This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json) Hash identifier: PUxHHYIUr+WaNe7V9TWz0YGWq3jww1vMsIMUedeGqA8= Subject key identifier: 7D:6A:52:20:E4:D8:E8:02:24:94:E9:A4:34:A1:FB:18:52:0D:F8:79 Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6 Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6 Certificate serial: 019BF34FF73551FEA42F649ABD0842320E33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft Manifest number: 1168 Signing time: Sun 25 Jan 2026 04:01:02 +0000 Manifest this update: Sun 25 Jan 2026 04:01:02 +0000 Manifest next update: Mon 26 Jan 2026 04:01:02 +0000 Files and hashes: 1: PBeaPGMBfIGX0gbzPm1VHE5CXUM.roa (hash: uNWAi4ypu2U7vKEwyptJEE3BsJukgPqN0/lL7CgpehE=) 2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: cvLUrjVIpHvOEvpzbNtOnNs1AgliUSKyy1MWgC4uYvo=) 3: bNsvbdSJD0WI7Ewm9hgAe8yTIz4.roa (hash: fjVFQSNrjHzCOHsMITQUOhjzFotcFBmj0QqIbMKaS7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:f7:35:51:fe:a4:2f:64:9a:bd:08:42:32:0e:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6 Validity Not Before: Jan 25 04:01:02 2026 GMT Not After : Jan 26 04:01:02 2026 GMT Subject: CN=7d6a5220e4d8e8022494e9a434a1fb18520df879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fc:e3:29:88:6b:c9:47:9e:5c:d8:f7:ec:89: 45:ee:52:dc:cf:df:c6:7b:dd:7f:91:b2:16:6a:fd: c3:c9:6e:3e:b2:61:59:73:aa:14:46:44:9b:16:1d: c1:83:0f:5b:27:58:05:f8:fe:21:8e:f4:74:93:6e: 78:3e:da:a0:a0:15:46:94:9c:b9:64:94:53:79:38: 3e:99:67:40:b3:37:59:58:b0:ef:ce:d5:5f:6d:7f: c8:ff:57:05:d0:fc:7c:f2:8b:3f:5f:f0:a5:e5:25: 1a:29:75:12:20:c7:d3:34:bc:3c:a5:f8:ba:15:57: f2:a0:f6:21:64:79:32:1c:c8:f0:6f:54:4d:32:f2: 2b:50:f0:6b:66:7d:5b:a6:e6:26:39:21:51:5a:64: c6:98:9d:34:c9:4e:2a:76:19:16:ea:e3:15:d1:d1: 2b:79:ab:40:9e:3a:71:79:51:25:4a:99:09:31:86: 63:70:2f:a1:84:f7:62:fa:be:e9:69:ca:b6:a8:73: 77:87:8f:d4:ae:87:9a:36:a0:ff:ba:3a:59:8f:64: de:7b:1b:7c:06:14:49:0d:f7:b6:ac:2b:09:d9:8b: 9e:b2:1f:b5:ee:8f:c7:c8:cf:04:ce:15:c7:39:a9: 86:a1:b1:23:b2:0f:2a:90:2a:46:ca:82:01:4e:fd: bd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6A:52:20:E4:D8:E8:02:24:94:E9:A4:34:A1:FB:18:52:0D:F8:79 X509v3 Authority Key Identifier: keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:89:3f:19:44:26:55:78:16:f1:77:88:27:a9:30:e7:85:42: dd:1a:23:61:3c:51:fa:eb:0c:f8:45:6e:3e:30:3d:f3:64:bb: b4:6b:75:27:d9:76:9e:84:9e:14:28:b9:b2:a2:ea:8e:3c:29: de:b9:39:20:ee:1a:6b:45:c3:c9:ca:4c:e3:75:e9:96:4b:03: 22:de:c7:b8:2f:0a:99:84:84:4d:c9:77:5e:03:7c:ee:90:16: 8c:1b:bb:eb:e0:18:32:21:9a:29:cf:bf:0c:c3:34:25:43:51: 83:e3:c7:a4:8e:fd:a0:24:74:24:a3:a4:7d:d3:99:16:a0:cf: 90:2c:b9:99:29:1c:23:4e:b3:e7:82:3b:d2:86:f8:15:27:aa: ce:1d:ae:53:50:6d:bc:f0:a6:77:ec:74:4f:c0:85:c1:9a:c4: 88:39:65:36:57:17:04:2e:dc:cb:32:b1:1e:7d:21:f1:da:6a: 77:c2:be:36:6a:0a:f4:b3:e0:2b:fa:ef:95:93:93:77:9d:cd: b8:b8:6c:3f:8a:7e:fa:54:bc:ec:cf:6e:34:c5:0f:94:24:ee: 30:35:0e:af:91:4e:be:08:24:8d:32:51:91:1e:8c:e8:bc:81: 18:c7:23:52:f0:68:68:84:16:76:21:c1:da:a6:c8:32:ee:a2: a8:b0:17:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT/c1Uf6kL2SavQhCMg4zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZjczNTJkMDcxMzU2MjNlMzNmNWE3ZTYyOTI1ZDRiYWI3 MjJmYzYwHhcNMjYwMTI1MDQwMTAyWhcNMjYwMTI2MDQwMTAyWjAzMTEwLwYDVQQD Eyg3ZDZhNTIyMGU0ZDhlODAyMjQ5NGU5YTQzNGExZmIxODUyMGRmODc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/zjKYhryUeeXNj37IlF7lLcz9/G e91/kbIWav3DyW4+smFZc6oURkSbFh3Bgw9bJ1gF+P4hjvR0k254PtqgoBVGlJy5 ZJRTeTg+mWdAszdZWLDvztVfbX/I/1cF0Px88os/X/Cl5SUaKXUSIMfTNLw8pfi6 FVfyoPYhZHkyHMjwb1RNMvIrUPBrZn1bpuYmOSFRWmTGmJ00yU4qdhkW6uMV0dEr eatAnjpxeVElSpkJMYZjcC+hhPdi+r7pacq2qHN3h4/UroeaNqD/ujpZj2Teext8 BhRJDfe2rCsJ2Yuesh+17o/HyM8EzhXHOamGobEjsg8qkCpGyoIBTv29/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1qUiDk2OgCJJTppDSh+xhSDfh5MB8GA1UdIwQY MBaAFGn3NS0HE1Yj4z9afmKSXUurci/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xMThlMjQtNzQyYi00MzkyLThkZmEt MDcxNTE4ZTA1NzNlLzEvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xMThlMjQtNzQyYi00MzkyLThkZmEtMDcxNTE4ZTA1NzNl LzEvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYk/GUQm VXgW8XeIJ6kw54VC3RojYTxR+usM+EVuPjA982S7tGt1J9l2noSeFCi5sqLqjjwp 3rk5IO4aa0XDycpM43XplksDIt7HuC8KmYSETcl3XgN87pAWjBu76+AYMiGaKc+/ DMM0JUNRg+PHpI79oCR0JKOkfdOZFqDPkCy5mSkcI06z54I70ob4FSeqzh2uU1Bt vPCmd+x0T8CFwZrEiDllNlcXBC7cyzKxHn0h8dpqd8K+NmoK9LPgK/rvlZOTd53N uLhsP4p++lS87M9uNMUPlCTuMDUOr5FOvggkjTJRkR6M6LyBGMcjUvBoaIQWdiHB 2qbIMu6iqLAXvg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:43:18 2026 by rpki-client