This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft File: ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json) Hash identifier: +gZPR2WBDZ+O19vXwgGErEPUCGJcfDgI0z3o+q9cvno= Subject key identifier: 99:28:9B:E1:7F:0C:17:61:44:24:22:69:05:F8:F9:D2:EB:D8:F3:DC Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20 Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020 Certificate serial: 019BF83FC87E7D1A84B5B6551AC133BA7A2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft Manifest number: 177B Signing time: Mon 26 Jan 2026 03:01:28 +0000 Manifest this update: Mon 26 Jan 2026 03:01:28 +0000 Manifest next update: Tue 27 Jan 2026 03:01:28 +0000 Files and hashes: 1: L0pkYoARJXEFc-gB4c5J8VXY3Mg.roa (hash: 1faOAUcr0h7qDHU3+7FacAnxC8gdfFMLQm2JVMNKznA=) 2: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: 1HNxkCTKCJkwcelTucCBNwydqKQoOHcBlLLSACRmXfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:c8:7e:7d:1a:84:b5:b6:55:1a:c1:33:ba:7a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020 Validity Not Before: Jan 26 03:01:28 2026 GMT Not After : Jan 27 03:01:28 2026 GMT Subject: CN=99289be17f0c17614424226905f8f9d2ebd8f3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:59:f4:63:ca:08:c5:b3:1e:24:04:b5:93:e4: a6:32:f0:73:4d:89:e7:8c:e8:34:34:c0:71:11:61: c4:88:85:c2:7b:73:1c:0e:4d:82:9d:96:5c:bc:fe: cb:be:04:8c:91:9f:53:5d:03:4f:e2:78:e9:aa:13: 07:ae:00:8c:21:86:4c:88:5f:32:cf:1f:af:5d:3f: bb:e5:16:b0:e9:4d:d0:e2:1a:ab:80:51:99:1c:a6: 10:94:fa:38:78:39:31:d8:97:f0:a8:2a:0e:dc:08: bb:58:46:4a:ce:57:87:9f:78:ed:44:02:00:fd:88: fb:f2:c4:29:47:96:1b:17:22:4d:fd:79:5d:67:8c: 71:0a:4d:26:fb:23:00:ad:57:21:13:ac:2a:1e:1e: 17:29:68:c9:e2:8e:27:57:05:16:56:54:b3:15:12: c7:2a:12:78:b5:81:8d:db:d1:6f:83:84:dd:73:35: 36:d9:7c:f1:79:a7:b2:41:0f:c8:0f:2c:0b:e5:d6: b9:d6:61:54:d4:54:b2:32:b9:af:b0:62:16:46:09: b1:08:ea:43:d0:0f:18:27:64:41:23:0b:ae:48:2d: 12:ab:3f:d2:a1:fc:a1:21:1b:49:5b:5e:9d:f9:74: f7:4f:11:0e:19:78:4f:13:23:db:dd:61:c2:51:d1: 82:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:28:9B:E1:7F:0C:17:61:44:24:22:69:05:F8:F9:D2:EB:D8:F3:DC X509v3 Authority Key Identifier: keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:50:2a:03:67:42:98:fa:06:8e:7d:f1:39:6a:8e:cb:c7:31: ef:68:fc:4c:35:bb:6e:55:30:8d:2d:b2:ab:30:9f:a2:cc:7f: ef:d2:54:00:e8:2d:fb:e6:47:17:8c:11:b4:49:f3:b3:fa:fa: ac:be:68:20:24:20:53:be:2c:02:0c:8e:1b:9d:79:63:f1:c5: 20:29:64:66:7a:13:db:54:97:52:9d:da:01:d9:f3:6f:be:0d: ed:97:c2:00:93:9c:56:0c:72:39:61:02:29:3e:ad:43:3c:1b: 61:bf:f5:69:f4:fc:79:42:af:69:33:16:5b:09:04:15:31:93: 58:d9:e9:a2:33:9d:60:7f:9a:e4:53:6a:e7:2c:f1:93:71:13: d0:10:a3:ad:5e:22:c7:c0:f0:6a:3e:68:be:49:8d:e4:36:3b: 8b:b8:bc:14:36:f4:d5:88:1a:82:3a:be:8a:56:65:30:0f:f0: 67:5e:1f:9d:b3:23:e0:7a:1e:2a:ba:44:6e:60:1f:3f:50:51: 09:1f:4f:e9:d3:fb:1c:6f:89:5a:12:f9:de:4c:40:f4:b9:31: 16:bf:5a:53:e8:c4:78:b9:a4:4a:4d:d0:d6:03:82:01:98:6f: e2:ab:43:fe:59:9d:a0:bb:8e:ef:bc:54:59:5e:c5:f7:08:e8: ae:26:58:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P8h+fRqEtbZVGsEzunoqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhOWQ2ZDI2ZTU2YzEzMmRkYmJjMDA1YWM0MjRmYjUzNmFj YmEwMjAwHhcNMjYwMTI2MDMwMTI4WhcNMjYwMTI3MDMwMTI4WjAzMTEwLwYDVQQD Eyg5OTI4OWJlMTdmMGMxNzYxNDQyNDIyNjkwNWY4ZjlkMmViZDhmM2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Fn0Y8oIxbMeJAS1k+SmMvBzTYnn jOg0NMBxEWHEiIXCe3McDk2CnZZcvP7LvgSMkZ9TXQNP4njpqhMHrgCMIYZMiF8y zx+vXT+75Raw6U3Q4hqrgFGZHKYQlPo4eDkx2JfwqCoO3Ai7WEZKzleHn3jtRAIA /Yj78sQpR5YbFyJN/XldZ4xxCk0m+yMArVchE6wqHh4XKWjJ4o4nVwUWVlSzFRLH KhJ4tYGN29Fvg4TdczU22XzxeaeyQQ/IDywL5da51mFU1FSyMrmvsGIWRgmxCOpD 0A8YJ2RBIwuuSC0Sqz/SofyhIRtJW16d+XT3TxEOGXhPEyPb3WHCUdGCnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkom+F/DBdhRCQiaQX4+dLr2PPcMB8GA1UdIwQY MBaAFGqdbSblbBMt27wAWsQk+1Nqy6AgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXAxdEp1VnNFeTNidkFCYXhDVDdVMnJMb0NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85OWRkNmUtMDg1Ni00YTI3LWFlY2Qt ZDg5MjhmNWUxYjQwLzEvYXAxdEp1VnNFeTNidkFCYXhDVDdVMnJMb0NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC85OWRkNmUtMDg1Ni00YTI3LWFlY2QtZDg5MjhmNWUxYjQw LzEvYXAxdEp1VnNFeTNidkFCYXhDVDdVMnJMb0NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVAqA2dC mPoGjn3xOWqOy8cx72j8TDW7blUwjS2yqzCfosx/79JUAOgt++ZHF4wRtEnzs/r6 rL5oICQgU74sAgyOG515Y/HFIClkZnoT21SXUp3aAdnzb74N7ZfCAJOcVgxyOWEC KT6tQzwbYb/1afT8eUKvaTMWWwkEFTGTWNnpojOdYH+a5FNq5yzxk3ET0BCjrV4i x8Dwaj5ovkmN5DY7i7i8FDb01Ygagjq+ilZlMA/wZ14fnbMj4HoeKrpEbmAfP1BR CR9P6dP7HG+JWhL53kxA9LkxFr9aU+jEeLmkSk3Q1gOCAZhv4qtD/lmdoLuO77xU WV7F9wjoriZYtg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:57:05 2026 by rpki-client