This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft File: AGsGtdD_EADhDEJ27qCICvIJ16I.mft (raw, json) Hash identifier: ZGCxwl1842g7UtB1vkHkNRiaoUMaF9IjknzfjrMbVbE= Subject key identifier: 40:12:71:67:4D:2D:AD:59:66:16:7B:3B:6D:E4:10:2C:8B:D1:92:B1 Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2 Certificate issuer: /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2 Certificate serial: 019BF2E1EF80A33CCB961AA7852170B83AF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft Manifest number: 0B19 Signing time: Sun 25 Jan 2026 02:00:51 +0000 Manifest this update: Sun 25 Jan 2026 02:00:51 +0000 Manifest next update: Mon 26 Jan 2026 02:00:51 +0000 Files and hashes: 1: AGsGtdD_EADhDEJ27qCICvIJ16I.crl (hash: FWRMjYtIq9Dw2mIHriuXZWEkJaXCJiPvrA1RTGClQJM=) 2: JNDctSQyCVHEUhqnByChAmEncfg.roa (hash: yXoH/sBRxwLt/qpjNEIKQniBORvNxA7f4SJGosPqLLA=) 3: Po5Z-3veMvoIAK-aDVEx1e-ce5U.roa (hash: AD5FiCgalWTH4X8YjTKjmnDvWNssEsjzxmI0GCJAqfo=) 4: oSVqebziTAnWxzzhjCN56NayiOI.roa (hash: 4+N1yl+V3Z8u2Y+zTUu1AT9E1jyRz8O9S8sbZjaoH7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e1:ef:80:a3:3c:cb:96:1a:a7:85:21:70:b8:3a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2 Validity Not Before: Jan 25 02:00:51 2026 GMT Not After : Jan 26 02:00:51 2026 GMT Subject: CN=401271674d2dad5966167b3b6de4102c8bd192b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:14:82:51:9b:a9:e2:c0:17:1c:34:e4:7a:63: 74:28:6a:4c:b0:4d:e0:9d:90:b8:83:e5:d7:95:b8: ec:98:9a:c5:a6:ec:21:db:a8:58:de:7f:17:f8:63: 5a:8c:14:46:09:cc:c1:ee:ca:08:6b:21:39:08:f4: 08:49:c6:8b:8a:bf:ae:e6:02:71:67:85:12:e3:b4: 39:0e:18:83:67:ea:61:47:a2:74:0c:b1:86:ab:8e: e1:cd:49:d1:12:b6:32:ab:10:4a:bb:35:8d:e4:82: b2:98:2c:92:da:ae:9e:37:a0:1a:95:94:07:c1:63: e8:e1:04:96:15:9a:03:80:71:f8:46:1c:02:a1:4a: 10:c0:73:39:9a:a8:90:6a:2c:f3:b3:82:0b:97:12: 76:f8:b6:d7:69:9c:24:ea:ce:03:c5:bd:63:86:9c: 0c:23:06:2d:c3:06:48:e2:dd:75:46:91:02:d8:3d: ba:73:27:c2:5f:c9:8e:9e:f4:93:6c:89:e8:a4:ae: 47:74:09:05:d5:54:d8:83:e2:96:0b:c0:01:97:3d: a2:43:3b:49:b3:8d:1a:e2:27:3c:ee:52:40:36:08: ea:df:ed:0f:87:37:31:08:24:67:a5:e0:e2:13:38: 0a:b0:25:eb:87:26:be:58:17:83:08:ec:12:6e:f1: f2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:12:71:67:4D:2D:AD:59:66:16:7B:3B:6D:E4:10:2C:8B:D1:92:B1 X509v3 Authority Key Identifier: keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:00:4d:83:6c:13:d0:1f:0a:68:56:bc:e9:47:4f:63:99:ed: b6:06:a9:b9:1c:60:2e:b8:9a:77:e9:0b:55:51:7b:cb:f5:43: 89:59:30:b0:77:89:41:41:b4:ed:ba:59:f3:12:a9:47:33:dd: 57:08:18:cd:42:b3:c5:03:02:89:bf:c3:e3:c8:5e:7b:cb:cc: 33:b7:cc:fe:5a:66:5c:81:c0:62:94:7c:a5:19:46:d4:6b:3f: 8b:5a:54:87:cf:77:2b:7a:75:83:66:9e:30:c0:73:24:1c:40: 08:1f:ff:06:0f:a8:4c:d7:7e:73:48:8c:d0:2c:e5:5b:d3:00: ef:a7:d7:12:2c:60:e9:e4:08:0a:c0:1b:64:61:85:ab:86:80: a8:4d:36:1e:25:3a:10:88:2d:04:2c:8d:28:4d:ad:e1:61:47: cf:59:e3:3d:11:7e:ed:31:a2:22:55:56:51:97:87:61:b4:7d: ca:28:45:0c:53:5d:b2:e8:27:2a:0c:69:af:d0:22:40:1a:d1: 2c:f5:72:eb:b0:ed:26:99:72:46:77:5d:26:f0:7d:bb:9c:87: 4c:5c:59:65:7a:0f:db:dd:75:c5:06:92:d9:c9:df:95:22:2e: d7:3d:a3:cf:6d:03:02:3b:c0:63:1c:22:9a:28:11:bd:1e:54: 59:18:31:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4e+AozzLlhqnhSFwuDr0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNmIwNmI1ZDBmZjEwMDBlMTBjNDI3NmVlYTA4ODBhZjIw OWQ3YTIwHhcNMjYwMTI1MDIwMDUxWhcNMjYwMTI2MDIwMDUxWjAzMTEwLwYDVQQD Eyg0MDEyNzE2NzRkMmRhZDU5NjYxNjdiM2I2ZGU0MTAyYzhiZDE5MmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBSCUZup4sAXHDTkemN0KGpMsE3g nZC4g+XXlbjsmJrFpuwh26hY3n8X+GNajBRGCczB7soIayE5CPQIScaLir+u5gJx Z4US47Q5DhiDZ+phR6J0DLGGq47hzUnRErYyqxBKuzWN5IKymCyS2q6eN6AalZQH wWPo4QSWFZoDgHH4RhwCoUoQwHM5mqiQaizzs4ILlxJ2+LbXaZwk6s4Dxb1jhpwM IwYtwwZI4t11RpEC2D26cyfCX8mOnvSTbInopK5HdAkF1VTYg+KWC8ABlz2iQztJ s40a4ic87lJANgjq3+0PhzcxCCRnpeDiEzgKsCXrhya+WBeDCOwSbvHyvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAScWdNLa1ZZhZ7O23kECyL0ZKxMB8GA1UdIwQY MBaAFABrBrXQ/xAA4QxCdu6giAryCdeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQt NTdjOTU1YzljODVkLzEvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQtNTdjOTU1YzljODVk LzEvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgBNg2wT 0B8KaFa86UdPY5nttgapuRxgLriad+kLVVF7y/VDiVkwsHeJQUG07bpZ8xKpRzPd VwgYzUKzxQMCib/D48hee8vMM7fM/lpmXIHAYpR8pRlG1Gs/i1pUh893K3p1g2ae MMBzJBxACB//Bg+oTNd+c0iM0CzlW9MA76fXEixg6eQICsAbZGGFq4aAqE02HiU6 EIgtBCyNKE2t4WFHz1njPRF+7TGiIlVWUZeHYbR9yihFDFNdsugnKgxpr9AiQBrR LPVy67DtJplyRnddJvB9u5yHTFxZZXoP2911xQaS2cnflSIu1z2jz20DAjvAYxwi migRvR5UWRgxRg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:48:44 2026 by rpki-client