This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft File: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft (raw, json) Hash identifier: n9Ys07ii9RTl+FStz1+q+PpY95jFIUNgN9cDY7pWczM= Subject key identifier: 54:87:73:7C:60:8A:F6:40:C0:23:58:A1:78:13:A9:B5:72:54:E2:AE Authority key identifier: 68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52 Certificate issuer: /CN=6851a3fee77e924146177123dd6753b06fde2452 Certificate serial: 019BF72DA0A7739E931D39E571D87A566179 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft Manifest number: 177C Signing time: Sun 25 Jan 2026 22:02:01 +0000 Manifest this update: Sun 25 Jan 2026 22:02:01 +0000 Manifest next update: Mon 26 Jan 2026 22:02:01 +0000 Files and hashes: 1: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl (hash: 5fIFUxkB6ULOR37SLm42H+MmgcDVDQYwRIj/15Xe8z8=) 2: xIyRvynsJDfonhuzRYt1ty9sqMY.roa (hash: EoXBFExcfd/L36PfBZw/K0nrCLVb7q9unxVkiCC6TIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:a0:a7:73:9e:93:1d:39:e5:71:d8:7a:56:61:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6851a3fee77e924146177123dd6753b06fde2452 Validity Not Before: Jan 25 22:02:01 2026 GMT Not After : Jan 26 22:02:01 2026 GMT Subject: CN=5487737c608af640c02358a17813a9b57254e2ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ba:19:12:0f:cd:29:96:7f:0b:a2:27:5b:3e: 23:24:6a:27:0d:cf:d1:16:db:34:f7:cc:88:a6:49: 59:97:d7:a3:44:2d:36:fc:2c:d1:4c:cf:ba:84:20: 71:88:c0:a0:ca:62:b7:6b:97:06:b5:80:52:f6:f5: 8d:ed:72:bc:01:4e:84:fb:8c:9a:08:07:a7:60:82: 22:f9:6b:91:e9:1d:cc:4b:73:c9:5d:c5:47:62:47: 3d:8d:e7:77:ec:1f:5a:7e:80:85:ee:1d:9d:0a:c3: e9:1a:4f:e8:1d:1a:f7:eb:3b:9e:50:67:7f:58:c6: 50:97:5e:e5:b7:36:9a:bf:ce:f1:28:0d:4f:b9:0d: 3d:35:93:5f:e2:ec:2c:5d:84:52:06:17:c4:a1:50: 31:88:98:63:5e:9c:d5:ce:96:48:82:c0:2d:ee:96: 3b:b8:a6:7b:ea:54:77:f5:66:a8:4c:23:f4:d6:75: e5:7a:38:1a:15:46:58:cf:8f:78:4b:06:8b:89:54: 60:98:90:bc:18:d7:2b:9e:d9:20:57:15:8b:b6:af: 8e:8e:11:a3:63:28:f6:6a:ca:5f:76:2f:77:13:42: 44:bf:73:85:19:00:22:75:ab:9d:5e:46:b4:1c:7d: 59:3b:00:8e:c2:11:dc:04:3f:52:6f:b7:82:64:39: 50:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:87:73:7C:60:8A:F6:40:C0:23:58:A1:78:13:A9:B5:72:54:E2:AE X509v3 Authority Key Identifier: keyid:68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e0:71:b8:dc:8f:a0:07:0d:37:fd:2b:3b:6a:be:58:87:5d: 69:71:28:a4:25:6d:97:72:4e:ed:3d:08:b5:97:5d:7e:0d:13: 01:6d:98:77:b5:bc:ae:00:56:e6:c0:ff:bb:97:2f:a1:37:2c: 18:9f:bb:92:db:da:5a:73:1d:9a:3f:1a:b6:76:f9:66:1d:4b: 2c:fa:b9:8a:d3:14:0c:50:42:7c:bf:41:ab:cb:f1:98:c4:22: cb:c6:9a:ab:98:c9:c2:c3:9a:2a:e0:34:6c:60:fb:0d:f9:73: 80:6e:11:0c:08:ed:b1:54:b1:71:48:4f:4c:3b:a9:92:80:39: 95:a1:60:81:94:5d:9b:39:9c:1e:ae:de:27:1f:49:1a:90:28: 62:84:cd:a0:22:56:0b:da:32:1d:34:fa:d6:d6:0c:80:a5:90: 23:af:f0:18:d8:98:36:89:6d:45:af:2b:e2:b1:ea:75:e6:ac: c2:20:0a:be:d3:c8:78:41:65:85:24:9c:f5:bc:24:00:ea:a5: f8:07:99:90:7f:41:d4:6b:d6:d5:95:0a:16:bc:1d:57:28:b1: 34:48:72:b5:f4:a5:bd:49:95:cf:35:a4:d4:7a:37:79:2d:0b: 93:3d:5e:92:4c:75:51:f4:d0:5b:36:e3:68:41:78:6d:d1:29: bf:f1:2e:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LaCnc56THTnlcdh6VmF5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NTFhM2ZlZTc3ZTkyNDE0NjE3NzEyM2RkNjc1M2IwNmZk ZTI0NTIwHhcNMjYwMTI1MjIwMjAxWhcNMjYwMTI2MjIwMjAxWjAzMTEwLwYDVQQD Eyg1NDg3NzM3YzYwOGFmNjQwYzAyMzU4YTE3ODEzYTliNTcyNTRlMmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17oZEg/NKZZ/C6InWz4jJGonDc/R Fts098yIpklZl9ejRC02/CzRTM+6hCBxiMCgymK3a5cGtYBS9vWN7XK8AU6E+4ya CAenYIIi+WuR6R3MS3PJXcVHYkc9jed37B9afoCF7h2dCsPpGk/oHRr36zueUGd/ WMZQl17ltzaav87xKA1PuQ09NZNf4uwsXYRSBhfEoVAxiJhjXpzVzpZIgsAt7pY7 uKZ76lR39WaoTCP01nXlejgaFUZYz494SwaLiVRgmJC8GNcrntkgVxWLtq+OjhGj Yyj2aspfdi93E0JEv3OFGQAidaudXka0HH1ZOwCOwhHcBD9Sb7eCZDlQLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSHc3xgivZAwCNYoXgTqbVyVOKuMB8GA1UdIwQY MBaAFGhRo/7nfpJBRhdxI91nU7Bv3iRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8wMDU5YjUtZjYzNy00MjY1LWEzZTQt YTNiNTg2MjgwNjBkLzEvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8wMDU5YjUtZjYzNy00MjY1LWEzZTQtYTNiNTg2MjgwNjBk LzEvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuBxuNyP oAcNN/0rO2q+WIddaXEopCVtl3JO7T0ItZddfg0TAW2Yd7W8rgBW5sD/u5cvoTcs GJ+7ktvaWnMdmj8atnb5Zh1LLPq5itMUDFBCfL9Bq8vxmMQiy8aaq5jJwsOaKuA0 bGD7DflzgG4RDAjtsVSxcUhPTDupkoA5laFggZRdmzmcHq7eJx9JGpAoYoTNoCJW C9oyHTT61tYMgKWQI6/wGNiYNoltRa8r4rHqdeaswiAKvtPIeEFlhSSc9bwkAOql +AeZkH9B1GvW1ZUKFrwdVyixNEhytfSlvUmVzzWk1Ho3eS0Lkz1ekkx1UfTQWzbj aEF4bdEpv/Euhw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:19:50 2026 by rpki-client