This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft File: AGsGtdD_EADhDEJ27qCICvIJ16I.mft (raw, json) Hash identifier: lsyacpMZmW8mxVhwU4PGjE9Dn/mAY2ILaoHukDkIxl8= Subject key identifier: 62:85:85:DA:15:5B:FD:F2:24:13:EA:CC:50:27:B8:C1:C4:22:2C:1B Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2 Certificate issuer: /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2 Certificate serial: 019BF4D0DFB91EFEA97BE4FDFC574EAF4E30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft Manifest number: 0B1A Signing time: Sun 25 Jan 2026 11:01:27 +0000 Manifest this update: Sun 25 Jan 2026 11:01:27 +0000 Manifest next update: Mon 26 Jan 2026 11:01:27 +0000 Files and hashes: 1: AGsGtdD_EADhDEJ27qCICvIJ16I.crl (hash: OJkhmqOLiY9+ITlG1EHagSDp6YNAOjeTmVh0bcBRAQw=) 2: JNDctSQyCVHEUhqnByChAmEncfg.roa (hash: yXoH/sBRxwLt/qpjNEIKQniBORvNxA7f4SJGosPqLLA=) 3: Po5Z-3veMvoIAK-aDVEx1e-ce5U.roa (hash: AD5FiCgalWTH4X8YjTKjmnDvWNssEsjzxmI0GCJAqfo=) 4: oSVqebziTAnWxzzhjCN56NayiOI.roa (hash: 4+N1yl+V3Z8u2Y+zTUu1AT9E1jyRz8O9S8sbZjaoH7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:df:b9:1e:fe:a9:7b:e4:fd:fc:57:4e:af:4e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2 Validity Not Before: Jan 25 11:01:27 2026 GMT Not After : Jan 26 11:01:27 2026 GMT Subject: CN=628585da155bfdf22413eacc5027b8c1c4222c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:07:dd:34:1d:0b:78:cb:67:11:6d:33:59:41: 67:b6:f2:ff:91:10:04:dd:5e:1e:0b:a4:79:b2:bf: 61:4d:62:69:35:23:51:e6:22:ce:39:12:7b:72:b0: 2d:19:03:34:6e:ca:13:1d:0d:b7:56:86:3e:06:2b: 1b:1f:86:a2:e6:f7:12:88:3a:65:d5:fb:ec:0f:97: b3:ef:11:0b:b8:6f:f9:74:a3:cf:cd:01:5c:0b:76: a5:05:95:5a:e5:89:cb:25:6d:8c:08:fb:ee:6f:7a: aa:9f:22:fe:33:94:a8:15:a6:04:77:bf:d1:cb:e4: 09:b4:26:16:00:9f:00:5c:67:35:38:e3:fb:96:b5: 12:ea:ed:36:c2:df:64:a4:b4:2f:e0:2e:a8:2a:6d: 54:89:39:9a:f2:29:6a:c0:57:38:eb:76:f2:f1:0a: 4f:8d:c2:15:3b:d7:52:ce:05:95:73:97:eb:42:a7: 09:01:5c:a2:bc:bc:8f:90:91:34:d5:02:8a:b2:64: f8:bb:7e:6c:fc:1a:e6:a1:35:47:30:d2:05:be:0c: 19:c4:e7:5e:1a:ff:7c:46:b6:64:b2:2a:30:bb:6c: c3:37:3a:7b:9a:a7:21:94:1b:fc:97:0c:0b:46:79: 1f:9f:1a:05:06:72:bc:20:32:99:99:aa:d5:48:be: a0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:85:85:DA:15:5B:FD:F2:24:13:EA:CC:50:27:B8:C1:C4:22:2C:1B X509v3 Authority Key Identifier: keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:d3:35:ba:65:5f:bc:fc:66:30:53:bd:43:e2:30:d6:ab:b7: d5:08:b9:24:07:a6:d2:d6:83:f3:89:e4:2d:69:91:99:f2:05: 62:25:00:02:0b:92:09:d1:60:59:ee:5d:20:fd:62:71:73:c0: 68:03:38:31:fe:74:29:b1:e0:ec:2f:f9:ee:b8:a2:77:9e:70: ee:3a:0e:66:16:f8:f0:15:fc:3f:0e:f7:ac:8c:18:e6:a0:25: 23:5d:15:c1:ca:c1:9c:22:d6:45:a6:70:a1:91:75:db:ff:c8: 11:a0:ba:d0:a9:34:fe:b1:d5:99:61:f1:a0:87:5a:11:14:b2: 04:08:e4:39:fe:1a:bb:ba:6c:20:9d:e1:c3:85:4a:d9:d5:d1: cc:fc:dd:ae:b4:c9:56:34:a1:31:1a:1a:da:3c:95:c7:10:f9: 6d:78:d7:fe:ef:8a:25:1b:8a:63:aa:18:36:03:8a:d7:e3:f2: e9:55:18:fd:85:30:a9:11:37:de:66:f4:9a:1b:d3:b3:d2:1e: 7c:6d:bc:c4:ef:82:ad:ff:90:80:7f:43:c2:8c:60:db:ad:e1: 07:5d:a3:6b:5c:d7:76:38:02:d0:25:10:50:fb:96:71:df:76: d2:6d:5d:55:05:40:da:78:7d:96:a8:b8:f2:a6:5a:af:0b:61: ec:17:1f:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00N+5Hv6pe+T9/FdOr04wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNmIwNmI1ZDBmZjEwMDBlMTBjNDI3NmVlYTA4ODBhZjIw OWQ3YTIwHhcNMjYwMTI1MTEwMTI3WhcNMjYwMTI2MTEwMTI3WjAzMTEwLwYDVQQD Eyg2Mjg1ODVkYTE1NWJmZGYyMjQxM2VhY2M1MDI3YjhjMWM0MjIyYzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogfdNB0LeMtnEW0zWUFntvL/kRAE 3V4eC6R5sr9hTWJpNSNR5iLOORJ7crAtGQM0bsoTHQ23VoY+BisbH4ai5vcSiDpl 1fvsD5ez7xELuG/5dKPPzQFcC3alBZVa5YnLJW2MCPvub3qqnyL+M5SoFaYEd7/R y+QJtCYWAJ8AXGc1OOP7lrUS6u02wt9kpLQv4C6oKm1UiTma8ilqwFc463by8QpP jcIVO9dSzgWVc5frQqcJAVyivLyPkJE01QKKsmT4u35s/BrmoTVHMNIFvgwZxOde Gv98RrZksiowu2zDNzp7mqchlBv8lwwLRnkfnxoFBnK8IDKZmarVSL6g7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGKFhdoVW/3yJBPqzFAnuMHEIiwbMB8GA1UdIwQY MBaAFABrBrXQ/xAA4QxCdu6giAryCdeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQt NTdjOTU1YzljODVkLzEvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQtNTdjOTU1YzljODVk LzEvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNM1umVf vPxmMFO9Q+Iw1qu31Qi5JAem0taD84nkLWmRmfIFYiUAAguSCdFgWe5dIP1icXPA aAM4Mf50KbHg7C/57riid55w7joOZhb48BX8Pw73rIwY5qAlI10VwcrBnCLWRaZw oZF12//IEaC60Kk0/rHVmWHxoIdaERSyBAjkOf4au7psIJ3hw4VK2dXRzPzdrrTJ VjShMRoa2jyVxxD5bXjX/u+KJRuKY6oYNgOK1+Py6VUY/YUwqRE33mb0mhvTs9Ie fG28xO+Crf+QgH9Dwoxg263hB12ja1zXdjgC0CUQUPuWcd920m1dVQVA2nh9lqi4 8qZarwth7Bcfyw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:59:22 2026 by rpki-client