This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft File: azeN8nvZJgx-sVJz6ZPjawmF2hA.mft (raw, json) Hash identifier: 8r4k9lXsIQI0PZ+59sreKziproLTl1gmt1fmXYIYvBo= Subject key identifier: 21:64:57:A1:06:15:1B:41:64:9F:43:28:C5:2F:21:53:75:03:24:15 Authority key identifier: 6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10 Certificate issuer: /CN=6b378df27bd9260c7eb15273e993e36b0985da10 Certificate serial: 019BF91B65E5EE1000BC5C858001D6AF448B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft Manifest number: 17F0 Signing time: Mon 26 Jan 2026 07:01:20 +0000 Manifest this update: Mon 26 Jan 2026 07:01:20 +0000 Manifest next update: Tue 27 Jan 2026 07:01:20 +0000 Files and hashes: 1: BhiORD-UuUDBrhyIYI_DoUYPlI8.roa (hash: JTlV8Y8e4tmlDr8mHk2b5u6aD2TaQXFvARgJc495HDg=) 2: azeN8nvZJgx-sVJz6ZPjawmF2hA.crl (hash: hsSFJJqt9kit99dSD9vIvX0wunbkZY+kyttFKjonsXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:65:e5:ee:10:00:bc:5c:85:80:01:d6:af:44:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b378df27bd9260c7eb15273e993e36b0985da10 Validity Not Before: Jan 26 07:01:20 2026 GMT Not After : Jan 27 07:01:20 2026 GMT Subject: CN=216457a106151b41649f4328c52f215375032415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:8b:96:53:f0:1a:c0:a7:f2:6e:68:41:e8: 04:42:d8:4b:6c:26:b2:bc:bd:d3:c2:23:bb:c8:71: 05:bd:1b:de:bc:37:72:38:d1:52:0c:3f:54:63:17: c0:56:92:29:54:66:52:c8:37:7d:a4:c3:8a:84:ca: ad:60:9b:ba:b6:b4:e8:74:28:ef:48:d5:ff:0b:63: c6:42:0a:6d:9d:98:ea:4b:e6:00:cd:c8:1b:7b:08: ec:a4:a7:1d:3e:e1:cc:db:fe:f2:70:2b:a2:f9:cc: 35:14:39:39:04:28:11:ba:3c:13:82:1a:ba:11:f1: fa:5f:a5:7a:16:0c:d1:97:f8:57:d8:82:e9:60:c3: ac:c8:11:fd:78:cb:e7:e6:ac:bd:95:b6:69:40:cf: 68:2e:7e:cd:47:93:23:a8:e0:a7:27:bb:1c:c3:82: 5f:44:dd:6b:a1:32:9a:fa:ad:80:4b:23:79:0e:c6: 56:75:45:2c:ac:be:33:b8:f9:e6:21:6c:61:46:7e: ea:fe:db:76:be:1b:62:2d:91:2d:a3:b8:c6:9b:e7: e0:24:ab:d4:81:41:e6:13:1c:5c:98:5a:fa:da:d9: 2e:58:bd:cd:df:40:28:3c:65:21:9a:49:a8:3a:bc: cc:91:e8:e8:63:01:15:32:5e:c8:ac:da:a3:7d:fa: 00:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:64:57:A1:06:15:1B:41:64:9F:43:28:C5:2F:21:53:75:03:24:15 X509v3 Authority Key Identifier: keyid:6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:bf:02:eb:ab:80:0e:6b:56:ab:cd:c8:7f:41:0b:a6:72:ca: eb:6a:22:3f:18:6c:6c:15:e4:ee:63:2a:50:80:d6:4a:2e:e8: 09:ae:58:a9:81:92:48:c2:47:52:24:25:c5:9a:47:c3:9b:44: 2c:ee:f7:07:49:b2:06:ea:71:80:27:a9:3b:cd:15:87:d2:5c: 94:bb:10:d5:a6:57:a1:be:15:11:06:b1:85:87:3b:ce:20:12: 11:0a:da:10:b1:6e:b4:06:02:16:39:84:d3:2c:3e:f4:c0:6c: 81:81:ab:bf:f4:76:e2:31:50:de:c6:6b:3c:5b:8e:0f:f0:25: 97:b5:1b:c8:5e:6a:d5:b7:f4:2e:20:50:6f:0a:88:e5:29:cd: a3:55:06:a9:77:00:3d:d3:b9:0c:38:fc:d5:01:b4:7e:8b:95: d9:2c:66:ba:4a:da:10:20:19:ff:eb:46:43:39:58:94:61:03: f1:c3:ff:a6:16:51:1c:99:56:da:ef:63:24:77:60:b2:f7:35: 14:76:37:e1:50:76:aa:8e:6e:e5:cc:8f:19:3f:4c:77:5e:9e: 9e:6f:fd:70:b5:73:c8:75:49:67:b3:ec:76:93:d7:5d:33:a1: fd:5e:4c:c6:d8:16:2d:95:76:43:ed:f7:62:80:a7:72:c5:c4: 6d:6a:13:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G2Xl7hAAvFyFgAHWr0SLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMzc4ZGYyN2JkOTI2MGM3ZWIxNTI3M2U5OTNlMzZiMDk4 NWRhMTAwHhcNMjYwMTI2MDcwMTIwWhcNMjYwMTI3MDcwMTIwWjAzMTEwLwYDVQQD EygyMTY0NTdhMTA2MTUxYjQxNjQ5ZjQzMjhjNTJmMjE1Mzc1MDMyNDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvSLllPwGsCn8m5oQegEQthLbCay vL3TwiO7yHEFvRvevDdyONFSDD9UYxfAVpIpVGZSyDd9pMOKhMqtYJu6trTodCjv SNX/C2PGQgptnZjqS+YAzcgbewjspKcdPuHM2/7ycCui+cw1FDk5BCgRujwTghq6 EfH6X6V6FgzRl/hX2ILpYMOsyBH9eMvn5qy9lbZpQM9oLn7NR5MjqOCnJ7scw4Jf RN1roTKa+q2ASyN5DsZWdUUsrL4zuPnmIWxhRn7q/tt2vhtiLZEto7jGm+fgJKvU gUHmExxcmFr62tkuWL3N30AoPGUhmkmoOrzMkejoYwEVMl7IrNqjffoABQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFkV6EGFRtBZJ9DKMUvIVN1AyQVMB8GA1UdIwQY MBaAFGs3jfJ72SYMfrFSc+mT42sJhdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXplTjhudlpKZ3gtc1ZKejZaUGphd21GMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80ODVlYmMtN2VlNC00MjcwLWJkYzgt OTdmYTgwYzBkZjQxLzEvYXplTjhudlpKZ3gtc1ZKejZaUGphd21GMmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80ODVlYmMtN2VlNC00MjcwLWJkYzgtOTdmYTgwYzBkZjQx LzEvYXplTjhudlpKZ3gtc1ZKejZaUGphd21GMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArb8C66uA DmtWq83If0ELpnLK62oiPxhsbBXk7mMqUIDWSi7oCa5YqYGSSMJHUiQlxZpHw5tE LO73B0myBupxgCepO80Vh9JclLsQ1aZXob4VEQaxhYc7ziASEQraELFutAYCFjmE 0yw+9MBsgYGrv/R24jFQ3sZrPFuOD/All7UbyF5q1bf0LiBQbwqI5SnNo1UGqXcA PdO5DDj81QG0fouV2SxmukraECAZ/+tGQzlYlGED8cP/phZRHJlW2u9jJHdgsvc1 FHY34VB2qo5u5cyPGT9Md16enm/9cLVzyHVJZ7PsdpPXXTOh/V5MxtgWLZV2Q+33 YoCncsXEbWoT/g== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:09 2026 by rpki-client