This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft File: AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft (raw, json) Hash identifier: Xp17m4qkXpXYQoJh8MdQvU4EPs9MxMfZ3N/lQU+2eOs= Subject key identifier: A0:EC:E7:3B:16:1C:60:03:05:A8:90:6F:29:72:A4:C2:04:10:B0:AA Authority key identifier: 03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B Certificate issuer: /CN=030b00e6074502e6538391feab18358281a3279b Certificate serial: 019BF8AD904B9731EFFEA5A7F177EBCEF573 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft Manifest number: 03C2 Signing time: Mon 26 Jan 2026 05:01:22 +0000 Manifest this update: Mon 26 Jan 2026 05:01:22 +0000 Manifest next update: Tue 27 Jan 2026 05:01:22 +0000 Files and hashes: 1: AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl (hash: ZW1yw5RfewZapD1eggg64ajYJUhCNO2YPSbjVmXAKOk=) 2: CmiC5mJyQYGGKAJggm-od_rF7aY.roa (hash: VDuSSA+oUsQz/2iqadrnhGgyrgM5bD5FatxlCOVAvTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:90:4b:97:31:ef:fe:a5:a7:f1:77:eb:ce:f5:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=030b00e6074502e6538391feab18358281a3279b Validity Not Before: Jan 26 05:01:22 2026 GMT Not After : Jan 27 05:01:22 2026 GMT Subject: CN=a0ece73b161c600305a8906f2972a4c20410b0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4b:91:8e:1c:c1:57:22:74:a7:08:b5:42:00: 78:51:ff:c5:fd:a6:ba:a8:75:06:02:b0:97:15:56: 4a:ac:26:08:67:05:f4:c6:77:44:53:bd:bc:62:93: bc:88:c4:cd:d3:e5:76:0f:35:4d:04:a9:c9:ed:e3: f1:4e:68:b1:d3:ce:aa:cc:c2:4d:70:02:75:16:26: 31:ec:3a:fd:3b:03:07:fd:42:f3:1d:78:e5:86:15: 5c:36:9e:08:cd:63:e1:e3:ca:6c:bc:f6:4d:83:67: 23:82:26:2a:01:d2:10:8c:71:3d:55:bb:a6:f5:e1: d9:9a:3f:a3:a4:2f:3b:f5:ab:13:64:b1:00:02:4b: b4:92:77:64:2d:ab:c4:9d:82:fe:40:59:55:59:78: 61:f5:e4:48:2d:e3:c6:76:c2:c0:6c:7a:ae:4f:d8: a8:c0:4f:6a:16:0c:8f:f4:52:4e:80:c7:95:b7:36: ab:3d:10:57:70:7a:44:0b:00:d2:ed:a4:1d:d2:94: 89:08:82:c1:12:23:cf:44:5b:0c:ca:71:13:d4:b5: 74:c9:3e:1d:d1:af:5c:e8:13:b5:bc:18:b6:2e:02: 87:9e:0c:19:8d:8b:f8:ef:99:92:d7:1c:82:95:0b: 83:84:ca:7b:5f:03:fe:6b:a5:60:ae:1b:b0:39:6c: 30:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:EC:E7:3B:16:1C:60:03:05:A8:90:6F:29:72:A4:C2:04:10:B0:AA X509v3 Authority Key Identifier: keyid:03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:10:9a:e3:78:1f:d6:eb:9c:18:aa:90:12:34:60:1d:82:54: 6d:ea:cc:17:d4:da:35:40:b9:57:03:d1:f1:14:72:3d:41:51: 42:bc:5a:68:cb:08:46:e9:38:be:1d:2e:e1:7a:9c:1a:6e:d4: f9:33:91:a4:8b:57:5a:28:1a:7a:1d:a0:3e:1c:7c:3c:c4:2d: b4:00:b8:72:ee:36:97:33:67:1a:12:05:5e:89:36:00:c9:6d: 4b:c3:c7:d0:b1:c7:d4:c2:0c:38:71:89:40:d8:90:60:76:c2: 5c:87:b1:cb:a2:43:81:71:8d:46:5c:67:d7:34:45:80:05:f9: 54:7e:22:05:7c:ac:07:8e:94:15:ba:bf:e6:69:e2:10:ad:c4: a1:b2:cc:09:79:da:96:ec:5f:70:cb:47:10:5f:f0:d9:18:7d: 85:3f:a6:07:0b:1e:c7:2e:3e:4e:4f:99:e2:ba:3d:e6:90:7d: b6:6b:21:01:52:b6:09:13:4f:c2:94:36:d6:4f:fa:45:cb:5d: bd:b8:e8:61:60:5a:da:61:fa:d4:48:19:00:f5:24:e6:bb:fd: a8:0c:bc:ad:9b:bc:e4:9f:03:6d:f6:85:8e:13:59:31:94:86: c7:f0:c8:f5:4a:2d:b1:aa:7a:41:75:54:80:19:2a:c9:d1:a9: 37:3b:bf:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rZBLlzHv/qWn8XfrzvVzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMGIwMGU2MDc0NTAyZTY1MzgzOTFmZWFiMTgzNTgyODFh MzI3OWIwHhcNMjYwMTI2MDUwMTIyWhcNMjYwMTI3MDUwMTIyWjAzMTEwLwYDVQQD EyhhMGVjZTczYjE2MWM2MDAzMDVhODkwNmYyOTcyYTRjMjA0MTBiMGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0uRjhzBVyJ0pwi1QgB4Uf/F/aa6 qHUGArCXFVZKrCYIZwX0xndEU728YpO8iMTN0+V2DzVNBKnJ7ePxTmix086qzMJN cAJ1FiYx7Dr9OwMH/ULzHXjlhhVcNp4IzWPh48psvPZNg2cjgiYqAdIQjHE9Vbum 9eHZmj+jpC879asTZLEAAku0kndkLavEnYL+QFlVWXhh9eRILePGdsLAbHquT9io wE9qFgyP9FJOgMeVtzarPRBXcHpECwDS7aQd0pSJCILBEiPPRFsMynET1LV0yT4d 0a9c6BO1vBi2LgKHngwZjYv475mS1xyClQuDhMp7XwP+a6VgrhuwOWwwuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDs5zsWHGADBaiQbylypMIEELCqMB8GA1UdIwQY MBaAFAMLAOYHRQLmU4OR/qsYNYKBoyebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXdzQTVnZEZBdVpUZzVILXF4ZzFnb0dqSjVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9jMjY0NTgtZmRhOC00ZjBhLTk1N2Et Nzc1NjQzODU0NGNhLzEvQXdzQTVnZEZBdVpUZzVILXF4ZzFnb0dqSjVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9jMjY0NTgtZmRhOC00ZjBhLTk1N2EtNzc1NjQzODU0NGNh LzEvQXdzQTVnZEZBdVpUZzVILXF4ZzFnb0dqSjVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhCa43gf 1uucGKqQEjRgHYJUberMF9TaNUC5VwPR8RRyPUFRQrxaaMsIRuk4vh0u4XqcGm7U +TORpItXWigaeh2gPhx8PMQttAC4cu42lzNnGhIFXok2AMltS8PH0LHH1MIMOHGJ QNiQYHbCXIexy6JDgXGNRlxn1zRFgAX5VH4iBXysB46UFbq/5mniEK3EobLMCXna luxfcMtHEF/w2Rh9hT+mBwsexy4+Tk+Z4ro95pB9tmshAVK2CRNPwpQ21k/6Rctd vbjoYWBa2mH61EgZAPUk5rv9qAy8rZu85J8DbfaFjhNZMZSGx/DI9Uotsap6QXVU gBkqydGpNzu/Pg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:58:22 2026 by rpki-client