This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft File: AM0TenUCPWcunw4UQ8sOjPU7A9M.mft (raw, json) Hash identifier: nwhVMWc4L/yZA4Lr5KfXYPzsggXxUyXw+OtLOF3i0OA= Subject key identifier: 11:7E:08:2F:C8:49:E6:5D:2C:04:2D:91:1F:BA:11:A6:4A:13:6F:FD Authority key identifier: 00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3 Certificate issuer: /CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3 Certificate serial: 019BF7634706C06761779F278F34277EE8E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft Manifest number: 91 Signing time: Sun 25 Jan 2026 23:00:36 +0000 Manifest this update: Sun 25 Jan 2026 23:00:36 +0000 Manifest next update: Mon 26 Jan 2026 23:00:36 +0000 Files and hashes: 1: AM0TenUCPWcunw4UQ8sOjPU7A9M.crl (hash: teXPzWWDhRnFCONN6PK7xRi3681Z5n2BVoOSEIHKYHU=) 2: QRmb5YrXwDriaT2dAaAU-pHwvNQ.asa (hash: SD+gQNGtNRHX6vzbmlJIKYTNd1x65ITQz0EzQSUqHQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:47:06:c0:67:61:77:9f:27:8f:34:27:7e:e8:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00cd137a75023d672e9f0e1443cb0e8cf53b03d3 Validity Not Before: Jan 25 23:00:36 2026 GMT Not After : Jan 26 23:00:36 2026 GMT Subject: CN=117e082fc849e65d2c042d911fba11a64a136ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:a5:4a:45:b8:6f:28:be:e8:b0:c0:c8:ad: 0a:7d:72:f8:03:c5:39:54:64:4f:11:e5:18:a5:9c: b4:a3:44:21:83:34:5a:29:0f:07:a2:f6:57:42:49: 1a:61:76:b8:08:94:e7:aa:14:44:b5:bb:68:33:39: 42:4d:c6:94:98:a4:36:c0:e8:3c:4f:eb:4c:a4:13: da:a5:ab:34:b6:16:2f:cd:51:d5:1a:5f:a9:8c:b3: 0b:5e:3a:5d:cf:1d:66:26:64:25:9d:d6:06:70:7c: 72:f5:ab:b5:65:3d:0f:79:7d:d3:c9:5e:db:4b:3e: 41:b4:f7:80:62:28:a3:a6:1e:ba:69:e1:a5:ab:d2: 71:27:f8:37:e5:e8:88:f7:18:ad:3a:f1:a9:b5:db: d0:e6:76:9c:0a:de:59:9e:9c:18:31:b1:91:ad:40: ac:04:93:a7:b3:ff:ba:d1:e8:9b:c4:b5:c2:4e:bf: 80:b9:fa:dd:c2:da:d5:3a:ca:5c:27:9d:f7:fd:88: 83:c7:80:1d:b6:ee:0c:9d:6c:0d:66:eb:ca:3e:af: 32:ff:08:5a:e8:ce:f3:c6:5a:bf:32:7c:17:cf:25: a7:43:dd:bf:69:cc:6d:bf:dd:59:b0:3f:9c:f2:db: 4a:eb:2f:36:0e:60:79:49:d2:02:b8:89:81:1c:80: 33:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7E:08:2F:C8:49:E6:5D:2C:04:2D:91:1F:BA:11:A6:4A:13:6F:FD X509v3 Authority Key Identifier: keyid:00:CD:13:7A:75:02:3D:67:2E:9F:0E:14:43:CB:0E:8C:F5:3B:03:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AM0TenUCPWcunw4UQ8sOjPU7A9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f83136-186d-4904-b81c-c79881f315e2/1/AM0TenUCPWcunw4UQ8sOjPU7A9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:98:34:64:45:57:88:82:22:6a:26:32:19:61:2b:f6:30:f0: e4:bd:2b:f9:ac:39:c2:5a:69:a8:c0:d5:56:23:67:fe:c9:bf: 06:ba:35:cf:76:3d:d8:0a:6c:68:4a:15:58:b7:71:d2:70:f1: 3b:fd:dd:c0:af:4b:0f:d0:19:ac:63:c2:e5:14:78:d4:d8:ec: 16:4d:6f:2e:31:b4:05:37:bc:bf:03:0e:d2:40:f8:9f:40:27: 5a:64:d1:a9:4c:5d:a7:ae:a0:1a:4a:36:08:cb:04:7f:e3:39: 41:51:b5:6c:68:88:ec:78:a3:f1:f7:c4:87:59:76:2b:57:05: 16:98:0b:e7:9c:fb:12:bc:dc:81:8a:89:8a:ba:1a:75:25:c9: 94:c3:86:50:db:cc:52:3d:0a:f3:dc:a4:2d:9f:1a:f4:5f:bc: ae:81:7d:d0:a5:02:d7:15:c7:6e:8a:8f:66:21:f9:7a:05:4c: 60:c3:ac:3a:fd:cd:63:81:6e:79:e3:d3:8f:ef:0a:08:24:97: 5e:99:a6:61:ec:a9:cc:83:f2:40:e4:fa:21:50:1e:3f:f6:05: b5:89:fb:6a:2e:04:09:cf:6b:82:86:62:0a:90:be:fa:17:bd: f1:ca:25:44:e9:1a:9b:08:b6:3a:b0:fa:63:56:e1:1c:7b:e1: 5f:71:56:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y0cGwGdhd58njzQnfujhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwY2QxMzdhNzUwMjNkNjcyZTlmMGUxNDQzY2IwZThjZjUz YjAzZDMwHhcNMjYwMTI1MjMwMDM2WhcNMjYwMTI2MjMwMDM2WjAzMTEwLwYDVQQD EygxMTdlMDgyZmM4NDllNjVkMmMwNDJkOTExZmJhMTFhNjRhMTM2ZmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto+lSkW4byi+6LDAyK0KfXL4A8U5 VGRPEeUYpZy0o0QhgzRaKQ8HovZXQkkaYXa4CJTnqhREtbtoMzlCTcaUmKQ2wOg8 T+tMpBPapas0thYvzVHVGl+pjLMLXjpdzx1mJmQlndYGcHxy9au1ZT0PeX3TyV7b Sz5BtPeAYiijph66aeGlq9JxJ/g35eiI9xitOvGptdvQ5nacCt5ZnpwYMbGRrUCs BJOns/+60eibxLXCTr+AufrdwtrVOspcJ533/YiDx4Adtu4MnWwNZuvKPq8y/wha 6M7zxlq/MnwXzyWnQ92/acxtv91ZsD+c8ttK6y82DmB5SdICuImBHIAzvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBF+CC/ISeZdLAQtkR+6EaZKE2/9MB8GA1UdIwQY MBaAFADNE3p1Aj1nLp8OFEPLDoz1OwPTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU0wVGVuVUNQV2N1bnc0VVE4c09qUFU3QTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mODMxMzYtMTg2ZC00OTA0LWI4MWMt Yzc5ODgxZjMxNWUyLzEvQU0wVGVuVUNQV2N1bnc0VVE4c09qUFU3QTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mODMxMzYtMTg2ZC00OTA0LWI4MWMtYzc5ODgxZjMxNWUy LzEvQU0wVGVuVUNQV2N1bnc0VVE4c09qUFU3QTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZg0ZEVX iIIiaiYyGWEr9jDw5L0r+aw5wlppqMDVViNn/sm/Bro1z3Y92ApsaEoVWLdx0nDx O/3dwK9LD9AZrGPC5RR41NjsFk1vLjG0BTe8vwMO0kD4n0AnWmTRqUxdp66gGko2 CMsEf+M5QVG1bGiI7Hij8ffEh1l2K1cFFpgL55z7ErzcgYqJiroadSXJlMOGUNvM Uj0K89ykLZ8a9F+8roF90KUC1xXHboqPZiH5egVMYMOsOv3NY4FueePTj+8KCCSX XpmmYeypzIPyQOT6IVAeP/YFtYn7ai4ECc9rgoZiCpC++he98colROkamwi2OrD6 Y1bhHHvhX3FWPQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:13:01 2026 by rpki-client