This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft File: AH5rWqQ302kxUVAqIRSW431K4sU.mft (raw, json) Hash identifier: 2YpmGM28P4kDD6BTC6InmAyDuEN/d1uE2K8styWZfVw= Subject key identifier: 31:01:B2:8C:97:97:BF:CE:B4:EC:B1:DF:4D:81:0E:2E:AB:75:3A:59 Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5 Certificate issuer: /CN=007e6b5aa437d3693151502a211496e37d4ae2c5 Certificate serial: 019BF2E1BA11392C3C90F1EA9EB36A52CF3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft Manifest number: 1565 Signing time: Sun 25 Jan 2026 02:00:38 +0000 Manifest this update: Sun 25 Jan 2026 02:00:38 +0000 Manifest next update: Mon 26 Jan 2026 02:00:38 +0000 Files and hashes: 1: 0UtZJpaH9ZhWJzvOUmqS1m2r370.roa (hash: UdeibxbzHWRgn3KJEu2PyWPjfgCf2fUauCUDT1MFzeU=) 2: 2i6ET0xmeFNNwjckPtEiXMzR1A8.roa (hash: RMMo6cNDlmb7w7WUvvn6btB8oEeGkC5RlJSJmweHPSg=) 3: AH5rWqQ302kxUVAqIRSW431K4sU.crl (hash: 52W9X+7dxBB+UTfPtOM+kJjyy4xxzoHpdL6w9zYgvEQ=) 4: R1KgvQsI1PNvvWsNYjSHXjmCUko.roa (hash: eSfdxnu6Fm6Qr8tRqOcchhcxy/tWOkcHERSE8N3r8uI=) 5: XdtoN-G6_JHehbj0D7l71OQKEXE.roa (hash: bDoA0XebMdpMlFP6CJH1fk3V+NG+IRgcZpROF4NtHwY=) 6: Yx7l960TQn9HM_7QR6gs0XY-qcA.roa (hash: O+2F1pg3A5EVSk1DJbaRJDwXaNusK4Cx5sLgaLCJXdM=) 7: vV4kfM7-tPnyYx_K2ljxEExtxso.roa (hash: iQoz4P+KRDJgWwM5+v9IkBekoevvl7t44wSOdaiYAvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e1:ba:11:39:2c:3c:90:f1:ea:9e:b3:6a:52:cf:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5 Validity Not Before: Jan 25 02:00:38 2026 GMT Not After : Jan 26 02:00:38 2026 GMT Subject: CN=3101b28c9797bfceb4ecb1df4d810e2eab753a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7c:37:80:a1:cd:d5:aa:7f:21:d7:71:eb:12: 1a:bd:5d:98:e0:66:10:0d:42:18:9c:0a:58:17:f2: 7b:1d:b7:92:e2:7d:ad:0c:9e:79:8a:7c:cc:59:40: c8:28:15:ce:d9:86:61:17:f4:fa:44:2e:b5:ce:ba: e1:70:88:a4:32:4c:c2:54:cd:9d:cb:e3:4b:86:5c: 28:2d:93:0d:b8:89:83:5f:aa:7a:31:85:94:20:e0: f1:25:e8:2b:8e:c2:99:97:27:88:c9:87:34:2d:af: 19:1c:ca:27:29:85:ed:16:9c:28:5f:7c:27:14:ab: 98:cf:d8:d6:c2:4c:f8:b3:38:90:52:f8:ce:1b:03: 93:bb:8a:e2:e2:2f:37:16:a4:5c:78:1c:53:f7:3d: b7:4b:3d:60:a8:d2:b1:fd:36:79:cf:83:33:42:66: 77:01:1d:1e:8f:d6:76:ee:14:03:ad:cb:1a:86:d4: d6:06:2f:69:83:52:49:00:1e:46:f6:c0:7a:76:f8: 6d:2d:69:2a:e0:50:5d:69:af:f2:a1:1e:18:ca:d3: b5:d3:2e:99:9f:79:0d:19:13:a7:f2:04:06:e5:bd: 05:45:7a:3f:30:0d:60:25:cb:a9:ae:a3:41:c3:0a: fc:b3:0f:e4:ff:0a:61:b1:c7:19:f6:f8:c5:5b:bf: 8a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:01:B2:8C:97:97:BF:CE:B4:EC:B1:DF:4D:81:0E:2E:AB:75:3A:59 X509v3 Authority Key Identifier: keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:81:cd:d6:5f:b6:c4:31:63:da:f2:17:71:b3:bd:fb:28:81: 88:f2:6e:38:11:09:d8:ed:8b:52:e9:91:9a:de:c4:11:ef:81: a8:53:71:74:0a:11:0f:9f:60:9c:d2:2c:a6:65:8a:2c:a1:51: 42:70:c5:4a:4d:08:4b:8d:f9:4b:94:fc:ad:4f:ce:34:7b:80: 8a:63:bc:9f:19:e7:37:01:b0:06:9d:3c:d6:82:47:f7:ae:06: 60:06:52:7d:ce:b0:91:c1:67:fd:e1:34:f1:12:4d:c2:19:8f: 7c:c0:f4:11:3b:c7:ac:a6:ec:76:c8:52:88:86:b4:73:c0:62: 5e:f3:29:c6:48:90:98:e5:59:9a:72:11:2b:00:bc:78:2c:4f: 0a:bb:d5:3e:16:58:7d:ff:b5:40:61:f3:45:4e:ea:d9:a8:91: 39:96:b8:dc:5d:b1:e7:04:b4:cc:62:3b:ab:b5:e4:a0:91:99: e6:e1:6e:07:90:4d:3b:03:8d:4e:b6:53:ea:b4:e7:6c:f7:ec: f2:b3:90:da:e1:73:8e:7a:e0:b1:3a:b7:12:34:8d:a5:62:e8: 4c:03:43:23:b5:c4:7b:15:a3:f2:f8:71:77:80:7f:d5:18:33: 0d:ba:5f:23:a2:05:d6:9a:44:73:59:ed:00:a1:f8:76:e2:e7: 0a:22:55:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4boROSw8kPHqnrNqUs88MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwN2U2YjVhYTQzN2QzNjkzMTUxNTAyYTIxMTQ5NmUzN2Q0 YWUyYzUwHhcNMjYwMTI1MDIwMDM4WhcNMjYwMTI2MDIwMDM4WjAzMTEwLwYDVQQD EygzMTAxYjI4Yzk3OTdiZmNlYjRlY2IxZGY0ZDgxMGUyZWFiNzUzYTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnw3gKHN1ap/Iddx6xIavV2Y4GYQ DUIYnApYF/J7HbeS4n2tDJ55inzMWUDIKBXO2YZhF/T6RC61zrrhcIikMkzCVM2d y+NLhlwoLZMNuImDX6p6MYWUIODxJegrjsKZlyeIyYc0La8ZHMonKYXtFpwoX3wn FKuYz9jWwkz4sziQUvjOGwOTu4ri4i83FqRceBxT9z23Sz1gqNKx/TZ5z4MzQmZ3 AR0ej9Z27hQDrcsahtTWBi9pg1JJAB5G9sB6dvhtLWkq4FBdaa/yoR4YytO10y6Z n3kNGROn8gQG5b0FRXo/MA1gJcuprqNBwwr8sw/k/wphsccZ9vjFW7+K4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEBsoyXl7/OtOyx302BDi6rdTpZMB8GA1UdIwQY MBaAFAB+a1qkN9NpMVFQKiEUluN9SuLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81MThmYWItNzYwNi00ODMyLWFhNjYt NWE4YzY3ODQyMzg5LzEvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy81MThmYWItNzYwNi00ODMyLWFhNjYtNWE4YzY3ODQyMzg5 LzEvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4HN1l+2 xDFj2vIXcbO9+yiBiPJuOBEJ2O2LUumRmt7EEe+BqFNxdAoRD59gnNIspmWKLKFR QnDFSk0IS435S5T8rU/ONHuAimO8nxnnNwGwBp081oJH964GYAZSfc6wkcFn/eE0 8RJNwhmPfMD0ETvHrKbsdshSiIa0c8BiXvMpxkiQmOVZmnIRKwC8eCxPCrvVPhZY ff+1QGHzRU7q2aiROZa43F2x5wS0zGI7q7XkoJGZ5uFuB5BNOwONTrZT6rTnbPfs 8rOQ2uFzjnrgsTq3EjSNpWLoTANDI7XEexWj8vhxd4B/1RgzDbpfI6IF1ppEc1nt AKH4duLnCiJVpQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:40:12 2026 by rpki-client