This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft File: AjmuERiAiFR-s-UjSDzKmFVsEVs.mft (raw, json) Hash identifier: FKZdNICfSGvdryC5WHnp5M5FIH2lKnfcGhMXfB3AeNM= Subject key identifier: C6:9B:A9:DD:2B:34:B1:24:7B:7D:67:FA:7B:60:5D:13:42:45:5D:93 Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B Certificate issuer: /CN=0239ae11188088547eb3e523483cca98556c115b Certificate serial: 019BF462FA7B0975A4B77FFD9CB4AE29ADC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 09:01:25 +0000 Manifest this update: Sun 25 Jan 2026 09:01:25 +0000 Manifest next update: Mon 26 Jan 2026 09:01:25 +0000 Files and hashes: 1: AjmuERiAiFR-s-UjSDzKmFVsEVs.crl (hash: JWFql+8Z+7W8e+ROVWwAB62OgurWM8Iu4BwjZSdik2E=) 2: j51-vhqySrtPDmWytRuJdkGEvC8.roa (hash: hWPfWXr9RPCgElnT55rpdjybwa6yeKeJ6tIi6IBtbEE=) 3: lBelNikhE64GysX2fGFFE4vhjCQ.roa (hash: OyoE+SKk2HTXSgPYtWOQOXKI4eO+3EXXvE2q2Oo53nA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:fa:7b:09:75:a4:b7:7f:fd:9c:b4:ae:29:ad:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0239ae11188088547eb3e523483cca98556c115b Validity Not Before: Jan 25 09:01:25 2026 GMT Not After : Jan 26 09:01:25 2026 GMT Subject: CN=c69ba9dd2b34b1247b7d67fa7b605d1342455d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:da:58:fc:b4:dc:ae:00:91:a7:e6:a3:53:ac: 66:2d:99:b1:19:fe:f3:6b:0f:dd:f7:eb:c2:30:a6: ea:46:d4:c7:74:54:29:a5:bb:0c:49:41:8c:ab:33: 68:8e:ee:12:07:74:d4:1e:5d:10:fb:77:54:e0:b1: 02:e7:58:61:bc:79:4d:75:33:fa:fd:24:be:cd:e6: c6:cf:4a:e3:20:f7:c4:88:aa:18:52:12:fc:04:f7: 0e:67:38:af:8b:1a:f7:85:e4:01:5e:fc:35:89:e1: 07:d9:fd:11:5a:5b:79:43:99:12:fe:76:51:18:8a: b5:6b:1b:e8:64:aa:28:b5:f6:fb:dd:be:5d:bd:31: d4:e3:2c:b8:a9:18:54:72:fe:28:89:06:32:38:31: 2d:61:03:d6:98:b3:97:c4:4c:5d:28:9e:16:ab:2d: 6d:52:20:49:40:88:15:69:ea:f7:cd:b2:eb:cf:9d: b4:c2:ae:b9:77:3b:30:f1:ea:56:b2:ee:6f:65:70: 07:38:ca:b0:5a:b8:aa:0f:ee:af:ec:f2:a0:45:43: 69:89:d9:02:60:d0:69:7a:7b:77:0c:41:54:23:4b: 62:a6:b1:e5:2e:b9:d2:b2:0c:db:82:26:e3:48:47: 21:ff:db:dd:44:23:58:fc:24:f9:93:f2:f9:02:10: 3d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9B:A9:DD:2B:34:B1:24:7B:7D:67:FA:7B:60:5D:13:42:45:5D:93 X509v3 Authority Key Identifier: keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:35:75:3e:02:8d:5b:18:00:4a:00:b1:ec:5f:d9:4e:90:78: ae:15:b2:e6:df:b5:f2:82:98:45:39:c8:a1:72:65:96:ac:80: 53:0c:9b:70:1f:2e:a6:e9:78:15:f4:85:32:e0:86:c2:79:34: 9c:4b:5d:70:b6:bb:ad:2b:ef:df:24:14:86:15:0e:0c:c4:73: 72:a3:d1:a9:7e:d7:7a:6f:9e:46:a9:0a:5c:1e:57:c4:8e:af: e8:05:7a:cb:bb:0e:9f:9e:15:8b:3d:fb:ee:24:a7:36:ce:4f: f1:4b:a8:83:41:46:cc:66:d4:16:88:98:f0:38:aa:99:04:8f: 8c:6a:c4:da:5f:8b:ff:de:a7:15:70:cb:ca:cd:a8:0e:ac:5c: 33:e0:37:2b:05:93:f2:fb:24:ee:9a:3d:2c:35:68:46:62:49: 5a:5f:83:f7:4c:38:26:49:a6:3d:3e:20:ca:89:d4:fa:ec:49: d5:21:2d:84:3a:df:e6:31:15:91:70:fa:a5:a7:f7:6e:0d:fa: f8:1f:26:cd:5e:43:97:ea:32:0b:51:a5:c7:8b:17:df:cb:e0: 7b:4b:a3:bc:d0:d6:ef:95:a9:3e:51:99:e3:33:9f:b1:d3:61: 83:b2:bb:08:55:31:1b:e0:43:96:18:99:53:19:ce:8d:93:8b: fe:01:4a:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Yvp7CXWkt3/9nLSuKa3CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzlhZTExMTg4MDg4NTQ3ZWIzZTUyMzQ4M2NjYTk4NTU2 YzExNWIwHhcNMjYwMTI1MDkwMTI1WhcNMjYwMTI2MDkwMTI1WjAzMTEwLwYDVQQD EyhjNjliYTlkZDJiMzRiMTI0N2I3ZDY3ZmE3YjYwNWQxMzQyNDU1ZDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdpY/LTcrgCRp+ajU6xmLZmxGf7z aw/d9+vCMKbqRtTHdFQppbsMSUGMqzNoju4SB3TUHl0Q+3dU4LEC51hhvHlNdTP6 /SS+zebGz0rjIPfEiKoYUhL8BPcOZzivixr3heQBXvw1ieEH2f0RWlt5Q5kS/nZR GIq1axvoZKootfb73b5dvTHU4yy4qRhUcv4oiQYyODEtYQPWmLOXxExdKJ4Wqy1t UiBJQIgVaer3zbLrz520wq65dzsw8epWsu5vZXAHOMqwWriqD+6v7PKgRUNpidkC YNBpent3DEFUI0tiprHlLrnSsgzbgibjSEch/9vdRCNY/CT5k/L5AhA99QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMabqd0rNLEke31n+ntgXRNCRV2TMB8GA1UdIwQY MBaAFAI5rhEYgIhUfrPlI0g8yphVbBFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wMzY0MzQtZTk1ZS00NDI2LThkMWMt NjcyODBjOGJiYWI4LzEvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8wMzY0MzQtZTk1ZS00NDI2LThkMWMtNjcyODBjOGJiYWI4 LzEvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTV1PgKN WxgASgCx7F/ZTpB4rhWy5t+18oKYRTnIoXJllqyAUwybcB8upul4FfSFMuCGwnk0 nEtdcLa7rSvv3yQUhhUODMRzcqPRqX7Xem+eRqkKXB5XxI6v6AV6y7sOn54Viz37 7iSnNs5P8Uuog0FGzGbUFoiY8DiqmQSPjGrE2l+L/96nFXDLys2oDqxcM+A3KwWT 8vsk7po9LDVoRmJJWl+D90w4JkmmPT4gyonU+uxJ1SEthDrf5jEVkXD6paf3bg36 +B8mzV5Dl+oyC1Glx4sX38vge0ujvNDW75WpPlGZ4zOfsdNhg7K7CFUxG+BDlhiZ UxnOjZOL/gFK2w== -----END CERTIFICATE-----Generated at Sun Jan 25 12:21:47 2026 by rpki-client