This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: 1euBnJTeGYryklQgDr2yHdc5vw4bK4qRQE2XsgkxD9U= Subject key identifier: A2:E8:C1:1D:B8:4F:B4:42:7F:97:54:87:B5:16:0D:DF:83:EB:06:34 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 019BF91BA9D360581DC333524BB4DB63F105 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 1282 Signing time: Mon 26 Jan 2026 07:01:38 +0000 Manifest this update: Mon 26 Jan 2026 07:01:38 +0000 Manifest next update: Tue 27 Jan 2026 07:01:38 +0000 Files and hashes: 1: 1-RxvuJO_jTchUynlUq2UfaQo14s.roa (hash: RiJrCfh6jrOWp/Kdbsy9E1iiVv4aVjYDrT7ENiEz4TE=) 2: 1-a4Jfvl73sg74p_0XL8QwTt9GSg.roa (hash: FUZwlR5+IowctwR2O6qPAipX2v6y8pLQV+4UDQvBld4=) 3: 1BivsgHv80evKrJUr40JTZlUflQ.roa (hash: V8wFTbk/nUscM1lOnu4fmHl0eVlRMSa47L0o0dXKIUQ=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: 99lPBniy8k1L2FL4HXChJfNWe2V1UR1Zc59QV4uO+Mo=) 5: BYf7RoVtzwx1yTG9FshawkhjTK4.roa (hash: sDDf+aqw1FGJKYG+5FCvmvbUR9TO2CTrbICWskjL/F0=) 6: HL42GB5yCeK03X0nAabkVkH3_Aw.roa (hash: uOANZs2dCcg3I2ddPUvkq5JotkivRlYW0T26ryzPHHM=) 7: Iw5mcpwalTXPnZnnTmYTdsqiUzs.roa (hash: sk1P8Pv/vu7n71J9ytQoTHDjd9XCgIlEXHvpDdpVHFw=) 8: UReyeEdRYk-K5jTcIl8Ooq7M3tc.roa (hash: RUl0rxhnXo8q1lbp04pAM7Ge7Yr5f6OK0CqmmmjACe4=) 9: V-aCqzfb1a5nr18Dpdo59TdOJ2o.roa (hash: cKOWN1Y85BplWaYgItYhxxODhX9O9HAW97DEPTPY4i8=) 10: fl0ZAFdlfHmaO-tRgRiDI18HGbI.roa (hash: MwB5gNGA9bGWfwt6Pb+LVkIHTpzaIDIKiSps/GwLDPs=) 11: ha79IahEugt55pyXch2rl5eqNpY.roa (hash: /2Q4OxJwb2IrGYC5cRQW4yWcjEMQEg/M8fPIE1oKn0c=) 12: z9xaJu4-grqg2GhotcVjg60Bphs.roa (hash: X87I15rWlYwJRZh2iXyNZTDnLknqtSiwvXkNxh+oeds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:a9:d3:60:58:1d:c3:33:52:4b:b4:db:63:f1:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Jan 26 07:01:38 2026 GMT Not After : Jan 27 07:01:38 2026 GMT Subject: CN=a2e8c11db84fb4427f975487b5160ddf83eb0634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:f7:f6:fb:62:95:bf:82:68:9e:73:7e:a9: a4:0d:a0:f4:09:87:06:e7:f5:1b:48:35:44:83:af: 1f:57:1d:97:13:94:06:a4:99:7d:70:4b:db:f3:0e: 2f:85:5a:09:c7:06:0c:52:d7:ff:ab:e3:50:44:7a: ca:a3:fb:a3:06:6f:52:c5:92:4d:75:7c:6d:fe:2d: 68:a4:c6:0d:c7:8a:f5:09:85:ef:13:26:50:c4:55: 57:64:56:30:02:5f:7a:24:b8:70:74:b7:56:8b:64: f3:f6:ed:9f:da:74:c9:bd:4b:21:45:75:77:10:60: 54:1a:c8:36:c6:6c:3e:97:7d:c7:91:74:c3:b6:75: 29:3d:73:5d:a6:7a:3f:9c:32:55:a3:63:53:51:98: 43:5c:97:49:f8:30:5e:dc:37:e3:ef:40:68:ff:b9: 1b:73:dd:32:0d:56:16:2b:9f:7b:4e:f1:f6:ae:ae: 61:e7:b5:9e:02:48:42:a7:fa:14:9c:b3:38:50:24: 8c:52:96:83:84:07:0f:8a:0e:2d:ca:f3:96:f7:00: c3:95:00:02:95:e7:e2:e7:27:40:07:1e:63:f2:24: e3:a5:ab:87:84:cb:99:66:8c:55:5c:d9:cf:57:3b: 7e:c1:ec:42:d6:4e:be:9f:52:18:0f:08:28:2c:98: 1b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E8:C1:1D:B8:4F:B4:42:7F:97:54:87:B5:16:0D:DF:83:EB:06:34 X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:fb:ba:f8:ab:0a:c6:47:9f:8a:21:6f:85:1a:a4:54:d0:dd: 60:0b:ba:76:0d:c4:98:85:22:7b:3b:5b:6a:6e:a4:7d:cb:01: f9:3a:45:13:04:43:9f:10:0f:79:e5:22:d7:15:f5:4a:97:15: 92:8b:b7:1a:49:60:ed:47:4b:df:cf:42:2c:61:e6:77:a3:a2: b0:3d:3a:fb:7f:3d:fc:7f:92:c1:c5:0a:d7:e4:4f:78:ac:cf: 41:46:eb:09:6b:bf:41:4f:f9:84:bc:8b:64:cc:04:fe:d1:fa: 0e:26:c4:13:56:6e:f9:ed:df:fc:c7:d2:ad:3d:7f:77:52:2a: 70:4a:28:07:b3:af:68:89:bb:27:17:d1:7f:22:5c:a8:9a:16: 0f:d4:51:ef:21:6d:ba:81:3c:54:48:09:74:e1:07:8d:6a:47: 44:93:f5:0a:b9:04:2d:f4:b5:bd:be:f0:27:ca:d9:64:73:60: 19:fe:5c:26:65:46:e9:25:11:91:65:10:4d:bc:bc:73:54:93: 44:6e:87:28:d4:1a:0f:d0:a7:e8:82:27:51:dc:dc:bb:df:1c: b1:0d:a9:f3:80:11:c1:f8:4d:53:0a:17:04:84:e7:4a:b6:95: 0e:eb:23:8e:18:52:55:73:65:83:37:b5:44:33:28:07:20:53: 75:2c:1b:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G6nTYFgdwzNSS7TbY/EFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjYwMTI2MDcwMTM4WhcNMjYwMTI3MDcwMTM4WjAzMTEwLwYDVQQD EyhhMmU4YzExZGI4NGZiNDQyN2Y5NzU0ODdiNTE2MGRkZjgzZWIwNjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC/39vtilb+CaJ5zfqmkDaD0CYcG 5/UbSDVEg68fVx2XE5QGpJl9cEvb8w4vhVoJxwYMUtf/q+NQRHrKo/ujBm9SxZJN dXxt/i1opMYNx4r1CYXvEyZQxFVXZFYwAl96JLhwdLdWi2Tz9u2f2nTJvUshRXV3 EGBUGsg2xmw+l33HkXTDtnUpPXNdpno/nDJVo2NTUZhDXJdJ+DBe3Dfj70Bo/7kb c90yDVYWK597TvH2rq5h57WeAkhCp/oUnLM4UCSMUpaDhAcPig4tyvOW9wDDlQAC lefi5ydABx5j8iTjpauHhMuZZoxVXNnPVzt+wexC1k6+n1IYDwgoLJgbCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLowR24T7RCf5dUh7UWDd+D6wY0MB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/u6+KsK xkefiiFvhRqkVNDdYAu6dg3EmIUieztbam6kfcsB+TpFEwRDnxAPeeUi1xX1SpcV kou3Gklg7UdL389CLGHmd6OisD06+389/H+SwcUK1+RPeKzPQUbrCWu/QU/5hLyL ZMwE/tH6DibEE1Zu+e3f/MfSrT1/d1IqcEooB7OvaIm7JxfRfyJcqJoWD9RR7yFt uoE8VEgJdOEHjWpHRJP1CrkELfS1vb7wJ8rZZHNgGf5cJmVG6SURkWUQTby8c1ST RG6HKNQaD9Cn6IInUdzcu98csQ2p84ARwfhNUwoXBITnSraVDusjjhhSVXNlgze1 RDMoByBTdSwbfw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:06 2026 by rpki-client