This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft File: AFSIJAGwckhkqMzLrq_kLIUkBFY.mft (raw, json) Hash identifier: c6GphZmn0tA7t7GrP5bi0ivIfxEtaIFEdvZZYfEU76Y= Subject key identifier: F9:5F:46:E0:4B:7F:EF:B9:3B:6F:75:75:E1:A4:34:6A:4B:59:FA:99 Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56 Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456 Certificate serial: 019BF6509B6A0BB94D810609AE1832CA3A13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 18:00:36 +0000 Manifest this update: Sun 25 Jan 2026 18:00:36 +0000 Manifest next update: Mon 26 Jan 2026 18:00:36 +0000 Files and hashes: 1: AFSIJAGwckhkqMzLrq_kLIUkBFY.crl (hash: ZtgS3sRvSOhNdSckzx5Cj3xDfGcaBzA9d1/ZYvtipJQ=) 2: NcBIwWrVfFqKGC-Ejlu0skUAVME.roa (hash: QpyQXhGs4Yf3p6aesaO1I7bW/lGukmfPe/wqoZKA1Vg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:9b:6a:0b:b9:4d:81:06:09:ae:18:32:ca:3a:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456 Validity Not Before: Jan 25 18:00:36 2026 GMT Not After : Jan 26 18:00:36 2026 GMT Subject: CN=f95f46e04b7fefb93b6f7575e1a4346a4b59fa99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:12:03:2e:e1:d5:a3:e0:ec:08:0a:91:84: b1:ca:14:bd:18:c5:54:45:1d:78:a5:cf:7a:62:d5: 55:a4:3e:0e:bf:18:7e:5f:d8:ee:da:92:7c:4c:12: ca:62:76:82:db:0a:91:bc:db:94:c8:4b:04:5c:93: 6e:45:55:6d:60:62:dc:87:eb:2e:62:0c:9b:43:5d: 07:02:b4:0b:70:de:16:64:ec:93:3c:92:70:03:ec: b1:07:2e:fe:8e:cf:f4:f5:a4:da:b4:b8:1d:7e:4a: 58:05:56:6b:0b:a4:6a:08:52:db:87:a2:6c:6a:4e: d2:bc:ec:ef:38:21:15:77:4a:09:c5:5b:36:ea:d2: 4c:6d:56:7a:8d:46:62:2a:1d:27:37:32:93:ea:9e: 86:54:1c:3b:81:c8:f2:21:96:bb:39:f3:8a:7f:b9: f9:db:bc:6b:68:10:de:aa:ce:26:76:43:0d:50:81: ee:66:7d:4e:e9:d2:07:53:ac:22:e9:4d:9c:26:3f: 32:db:16:8c:ea:3f:6f:07:b0:08:22:dd:96:77:d9: 49:ba:fa:a6:c3:62:ee:9e:21:15:83:b6:fe:2f:c7: b8:cc:fe:58:b3:63:d6:e8:3c:d8:b0:7b:5c:82:fa: 6f:d3:0a:b4:af:b0:10:f9:4d:90:00:42:fc:62:a0: 53:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:5F:46:E0:4B:7F:EF:B9:3B:6F:75:75:E1:A4:34:6A:4B:59:FA:99 X509v3 Authority Key Identifier: keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:d6:0f:97:9d:da:d0:38:36:57:e3:df:24:48:ca:4f:2a:6e: 92:72:9d:3e:54:36:af:82:f2:b2:75:09:2e:48:91:fd:19:68: d0:99:34:c4:eb:7f:a8:37:d1:29:38:24:ec:46:03:bc:80:07: c9:0e:ef:05:d9:1b:7d:a5:ff:8b:e0:62:21:64:59:1b:7e:5c: f7:46:4b:23:41:e6:d3:7c:19:2d:76:45:8c:ab:69:83:e1:84: 57:15:4e:c2:4c:9e:30:87:9e:76:b4:91:f9:97:d9:21:06:98: ba:e8:73:c3:a3:6a:3c:9b:1c:3d:04:32:46:29:30:0c:53:31: 8a:93:44:a9:db:7a:63:4c:1d:46:ae:ea:28:ae:6b:c7:86:83: ee:4f:bf:0f:be:32:61:ea:cd:d7:74:58:6f:10:90:05:99:16: 0e:c0:fb:f5:28:79:cd:a8:42:99:01:e3:0f:9e:83:c4:e8:67: cc:6b:a6:d3:dc:77:87:50:ad:38:2b:1e:c1:01:01:ef:c7:d8: 06:ff:5e:3e:b0:84:f5:bf:a7:f5:4c:2c:31:86:6a:e4:a4:64: 8e:b6:ad:ef:ab:c0:d6:dc:12:79:a0:1f:d5:22:01:81:8b:5f: 54:51:e5:71:2b:d8:17:e6:96:0c:28:c7:2f:88:da:ce:25:fd: 1b:16:d6:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UJtqC7lNgQYJrhgyyjoTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNTQ4ODI0MDFiMDcyNDg2NGE4Y2NjYmFlYWZlNDJjODUy NDA0NTYwHhcNMjYwMTI1MTgwMDM2WhcNMjYwMTI2MTgwMDM2WjAzMTEwLwYDVQQD EyhmOTVmNDZlMDRiN2ZlZmI5M2I2Zjc1NzVlMWE0MzQ2YTRiNTlmYTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyoSAy7h1aPg7AgKkYSxyhS9GMVU RR14pc96YtVVpD4Ovxh+X9ju2pJ8TBLKYnaC2wqRvNuUyEsEXJNuRVVtYGLch+su YgybQ10HArQLcN4WZOyTPJJwA+yxBy7+js/09aTatLgdfkpYBVZrC6RqCFLbh6Js ak7SvOzvOCEVd0oJxVs26tJMbVZ6jUZiKh0nNzKT6p6GVBw7gcjyIZa7OfOKf7n5 27xraBDeqs4mdkMNUIHuZn1O6dIHU6wi6U2cJj8y2xaM6j9vB7AIIt2Wd9lJuvqm w2LuniEVg7b+L8e4zP5Ys2PW6DzYsHtcgvpv0wq0r7AQ+U2QAEL8YqBTkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlfRuBLf++5O291deGkNGpLWfqZMB8GA1UdIwQY MBaAFABUiCQBsHJIZKjMy66v5CyFJARWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85NWZlNDQtYjAzOS00YzkzLWI5NzUt NDZlZTk5YTFlZTMwLzEvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85NWZlNDQtYjAzOS00YzkzLWI5NzUtNDZlZTk5YTFlZTMw LzEvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNYPl53a 0Dg2V+PfJEjKTypuknKdPlQ2r4LysnUJLkiR/Rlo0Jk0xOt/qDfRKTgk7EYDvIAH yQ7vBdkbfaX/i+BiIWRZG35c90ZLI0Hm03wZLXZFjKtpg+GEVxVOwkyeMIeedrSR +ZfZIQaYuuhzw6NqPJscPQQyRikwDFMxipNEqdt6Y0wdRq7qKK5rx4aD7k+/D74y YerN13RYbxCQBZkWDsD79Sh5zahCmQHjD56DxOhnzGum09x3h1CtOCsewQEB78fY Bv9ePrCE9b+n9UwsMYZq5KRkjrat76vA1twSeaAf1SIBgYtfVFHlcSvYF+aWDCjH L4jaziX9GxbWJQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:24 2026 by rpki-client