This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft File: AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft (raw, json) Hash identifier: oYAm4mLq/HUCuRxoA45ryD6hoNtp8t7fdMIUblbEX6Y= Subject key identifier: 03:03:DC:49:D9:D5:50:3F:DC:12:74:3E:5A:62:2D:28:3D:20:CA:9B Authority key identifier: 00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18 Certificate issuer: /CN=00cb6701ff829394db69ce67c30ad8735f126018 Certificate serial: 019BF83F742E42BA27403F754D2B2900A7E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft Manifest number: 04CD Signing time: Mon 26 Jan 2026 03:01:06 +0000 Manifest this update: Mon 26 Jan 2026 03:01:06 +0000 Manifest next update: Tue 27 Jan 2026 03:01:06 +0000 Files and hashes: 1: AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl (hash: CADdlA2q7brtIRxj6wtXjWkOtPkzhWpmibY+JOJuwGU=) 2: XCHXkdcF_WH-nnw2GbZr-ZjypR0.roa (hash: JAit03jYK+4u5m3YyCgb9RFRYQTmXY2U0ObmxVumpbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:74:2e:42:ba:27:40:3f:75:4d:2b:29:00:a7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00cb6701ff829394db69ce67c30ad8735f126018 Validity Not Before: Jan 26 03:01:06 2026 GMT Not After : Jan 27 03:01:06 2026 GMT Subject: CN=0303dc49d9d5503fdc12743e5a622d283d20ca9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:60:9d:79:5f:de:7a:b9:6d:77:00:c9:c5:94: 4c:5c:57:4d:80:14:26:5a:2e:57:47:5b:12:21:8a: 50:26:d1:b5:3b:fa:58:52:27:ec:d5:46:97:3f:42: 45:da:3d:8e:88:f1:fe:19:37:51:b8:e9:bd:50:d2: 20:ec:c5:b4:c1:5b:34:e9:45:67:07:7f:d0:f4:f4: c2:44:2f:9c:ed:c7:39:6d:a9:c5:ea:c6:18:24:b2: b4:a8:6b:75:d7:23:6a:6d:81:31:00:64:90:54:59: a6:09:fa:70:04:c1:96:90:f3:6c:4d:b2:90:5f:4c: 29:f1:a7:1b:b9:cf:f0:29:c1:00:10:47:13:7b:c2: 31:09:b5:98:3d:06:79:6e:a0:8e:70:ab:c4:05:07: 46:f1:65:d3:b8:89:fb:64:51:38:66:7e:58:f8:c6: 92:80:e4:22:c6:b7:5d:29:f4:6f:26:54:63:a3:54: 2c:1f:69:81:36:1b:dc:64:45:08:24:24:57:cc:7b: aa:0b:10:b6:32:93:3d:ef:9d:6a:95:2b:74:43:7e: c3:e0:44:9d:54:79:7b:e3:85:14:b9:13:9f:31:7c: c3:c5:c2:29:5b:e3:3e:4c:3c:04:4d:02:e1:bc:d4: 32:0f:57:05:e6:0f:9f:0f:dc:21:a7:3d:67:d9:25: 05:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:03:DC:49:D9:D5:50:3F:DC:12:74:3E:5A:62:2D:28:3D:20:CA:9B X509v3 Authority Key Identifier: keyid:00:CB:67:01:FF:82:93:94:DB:69:CE:67:C3:0A:D8:73:5F:12:60:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMtnAf-Ck5Tbac5nwwrYc18SYBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e873f-f9d3-4d79-9a67-29b3e111dcec/1/AMtnAf-Ck5Tbac5nwwrYc18SYBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ce:f6:30:11:ec:c8:88:f9:bf:54:0b:ff:53:30:ab:31:cc: 06:05:a1:1d:19:51:9a:c3:b2:10:99:48:f7:c2:b2:f1:14:52: b4:c1:7c:27:28:86:ee:28:7d:72:0f:8f:7a:6c:46:d7:c3:5f: c8:47:91:6a:87:a6:5d:e1:b1:79:e9:9b:58:84:60:08:9c:f0: 3e:a1:68:1a:4d:e5:63:21:74:89:2d:0a:18:df:38:e0:e9:bb: f5:9b:1d:04:15:b5:85:6c:3f:2b:e6:9b:3f:84:0a:2b:20:8a: ff:b2:70:ac:f0:c5:00:55:9e:5e:73:21:18:5c:42:53:68:39: b0:22:d7:8d:cf:98:2e:8c:5f:37:b0:1b:4f:f8:53:1d:57:7a: e7:52:a3:87:6c:d3:a6:51:a6:36:b7:41:91:b6:dc:f7:a3:ac: f0:d6:01:58:ed:4d:e9:a4:22:d7:4d:b5:e5:0b:82:46:b8:c9: e2:b3:b0:94:3b:29:e8:ea:53:4d:e0:fa:91:16:cc:dc:2f:36: 97:db:a5:cd:a1:ca:90:08:4e:90:ec:90:d6:3a:9e:ac:d5:18: 62:14:d8:f8:70:95:9f:4a:6e:ab:60:26:ef:7f:ea:f0:35:0d: 8b:a8:3d:4d:82:9c:a0:d9:21:cf:27:eb:87:0b:43:7e:8f:be: 21:9e:3c:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P3QuQronQD91TSspAKflMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwY2I2NzAxZmY4MjkzOTRkYjY5Y2U2N2MzMGFkODczNWYx MjYwMTgwHhcNMjYwMTI2MDMwMTA2WhcNMjYwMTI3MDMwMTA2WjAzMTEwLwYDVQQD EygwMzAzZGM0OWQ5ZDU1MDNmZGMxMjc0M2U1YTYyMmQyODNkMjBjYTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mCdeV/eerltdwDJxZRMXFdNgBQm Wi5XR1sSIYpQJtG1O/pYUifs1UaXP0JF2j2OiPH+GTdRuOm9UNIg7MW0wVs06UVn B3/Q9PTCRC+c7cc5banF6sYYJLK0qGt11yNqbYExAGSQVFmmCfpwBMGWkPNsTbKQ X0wp8acbuc/wKcEAEEcTe8IxCbWYPQZ5bqCOcKvEBQdG8WXTuIn7ZFE4Zn5Y+MaS gOQixrddKfRvJlRjo1QsH2mBNhvcZEUIJCRXzHuqCxC2MpM9751qlSt0Q37D4ESd VHl744UUuROfMXzDxcIpW+M+TDwETQLhvNQyD1cF5g+fD9whpz1n2SUFFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMD3EnZ1VA/3BJ0PlpiLSg9IMqbMB8GA1UdIwQY MBaAFADLZwH/gpOU22nOZ8MK2HNfEmAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yZTg3M2YtZjlkMy00ZDc5LTlhNjct MjliM2UxMTFkY2VjLzEvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yZTg3M2YtZjlkMy00ZDc5LTlhNjctMjliM2UxMTFkY2Vj LzEvQU10bkFmLUNrNVRiYWM1bnd3clljMThTWUJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF872MBHs yIj5v1QL/1MwqzHMBgWhHRlRmsOyEJlI98Ky8RRStMF8JyiG7ih9cg+PemxG18Nf yEeRaoemXeGxeembWIRgCJzwPqFoGk3lYyF0iS0KGN844Om79ZsdBBW1hWw/K+ab P4QKKyCK/7JwrPDFAFWeXnMhGFxCU2g5sCLXjc+YLoxfN7AbT/hTHVd651Kjh2zT plGmNrdBkbbc96Os8NYBWO1N6aQi10215QuCRrjJ4rOwlDsp6OpTTeD6kRbM3C82 l9ulzaHKkAhOkOyQ1jqerNUYYhTY+HCVn0puq2Am73/q8DUNi6g9TYKcoNkhzyfr hwtDfo++IZ48Fw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:02 2026 by rpki-client