This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft File: aIEP_k-SA6EAZ31lGTtEJniaz1w.mft (raw, json) Hash identifier: B0Rx2dlCYSqEFSsRDL6hnDCE5FpojPJgKKtkLIuizCc= Subject key identifier: AA:1F:2D:B7:DD:B2:E3:CF:08:DD:C0:EB:7A:E5:D4:09:96:AE:E6:B7 Authority key identifier: 68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C Certificate issuer: /CN=68810ffe4f9203a100677d65193b4426789acf5c Certificate serial: 019BF4D04D995BBE8FF0EC1B466611CDD523 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft Manifest number: 0BF9 Signing time: Sun 25 Jan 2026 11:00:50 +0000 Manifest this update: Sun 25 Jan 2026 11:00:50 +0000 Manifest next update: Mon 26 Jan 2026 11:00:50 +0000 Files and hashes: 1: 4kjooCn4utyvNqQOgFxK7-kKLu0.roa (hash: UOUVc0j6e6Ip7AZ/AsFrmNnJ9pEwnrKNZc+DelE5OzU=) 2: aIEP_k-SA6EAZ31lGTtEJniaz1w.crl (hash: SfjkXRp1QTp8BxMni4RMx/q05CS95Qqr4DlFSrbJQCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:4d:99:5b:be:8f:f0:ec:1b:46:66:11:cd:d5:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68810ffe4f9203a100677d65193b4426789acf5c Validity Not Before: Jan 25 11:00:50 2026 GMT Not After : Jan 26 11:00:50 2026 GMT Subject: CN=aa1f2db7ddb2e3cf08ddc0eb7ae5d40996aee6b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bd:1a:69:7a:c8:fd:c9:d2:5b:b5:29:00:c2: 4e:d6:39:3f:d5:2b:17:0f:57:31:c3:f2:a7:bb:13: db:65:ee:00:44:4f:d2:e1:d3:54:9c:c4:d7:69:3d: 8d:cb:39:76:aa:05:a6:db:3c:06:b7:72:ca:cc:89: 9f:66:8e:1e:7b:54:db:79:9e:31:0c:8a:91:29:18: 5a:3f:ad:7e:6f:aa:93:d6:3b:e6:91:41:cd:31:e3: 7a:1d:43:d4:6c:40:ee:23:5d:0c:73:f6:32:57:35: f9:99:f6:ec:f3:64:40:74:2b:1a:84:b9:fd:43:4e: 8a:48:af:a9:61:ec:69:d3:7e:7c:f6:d0:d9:7c:07: a3:e6:19:4b:90:a4:fd:1c:e8:52:f4:64:bb:ea:9f: 93:53:fd:9a:10:95:14:5d:46:ad:dc:7b:f3:b7:89: d6:d6:ad:c3:8e:9a:e5:2c:b9:c6:ca:83:e9:ad:a4: 34:d6:0f:2a:72:d5:36:1c:bd:6e:f6:37:12:c0:8a: 7c:ee:9b:aa:f7:96:2e:90:59:2d:f2:26:69:b2:61: c8:98:f3:3a:3e:3b:b4:ab:0e:0b:dc:97:89:c6:76: 29:f4:f2:8d:6c:95:0e:c5:b3:71:72:c9:7c:31:90: 5d:b0:dc:20:f7:e0:63:f7:f7:db:66:16:ad:b9:24: 4c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1F:2D:B7:DD:B2:E3:CF:08:DD:C0:EB:7A:E5:D4:09:96:AE:E6:B7 X509v3 Authority Key Identifier: keyid:68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:c0:39:b2:50:c7:10:ff:22:b6:3c:d4:e8:16:85:0e:df:5a: 37:cf:c7:73:12:36:bc:e9:69:83:e5:4c:ab:07:c7:12:5e:a1: f4:c2:2e:7f:e0:d7:b1:d2:b2:64:b2:c2:31:9f:d6:a3:5c:94: 7e:04:18:92:eb:97:ac:fb:96:db:d5:90:e2:b0:c3:32:bb:ad: e3:47:5d:f4:e3:dd:67:1c:78:f6:ea:23:43:ff:b7:e2:83:6f: 4a:16:8f:56:27:48:26:ed:c9:5b:a8:d8:1d:e4:d8:09:b3:10: 61:1d:e1:3c:be:ba:8a:e5:49:34:80:38:3d:cb:2b:5a:fb:ca: 28:07:49:7b:10:e5:21:10:9e:6c:d1:ab:c3:e4:d3:db:b5:a1: 10:5a:1e:20:10:34:63:7f:ac:19:13:c6:e9:05:d0:ee:18:43: d8:49:0e:ed:74:2f:5d:54:2a:02:ed:33:50:73:ee:ee:ae:a0: d8:17:b1:00:3c:20:87:b5:23:c4:e0:b6:79:4c:58:d7:28:79: b1:2c:e4:1e:82:ea:ef:05:36:f0:84:90:99:45:7a:22:fd:a8: fe:34:d9:df:9b:cc:79:4e:c1:21:a1:48:af:07:e7:3a:39:c4: 2c:3e:1b:7b:18:c1:d6:7d:20:4c:6b:c2:a6:31:c3:f9:1b:5d: f8:60:1c:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00E2ZW76P8OwbRmYRzdUjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ODEwZmZlNGY5MjAzYTEwMDY3N2Q2NTE5M2I0NDI2Nzg5 YWNmNWMwHhcNMjYwMTI1MTEwMDUwWhcNMjYwMTI2MTEwMDUwWjAzMTEwLwYDVQQD EyhhYTFmMmRiN2RkYjJlM2NmMDhkZGMwZWI3YWU1ZDQwOTk2YWVlNmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb0aaXrI/cnSW7UpAMJO1jk/1SsX D1cxw/KnuxPbZe4ARE/S4dNUnMTXaT2Nyzl2qgWm2zwGt3LKzImfZo4ee1TbeZ4x DIqRKRhaP61+b6qT1jvmkUHNMeN6HUPUbEDuI10Mc/YyVzX5mfbs82RAdCsahLn9 Q06KSK+pYexp03589tDZfAej5hlLkKT9HOhS9GS76p+TU/2aEJUUXUat3Hvzt4nW 1q3DjprlLLnGyoPpraQ01g8qctU2HL1u9jcSwIp87puq95YukFkt8iZpsmHImPM6 Pju0qw4L3JeJxnYp9PKNbJUOxbNxcsl8MZBdsNwg9+Bj9/fbZhatuSRMMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKofLbfdsuPPCN3A63rl1AmWrua3MB8GA1UdIwQY MBaAFGiBD/5PkgOhAGd9ZRk7RCZ4ms9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUlFUF9rLVNBNkVBWjMxbEdUdEVKbmlhejF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xNDEyMDMtODEzZi00NzEyLTliZDct YmRmNDMxZWI5NGYwLzEvYUlFUF9rLVNBNkVBWjMxbEdUdEVKbmlhejF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8xNDEyMDMtODEzZi00NzEyLTliZDctYmRmNDMxZWI5NGYw LzEvYUlFUF9rLVNBNkVBWjMxbEdUdEVKbmlhejF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8A5slDH EP8itjzU6BaFDt9aN8/HcxI2vOlpg+VMqwfHEl6h9MIuf+DXsdKyZLLCMZ/Wo1yU fgQYkuuXrPuW29WQ4rDDMrut40dd9OPdZxx49uojQ/+34oNvShaPVidIJu3JW6jY HeTYCbMQYR3hPL66iuVJNIA4PcsrWvvKKAdJexDlIRCebNGrw+TT27WhEFoeIBA0 Y3+sGRPG6QXQ7hhD2EkO7XQvXVQqAu0zUHPu7q6g2BexADwgh7UjxOC2eUxY1yh5 sSzkHoLq7wU28ISQmUV6Iv2o/jTZ35vMeU7BIaFIrwfnOjnELD4bexjB1n0gTGvC pjHD+Rtd+GAcwg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:10:07 2026 by rpki-client