This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft File: aYfUeTXhE31URCbbUojhKpwCWsI.mft (raw, json) Hash identifier: ocUsK5+9K2c/gXl0AEjzEo37GSC1Pq1oFhpTIHdyZzs= Subject key identifier: 4C:23:EC:13:23:B9:52:72:12:2A:70:89:59:32:FB:B1:4A:39:13:4A Authority key identifier: 69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2 Certificate issuer: /CN=6987d47935e1137d544426db5288e12a9c025ac2 Certificate serial: 019BF2067492560E1988A3044762A635F952 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft Manifest number: 0FAB Signing time: Sat 24 Jan 2026 22:01:07 +0000 Manifest this update: Sat 24 Jan 2026 22:01:07 +0000 Manifest next update: Sun 25 Jan 2026 22:01:07 +0000 Files and hashes: 1: aYfUeTXhE31URCbbUojhKpwCWsI.crl (hash: kRwxT4x9xMl9gif5Eddu07AOJ9TFfMopr0ugFhIV4Mo=) 2: hHMxYrkbIkFlZ-X8dtv-2AQEohA.roa (hash: UNg1Ev3uL6ITTCViVHYmyV+MQPsqTHd5HHXqSXS8miA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:06:74:92:56:0e:19:88:a3:04:47:62:a6:35:f9:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6987d47935e1137d544426db5288e12a9c025ac2 Validity Not Before: Jan 24 22:01:07 2026 GMT Not After : Jan 25 22:01:07 2026 GMT Subject: CN=4c23ec1323b95272122a70895932fbb14a39134a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a8:ec:70:1c:c2:5d:33:25:4b:5d:79:88:66: 90:b0:90:e6:f5:ba:3b:9f:7f:4a:3b:ce:0e:da:1d: 03:80:2b:f4:8f:49:2a:57:3a:ec:44:52:65:1c:c0: 14:79:d4:4f:30:28:95:0c:f2:4e:13:0c:0b:03:5c: 09:c0:75:1e:9f:ef:9e:3e:a4:f0:08:c3:0e:ac:51: b0:05:c3:2c:db:36:1e:80:78:9b:65:a5:d6:b7:c7: 96:f5:77:06:0a:8b:19:b9:cc:45:0c:60:7e:b9:bc: 11:e4:c4:9a:a6:a2:56:45:d5:76:ce:35:81:df:1e: b3:57:ab:e3:8c:d9:b0:52:83:d3:1d:7a:69:ca:d8: e3:bd:e0:27:2c:86:01:c5:23:e9:b9:3f:61:ec:fa: 45:1b:4a:ed:aa:1b:2a:3b:73:a3:ab:0b:e9:c5:46: b4:bb:d8:e8:d2:a8:23:0e:37:7c:33:a1:03:08:75: a6:d4:f4:72:e5:08:d5:60:85:a2:fb:25:fd:71:6d: 5c:b5:29:c0:f4:52:57:72:dc:84:06:8d:ea:d9:8f: 1e:80:17:81:ad:93:3f:77:56:84:bc:2a:b9:14:10: 0c:78:51:32:12:0a:ab:bb:ec:56:7c:5e:95:63:45: b5:99:1d:56:a4:34:e1:8d:e4:8d:67:e6:d6:16:50: 5e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:23:EC:13:23:B9:52:72:12:2A:70:89:59:32:FB:B1:4A:39:13:4A X509v3 Authority Key Identifier: keyid:69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:8d:4c:4c:10:03:3a:4e:9f:d8:04:74:7c:9d:ec:44:61:72: 46:08:9f:63:79:a6:e0:d2:96:b3:4a:a5:00:8d:b1:82:56:d0: 09:6b:d4:e6:f0:13:f8:b9:d2:bb:cb:67:62:61:24:4d:f9:19: 5a:d0:a2:da:f3:c0:c8:31:1a:34:c8:61:ba:eb:6e:38:2a:d7: 4a:84:12:b2:8f:cf:c3:80:61:18:59:ad:4b:76:6a:2d:38:25: 26:0a:5d:4f:89:77:52:6f:20:73:5e:b9:2e:60:33:c9:49:d3: ff:fc:f2:f7:9d:82:62:90:e8:c4:1a:79:83:bd:75:be:bc:e0: 7f:60:a8:96:5c:96:6f:86:6f:d7:22:fc:f8:8a:a9:d4:d3:27: 46:4b:d9:d8:81:65:2b:04:fb:6b:28:d3:6d:35:5a:38:fd:41: a6:52:20:73:32:75:5a:6e:33:fa:22:47:13:59:38:fe:9f:d2: ad:fb:f5:94:e5:fb:02:75:d4:90:7f:b3:7e:d6:29:08:9a:4d: 91:e4:52:c8:54:a2:bb:54:7a:15:c9:d6:f0:ad:29:b6:d2:d6: c2:51:a0:f2:0f:a0:ae:09:bc:83:f3:cc:48:2c:65:42:f3:2f: 38:66:8d:66:1e:ea:6e:75:cb:e4:79:36:10:a8:bd:b2:8a:81: 53:7d:c2:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyBnSSVg4ZiKMER2KmNflSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ODdkNDc5MzVlMTEzN2Q1NDQ0MjZkYjUyODhlMTJhOWMw MjVhYzIwHhcNMjYwMTI0MjIwMTA3WhcNMjYwMTI1MjIwMTA3WjAzMTEwLwYDVQQD Eyg0YzIzZWMxMzIzYjk1MjcyMTIyYTcwODk1OTMyZmJiMTRhMzkxMzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqjscBzCXTMlS115iGaQsJDm9bo7 n39KO84O2h0DgCv0j0kqVzrsRFJlHMAUedRPMCiVDPJOEwwLA1wJwHUen++ePqTw CMMOrFGwBcMs2zYegHibZaXWt8eW9XcGCosZucxFDGB+ubwR5MSapqJWRdV2zjWB 3x6zV6vjjNmwUoPTHXppytjjveAnLIYBxSPpuT9h7PpFG0rtqhsqO3OjqwvpxUa0 u9jo0qgjDjd8M6EDCHWm1PRy5QjVYIWi+yX9cW1ctSnA9FJXctyEBo3q2Y8egBeB rZM/d1aEvCq5FBAMeFEyEgqru+xWfF6VY0W1mR1WpDThjeSNZ+bWFlBeqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwj7BMjuVJyEipwiVky+7FKORNKMB8GA1UdIwQY MBaAFGmH1Hk14RN9VEQm21KI4SqcAlrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVlmVWVUWGhFMzFVUkNiYlVvamhLcHdDV3NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zMmQ3YWQtOGJmOS00Mjc0LTk1Zjgt OWM5NTM1OTRkNmIxLzEvYVlmVWVUWGhFMzFVUkNiYlVvamhLcHdDV3NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8zMmQ3YWQtOGJmOS00Mjc0LTk1ZjgtOWM5NTM1OTRkNmIx LzEvYVlmVWVUWGhFMzFVUkNiYlVvamhLcHdDV3NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEY1MTBAD Ok6f2AR0fJ3sRGFyRgifY3mm4NKWs0qlAI2xglbQCWvU5vAT+LnSu8tnYmEkTfkZ WtCi2vPAyDEaNMhhuutuOCrXSoQSso/Pw4BhGFmtS3ZqLTglJgpdT4l3Um8gc165 LmAzyUnT//zy952CYpDoxBp5g711vrzgf2CollyWb4Zv1yL8+Iqp1NMnRkvZ2IFl KwT7ayjTbTVaOP1BplIgczJ1Wm4z+iJHE1k4/p/Srfv1lOX7AnXUkH+zftYpCJpN keRSyFSiu1R6FcnW8K0pttLWwlGg8g+grgm8g/PMSCxlQvMvOGaNZh7qbnXL5Hk2 EKi9soqBU33CCQ== -----END CERTIFICATE-----Generated at Sun Jan 25 06:12:11 2026 by rpki-client