This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft File: AfZJudBUYiex1GJsIIHk09qFDv4.mft (raw, json) Hash identifier: pGSB7N9h5ehs3mdrwRSxBY7iup9zAcUMOsJZQ5Zsyno= Subject key identifier: 68:BF:7E:D8:9B:A1:9F:5F:A8:4C:A4:B4:98:1F:28:06:3A:2E:A3:D5 Authority key identifier: 01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE Certificate issuer: /CN=01f649b9d0546227b1d4626c2081e4d3da850efe Certificate serial: 019BF83FC3226388F00213650322EE710EE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft Manifest number: 14D3 Signing time: Mon 26 Jan 2026 03:01:26 +0000 Manifest this update: Mon 26 Jan 2026 03:01:26 +0000 Manifest next update: Tue 27 Jan 2026 03:01:26 +0000 Files and hashes: 1: 2FF_JdmMPpNnVhjdAwhZJqXRuRA.roa (hash: w0hjY14/3MT2uCVE6s9mvHq0OBPlplAq8WkEPk3Bsz8=) 2: AfZJudBUYiex1GJsIIHk09qFDv4.crl (hash: HfA2TCoL2aUl/C4mnmCE13sGhMwYJjhDUarLZXVhtNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:c3:22:63:88:f0:02:13:65:03:22:ee:71:0e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01f649b9d0546227b1d4626c2081e4d3da850efe Validity Not Before: Jan 26 03:01:26 2026 GMT Not After : Jan 27 03:01:26 2026 GMT Subject: CN=68bf7ed89ba19f5fa84ca4b4981f28063a2ea3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:45:e1:43:c3:17:dc:34:42:14:af:16:7a:bc: 7d:6e:c5:ee:8a:e0:ef:f2:8b:c0:4d:a8:9a:7d:24: f1:a1:17:41:07:79:03:d1:4d:9f:85:63:30:a3:bc: 7d:f2:1a:81:5c:43:07:8d:51:57:d0:46:55:26:ab: bc:67:52:e3:bd:03:a1:3d:7b:13:80:06:01:b3:1c: 9d:2a:f3:a0:f2:d4:e5:d8:d5:c9:b9:0d:7e:22:a4: ec:88:66:44:e3:28:11:a9:11:d7:2d:11:9a:15:be: 57:e5:39:22:07:82:3e:d7:58:e6:1a:4b:f6:f4:4a: 1b:2a:1c:04:a4:b1:de:5f:f5:e6:04:10:8d:bb:3e: 68:37:36:55:10:72:59:ea:04:7a:9e:0f:2a:32:ad: 8c:95:58:84:55:24:ad:7f:50:57:14:d3:78:15:97: 57:49:ef:12:b8:1c:8d:2f:42:52:be:fa:1c:48:a6: 24:2b:69:c8:0b:a5:e8:63:ea:dd:da:af:c2:1b:cc: f6:9c:1e:55:e2:96:e1:88:75:be:35:01:4d:fc:7d: f7:af:f4:5b:ef:14:5d:3a:98:78:b2:1d:c8:af:13: d9:50:fb:eb:a6:ca:ec:85:6f:db:64:d6:91:a6:3c: e5:cd:c7:e3:d6:38:0f:0f:ca:c4:09:4e:7b:34:03: 8f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BF:7E:D8:9B:A1:9F:5F:A8:4C:A4:B4:98:1F:28:06:3A:2E:A3:D5 X509v3 Authority Key Identifier: keyid:01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:9b:52:01:8c:1f:c8:0d:ad:be:d5:ce:66:5f:4c:fe:82:7e: a4:e8:68:2a:b9:f1:28:d9:24:80:14:42:ad:a3:3a:19:a1:98: 1d:d8:00:b4:6c:f7:99:5c:67:6d:d8:51:d9:91:e1:73:54:12: 1c:20:67:ec:5f:39:fa:76:e0:9f:cc:b0:a2:d1:ba:07:9f:e1: 8c:73:0d:f1:1f:f6:39:ed:b0:7d:cb:c5:8e:02:65:af:ec:fd: b9:91:81:86:24:68:93:00:b8:06:08:f5:6d:42:21:18:44:49: 0f:d1:6a:c9:93:c7:3b:85:57:01:e1:d2:2c:25:af:32:f9:33: c4:3d:80:5c:35:a4:e7:32:93:e5:2d:42:b6:93:52:f5:e3:61: c2:61:dd:61:a9:ca:f1:8e:58:2f:33:4d:5a:40:f8:c6:22:cd: c1:f4:c4:8f:8c:b8:47:d6:3e:4e:d1:d3:00:b5:b7:10:2a:4b: 4c:d5:f4:85:2c:84:53:43:69:f0:83:00:e4:56:44:cb:48:9a: 00:28:26:34:0b:a2:e3:c3:54:e4:94:29:a0:48:ad:6a:6e:58: 13:48:ea:14:f2:d0:39:a6:bb:10:1b:ae:73:4a:80:30:02:8f: d7:8f:b3:00:47:e0:6a:62:68:75:46:19:08:d1:13:92:57:f6: ed:20:ab:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P8MiY4jwAhNlAyLucQ7gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZjY0OWI5ZDA1NDYyMjdiMWQ0NjI2YzIwODFlNGQzZGE4 NTBlZmUwHhcNMjYwMTI2MDMwMTI2WhcNMjYwMTI3MDMwMTI2WjAzMTEwLwYDVQQD Eyg2OGJmN2VkODliYTE5ZjVmYTg0Y2E0YjQ5ODFmMjgwNjNhMmVhM2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0XhQ8MX3DRCFK8Werx9bsXuiuDv 8ovATaiafSTxoRdBB3kD0U2fhWMwo7x98hqBXEMHjVFX0EZVJqu8Z1LjvQOhPXsT gAYBsxydKvOg8tTl2NXJuQ1+IqTsiGZE4ygRqRHXLRGaFb5X5TkiB4I+11jmGkv2 9EobKhwEpLHeX/XmBBCNuz5oNzZVEHJZ6gR6ng8qMq2MlViEVSStf1BXFNN4FZdX Se8SuByNL0JSvvocSKYkK2nIC6XoY+rd2q/CG8z2nB5V4pbhiHW+NQFN/H33r/Rb 7xRdOph4sh3IrxPZUPvrpsrshW/bZNaRpjzlzcfj1jgPD8rECU57NAOPRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGi/ftiboZ9fqEyktJgfKAY6LqPVMB8GA1UdIwQY MBaAFAH2SbnQVGInsdRibCCB5NPahQ7+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWZaSnVkQlVZaWV4MUdKc0lJSGswOXFGRHY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9hMTkyM2YtMjZkNy00NGJlLWEyYmUt MDNjYmRiOGZmOTYwLzEvQWZaSnVkQlVZaWV4MUdKc0lJSGswOXFGRHY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9hMTkyM2YtMjZkNy00NGJlLWEyYmUtMDNjYmRiOGZmOTYw LzEvQWZaSnVkQlVZaWV4MUdKc0lJSGswOXFGRHY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZtSAYwf yA2tvtXOZl9M/oJ+pOhoKrnxKNkkgBRCraM6GaGYHdgAtGz3mVxnbdhR2ZHhc1QS HCBn7F85+nbgn8ywotG6B5/hjHMN8R/2Oe2wfcvFjgJlr+z9uZGBhiRokwC4Bgj1 bUIhGERJD9FqyZPHO4VXAeHSLCWvMvkzxD2AXDWk5zKT5S1CtpNS9eNhwmHdYanK 8Y5YLzNNWkD4xiLNwfTEj4y4R9Y+TtHTALW3ECpLTNX0hSyEU0Np8IMA5FZEy0ia ACgmNAui48NU5JQpoEitam5YE0jqFPLQOaa7EBuuc0qAMAKP14+zAEfgamJodUYZ CNETklf27SCrhQ== -----END CERTIFICATE-----Generated at Mon Jan 26 08:22:39 2026 by rpki-client