6:91:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UZA2I/VwL0RjDJsGkjGeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NjE4NjkwOTkxNDVlMzFkN2I0YjVjNTVlYzVmOWE3MjRm ZmNhN2UwHhcNMjYwMTI1MTgwMTM4WhcNMjYwMTI2MTgwMTM4WjAzMTEwLwYDVQQD EyhkZWFlOWQ3NjI3NzMzNDBiNzc5NTBjZmQ1MWNmZTBhOTc2NzNiZWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq95RG4ChnSJM69GXX1fqDsnVUvFv vjjKPfS11jZ/y229Fikees6IeEMFeWLEtDVSkv73jGTlzmzmGPHIM83CnYrP61uM o866uocm0sxJ3rK8/0VhUn4LzhtnQvovfMMxhBsOgpASVDFrhHHakoGwWVmOvKft pQoJRLHDs2WG/tO6YnJtTB7p0Z1n7qFZZA39eQa0i2wDGdA36/RE0SnjQWMMkuq1 rlkVDDBFYUH8GMemYgg8XsJo56jMt4+8u8aUJonPchj7si3LJ92N+bxoDTfCvjml rn2a0y5lruJu6JlRHkdXqS8dObroxFn881RYePkpdAvc69iNplQCrj9lHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6unXYnczQLd5UM/VHP4Kl2c763MB8GA1UdIwQY MBaAFGlhhpCZFF4x17S1xV7F+ack/8p+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVdHR2tKa1VYakhYdExYRlhzWDVweVRfeW40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xZWYwNjEtZTU4MS00OWU0LWI4ZTQt MmJjY2MyNzVlNjk2LzEvYVdHR2tKa1VYakhYdExYRlhzWDVweVRfeW40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8xZWYwNjEtZTU4MS00OWU0LWI4ZTQtMmJjY2MyNzVlNjk2 LzEvYVdHR2tKa1VYakhYdExYRlhzWDVweVRfeW40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUw+bJXf7 ccG8FXwhnVroicbEg6icrDHD5Bx5hcbYkX+SvcEP1gW9fL7suJDRY7wHN7QsyFLg cKYmt3GPJqRfnfXjhoosQ2IIklsrCB1FiU3ef8QRwcZ3rW3mmktbLg40L5OECagL coQ0UQgwEBsTKVgMPp0hnbtGr9ybdjLY6pSjs0qcuXpGMNQpFwu32al5nCtHD7dm bp6UjJliOP4j+iUVW5WsHjPyYR5DY652OHLCz6kAM7xATTj3tjj/bJJRgDF/gqwE +SZCcPKNvzfnNydoaL9mURR7p2Ukok6NCUmgRHMKMqIRyjYgHeD262ARrXXuY2RH /P8g5KOuGqaRSw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:44 2026 by rpki-client