This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft File: Ahs-o17f3ROMFVBtdKdgIt03aUs.mft (raw, json) Hash identifier: X2bEul3aCc7DvMGx6ZaiuQRsOonpIZ/XWnBuKB5+Png= Subject key identifier: 98:71:85:70:DD:40:10:0B:F9:13:D6:A2:07:7B:33:01:12:A7:DE:3D Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B Certificate issuer: /CN=021b3ea35edfdd138c15506d74a76022dd37694b Certificate serial: 019BF72D704332D87050005B176145CFC850 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft Manifest number: 17EE Signing time: Sun 25 Jan 2026 22:01:48 +0000 Manifest this update: Sun 25 Jan 2026 22:01:48 +0000 Manifest next update: Mon 26 Jan 2026 22:01:48 +0000 Files and hashes: 1: Ahs-o17f3ROMFVBtdKdgIt03aUs.crl (hash: UPTddlW3qIjdH4u47jvOL2iUTnwnVPq1BdJfYMM9CrM=) 2: LBRMtk276o1fDtnMdAqhTW7DXC4.roa (hash: 0YIiI16RKFGdQ0JcFhz3zqT49nyQkj7P8gkQ5o32XYM=) 3: M8dYp-L4dw1v-tRfvEaBeetOZDM.asa (hash: BxKqO0ZY48OCWqUnkol0bWVuXrmCWGF4F2EIRoXKyLI=) 4: QmzS2ptv4L0wreFRKwR2b7sYT9o.roa (hash: V15c6ZmrAVOZnZkD5NcAPinTv/zGPeEWxtJ3s9KDwPs=) 5: Rj9rY8c-WTz58dRjWStkxywCLns.roa (hash: 2qqmCIzo+/ipPZRDGptoSNuyqwN9eUc4eLGE8JL6fME=) 6: T64D7DIdeVevp7C-fmZ9i_3HGBI.roa (hash: kO6AaVNTX79L37zwJju08wk0fWE2dJSQ0KHv71bE1XY=) 7: U8u1b5Pq3pRMcKbM8GicLTeR9Tk.roa (hash: R5sho8p6NKUCSWgu2hqUkQHKto75y0jfre83Hes2hwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:70:43:32:d8:70:50:00:5b:17:61:45:cf:c8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b Validity Not Before: Jan 25 22:01:48 2026 GMT Not After : Jan 26 22:01:48 2026 GMT Subject: CN=98718570dd40100bf913d6a2077b330112a7de3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3e:66:b7:20:ec:84:5c:29:ce:4d:4b:ed:4d: d6:e2:e0:0f:ca:3d:b9:30:63:02:49:f9:c5:6f:0a: b0:2b:4a:7c:ea:2f:d7:32:e5:eb:9f:7e:a8:17:34: 93:89:78:56:3b:70:e9:c7:17:80:0f:4d:a1:61:d9: 74:eb:3f:55:93:32:43:f8:f3:b8:2a:93:17:be:8a: f2:c5:86:f7:a2:97:29:45:1b:f2:93:26:dc:ef:09: a5:6e:45:23:3b:62:b7:ba:86:ef:a5:7c:92:90:20: fd:ac:7c:d8:2f:6f:4f:9f:e7:ab:95:9e:49:33:35: 33:47:ad:8f:8b:e1:2f:4e:dd:e1:31:11:44:b8:b9: 50:45:9d:5f:47:18:16:d0:5b:f5:60:75:ae:61:ce: 88:66:0b:59:c0:e3:11:aa:bd:0c:1c:47:17:1e:90: a4:65:b0:9b:df:1c:bb:58:ac:38:ab:85:61:4e:be: e0:34:a2:84:fa:8c:95:0e:69:1a:4b:8f:b5:ec:f4: a1:25:52:44:47:73:df:ef:fe:9b:41:46:b0:d6:bd: ee:35:8b:0a:25:04:de:65:12:68:a0:d4:b5:c0:65: df:1c:90:27:46:15:9b:16:79:75:7c:da:8e:71:2f: d2:97:4a:03:42:33:f8:84:49:1e:72:9a:e8:05:72: e3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:71:85:70:DD:40:10:0B:F9:13:D6:A2:07:7B:33:01:12:A7:DE:3D X509v3 Authority Key Identifier: keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:c0:35:c6:61:43:e8:84:47:de:58:db:de:1a:5d:fb:51:9c: c8:bc:ba:db:60:bb:f2:fd:e8:03:e5:92:b1:8a:44:ef:17:ba: 8c:a3:fb:02:b7:bc:39:23:e1:95:9d:17:93:80:f3:41:6a:75: 51:f4:27:1d:96:5a:68:be:6f:0f:39:64:e8:d2:bb:07:1b:a9: c0:05:f6:74:64:78:b9:2f:4a:2a:00:c8:1b:d5:87:7f:ea:e0: f0:6b:bc:ae:45:d4:e4:27:0d:56:11:b2:61:8b:24:69:a4:66: 72:72:c5:b8:93:d9:fe:f9:3e:66:41:79:27:52:f0:5c:cf:01: 75:fc:de:49:0c:48:56:36:5b:fe:2c:27:5d:31:3c:5f:e3:ab: 49:1b:cc:cd:06:a2:e9:00:66:be:2d:ff:fb:6b:85:11:88:0f: ab:55:c3:08:b0:73:03:a2:96:b2:15:77:16:cb:02:ef:78:47: 7f:e3:ea:dd:27:72:2f:f3:ac:17:91:37:8a:36:72:c8:5d:be: 32:81:c5:ac:e7:b6:d1:84:75:f6:74:d9:89:c4:da:8d:0b:c8: b0:16:b3:dd:24:ad:48:f5:0d:58:38:12:3e:30:dc:8d:95:b7: b3:1f:31:42:22:5c:91:35:e4:a7:8e:c8:0f:ab:ff:ea:9c:14: 0e:65:8d:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LXBDMthwUABbF2FFz8hQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMWIzZWEzNWVkZmRkMTM4YzE1NTA2ZDc0YTc2MDIyZGQz NzY5NGIwHhcNMjYwMTI1MjIwMTQ4WhcNMjYwMTI2MjIwMTQ4WjAzMTEwLwYDVQQD Eyg5ODcxODU3MGRkNDAxMDBiZjkxM2Q2YTIwNzdiMzMwMTEyYTdkZTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj5mtyDshFwpzk1L7U3W4uAPyj25 MGMCSfnFbwqwK0p86i/XMuXrn36oFzSTiXhWO3DpxxeAD02hYdl06z9VkzJD+PO4 KpMXvoryxYb3opcpRRvykybc7wmlbkUjO2K3uobvpXySkCD9rHzYL29Pn+erlZ5J MzUzR62Pi+EvTt3hMRFEuLlQRZ1fRxgW0Fv1YHWuYc6IZgtZwOMRqr0MHEcXHpCk ZbCb3xy7WKw4q4VhTr7gNKKE+oyVDmkaS4+17PShJVJER3Pf7/6bQUaw1r3uNYsK JQTeZRJooNS1wGXfHJAnRhWbFnl1fNqOcS/Sl0oDQjP4hEkecproBXLjAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhxhXDdQBAL+RPWogd7MwESp949MB8GA1UdIwQY MBaAFAIbPqNe390TjBVQbXSnYCLdN2lLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWhzLW8xN2YzUk9NRlZCdGRLZGdJdDAzYVVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mODliNjQtODdiNy00OGY0LThiNjAt YzMyMDRiZGU3NzczLzEvQWhzLW8xN2YzUk9NRlZCdGRLZGdJdDAzYVVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mODliNjQtODdiNy00OGY0LThiNjAtYzMyMDRiZGU3Nzcz LzEvQWhzLW8xN2YzUk9NRlZCdGRLZGdJdDAzYVVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMA1xmFD 6IRH3ljb3hpd+1GcyLy622C78v3oA+WSsYpE7xe6jKP7Are8OSPhlZ0Xk4DzQWp1 UfQnHZZaaL5vDzlk6NK7BxupwAX2dGR4uS9KKgDIG9WHf+rg8Gu8rkXU5CcNVhGy YYskaaRmcnLFuJPZ/vk+ZkF5J1LwXM8BdfzeSQxIVjZb/iwnXTE8X+OrSRvMzQai 6QBmvi3/+2uFEYgPq1XDCLBzA6KWshV3FssC73hHf+Pq3SdyL/OsF5E3ijZyyF2+ MoHFrOe20YR19nTZicTajQvIsBaz3SStSPUNWDgSPjDcjZW3sx8xQiJckTXkp47I D6v/6pwUDmWNlQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:46:52 2026 by rpki-client