This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft File: aJwdYcDzPDCwC1yoChXR0lVsB0M.mft (raw, json) Hash identifier: yu58EXqr82v9y1k2pRP+7a/xYOM8JvN2UareT20FZs0= Subject key identifier: A6:9D:C2:43:6F:02:B0:8F:1A:69:F9:D5:59:73:47:4C:09:73:DD:66 Authority key identifier: 68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43 Certificate issuer: /CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743 Certificate serial: 019BF42C020BF47CA83671E2B12B6334CACD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft Manifest number: C5 Signing time: Sun 25 Jan 2026 08:01:23 +0000 Manifest this update: Sun 25 Jan 2026 08:01:23 +0000 Manifest next update: Mon 26 Jan 2026 08:01:23 +0000 Files and hashes: 1: _TtZJ5msDlGsiXnHSOsz0-Eiy9I.roa (hash: c2TwS42atkIHb7NKIN/wGgnVceX4RG+uR7le8c7mQSI=) 2: aJwdYcDzPDCwC1yoChXR0lVsB0M.crl (hash: WC3XFj/sY3hQQhdYfxa5/XjKvab2ozy4KOthtdEvgE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2c:02:0b:f4:7c:a8:36:71:e2:b1:2b:63:34:ca:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743 Validity Not Before: Jan 25 08:01:23 2026 GMT Not After : Jan 26 08:01:23 2026 GMT Subject: CN=a69dc2436f02b08f1a69f9d55973474c0973dd66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b6:07:c9:7e:7a:4a:9c:17:3a:21:99:cf:9a: 72:ce:af:66:be:1e:30:04:d9:55:44:7c:19:03:b7: 93:f0:ff:04:04:d8:5b:23:6f:85:77:eb:a8:70:86: 0e:56:d8:72:cd:06:73:51:db:79:4f:2b:f0:c0:ce: 02:c3:b3:b7:cc:ea:08:0c:b7:d5:83:62:22:c0:3a: 7b:f3:3a:88:42:5d:9c:a8:f0:0f:29:d8:5a:0b:37: 4a:d5:fc:59:e6:9a:cd:c1:9b:eb:41:ed:d7:da:80: 4e:16:60:7c:59:12:1a:2f:d5:e1:be:c8:c2:8e:f0: b9:e1:bc:9b:b0:ee:f1:f6:e1:c6:c6:0b:7f:92:d9: 20:99:23:bf:61:26:37:48:e5:37:03:8a:d2:89:03: 13:c8:e2:e5:d2:51:9d:85:cd:a9:f6:ac:a5:f9:95: 33:2b:1e:c0:28:d0:18:c4:f9:b6:63:df:a1:59:1c: ec:15:df:a1:6d:a0:9b:20:8c:16:14:8a:26:e3:4f: 14:de:f9:5d:ff:a7:b1:86:db:13:c1:6e:21:76:45: a7:43:42:54:2c:82:21:d6:aa:d6:47:d3:6e:4a:19: 2a:81:fd:db:6b:14:0e:66:9f:69:35:4b:ae:24:ad: 56:6e:1e:3f:36:58:e1:44:3a:c6:07:0d:82:5f:9c: d5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9D:C2:43:6F:02:B0:8F:1A:69:F9:D5:59:73:47:4C:09:73:DD:66 X509v3 Authority Key Identifier: keyid:68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:f3:bd:b2:8b:d4:83:cc:c9:08:57:a0:f5:d4:85:7a:be:96: 76:c6:5a:a4:a0:34:ba:9b:60:b6:d9:17:e4:d7:1a:00:ff:7f: 98:c9:8a:9f:1b:30:2b:b8:df:c2:39:3d:9a:02:f5:e3:8f:ab: 7c:b6:f7:9e:72:80:1e:a9:f2:2c:8e:5d:5b:6f:8c:bd:74:25: a6:8e:19:15:3d:72:15:8d:b4:d2:d0:7c:53:45:46:9a:a9:07: 94:1d:02:f6:b0:4a:ef:78:9c:5a:bf:55:c2:63:ce:fa:db:e3: 26:eb:83:c9:15:87:65:cb:e7:63:c3:27:9c:71:a1:28:f2:11: ac:9f:ca:27:a0:17:e1:fa:8b:8f:63:70:9a:3e:ff:ee:6d:7f: eb:c7:f2:2b:32:84:ba:af:c5:79:0c:12:cc:c0:96:9c:77:f4: c7:98:80:4e:91:dd:2d:15:f3:cc:26:d4:bf:3c:28:49:2d:29: e6:03:8d:88:2b:98:aa:35:b9:57:75:00:b5:1d:b7:f5:51:32: fa:46:08:73:4a:72:ec:e5:97:05:0e:bc:bc:2c:ba:fa:c1:2f: 9f:c3:ac:9b:4a:3f:4c:fe:28:b2:95:77:0e:13:fb:c9:5a:96: 36:35:d1:a9:de:b4:7d:75:71:54:51:af:9f:bd:74:6a:6d:9d: eb:dc:89:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0LAIL9HyoNnHisStjNMrNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4OWMxZDYxYzBmMzNjMzBiMDBiNWNhODBhMTVkMWQyNTU2 YzA3NDMwHhcNMjYwMTI1MDgwMTIzWhcNMjYwMTI2MDgwMTIzWjAzMTEwLwYDVQQD EyhhNjlkYzI0MzZmMDJiMDhmMWE2OWY5ZDU1OTczNDc0YzA5NzNkZDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrYHyX56SpwXOiGZz5pyzq9mvh4w BNlVRHwZA7eT8P8EBNhbI2+Fd+uocIYOVthyzQZzUdt5TyvwwM4Cw7O3zOoIDLfV g2IiwDp78zqIQl2cqPAPKdhaCzdK1fxZ5prNwZvrQe3X2oBOFmB8WRIaL9XhvsjC jvC54bybsO7x9uHGxgt/ktkgmSO/YSY3SOU3A4rSiQMTyOLl0lGdhc2p9qyl+ZUz Kx7AKNAYxPm2Y9+hWRzsFd+hbaCbIIwWFIom408U3vld/6exhtsTwW4hdkWnQ0JU LIIh1qrWR9NuShkqgf3baxQOZp9pNUuuJK1Wbh4/NljhRDrGBw2CX5zV4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKadwkNvArCPGmn51VlzR0wJc91mMB8GA1UdIwQY MBaAFGicHWHA8zwwsAtcqAoV0dJVbAdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUp3ZFljRHpQREN3QzF5b0NoWFIwbFZzQjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82ZTI3MmQtYWRkMS00MWVjLTk1NGIt MjIwYmM0M2NkMjQ2LzEvYUp3ZFljRHpQREN3QzF5b0NoWFIwbFZzQjBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS82ZTI3MmQtYWRkMS00MWVjLTk1NGItMjIwYmM0M2NkMjQ2 LzEvYUp3ZFljRHpQREN3QzF5b0NoWFIwbFZzQjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/O9sovU g8zJCFeg9dSFer6WdsZapKA0uptgttkX5NcaAP9/mMmKnxswK7jfwjk9mgL144+r fLb3nnKAHqnyLI5dW2+MvXQlpo4ZFT1yFY200tB8U0VGmqkHlB0C9rBK73icWr9V wmPO+tvjJuuDyRWHZcvnY8MnnHGhKPIRrJ/KJ6AX4fqLj2Nwmj7/7m1/68fyKzKE uq/FeQwSzMCWnHf0x5iATpHdLRXzzCbUvzwoSS0p5gONiCuYqjW5V3UAtR239VEy +kYIc0py7OWXBQ68vCy6+sEvn8Osm0o/TP4ospV3DhP7yVqWNjXRqd60fXVxVFGv n710am2d69yJgw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:15:06 2026 by rpki-client