This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft File: Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft (raw, json) Hash identifier: Y8y63TEnA956wXz6KNvBXE/Z0tYr+EUUIzM0JcUeA1w= Subject key identifier: 1B:BD:E0:01:BD:4B:6C:24:63:35:EE:81:2E:13:4A:7C:B6:65:EB:F7 Authority key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA Certificate issuer: /CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa Certificate serial: 019BF6511496AAF218E7A7303950D591572C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft Manifest number: 12C7 Signing time: Sun 25 Jan 2026 18:01:07 +0000 Manifest this update: Sun 25 Jan 2026 18:01:07 +0000 Manifest next update: Mon 26 Jan 2026 18:01:07 +0000 Files and hashes: 1: AAGe3xmEMwYBz4LTjNkftsQYcRI.roa (hash: H5MxTJchHq7g/9ds3SqpFphxMksUvLoDhqXB21YaWzg=) 2: Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl (hash: OPUCNhf0vlqvxwK7Ky6Qx6QEjhTzQcPp/rhD63AdmXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:14:96:aa:f2:18:e7:a7:30:39:50:d5:91:57:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa Validity Not Before: Jan 25 18:01:07 2026 GMT Not After : Jan 26 18:01:07 2026 GMT Subject: CN=1bbde001bd4b6c246335ee812e134a7cb665ebf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ef:90:96:61:a0:b9:66:de:35:91:7c:d9:85: 9b:00:59:0f:00:bd:a0:b6:10:67:a1:fe:eb:31:32: b0:e3:ef:66:09:c4:5b:e2:9a:32:4a:76:80:66:5c: 9d:2b:5c:86:2b:51:70:55:5f:fd:aa:d1:94:38:db: 9d:ba:64:b3:60:91:3a:10:b2:80:c8:92:3e:04:bb: d0:76:08:8d:1a:83:b2:c0:33:fe:1e:0e:90:76:9e: 3b:a8:54:f6:e2:5a:e6:8a:26:e0:3d:2c:bc:21:46: c9:4d:41:b2:ec:91:de:3e:e2:0e:5e:a4:e7:af:4c: 3b:87:dc:d6:99:ce:c2:97:53:f5:e7:e2:98:82:a4: d0:c9:41:11:84:b7:f9:78:3a:c9:c7:cc:8c:36:13: 2f:37:6c:7d:af:50:e5:07:6d:1b:b8:09:a4:ff:39: 6e:fd:66:b2:40:e4:4e:da:a6:57:01:20:9a:49:80: b7:ce:3b:2c:48:e5:9a:5e:e6:70:3f:b4:d6:99:ab: 96:50:e1:b0:43:47:1a:27:34:80:0d:d4:97:58:42: dd:10:9c:a3:66:bb:bf:7c:0b:51:05:de:eb:bb:3b: 92:8a:a3:3a:70:48:d5:bc:96:f9:23:e2:d6:9a:e2: b0:99:6e:74:c6:dc:06:44:9f:9a:a1:cd:ff:88:1a: 85:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:BD:E0:01:BD:4B:6C:24:63:35:EE:81:2E:13:4A:7C:B6:65:EB:F7 X509v3 Authority Key Identifier: keyid:02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:bb:3c:c5:20:92:59:54:2b:4c:e4:2e:f5:81:5b:35:e4:7b: be:bb:43:70:d0:8c:17:f0:a2:e0:c7:fa:d2:1a:b8:12:55:1b: 9f:94:71:07:28:f9:1a:26:52:d1:f9:9e:4a:78:07:3c:84:9f: 74:12:72:01:26:5b:d8:3d:78:aa:56:8d:47:61:7f:9d:69:7a: 7b:53:3a:7b:c8:3a:01:7b:89:13:f0:49:b5:da:36:ca:81:24: a6:58:fe:d1:b1:f0:d3:ba:49:a2:a9:95:b9:2a:9c:6c:42:fd: f5:49:d6:52:05:ff:5d:07:95:58:77:77:fb:03:a1:a6:f1:63: 0e:35:7b:49:68:42:2a:b7:9d:d0:36:71:c2:81:91:bb:68:e6: a2:c9:98:0d:84:c2:b5:26:22:0d:96:37:06:b7:e2:f6:ca:c2: cb:2a:ed:3b:58:13:54:e5:7d:ca:32:e7:da:d2:61:d9:43:50: 00:18:04:a3:aa:02:b9:87:47:26:e8:eb:a3:d8:34:8d:ee:4e: d8:a0:89:76:95:39:00:3d:29:43:76:e2:d7:7c:52:36:c3:d6: 3b:e5:23:46:96:41:91:47:4b:a3:56:aa:1e:58:6a:66:f2:5b: 4c:3f:8e:a9:c1:64:95:6f:23:4f:bd:1c:c8:bc:14:0b:23:9c: 68:47:31:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2URSWqvIY56cwOVDVkVcsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMWFiM2RkMjJjMzMzYTc5YjZmZjMwYWFiN2YyZTAzNmZj MzcwYWEwHhcNMjYwMTI1MTgwMTA3WhcNMjYwMTI2MTgwMTA3WjAzMTEwLwYDVQQD EygxYmJkZTAwMWJkNGI2YzI0NjMzNWVlODEyZTEzNGE3Y2I2NjVlYmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO+QlmGguWbeNZF82YWbAFkPAL2g thBnof7rMTKw4+9mCcRb4poySnaAZlydK1yGK1FwVV/9qtGUONudumSzYJE6ELKA yJI+BLvQdgiNGoOywDP+Hg6Qdp47qFT24lrmiibgPSy8IUbJTUGy7JHePuIOXqTn r0w7h9zWmc7Cl1P15+KYgqTQyUERhLf5eDrJx8yMNhMvN2x9r1DlB20buAmk/zlu /WayQORO2qZXASCaSYC3zjssSOWaXuZwP7TWmauWUOGwQ0caJzSADdSXWELdEJyj Zru/fAtRBd7ruzuSiqM6cEjVvJb5I+LWmuKwmW50xtwGRJ+aoc3/iBqFnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBu94AG9S2wkYzXugS4TSny2Zev3MB8GA1UdIwQY MBaAFAIas90iwzOnm2/zCqt/LgNvw3CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWhxejNTTERNNmViYl9NS3EzOHVBMl9EY0tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMGZiYjYtZGVhMi00YzdiLWFmYWQt NGFjZWM2NDc1NzJkLzEvQWhxejNTTERNNmViYl9NS3EzOHVBMl9EY0tvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMGZiYjYtZGVhMi00YzdiLWFmYWQtNGFjZWM2NDc1NzJk LzEvQWhxejNTTERNNmViYl9NS3EzOHVBMl9EY0tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu7s8xSCS WVQrTOQu9YFbNeR7vrtDcNCMF/Ci4Mf60hq4ElUbn5RxByj5GiZS0fmeSngHPISf dBJyASZb2D14qlaNR2F/nWl6e1M6e8g6AXuJE/BJtdo2yoEkplj+0bHw07pJoqmV uSqcbEL99UnWUgX/XQeVWHd3+wOhpvFjDjV7SWhCKred0DZxwoGRu2jmosmYDYTC tSYiDZY3Brfi9srCyyrtO1gTVOV9yjLn2tJh2UNQABgEo6oCuYdHJujro9g0je5O 2KCJdpU5AD0pQ3bi13xSNsPWO+UjRpZBkUdLo1aqHlhqZvJbTD+OqcFklW8jT70c yLwUCyOcaEcxLQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:54 2026 by rpki-client