This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft File: AK-d2jB8tSU4XvkPUG0NV7udK_I.mft (raw, json) Hash identifier: tm5/sHApj+j4TnK3U2E0Nnunza5VxjEw7m2jjQIIDX8= Subject key identifier: 64:20:0D:B4:9C:9E:46:49:45:1F:B5:93:3F:E0:50:79:02:52:AD:5A Authority key identifier: 00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2 Certificate issuer: /CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2 Certificate serial: 019BF5E2F0BCF02FA1D4D6E8EF93E06A547B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 16:00:49 +0000 Manifest this update: Sun 25 Jan 2026 16:00:49 +0000 Manifest next update: Mon 26 Jan 2026 16:00:49 +0000 Files and hashes: 1: AK-d2jB8tSU4XvkPUG0NV7udK_I.crl (hash: llc0f0bGGhVFZMmda5IxuMK5fslUtnh8rGlYLlYkEEE=) 2: C3pfKMQJQW-010A2V2GrYZcMHLQ.roa (hash: VPKEZMstZH4HBeMsv7PNI+XFDpbDiaB9jj0dzD39XgQ=) 3: daRE9O1fZqkKzy4fulwDE1DZwPw.roa (hash: QKM8Dv9ERwfYZf45lCGN842GGmFpg8jICmmZMoRDLpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e2:f0:bc:f0:2f:a1:d4:d6:e8:ef:93:e0:6a:54:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2 Validity Not Before: Jan 25 16:00:49 2026 GMT Not After : Jan 26 16:00:49 2026 GMT Subject: CN=64200db49c9e4649451fb5933fe050790252ad5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:07:97:0d:c4:91:d5:35:86:d1:eb:36:e1:dc: e0:c6:1b:8d:88:69:70:dd:28:6f:1a:92:ae:98:79: 10:c9:61:7a:a3:48:c6:21:ee:bf:5d:17:5a:39:42: 16:de:b0:5a:40:a4:91:44:79:57:41:a7:23:70:94: 7e:8a:9e:e8:b5:ae:b5:73:1b:58:3c:c7:56:ca:68: cb:36:0a:c0:7b:c0:40:69:05:e9:4c:34:52:ff:ed: 8b:ef:13:a3:05:dc:36:77:f7:fb:62:e8:d7:a0:24: 0b:8c:37:b3:5d:df:6b:14:50:13:94:9b:ea:6f:71: 64:22:09:30:66:fa:d8:ae:d7:3d:bf:9c:f9:c9:48: df:75:7f:27:24:30:2c:a4:90:54:47:f0:62:b6:82: f2:85:97:91:3e:f5:3f:0c:07:1d:c0:5a:65:8e:bb: 04:15:b0:9c:f2:d6:f0:00:6e:86:f7:4c:a9:e9:d2: b8:42:83:5e:d1:6e:df:8d:9d:38:52:7d:eb:71:64: a2:e6:06:38:a7:45:43:4c:62:69:d4:06:a4:45:0d: 34:34:f1:eb:44:1b:cc:56:ba:99:42:48:9e:75:dd: 1b:b7:de:7c:db:e3:78:75:f4:58:ad:aa:4f:0e:9e: a5:68:9d:fb:e2:7b:0f:3b:00:ce:86:99:11:9a:a3: 6b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:20:0D:B4:9C:9E:46:49:45:1F:B5:93:3F:E0:50:79:02:52:AD:5A X509v3 Authority Key Identifier: keyid:00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:5b:41:e8:b3:d0:6d:bb:09:b6:7b:fd:35:39:a5:25:12:2a: 36:f0:db:69:cb:d9:fa:b3:f5:ef:18:ef:87:db:ce:ea:d0:0e: 06:10:f2:33:7c:54:fd:b0:54:2f:b3:bc:57:33:e2:93:f0:39: 4c:f2:ef:21:81:ef:31:52:0e:8c:8f:4b:53:87:5e:f0:dd:c9: d3:06:7f:6b:73:e3:ce:9f:9a:25:fc:09:dc:49:ab:a0:c2:76: 98:1d:e1:70:3f:4b:e1:3c:cf:9b:9e:07:07:64:10:aa:e0:dc: da:f6:9a:82:90:c3:19:1a:50:00:83:a3:7c:46:96:40:45:51: d2:b3:01:c8:63:0d:1c:c5:9d:31:c3:76:fa:00:66:72:27:7b: c9:69:ca:93:fd:70:3e:23:6a:4f:25:06:72:7c:bd:70:64:f6: 7a:c9:56:0c:e3:b5:3f:b0:58:c1:13:51:eb:f1:69:9b:22:75: 1f:e7:f4:75:d4:3b:c5:7b:f2:9b:03:ae:77:62:c1:33:2f:4b: e3:ec:49:4e:b9:d5:76:29:45:1e:11:63:45:bd:3b:ae:ea:7a: d3:09:88:0c:b8:91:aa:84:7e:e9:c4:bd:74:95:4d:bb:02:c0: 71:77:6f:56:9b:a6:ac:17:f7:96:40:f2:99:df:b8:06:dd:4f: ef:ed:6d:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14vC88C+h1Nbo75PgalR7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYWY5ZGRhMzA3Y2I1MjUzODVlZjkwZjUwNmQwZDU3YmI5 ZDJiZjIwHhcNMjYwMTI1MTYwMDQ5WhcNMjYwMTI2MTYwMDQ5WjAzMTEwLwYDVQQD Eyg2NDIwMGRiNDljOWU0NjQ5NDUxZmI1OTMzZmUwNTA3OTAyNTJhZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3weXDcSR1TWG0es24dzgxhuNiGlw 3ShvGpKumHkQyWF6o0jGIe6/XRdaOUIW3rBaQKSRRHlXQacjcJR+ip7ota61cxtY PMdWymjLNgrAe8BAaQXpTDRS/+2L7xOjBdw2d/f7YujXoCQLjDezXd9rFFATlJvq b3FkIgkwZvrYrtc9v5z5yUjfdX8nJDAspJBUR/BitoLyhZeRPvU/DAcdwFpljrsE FbCc8tbwAG6G90yp6dK4QoNe0W7fjZ04Un3rcWSi5gY4p0VDTGJp1AakRQ00NPHr RBvMVrqZQkiedd0bt9582+N4dfRYrapPDp6laJ374nsPOwDOhpkRmqNrNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQgDbScnkZJRR+1kz/gUHkCUq1aMB8GA1UdIwQY MBaAFACvndowfLUlOF75D1BtDVe7nSvyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUstZDJqQjh0U1U0WHZrUFVHME5WN3VkS19JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9kMGUyZjQtYjYwYS00MGIyLTkyZTkt OTBlYWNlOWUwNTllLzEvQUstZDJqQjh0U1U0WHZrUFVHME5WN3VkS19JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9kMGUyZjQtYjYwYS00MGIyLTkyZTktOTBlYWNlOWUwNTll LzEvQUstZDJqQjh0U1U0WHZrUFVHME5WN3VkS19JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfltB6LPQ bbsJtnv9NTmlJRIqNvDbacvZ+rP17xjvh9vO6tAOBhDyM3xU/bBUL7O8VzPik/A5 TPLvIYHvMVIOjI9LU4de8N3J0wZ/a3Pjzp+aJfwJ3EmroMJ2mB3hcD9L4TzPm54H B2QQquDc2vaagpDDGRpQAIOjfEaWQEVR0rMByGMNHMWdMcN2+gBmcid7yWnKk/1w PiNqTyUGcny9cGT2eslWDOO1P7BYwRNR6/FpmyJ1H+f0ddQ7xXvymwOud2LBMy9L 4+xJTrnVdilFHhFjRb07rup60wmIDLiRqoR+6cS9dJVNuwLAcXdvVpumrBf3lkDy md+4Bt1P7+1tgw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:48 2026 by rpki-client