This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json) Hash identifier: ESPuFkm72wObUqlsv5foqieuTXwAxjrxlWlKOFAJp7k= Subject key identifier: C1:27:7B:0E:35:F7:E1:0C:B5:72:B7:18:CC:21:13:9C:30:99:35:94 Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8 Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8 Certificate serial: 019BF651477162293D2E48E5C1903580E8E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft Manifest number: 11A3 Signing time: Sun 25 Jan 2026 18:01:20 +0000 Manifest this update: Sun 25 Jan 2026 18:01:20 +0000 Manifest next update: Mon 26 Jan 2026 18:01:20 +0000 Files and hashes: 1: OLCJ9MarnmaxDlyqFbIFGYBy6AM.roa (hash: B/qMixseryt20pkCrHjoaGaJSXDzJQy1EA0RsnIA43s=) 2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: 1UqBfH2qf6ehcZvTxiMUExfug1EH634MiVjbtVo/0mI=) 3: itz24NxT7Zi7fZ9WaeuI55HznXI.roa (hash: ujlPzuDCIcJuw9D1k7JPVilrVtFB6Vb5mfSYbPM7nRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:47:71:62:29:3d:2e:48:e5:c1:90:35:80:e8:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8 Validity Not Before: Jan 25 18:01:20 2026 GMT Not After : Jan 26 18:01:20 2026 GMT Subject: CN=c1277b0e35f7e10cb572b718cc21139c30993594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:60:0b:41:1f:82:50:00:63:f6:45:77:d8:8a: 4f:7c:62:d5:cb:90:ef:c3:3e:4a:e2:12:76:27:25: e6:91:6f:14:ac:ae:25:15:11:e7:6e:e7:38:78:3c: 96:8b:10:9d:31:9f:e7:e4:99:95:cf:a3:d1:23:a2: cd:c3:14:62:14:15:1a:3c:52:6b:2e:82:69:20:c9: 31:bb:a7:1b:9a:87:34:4d:23:06:32:f6:7e:ce:21: 70:8a:ea:82:f8:d9:49:de:5a:fa:7a:f7:ab:59:c1: 4b:7d:c6:71:bd:3e:ac:e9:4b:3c:0e:24:11:80:17: 61:92:41:59:9f:eb:2a:b3:92:48:65:45:e9:53:6a: 99:55:f2:38:1b:ef:51:7f:72:de:75:21:f2:92:dc: a3:25:27:e5:ff:da:3c:41:28:1a:b9:ef:8e:d0:28: 7e:84:5e:01:48:26:bc:22:1a:d0:93:fe:ab:71:86: 31:fb:ab:f3:58:c8:73:27:11:06:d0:96:32:7b:c2: 26:f1:25:81:4c:e7:2a:1b:c9:52:51:76:62:8c:dd: e0:04:39:33:cc:bb:29:b1:4e:c1:af:15:85:3c:57: da:3a:ae:2c:30:67:e6:94:60:f1:39:38:e0:e5:5b: bd:9d:07:d1:b9:0c:81:cf:50:b0:88:a1:f4:a3:9f: ce:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:27:7B:0E:35:F7:E1:0C:B5:72:B7:18:CC:21:13:9C:30:99:35:94 X509v3 Authority Key Identifier: keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:8c:9f:6a:94:2a:99:b0:b2:a2:28:ab:5f:56:5d:b4:5e:13: ce:7c:94:76:a8:80:44:fc:b6:46:de:c9:a5:c3:8d:62:e7:26: 5b:db:3c:d9:66:d5:09:6e:d3:b0:4a:a3:a1:63:1e:8b:0a:51: 14:3b:bb:94:ba:ca:b5:e3:af:a4:08:ab:5e:7e:c1:94:1c:1d: 45:01:c0:ed:03:64:a4:25:2b:54:38:19:21:2a:a4:9f:34:69: a5:a4:cc:1b:a1:40:24:33:f3:e1:79:bb:7f:94:62:f3:4c:5c: ba:f7:b9:ad:5b:6a:18:6a:23:7f:37:29:d2:37:cf:99:d8:14: 7d:b3:02:2d:df:a9:d8:c4:20:33:e8:86:a8:ec:a2:80:5d:de: 85:0e:e9:56:4d:1c:6a:90:be:96:ff:70:05:4f:94:37:ff:a9: 0f:4d:bd:2a:bf:ee:bf:be:40:e8:43:89:f1:92:7f:04:d6:16: 7c:50:f4:12:94:bd:5c:49:95:9d:06:47:f5:c5:da:d3:94:c2: 90:17:d9:d9:2a:6e:b6:bd:fa:8f:95:84:6f:5b:9b:da:fe:ea: 26:10:8c:aa:28:30:ea:94:80:20:89:36:4f:89:17:81:ca:65: ec:d1:fe:08:62:5c:98:bd:7c:cc:33:af:a6:a9:9f:9e:d9:63: d1:77:2b:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UUdxYik9LkjlwZA1gOjjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMDdjNmI1NmVmMWYyMzliMDI4ZWY0MjM3NWEyYTE3NjVi YzA4YjgwHhcNMjYwMTI1MTgwMTIwWhcNMjYwMTI2MTgwMTIwWjAzMTEwLwYDVQQD EyhjMTI3N2IwZTM1ZjdlMTBjYjU3MmI3MThjYzIxMTM5YzMwOTkzNTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+2ALQR+CUABj9kV32IpPfGLVy5Dv wz5K4hJ2JyXmkW8UrK4lFRHnbuc4eDyWixCdMZ/n5JmVz6PRI6LNwxRiFBUaPFJr LoJpIMkxu6cbmoc0TSMGMvZ+ziFwiuqC+NlJ3lr6everWcFLfcZxvT6s6Us8DiQR gBdhkkFZn+sqs5JIZUXpU2qZVfI4G+9Rf3LedSHyktyjJSfl/9o8QSgaue+O0Ch+ hF4BSCa8IhrQk/6rcYYx+6vzWMhzJxEG0JYye8Im8SWBTOcqG8lSUXZijN3gBDkz zLspsU7BrxWFPFfaOq4sMGfmlGDxOTjg5Vu9nQfRuQyBz1CwiKH0o5/ODwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEnew419+EMtXK3GMwhE5wwmTWUMB8GA1UdIwQY MBaAFPwHxrVu8fI5sCjvQjdaKhdlvAi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9jNjhhZTQtOTcyNC00OTc1LThiZDQt Yzg3MDBhMTQ3NjFiLzEvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9jNjhhZTQtOTcyNC00OTc1LThiZDQtYzg3MDBhMTQ3NjFi LzEvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYyfapQq mbCyoiirX1ZdtF4TznyUdqiARPy2Rt7JpcONYucmW9s82WbVCW7TsEqjoWMeiwpR FDu7lLrKteOvpAirXn7BlBwdRQHA7QNkpCUrVDgZISqknzRppaTMG6FAJDPz4Xm7 f5Ri80xcuve5rVtqGGojfzcp0jfPmdgUfbMCLd+p2MQgM+iGqOyigF3ehQ7pVk0c apC+lv9wBU+UN/+pD029Kr/uv75A6EOJ8ZJ/BNYWfFD0EpS9XEmVnQZH9cXa05TC kBfZ2Sputr36j5WEb1ub2v7qJhCMqigw6pSAIIk2T4kXgcpl7NH+CGJcmL18zDOv pqmfntlj0XcreA== -----END CERTIFICATE-----Generated at Mon Jan 26 00:27:07 2026 by rpki-client