This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft File: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json) Hash identifier: lI8efeatluCmQFe6+h04Osmjdjs7l8OET124AXOsLfM= Subject key identifier: 3B:14:3C:D8:8D:BD:D6:C9:19:02:92:9D:57:44:F5:E2:83:88:0C:7B Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce Certificate serial: 019BF72CA0A891FF44E1942028E36A92ED1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 22:00:55 +0000 Manifest this update: Sun 25 Jan 2026 22:00:55 +0000 Manifest next update: Mon 26 Jan 2026 22:00:55 +0000 Files and hashes: 1: 3wUwuQwTXV5aCQTU82rWSfa5LEM.roa (hash: ZLeq9/wF1aUOdaHthHWe1UDHIfSGZmqtBr5YatoHrhk=) 2: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: TZCGGGWLCGWKedpZEBrTuSvt+/oBCwCMhCFp3fKgDmM=) 3: t4a_vp8lFfYuPnrFd74HGQFrjpA.roa (hash: 1yVWZO4hYvbD4qGSevogaiCjdCYYHYrdz/g3xPGLVFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:a0:a8:91:ff:44:e1:94:20:28:e3:6a:92:ed:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce Validity Not Before: Jan 25 22:00:55 2026 GMT Not After : Jan 26 22:00:55 2026 GMT Subject: CN=3b143cd88dbdd6c91902929d5744f5e283880c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:71:0b:2d:42:d9:c3:92:7d:cb:ed:ba:0f:11: 7f:41:89:ed:cd:c7:b8:48:07:d1:7d:6d:40:80:e7: b9:5b:24:62:58:35:4c:e1:4e:a3:b3:8b:69:ae:f6: af:a9:be:57:e8:bb:e9:ad:3e:82:74:b2:4c:b7:67: 8e:39:49:1c:dc:e1:98:a5:57:e7:81:79:fd:23:23: d5:db:e2:dc:cc:c9:91:18:e6:d9:d5:71:fb:43:d6: 85:ae:1b:f0:54:89:19:b7:55:5c:9a:81:0c:11:fb: c7:f2:97:a6:9e:56:44:ae:57:0d:a4:bf:02:a6:0e: 99:39:28:76:31:55:4f:38:ed:38:c1:16:09:5e:30: d3:52:f7:93:61:63:ff:e6:d2:c1:0c:28:a7:56:35: 26:5a:2c:06:b8:f8:cf:d0:f3:63:d1:7c:2d:25:55: cb:87:92:b0:78:ae:fe:21:98:bf:60:ff:41:0c:85: 42:a7:68:b4:f0:86:98:fb:d0:7c:de:d4:46:65:d9: 20:70:e1:e2:9c:cb:7f:71:3c:d8:e3:f9:e0:52:4d: 58:2f:f8:7d:39:44:0d:07:fe:98:ca:1f:ac:d2:5b: 51:c2:74:dd:8f:32:fd:7b:fb:0b:1b:48:bc:d5:0f: 9f:23:b3:26:d7:53:47:42:74:75:10:4e:58:d0:25: 3b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:14:3C:D8:8D:BD:D6:C9:19:02:92:9D:57:44:F5:E2:83:88:0C:7B X509v3 Authority Key Identifier: keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:9c:87:09:7a:04:34:22:e5:27:a9:aa:04:84:83:ff:0c:fd: 86:d9:6b:80:f9:ad:b9:3d:72:88:1f:8f:f2:0e:df:d8:49:4d: d6:41:fd:a7:cd:1d:fc:00:f7:93:bb:68:4a:78:b7:1b:fc:9e: 48:20:48:25:d0:a1:35:71:80:8f:90:88:c7:f1:57:13:aa:ac: f0:05:10:f7:ee:91:28:55:07:a2:b0:b5:86:b5:b1:35:a2:83: f2:0c:2e:f0:ae:58:40:98:ee:2c:a4:7f:5b:09:88:6a:a3:08: a6:86:b9:f5:04:df:7a:71:bf:ab:24:b3:07:4d:37:8e:ae:f9: 08:ef:ff:4b:2b:73:e3:c6:90:ac:80:6d:15:a5:a3:7f:b8:d8: 3a:fd:f0:99:13:ab:06:0f:41:bd:a0:a7:be:18:74:39:6c:da: bb:6a:8b:2c:d9:bb:55:b5:18:cf:d8:c9:b8:97:da:4c:07:65: 7b:66:41:d7:2b:1d:57:f5:9e:1c:81:59:ff:d1:f4:35:8f:74: 2a:fd:f6:91:96:7c:b8:13:63:31:c4:68:a1:54:4f:c1:26:85: ab:a8:5f:db:91:a5:c2:fe:5c:9a:ed:24:4d:51:5c:5c:97:5f: 63:89:9a:b1:54:7b:85:6c:7e:d4:a5:cb:3d:95:ab:b1:28:14: 56:50:54:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LKCokf9E4ZQgKONqku0bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OWM1ODFhZmYzZDBhOTAxNzhjZmFiNTY1YTM4OGNjZDli YzAxY2UwHhcNMjYwMTI1MjIwMDU1WhcNMjYwMTI2MjIwMDU1WjAzMTEwLwYDVQQD EygzYjE0M2NkODhkYmRkNmM5MTkwMjkyOWQ1NzQ0ZjVlMjgzODgwYzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnELLULZw5J9y+26DxF/QYntzce4 SAfRfW1AgOe5WyRiWDVM4U6js4tprvavqb5X6LvprT6CdLJMt2eOOUkc3OGYpVfn gXn9IyPV2+LczMmRGObZ1XH7Q9aFrhvwVIkZt1VcmoEMEfvH8pemnlZErlcNpL8C pg6ZOSh2MVVPOO04wRYJXjDTUveTYWP/5tLBDCinVjUmWiwGuPjP0PNj0XwtJVXL h5KweK7+IZi/YP9BDIVCp2i08IaY+9B83tRGZdkgcOHinMt/cTzY4/ngUk1YL/h9 OUQNB/6Yyh+s0ltRwnTdjzL9e/sLG0i81Q+fI7Mm11NHQnR1EE5Y0CU7jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDsUPNiNvdbJGQKSnVdE9eKDiAx7MB8GA1UdIwQY MBaAFGmcWBr/PQqQF4z6tWWjiMzZvAHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVp4WUd2ODlDcEFYalBxMVphT0l6Tm04QWM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mYjlkNWUtYTYyOC00ZjIzLTg4YTUt ZTVkZGQyYmI1MWM1LzEvYVp4WUd2ODlDcEFYalBxMVphT0l6Tm04QWM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mYjlkNWUtYTYyOC00ZjIzLTg4YTUtZTVkZGQyYmI1MWM1 LzEvYVp4WUd2ODlDcEFYalBxMVphT0l6Tm04QWM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArpyHCXoE NCLlJ6mqBISD/wz9htlrgPmtuT1yiB+P8g7f2ElN1kH9p80d/AD3k7toSni3G/ye SCBIJdChNXGAj5CIx/FXE6qs8AUQ9+6RKFUHorC1hrWxNaKD8gwu8K5YQJjuLKR/ WwmIaqMIpoa59QTfenG/qySzB003jq75CO//Sytz48aQrIBtFaWjf7jYOv3wmROr Bg9BvaCnvhh0OWzau2qLLNm7VbUYz9jJuJfaTAdle2ZB1ysdV/WeHIFZ/9H0NY90 Kv32kZZ8uBNjMcRooVRPwSaFq6hf25Glwv5cmu0kTVFcXJdfY4masVR7hWx+1KXL PZWrsSgUVlBUiQ== -----END CERTIFICATE-----Generated at Mon Jan 26 08:00:38 2026 by rpki-client