This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft File: _AY2gjog5gJjQv6MiOpyqPj3p0k.mft (raw, json) Hash identifier: mUacd0vek4DRxFQNDu8pqZbd18ZmzmdNeqcrV+py72s= Subject key identifier: AE:F0:00:26:27:85:DF:2F:51:FB:1A:16:D7:BA:64:31:42:43:78:D1 Authority key identifier: FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49 Certificate issuer: /CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749 Certificate serial: 019BF5AC8417F8CDA7FD6C1352E09B05DCFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft Manifest number: 140B Signing time: Sun 25 Jan 2026 15:01:22 +0000 Manifest this update: Sun 25 Jan 2026 15:01:22 +0000 Manifest next update: Mon 26 Jan 2026 15:01:22 +0000 Files and hashes: 1: _AY2gjog5gJjQv6MiOpyqPj3p0k.crl (hash: Ev/w8EjJ4M5hnNi+Tvh6YEm3Cosk6JGQdNqofEdbZBA=) 2: uVqY2vkhR0d7ZrMF-F13PIFCP0Y.roa (hash: B7Ssp76u9RPQonP2oCi95fudfzNjxfG0p6HpSFM8NR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:84:17:f8:cd:a7:fd:6c:13:52:e0:9b:05:dc:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749 Validity Not Before: Jan 25 15:01:22 2026 GMT Not After : Jan 26 15:01:22 2026 GMT Subject: CN=aef000262785df2f51fb1a16d7ba6431424378d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ed:d6:c8:f5:e0:bc:42:aa:27:67:5b:ae:e8: 10:a7:d5:fa:05:55:de:3a:96:ac:6a:da:20:b9:78: 44:5f:e7:d6:97:54:af:57:53:80:47:aa:60:a5:a8: fa:82:16:82:c8:6e:29:27:01:95:74:1c:aa:d8:2f: 1e:52:06:4d:59:7c:cc:c8:e8:38:7a:fa:13:e3:96: 97:de:b0:aa:5c:59:6a:3f:60:8f:55:82:b8:ea:23: 2f:39:6e:43:2b:28:18:70:f1:3b:f3:da:a2:91:1e: a4:90:66:24:5c:0f:15:df:9e:c9:29:a0:0a:77:92: 1c:b6:57:98:fc:50:76:1a:a6:6c:ab:83:a0:62:ad: 1f:3e:38:ac:0e:b0:42:53:c3:66:81:52:dc:7a:4a: 18:10:52:6d:50:7b:2d:0d:2c:30:25:a1:00:90:3e: 21:fb:97:19:99:c1:97:83:61:d3:61:96:9f:df:53: 6e:87:78:79:16:ff:f2:dc:e3:a3:f2:6d:e5:80:1b: 6a:bc:46:97:a4:b2:5e:03:10:a3:03:b8:76:88:f7: bd:9d:76:5d:20:1e:e7:41:91:7f:09:c7:dd:47:5a: 48:c4:17:3a:9b:4f:85:6a:90:07:21:8d:ac:f6:66: 16:ce:10:98:fc:ea:20:c3:51:67:d5:f4:f4:a2:0d: 52:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F0:00:26:27:85:DF:2F:51:FB:1A:16:D7:BA:64:31:42:43:78:D1 X509v3 Authority Key Identifier: keyid:FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7d:85:c4:73:84:3c:13:3c:d1:c4:e1:4a:a0:d0:45:51:d8: ce:2e:e3:b4:66:4a:18:4f:e6:39:97:13:06:1e:fc:3f:d9:b2: 61:ed:b4:9f:47:09:bb:c3:2d:97:a5:85:df:35:d6:7b:08:74: 9b:8c:f2:19:31:0f:b3:11:e7:1e:ed:d8:91:d2:70:f6:6e:87: 41:ac:4f:8b:81:ac:01:66:07:71:9a:a3:82:d1:60:8b:1e:06: d4:17:46:02:3e:ea:31:3b:33:45:cb:a0:d6:4d:a1:bb:af:39: 81:4b:4a:c6:f6:ca:24:d4:87:c8:27:af:f6:76:b2:35:1d:1d: 94:9f:95:76:c7:6d:19:37:f1:3c:f5:48:df:36:0a:33:8b:13: 51:dc:35:94:2c:0d:03:b6:90:11:96:b0:30:e3:ab:71:b0:cd: a1:0f:86:49:d9:86:23:54:76:05:f0:ec:32:32:67:02:8f:a4: 95:a1:e5:1e:7a:46:f2:56:d1:1b:1b:84:63:53:ae:f9:b0:4b: 02:b8:b7:4c:81:2f:cd:cf:d1:94:c3:6b:23:a0:9b:df:b7:d5: 59:bd:d0:fb:3a:33:35:1f:22:c7:cc:2b:7f:02:1c:6d:7a:1b: 96:2e:1f:09:5f:e7:bd:17:7a:07:6a:08:17:55:86:be:37:cd: 53:79:57:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rIQX+M2n/WwTUuCbBdz+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMDYzNjgyM2EyMGU2MDI2MzQyZmU4Yzg4ZWE3MmE4Zjhm N2E3NDkwHhcNMjYwMTI1MTUwMTIyWhcNMjYwMTI2MTUwMTIyWjAzMTEwLwYDVQQD EyhhZWYwMDAyNjI3ODVkZjJmNTFmYjFhMTZkN2JhNjQzMTQyNDM3OGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe3WyPXgvEKqJ2dbrugQp9X6BVXe OpasatoguXhEX+fWl1SvV1OAR6pgpaj6ghaCyG4pJwGVdByq2C8eUgZNWXzMyOg4 evoT45aX3rCqXFlqP2CPVYK46iMvOW5DKygYcPE789qikR6kkGYkXA8V357JKaAK d5IctleY/FB2GqZsq4OgYq0fPjisDrBCU8NmgVLcekoYEFJtUHstDSwwJaEAkD4h +5cZmcGXg2HTYZaf31Nuh3h5Fv/y3OOj8m3lgBtqvEaXpLJeAxCjA7h2iPe9nXZd IB7nQZF/CcfdR1pIxBc6m0+FapAHIY2s9mYWzhCY/Oogw1Fn1fT0og1SvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7wACYnhd8vUfsaFte6ZDFCQ3jRMB8GA1UdIwQY MBaAFPwGNoI6IOYCY0L+jIjqcqj496dJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0FZMmdqb2c1Z0pqUXY2TWlPcHlxUGozcDBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS85NDQ4OTYtM2M0MS00NzEwLTg2ZDIt MDA1YTkyOWFjMTI0LzEvX0FZMmdqb2c1Z0pqUXY2TWlPcHlxUGozcDBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS85NDQ4OTYtM2M0MS00NzEwLTg2ZDItMDA1YTkyOWFjMTI0 LzEvX0FZMmdqb2c1Z0pqUXY2TWlPcHlxUGozcDBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmn2FxHOE PBM80cThSqDQRVHYzi7jtGZKGE/mOZcTBh78P9myYe20n0cJu8Mtl6WF3zXWewh0 m4zyGTEPsxHnHu3YkdJw9m6HQaxPi4GsAWYHcZqjgtFgix4G1BdGAj7qMTszRcug 1k2hu685gUtKxvbKJNSHyCev9nayNR0dlJ+VdsdtGTfxPPVI3zYKM4sTUdw1lCwN A7aQEZawMOOrcbDNoQ+GSdmGI1R2BfDsMjJnAo+klaHlHnpG8lbRGxuEY1Ou+bBL Ari3TIEvzc/RlMNrI6Cb37fVWb3Q+zozNR8ix8wrfwIcbXobli4fCV/nvRd6B2oI F1WGvjfNU3lX4Q== -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:00 2026 by rpki-client