This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft File: aOi66pXUBANI8KiexOS9FSdfbDk.mft (raw, json) Hash identifier: 1/rOEPI3zildVmitmVZ6HdjjRCHL+re8S7AWmK9cZ2Q= Subject key identifier: F4:8A:35:A8:98:4E:D9:D2:E9:71:9F:8D:F7:52:DB:A2:DF:B3:8C:44 Authority key identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39 Certificate issuer: /CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39 Certificate serial: 019BF4998D13A471F643047A1B1E800F263A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 10:01:02 +0000 Manifest this update: Sun 25 Jan 2026 10:01:02 +0000 Manifest next update: Mon 26 Jan 2026 10:01:02 +0000 Files and hashes: 1: F7uNYW_BAZq9rI9uR7hZmoD2t2c.roa (hash: 66sSkYjfMPB1iz46OvsCyBJxFuzzlDOw8irePRrhJqo=) 2: ZbRHE63NTowomZ--6hRN7-VQWd4.roa (hash: 9fZQ79ry0wcmms4XZEk0xvVuXwwePg4F6u4eylx66hY=) 3: aOi66pXUBANI8KiexOS9FSdfbDk.crl (hash: 5qLB1kbRObjwhyN7hh19mjooNr0QqTzJ4dHnbUg44i4=) 4: cAIe2NM_E7WCCYmd0eVZsMmImNA.roa (hash: sic7GmBZVp2aPzVp03gq0Hxyh3yCltc3C8dhZASVy34=) 5: iN8E5J8FWFCEMY65ALgZit2wZ5o.roa (hash: 3gIZ7quZRp5VH+343KfEOmSv0A/IFrhSpW84UgHzh6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:8d:13:a4:71:f6:43:04:7a:1b:1e:80:0f:26:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39 Validity Not Before: Jan 25 10:01:02 2026 GMT Not After : Jan 26 10:01:02 2026 GMT Subject: CN=f48a35a8984ed9d2e9719f8df752dba2dfb38c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:67:c8:69:7b:17:43:d5:73:a5:12:1e:3d:47: e3:c7:fe:89:65:72:9d:45:f3:c2:11:90:aa:fa:b5: fb:e8:6a:41:ca:2b:3d:8c:ea:df:3d:91:67:ff:ed: d9:87:a2:b9:16:3b:82:42:b6:2a:31:a8:44:08:1a: b6:af:85:9d:62:3e:8e:ad:bc:44:58:cd:3a:17:6e: 53:0f:e4:97:0b:d5:57:32:f0:9e:c9:d6:23:23:ec: ea:82:c1:6f:b1:15:07:ec:c1:96:ba:b4:48:53:3e: dd:d8:4c:46:28:2e:33:cc:e8:ca:65:36:c1:4b:36: 3f:2d:ee:0d:1e:bb:2f:27:da:76:13:b9:11:45:c9: 95:da:fd:fa:23:28:5f:ae:50:61:f1:8e:0f:d2:69: 6e:89:43:bf:3e:a3:1a:f9:93:ca:35:0a:bd:17:30: 33:72:5b:a0:58:b9:69:4e:1e:25:fb:39:47:ad:8b: 8b:42:7f:9c:41:2c:cc:2e:a3:5f:99:81:04:17:58: 0d:6f:b7:03:3e:8c:47:6b:e4:1f:15:33:71:5d:ed: 20:4d:cc:47:a9:c4:69:cf:54:ec:32:2f:76:33:1e: e7:21:d1:37:08:11:38:99:8d:6d:af:59:c0:a8:2b: 04:67:9a:ee:1d:07:87:fa:d0:58:6e:1f:a8:76:8b: d0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8A:35:A8:98:4E:D9:D2:E9:71:9F:8D:F7:52:DB:A2:DF:B3:8C:44 X509v3 Authority Key Identifier: keyid:68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:0a:a0:19:7b:d3:68:bc:59:a2:82:a8:c0:b2:0b:68:0c:34: 20:c4:8b:b4:79:15:8e:5f:b1:70:90:3c:8e:18:1f:57:0d:2b: a5:70:76:78:a7:bf:4f:be:de:aa:29:9a:bf:d6:ac:1d:18:51: dd:a1:e5:05:51:ed:eb:a8:8c:77:c0:4d:87:e3:08:66:76:fb: 9f:1c:ca:60:12:9d:a3:28:61:b1:3a:22:2c:08:4c:28:23:a8: 8e:16:da:90:07:a9:c3:0d:8e:b3:2f:9a:3e:aa:a9:06:50:62: 4e:86:b5:2a:1c:92:94:a6:64:1c:86:d9:be:5f:d1:c0:f3:07: 39:ca:32:86:9a:ec:0d:5b:5d:f5:af:22:1f:3c:73:ea:e7:79: 6d:73:fb:6b:8e:7c:da:97:2a:f6:30:8d:9a:3f:d5:02:54:e8: 4e:01:0a:dd:9d:a4:59:d3:06:45:82:1a:9f:7c:97:ec:c8:70: 06:38:dc:84:db:60:f2:c3:c5:8f:a9:c1:92:fa:44:a5:5e:26: 99:2b:d4:3c:98:66:86:d0:38:90:c1:c8:b4:89:17:c3:4f:44: 28:b9:07:18:53:b4:83:2d:66:a9:92:f8:04:c7:a5:d9:43:d0: 45:3e:24:c5:ca:e0:65:5b:fe:0a:b8:b4:04:49:1a:dc:d5:3c: b0:8e:3d:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mY0TpHH2QwR6Gx6ADyY6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZThiYWVhOTVkNDA0MDM0OGYwYTg5ZWM0ZTRiZDE1Mjc1 ZjZjMzkwHhcNMjYwMTI1MTAwMTAyWhcNMjYwMTI2MTAwMTAyWjAzMTEwLwYDVQQD EyhmNDhhMzVhODk4NGVkOWQyZTk3MTlmOGRmNzUyZGJhMmRmYjM4YzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GfIaXsXQ9VzpRIePUfjx/6JZXKd RfPCEZCq+rX76GpByis9jOrfPZFn/+3Zh6K5FjuCQrYqMahECBq2r4WdYj6OrbxE WM06F25TD+SXC9VXMvCeydYjI+zqgsFvsRUH7MGWurRIUz7d2ExGKC4zzOjKZTbB SzY/Le4NHrsvJ9p2E7kRRcmV2v36IyhfrlBh8Y4P0mluiUO/PqMa+ZPKNQq9FzAz clugWLlpTh4l+zlHrYuLQn+cQSzMLqNfmYEEF1gNb7cDPoxHa+QfFTNxXe0gTcxH qcRpz1TsMi92Mx7nIdE3CBE4mY1tr1nAqCsEZ5ruHQeH+tBYbh+odovQXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSKNaiYTtnS6XGfjfdS26Lfs4xEMB8GA1UdIwQY MBaAFGjouuqV1AQDSPConsTkvRUnX2w5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU9pNjZwWFVCQU5JOEtpZXhPUzlGU2RmYkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83NjUzZTAtOGE3Mi00MzUxLWJmY2Ut MzcxMWZhZThjYTc3LzEvYU9pNjZwWFVCQU5JOEtpZXhPUzlGU2RmYkRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83NjUzZTAtOGE3Mi00MzUxLWJmY2UtMzcxMWZhZThjYTc3 LzEvYU9pNjZwWFVCQU5JOEtpZXhPUzlGU2RmYkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagqgGXvT aLxZooKowLILaAw0IMSLtHkVjl+xcJA8jhgfVw0rpXB2eKe/T77eqimav9asHRhR 3aHlBVHt66iMd8BNh+MIZnb7nxzKYBKdoyhhsToiLAhMKCOojhbakAepww2Osy+a PqqpBlBiToa1KhySlKZkHIbZvl/RwPMHOcoyhprsDVtd9a8iHzxz6ud5bXP7a458 2pcq9jCNmj/VAlToTgEK3Z2kWdMGRYIan3yX7MhwBjjchNtg8sPFj6nBkvpEpV4m mSvUPJhmhtA4kMHItIkXw09EKLkHGFO0gy1mqZL4BMel2UPQRT4kxcrgZVv+Cri0 BEka3NU8sI49LQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:50:31 2026 by rpki-client