This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft File: auSqdx_QpXjqOqxLTT7IPYlGRj0.mft (raw, json) Hash identifier: y6yFNXGoUGAQN1epWwKBMq/D2c/J1pwIZSfC05v/ik0= Subject key identifier: DD:97:A2:74:51:42:4E:88:0B:B2:1A:6D:84:D4:F0:5F:53:45:3D:B9 Authority key identifier: 6A:E4:AA:77:1F:D0:A5:78:EA:3A:AC:4B:4D:3E:C8:3D:89:46:46:3D Certificate issuer: /CN=6ae4aa771fd0a578ea3aac4b4d3ec83d8946463d Certificate serial: 019BF61A270524C537F01EF88725BDB96904 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/auSqdx_QpXjqOqxLTT7IPYlGRj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft Manifest number: 2D Signing time: Sun 25 Jan 2026 17:01:07 +0000 Manifest this update: Sun 25 Jan 2026 17:01:07 +0000 Manifest next update: Mon 26 Jan 2026 17:01:07 +0000 Files and hashes: 1: GDQQ0FqYT9AvbB4OzpV_W08txF4.roa (hash: +7D1/7LzTXBfcdD4Y5uzQNgYSY1go2hv/v2LnVgCR1Y=) 2: auSqdx_QpXjqOqxLTT7IPYlGRj0.crl (hash: Tz4CMAkFGWdWyB76sFi/QP2BA1+Z/ZTsE9jy3HWV1hY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.crl rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft rsync://rpki.ripe.net/repository/DEFAULT/auSqdx_QpXjqOqxLTT7IPYlGRj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:27:05:24:c5:37:f0:1e:f8:87:25:bd:b9:69:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ae4aa771fd0a578ea3aac4b4d3ec83d8946463d Validity Not Before: Jan 25 17:01:07 2026 GMT Not After : Jan 26 17:01:07 2026 GMT Subject: CN=dd97a27451424e880bb21a6d84d4f05f53453db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8b:08:5d:cf:21:c6:40:80:90:03:8c:2f:b1: 95:ee:99:6e:50:6d:7c:ea:11:a5:66:ce:7c:50:eb: 2e:f3:9f:cb:85:7a:ea:ca:22:cf:2b:a2:e0:75:07: 8a:6f:9b:d5:5d:db:c2:82:3b:de:ec:a0:66:f0:ad: 8c:87:e8:14:88:45:d1:07:83:eb:e1:06:e1:36:ed: ed:b6:3e:8b:9b:c8:19:38:a1:32:68:ea:14:e1:d3: 83:96:55:03:88:65:b1:e3:ef:21:5b:81:39:1b:40: 86:4d:0c:09:0e:8a:6a:ad:ef:0f:01:a8:7a:25:37: 50:6f:9b:88:2f:23:19:55:c1:cb:ae:77:de:30:91: ce:c9:60:fa:f8:b4:a2:61:e7:d8:5c:45:ca:e0:2b: 79:eb:1f:cd:38:07:b6:88:bf:d4:92:49:8b:9c:b4: db:1e:a5:78:c2:e0:77:ec:9f:aa:6b:a8:75:5e:00: 19:ae:e5:31:66:ae:9d:86:02:44:30:af:27:e0:1a: 64:2e:83:50:c4:86:66:b8:fa:7e:f2:ef:62:ff:6f: c9:57:b0:13:12:c6:5d:ef:f4:86:ba:2a:90:a3:5e: 1e:a5:41:25:41:d0:1c:9a:e4:1d:06:9d:03:21:e8: 18:91:d6:57:fa:dc:6b:ff:e9:fd:b1:e1:24:13:ed: 21:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:97:A2:74:51:42:4E:88:0B:B2:1A:6D:84:D4:F0:5F:53:45:3D:B9 X509v3 Authority Key Identifier: keyid:6A:E4:AA:77:1F:D0:A5:78:EA:3A:AC:4B:4D:3E:C8:3D:89:46:46:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auSqdx_QpXjqOqxLTT7IPYlGRj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:be:7e:7e:c4:5c:b0:af:a6:28:5d:e2:4f:f4:e2:0b:06:ac: ac:77:2a:c5:3d:18:64:8d:79:6b:6d:f0:43:e1:d7:f3:d8:ca: f0:7c:f7:14:11:67:cf:29:d5:c9:35:f3:a7:74:2d:a1:91:21: a8:c2:a5:e6:7b:1a:95:44:c7:f6:b4:23:a3:4d:a9:99:62:ec: 56:b9:64:ab:26:04:28:27:e3:e8:6e:2c:fe:60:3a:a1:0d:72: 5c:98:da:63:f4:38:9f:0d:8e:3b:d6:c5:e1:d6:a0:f9:f4:11: 94:ea:5d:f7:8f:f4:45:75:dd:2e:7c:2f:86:9d:3b:98:7d:d5: 72:bc:f2:bd:8e:3b:85:34:3e:10:5d:2d:c6:f4:16:8a:68:9e: 25:15:90:c8:a7:d3:05:55:3b:48:4f:d5:5b:97:53:81:51:a1: f1:f6:4e:de:a4:f5:8c:da:f5:c7:42:59:df:72:86:35:7c:c2: c5:7e:dd:d2:27:b3:a1:68:20:e8:d7:ae:ec:49:f3:78:c7:92: 99:dc:66:22:87:1a:36:96:df:70:af:0e:54:77:33:c1:6c:ae: 21:b2:01:0b:b7:49:f2:9c:61:4b:be:ab:1d:44:c3:ea:8d:17: 68:e9:07:a9:80:57:a8:50:f2:95:b9:e4:2d:fa:8e:e3:1f:6a: 77:14:f3:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GicFJMU38B74hyW9uWkEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZTRhYTc3MWZkMGE1NzhlYTNhYWM0YjRkM2VjODNkODk0 NjQ2M2QwHhcNMjYwMTI1MTcwMTA3WhcNMjYwMTI2MTcwMTA3WjAzMTEwLwYDVQQD EyhkZDk3YTI3NDUxNDI0ZTg4MGJiMjFhNmQ4NGQ0ZjA1ZjUzNDUzZGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzosIXc8hxkCAkAOML7GV7pluUG18 6hGlZs58UOsu85/LhXrqyiLPK6LgdQeKb5vVXdvCgjve7KBm8K2Mh+gUiEXRB4Pr 4QbhNu3ttj6Lm8gZOKEyaOoU4dODllUDiGWx4+8hW4E5G0CGTQwJDopqre8PAah6 JTdQb5uILyMZVcHLrnfeMJHOyWD6+LSiYefYXEXK4Ct56x/NOAe2iL/UkkmLnLTb HqV4wuB37J+qa6h1XgAZruUxZq6dhgJEMK8n4BpkLoNQxIZmuPp+8u9i/2/JV7AT EsZd7/SGuiqQo14epUElQdAcmuQdBp0DIegYkdZX+txr/+n9seEkE+0hdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2XonRRQk6IC7IabYTU8F9TRT25MB8GA1UdIwQY MBaAFGrkqncf0KV46jqsS00+yD2JRkY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXVTcWR4X1FwWGpxT3F4TFRUN0lQWWxHUmowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NWE5ZmYtZjVjMi00MzYxLTkwMWUt MDM4ZDI0MDcxYThhLzEvYXVTcWR4X1FwWGpxT3F4TFRUN0lQWWxHUmowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84NWE5ZmYtZjVjMi00MzYxLTkwMWUtMDM4ZDI0MDcxYThh LzEvYXVTcWR4X1FwWGpxT3F4TFRUN0lQWWxHUmowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUb5+fsRc sK+mKF3iT/TiCwasrHcqxT0YZI15a23wQ+HX89jK8Hz3FBFnzynVyTXzp3QtoZEh qMKl5nsalUTH9rQjo02pmWLsVrlkqyYEKCfj6G4s/mA6oQ1yXJjaY/Q4nw2OO9bF 4dag+fQRlOpd94/0RXXdLnwvhp07mH3VcrzyvY47hTQ+EF0txvQWimieJRWQyKfT BVU7SE/VW5dTgVGh8fZO3qT1jNr1x0JZ33KGNXzCxX7d0iezoWgg6Neu7EnzeMeS mdxmIocaNpbfcK8OVHczwWyuIbIBC7dJ8pxhS76rHUTD6o0XaOkHqYBXqFDylbnk LfqO4x9qdxTzSA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:23 2026 by rpki-client