This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft File: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft (raw, json) Hash identifier: +SLtqOAg420Cb0/OScH1cCFKfY6u/0EFUyztMgBAbuY= Subject key identifier: 64:C3:FA:C2:35:07:13:36:E8:A2:65:6D:0E:E5:FE:70:79:DD:63:54 Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Certificate serial: 019BF2061FBDDA4D3D8BB7D8EEA691C67569 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft Manifest number: 17F4 Signing time: Sat 24 Jan 2026 22:00:46 +0000 Manifest this update: Sat 24 Jan 2026 22:00:46 +0000 Manifest next update: Sun 25 Jan 2026 22:00:46 +0000 Files and hashes: 1: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl (hash: 7NtbUWQ8+PiBWIBcHaJR0//So0bpo5mki+WGea9v+TM=) 2: B2_FH3MtZlTaOE61buYvXBJKW2E.roa (hash: 55aVAj571Q8/h0HvcQ8YQch6oVhSxMht9hvb0pWG9xs=) 3: EEeXG249QHXtZie6S6hEWpfPs0c.roa (hash: j08Df977nprNp/2GNZ8F6Ri2LTHGQNefm3+Va3aCg1U=) 4: MGuxpogPtwMAFTldHDnEUIBskKY.roa (hash: aRVSa83OdI8eRXcO3WQLPs6YeURGIYliffVNH5moLlY=) 5: OKgmTupzmnhPk0hOIeK3giJ9QaM.roa (hash: vJ5CbfHEFcPbyEC4jXFH5FpTTJogOrELHCnjQEMwhv0=) 6: UuScKKPZU-rxDshW6inBZKRJIH0.roa (hash: oIb88lrmIIDaodPcRGV8PcCWp69cVR7+uTDhUXF8D0A=) 7: ZW_uWUofk0PVk5ZvUH4CXwMQf9k.roa (hash: nMPGS72S0ymOk8yKU1XMgfQYFC4FprUwCeSnvYRogMM=) 8: g_sMt-IMPWFoRArZv0JnssQdxVE.roa (hash: i/F8rrQv+RNHw3Z6W9+3AF4oOHslAP0uqvWz8gg4Un0=) 9: tNc2jSWdykqlG-PkB4v9MVhio4k.roa (hash: k9a+KYr8wPbQKXd8Zqw2THkgTe3lauXtnm8eqnhZ3Nk=) 10: yn0AIXSmQUy2ZdVLfREbNPEMx98.roa (hash: 0/gDR8MJ30pXw1A6bmuJms9g1333tYlKxF2lIJS3jtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:06:1f:bd:da:4d:3d:8b:b7:d8:ee:a6:91:c6:75:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Validity Not Before: Jan 24 22:00:46 2026 GMT Not After : Jan 25 22:00:46 2026 GMT Subject: CN=64c3fac235071336e8a2656d0ee5fe7079dd6354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:53:c5:3d:87:2c:73:39:f4:40:77:a2:93:a9: c9:df:ff:6e:cd:d1:c0:9e:5a:59:d8:41:c8:99:45: 0f:d3:42:0b:11:ba:32:e3:78:d4:56:cd:6c:47:83: ec:1a:a2:34:b3:6b:be:d0:d2:9c:44:83:a5:43:33: ca:ae:68:61:8a:9c:a7:62:01:81:fa:bc:da:3c:e2: 7c:0d:f4:a5:a1:9b:41:d8:7f:ce:85:5c:b8:9a:42: 8f:b6:84:cd:84:ab:66:96:13:d4:6e:ae:a9:46:05: 1c:9f:23:77:cd:81:01:db:16:d2:9b:4f:f9:d9:97: 19:1f:c0:8e:73:26:6e:af:ab:d7:c8:6d:e1:c0:dc: 64:87:75:a0:55:49:36:33:5e:ec:78:84:d7:1b:b4: 9c:c5:4c:a4:e6:7b:dc:e7:7e:e1:f2:5c:5b:c3:eb: 42:f0:1d:b8:49:6c:35:10:07:d0:48:f6:57:64:a0: cc:c4:46:e7:a5:18:20:25:33:49:34:60:9f:cb:0b: 85:1d:b2:85:97:66:1d:9d:39:22:01:43:72:20:46: c7:8a:ac:33:93:9b:1d:5b:d4:73:55:9d:f0:8c:64: 3a:a0:eb:8d:8a:5f:17:a6:44:c9:c4:58:bf:86:99: 09:41:70:ee:90:9c:bf:aa:4a:c0:b4:2a:25:31:4b: 3d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C3:FA:C2:35:07:13:36:E8:A2:65:6D:0E:E5:FE:70:79:DD:63:54 X509v3 Authority Key Identifier: keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:53:5a:a8:77:dd:d7:0a:20:1b:6b:70:1e:ef:ca:de:f0:9c: 3e:fe:02:eb:44:d3:a9:2e:47:fc:bb:22:29:e6:9a:20:a6:d0: c7:2b:0a:86:e6:d0:dc:dc:76:06:b3:81:22:dd:cc:c3:90:cc: 8a:dd:f1:ae:2b:75:44:2b:0a:5d:a1:47:9b:40:e1:b9:3c:0d: a0:c4:94:27:5d:c0:9c:d3:6d:fb:8b:78:0f:2b:e9:2e:89:23: d5:d1:6d:d7:65:d3:ca:e1:5c:55:a5:9e:6c:51:a3:e7:3e:36: 83:53:36:93:9c:72:81:d2:b1:5f:e6:59:cd:d9:ca:67:ad:4d: 89:fc:b1:40:50:20:fa:81:c4:19:70:82:8c:87:e2:d0:8f:da: cc:00:cb:4f:a9:67:47:ad:84:91:de:e2:bb:ea:76:d3:04:ac: 97:38:1b:54:e4:39:30:80:ec:d0:6e:93:db:3d:9f:c1:d4:11: 07:3a:3f:e8:7d:42:d9:6c:ce:06:45:53:7e:8b:e9:67:98:8f: d6:77:89:2f:c1:00:0d:4c:6b:98:ad:93:a0:b3:ae:df:9c:b2: 26:f8:49:f2:c0:35:44:b0:24:4f:08:24:59:66:f8:60:6d:b5: 81:54:18:b3:05:1b:39:64:3c:f4:1b:df:32:8a:e2:a9:9e:e5: 7a:42:06:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyBh+92k09i7fY7qaRxnVpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzJhNGJmYjc3OTY0MDVhNTU2Yjc1OWYxZDE5M2U0YzRk MzcxMjkwHhcNMjYwMTI0MjIwMDQ2WhcNMjYwMTI1MjIwMDQ2WjAzMTEwLwYDVQQD Eyg2NGMzZmFjMjM1MDcxMzM2ZThhMjY1NmQwZWU1ZmU3MDc5ZGQ2MzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1PFPYcsczn0QHeik6nJ3/9uzdHA nlpZ2EHImUUP00ILEboy43jUVs1sR4PsGqI0s2u+0NKcRIOlQzPKrmhhipynYgGB +rzaPOJ8DfSloZtB2H/OhVy4mkKPtoTNhKtmlhPUbq6pRgUcnyN3zYEB2xbSm0/5 2ZcZH8COcyZur6vXyG3hwNxkh3WgVUk2M17seITXG7ScxUyk5nvc537h8lxbw+tC 8B24SWw1EAfQSPZXZKDMxEbnpRggJTNJNGCfywuFHbKFl2YdnTkiAUNyIEbHiqwz k5sdW9RzVZ3wjGQ6oOuNil8XpkTJxFi/hpkJQXDukJy/qkrAtColMUs9uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTD+sI1BxM26KJlbQ7l/nB53WNUMB8GA1UdIwQY MBaAFAIypL+3eWQFpVa3WfHRk+TE03EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEt M2JiNGQ2MjAwNTE4LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEtM2JiNGQ2MjAwNTE4 LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFNaqHfd 1wogG2twHu/K3vCcPv4C60TTqS5H/LsiKeaaIKbQxysKhubQ3Nx2BrOBIt3Mw5DM it3xrit1RCsKXaFHm0DhuTwNoMSUJ13AnNNt+4t4DyvpLokj1dFt12XTyuFcVaWe bFGj5z42g1M2k5xygdKxX+ZZzdnKZ61NifyxQFAg+oHEGXCCjIfi0I/azADLT6ln R62Ekd7iu+p20wSslzgbVOQ5MIDs0G6T2z2fwdQRBzo/6H1C2WzOBkVTfovpZ5iP 1neJL8EADUxrmK2ToLOu35yyJvhJ8sA1RLAkTwgkWWb4YG21gVQYswUbOWQ89Bvf MoriqZ7lekIGMg== -----END CERTIFICATE-----Generated at Sun Jan 25 05:40:14 2026 by rpki-client