This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft File: aYhRnekYGF-24euv0eCDXKoRMuQ.mft (raw, json) Hash identifier: bJ4KEe1Wc6NPxZe7rqLliqZA3/KteGSXneYW6NaJoI8= Subject key identifier: 24:57:E5:60:C6:88:D8:AB:4F:12:C7:11:4A:AD:BC:B1:0B:12:DB:1F Authority key identifier: 69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4 Certificate issuer: /CN=6988519de918185fb6e1ebafd1e0835caa1132e4 Certificate serial: 019BF6517822A9747E63909FF7FAB4F2E922 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft Manifest number: 12B1 Signing time: Sun 25 Jan 2026 18:01:32 +0000 Manifest this update: Sun 25 Jan 2026 18:01:32 +0000 Manifest next update: Mon 26 Jan 2026 18:01:32 +0000 Files and hashes: 1: Rj654wxOc7CYmhdeFWwzAPTGmcY.roa (hash: bE/60tP6y/3xEx8we1t/vv11WKgWD0rrGL4Yu6/Wkw8=) 2: UNFdj_dmEx775tbeS-AdmcBAiAE.roa (hash: GIoAJC41bvDl3yvA5gqVhCuJLL8h9+anwpxNy9MCtyo=) 3: aYhRnekYGF-24euv0eCDXKoRMuQ.crl (hash: FHZZqYElUJMdaSLDrdfjk0/U4yVOPC8417NjNOt8b3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:78:22:a9:74:7e:63:90:9f:f7:fa:b4:f2:e9:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6988519de918185fb6e1ebafd1e0835caa1132e4 Validity Not Before: Jan 25 18:01:32 2026 GMT Not After : Jan 26 18:01:32 2026 GMT Subject: CN=2457e560c688d8ab4f12c7114aadbcb10b12db1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e3:5f:ab:24:48:de:bf:1a:0c:3d:88:84:58: fe:69:cb:a6:95:c8:f8:9d:fe:a3:9d:09:5a:c4:0f: 2e:20:23:9d:10:6a:14:cc:52:d0:16:0e:a9:22:5a: 4d:65:c0:9c:36:80:82:20:5b:8d:4d:bb:4f:b4:ab: 8a:9b:e9:cf:51:25:01:b6:1a:50:76:5e:38:05:8a: e4:56:88:ff:54:fc:bf:f7:5d:b5:4a:2b:b7:53:12: 84:45:6f:a7:27:d3:28:d4:ed:87:d2:20:81:e2:ce: 8c:ab:fa:37:14:b1:47:95:2d:35:ed:3e:ab:b1:83: 24:cd:37:94:b2:cf:c6:cf:e9:4d:11:0e:3e:de:09: 7c:89:66:27:29:e1:82:f8:fe:bc:06:fc:c7:61:69: b7:34:60:84:6f:8d:56:e5:e9:34:b0:3a:96:eb:9a: 67:5a:6c:5f:3b:48:38:f1:e9:a2:03:fe:12:c2:9b: 52:e8:fb:ae:60:be:d8:f1:6f:0a:ae:0a:41:e4:ef: 1e:57:a3:a2:f1:25:4a:f3:9a:77:02:b4:e8:ce:e4: 40:e5:ef:d6:32:95:42:2b:ec:13:9c:3b:9f:21:7c: 5c:64:ca:03:80:b9:9c:28:07:24:1c:d0:41:ea:5c: 37:69:d1:16:3d:26:63:34:c0:0e:cb:6c:44:47:02: cb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:57:E5:60:C6:88:D8:AB:4F:12:C7:11:4A:AD:BC:B1:0B:12:DB:1F X509v3 Authority Key Identifier: keyid:69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:74:28:2c:dd:01:d0:7b:b2:3f:e7:d0:3a:be:15:60:95:57: 0a:7b:34:e4:bd:51:74:78:5c:88:2c:b8:57:a1:9f:d8:e3:8c: 93:3f:3a:ff:9d:d3:3f:54:4f:86:3a:ab:2a:79:5a:e6:c5:3c: e6:a4:13:96:c5:15:51:86:21:37:85:ee:8a:73:32:51:60:a5: d4:b9:2e:8b:e3:9c:0e:5d:1d:e1:a0:75:6a:89:10:ea:e5:9b: ca:99:c5:ee:24:68:49:aa:bf:83:d6:2b:c0:bb:2b:12:a1:f5: 05:48:61:d7:0a:bb:16:21:65:11:68:d4:df:22:3f:ae:8b:b4: bc:9b:71:35:71:2d:7e:cb:1f:a2:9a:0d:f9:e0:4a:39:1e:b5: bd:90:4d:7f:b1:93:18:32:c0:99:76:8c:9a:6e:68:82:ec:45: a6:70:c6:2c:8e:93:bb:1f:c9:57:59:3d:39:8b:02:a9:cf:58: 9e:a2:c8:a3:cd:31:eb:dd:af:a9:f6:52:69:41:1a:cc:16:45: e4:e2:7b:08:68:e7:09:65:d0:2f:7a:7d:20:f5:00:34:f8:ed: 93:ca:e5:71:fe:ed:8d:d0:fa:58:72:84:ff:88:43:07:fc:58: 2d:db:7a:ee:96:b5:52:f7:16:0c:92:92:07:72:98:15:fc:01: 6d:72:d2:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UXgiqXR+Y5Cf9/q08ukiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ODg1MTlkZTkxODE4NWZiNmUxZWJhZmQxZTA4MzVjYWEx MTMyZTQwHhcNMjYwMTI1MTgwMTMyWhcNMjYwMTI2MTgwMTMyWjAzMTEwLwYDVQQD EygyNDU3ZTU2MGM2ODhkOGFiNGYxMmM3MTE0YWFkYmNiMTBiMTJkYjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ONfqyRI3r8aDD2IhFj+acumlcj4 nf6jnQlaxA8uICOdEGoUzFLQFg6pIlpNZcCcNoCCIFuNTbtPtKuKm+nPUSUBthpQ dl44BYrkVoj/VPy/9121Siu3UxKERW+nJ9Mo1O2H0iCB4s6Mq/o3FLFHlS017T6r sYMkzTeUss/Gz+lNEQ4+3gl8iWYnKeGC+P68BvzHYWm3NGCEb41W5ek0sDqW65pn WmxfO0g48emiA/4SwptS6PuuYL7Y8W8KrgpB5O8eV6Oi8SVK85p3ArTozuRA5e/W MpVCK+wTnDufIXxcZMoDgLmcKAckHNBB6lw3adEWPSZjNMAOy2xERwLLoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRX5WDGiNirTxLHEUqtvLELEtsfMB8GA1UdIwQY MBaAFGmIUZ3pGBhftuHrr9Hgg1yqETLkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVloUm5la1lHRi0yNGV1djBlQ0RYS29STXVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS81MTUyNDAtYjU5NC00NjliLWE5OTIt ZWM3MmQ2YWRhMDRhLzEvYVloUm5la1lHRi0yNGV1djBlQ0RYS29STXVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS81MTUyNDAtYjU5NC00NjliLWE5OTItZWM3MmQ2YWRhMDRh LzEvYVloUm5la1lHRi0yNGV1djBlQ0RYS29STXVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuXQoLN0B 0HuyP+fQOr4VYJVXCns05L1RdHhciCy4V6Gf2OOMkz86/53TP1RPhjqrKnla5sU8 5qQTlsUVUYYhN4XuinMyUWCl1Lkui+OcDl0d4aB1aokQ6uWbypnF7iRoSaq/g9Yr wLsrEqH1BUhh1wq7FiFlEWjU3yI/rou0vJtxNXEtfssfopoN+eBKOR61vZBNf7GT GDLAmXaMmm5oguxFpnDGLI6Tux/JV1k9OYsCqc9YnqLIo80x692vqfZSaUEazBZF 5OJ7CGjnCWXQL3p9IPUANPjtk8rlcf7tjdD6WHKE/4hDB/xYLdt67pa1UvcWDJKS B3KYFfwBbXLS1w== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:46 2026 by rpki-client