This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft File: AyUDQljydbfIfl9PcHBsDPWI78M.mft (raw, json) Hash identifier: YJS/14kGY+3fNKvNHS87L2sYoGu4kYB/q3HJPhWb1Ic= Subject key identifier: 84:E0:C8:F1:93:70:4D:95:91:E5:A6:79:42:F9:35:78:A9:32:BF:C4 Authority key identifier: 03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3 Certificate issuer: /CN=0325034258f275b7c87e5f4f70706c0cf588efc3 Certificate serial: 019BF575147912826B8B78572DC48843B316 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft Manifest number: 17A5 Signing time: Sun 25 Jan 2026 14:00:49 +0000 Manifest this update: Sun 25 Jan 2026 14:00:49 +0000 Manifest next update: Mon 26 Jan 2026 14:00:49 +0000 Files and hashes: 1: 3vVG8o2ITJwtPnNIQhuIxnCqGaY.roa (hash: 8/W7Ss/HYT0cvaLGI01I8cqgEGbSHHWsxyzYNVKNbA0=) 2: AyUDQljydbfIfl9PcHBsDPWI78M.crl (hash: CAzEEr4cAtNbCmXGe85iFpC2msnbRmtcLkDkM5Exwas=) 3: SLEbsnJN0TIrYMPUkwo_HtQI_YY.roa (hash: sEW6+6ZZRuXcX0E6lls/B3TG4bjdd1ae0xcdGkWi5Nk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:14:79:12:82:6b:8b:78:57:2d:c4:88:43:b3:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0325034258f275b7c87e5f4f70706c0cf588efc3 Validity Not Before: Jan 25 14:00:49 2026 GMT Not After : Jan 26 14:00:49 2026 GMT Subject: CN=84e0c8f193704d9591e5a67942f93578a932bfc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e9:ae:a0:19:04:9d:9b:38:13:4b:09:78:4b: 9b:56:12:41:73:b1:b3:b8:82:03:8e:ab:11:7c:73: 58:49:bc:0e:71:3e:a3:17:bf:63:cd:3b:58:8a:b4: c0:e9:ef:dd:44:31:69:ce:88:74:9f:8d:fc:e4:e9: 6c:8b:f7:c2:ee:5a:9c:ca:9b:2d:38:56:cc:3c:85: dc:90:88:78:1e:c9:7f:9e:6d:3a:8f:21:8e:1a:e8: 5f:f2:56:7f:e6:d9:26:85:b7:6d:58:43:a2:8f:20: bf:1a:1e:74:4d:46:cc:23:35:3c:7a:fa:88:e7:7a: 39:77:41:2e:27:3a:48:af:ff:81:53:31:3c:a1:22: bd:10:5d:96:ea:b3:cc:6a:d9:9c:9d:dd:42:b4:bd: 4d:8d:b8:1d:e1:b7:c7:79:b0:db:ca:49:1b:0a:1f: cf:c0:a4:5c:5f:ed:24:c7:71:25:7d:98:4d:3d:32: be:ef:5b:af:cf:20:a2:3a:ec:bd:7c:ab:04:dc:9a: 3b:bf:a0:25:01:d5:e0:01:df:25:0a:67:33:71:79: b3:55:33:5e:50:4a:27:a6:e9:b3:92:42:b2:28:35: 11:d1:3d:1f:f9:e1:c9:7a:50:4b:75:a4:f1:ed:f0: 01:db:93:ab:91:1e:4e:91:7e:23:f7:74:d6:2c:f1: 7d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E0:C8:F1:93:70:4D:95:91:E5:A6:79:42:F9:35:78:A9:32:BF:C4 X509v3 Authority Key Identifier: keyid:03:25:03:42:58:F2:75:B7:C8:7E:5F:4F:70:70:6C:0C:F5:88:EF:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyUDQljydbfIfl9PcHBsDPWI78M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dda412-4545-48a6-bde2-9a37c6069bc1/1/AyUDQljydbfIfl9PcHBsDPWI78M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:99:06:ed:e2:25:7e:2b:41:05:ea:69:61:d1:af:23:a3:5f: 87:43:52:f2:97:0e:9e:d1:53:9e:df:03:d4:97:21:0a:00:e1: c7:bd:12:c8:c9:2d:9a:d8:11:42:e8:87:2c:2b:ff:74:21:10: 30:ea:1f:08:0d:f7:d5:5d:b3:33:5a:25:08:42:40:6a:71:d7: 77:07:d8:d7:1e:88:bf:40:0a:17:ae:14:08:dd:9d:19:2b:f5: 8a:38:d2:86:77:e5:77:66:33:78:20:7e:dd:3e:5c:db:b0:a4: 69:b5:d4:4b:f5:cd:98:0f:d0:ed:ed:33:e2:76:30:07:3e:88: a4:79:c2:06:3d:2d:40:b6:b4:91:b3:87:a3:09:6a:5c:c2:e8: 72:61:a0:50:6a:0e:24:ce:7e:48:2f:93:7f:73:0b:25:32:a0: de:2c:f0:a8:87:cc:b2:34:07:f1:69:90:83:a1:bc:5b:4f:b0: 4d:53:39:24:77:b4:86:b4:c5:61:d9:12:50:69:50:f0:18:64: 68:77:91:18:79:52:90:97:6b:4b:5f:6f:5c:bc:d1:3b:20:fd: 45:3e:29:b0:fd:6c:78:40:75:6d:07:f7:fb:b8:c8:72:77:a9: 99:71:1b:7a:91:9f:36:bd:49:e2:ac:aa:6e:f2:7f:58:13:0b: c8:c0:9f:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dRR5EoJri3hXLcSIQ7MWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMjUwMzQyNThmMjc1YjdjODdlNWY0ZjcwNzA2YzBjZjU4 OGVmYzMwHhcNMjYwMTI1MTQwMDQ5WhcNMjYwMTI2MTQwMDQ5WjAzMTEwLwYDVQQD Eyg4NGUwYzhmMTkzNzA0ZDk1OTFlNWE2Nzk0MmY5MzU3OGE5MzJiZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOmuoBkEnZs4E0sJeEubVhJBc7Gz uIIDjqsRfHNYSbwOcT6jF79jzTtYirTA6e/dRDFpzoh0n4385Olsi/fC7lqcypst OFbMPIXckIh4Hsl/nm06jyGOGuhf8lZ/5tkmhbdtWEOijyC/Gh50TUbMIzU8evqI 53o5d0EuJzpIr/+BUzE8oSK9EF2W6rPMatmcnd1CtL1Njbgd4bfHebDbykkbCh/P wKRcX+0kx3ElfZhNPTK+71uvzyCiOuy9fKsE3Jo7v6AlAdXgAd8lCmczcXmzVTNe UEonpumzkkKyKDUR0T0f+eHJelBLdaTx7fAB25OrkR5OkX4j93TWLPF9AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITgyPGTcE2VkeWmeUL5NXipMr/EMB8GA1UdIwQY MBaAFAMlA0JY8nW3yH5fT3BwbAz1iO/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kZGE0MTItNDU0NS00OGE2LWJkZTIt OWEzN2M2MDY5YmMxLzEvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9kZGE0MTItNDU0NS00OGE2LWJkZTItOWEzN2M2MDY5YmMx LzEvQXlVRFFsanlkYmZJZmw5UGNIQnNEUFdJNzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepkG7eIl fitBBeppYdGvI6Nfh0NS8pcOntFTnt8D1JchCgDhx70SyMktmtgRQuiHLCv/dCEQ MOofCA331V2zM1olCEJAanHXdwfY1x6Iv0AKF64UCN2dGSv1ijjShnfld2YzeCB+ 3T5c27CkabXUS/XNmA/Q7e0z4nYwBz6IpHnCBj0tQLa0kbOHowlqXMLocmGgUGoO JM5+SC+Tf3MLJTKg3izwqIfMsjQH8WmQg6G8W0+wTVM5JHe0hrTFYdkSUGlQ8Bhk aHeRGHlSkJdrS19vXLzROyD9RT4psP1seEB1bQf3+7jIcnepmXEbepGfNr1J4qyq bvJ/WBMLyMCf/A== -----END CERTIFICATE-----Generated at Mon Jan 26 01:03:29 2026 by rpki-client