This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft File: aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json) Hash identifier: O2YaCsLcmATvIoGsSQ5j51093dsWC6+55EbcJOixLtg= Subject key identifier: B1:6E:A1:50:3D:F7:6F:41:CA:A7:D4:D3:F8:E1:AD:8B:81:4C:AB:B3 Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77 Certificate issuer: /CN=69a51d445b767ab9b6627702e4a2b3904d203f77 Certificate serial: 019BF72CFFA368B26368FCC137D9D2A2D07D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft Manifest number: 177B Signing time: Sun 25 Jan 2026 22:01:19 +0000 Manifest this update: Sun 25 Jan 2026 22:01:19 +0000 Manifest next update: Mon 26 Jan 2026 22:01:19 +0000 Files and hashes: 1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: mxQjo2OaH6OrEu9skLKfELBC6IwGhninMQga1ZTMroc=) 2: hEk7NXMz_9tjphRF_f-2BiYVxl4.roa (hash: YzdcSrHbAL6AdxaXBrwECMdGtQJ8+zIyV5HDkXK31kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:ff:a3:68:b2:63:68:fc:c1:37:d9:d2:a2:d0:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77 Validity Not Before: Jan 25 22:01:19 2026 GMT Not After : Jan 26 22:01:19 2026 GMT Subject: CN=b16ea1503df76f41caa7d4d3f8e1ad8b814cabb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7e:ba:57:10:82:29:bb:ee:5f:38:86:2e:88: ba:80:28:e5:c6:ed:68:a2:04:f2:2b:4e:ed:b1:e1: 69:93:38:e2:d0:47:e6:41:88:46:f5:c6:17:fe:45: 03:71:49:da:4a:4e:54:90:1d:3d:be:25:c3:71:9e: b9:48:ff:8a:e4:39:6e:ee:09:3e:2d:db:06:2a:f2: cf:8a:7a:0b:8a:8b:fc:9a:29:4d:10:df:16:25:e7: 2b:d8:23:a3:c5:b1:b3:b3:a3:a0:62:f5:5b:16:5c: e6:71:12:a2:ee:4e:6a:76:5a:b7:fa:48:8b:cf:0b: 6b:1a:36:14:45:16:11:fb:e7:d8:cc:eb:89:8f:5d: 80:89:5b:1a:b8:f7:42:06:82:12:69:1e:2a:8c:39: 81:fe:ec:bb:7b:53:4c:25:3b:18:00:7a:fe:38:3b: 29:99:94:dc:2c:76:4e:99:dd:e9:e1:1f:3f:bf:e6: 9d:ca:6f:d4:6e:72:e6:e8:88:ab:5b:a9:fd:8f:c5: 37:71:67:7d:62:d6:05:7e:a7:9d:2f:18:e3:3b:c1: 31:23:46:a9:46:c3:8b:02:c0:57:52:ed:41:bd:51: be:c4:17:9c:42:99:6a:a7:ef:fa:d7:a8:c0:ea:01: 38:fc:4a:2f:7f:c1:1c:cb:a6:2e:ed:b8:15:49:2c: 50:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6E:A1:50:3D:F7:6F:41:CA:A7:D4:D3:F8:E1:AD:8B:81:4C:AB:B3 X509v3 Authority Key Identifier: keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e3:2b:4a:d1:d0:27:40:26:ff:9f:3f:6d:7a:d4:4e:dd:c5: 19:c7:56:56:cb:f5:76:83:b4:6d:89:50:4b:23:91:2d:45:f4: 05:b4:fb:7e:ce:f0:2a:2c:0b:51:04:b3:e8:0e:5d:21:d0:de: 16:7b:52:71:4f:fd:ae:2c:f0:6f:24:95:2d:fc:43:22:3a:aa: 00:cb:e6:23:cb:ba:37:d4:86:a0:f4:63:28:ce:32:8f:f3:b7: bf:42:48:35:e3:92:5f:2d:70:20:79:95:88:71:bc:b4:fd:bd: 0f:32:86:65:e5:80:b7:f0:7c:27:cb:a3:0f:17:8f:3c:f3:d6: 41:8a:f7:9e:c3:0b:05:dc:a1:91:37:79:00:12:cd:6a:90:0e: 58:52:bb:0c:4c:87:98:28:47:ad:cd:f0:34:ff:db:af:ca:8b: 15:3d:aa:06:20:13:f9:65:91:6c:42:9a:e2:60:cc:99:ba:05: 59:c9:b5:e4:43:f0:8c:7d:01:44:f8:98:e1:2b:49:da:94:7f: 36:19:ba:50:7c:13:ea:02:44:ff:5c:99:5e:c3:1d:a9:f4:cf: 89:f4:db:a4:25:32:1f:a5:57:48:9d:9d:b2:e1:1c:d2:6a:c2: 70:ed:05:56:f2:db:0b:45:e3:20:8a:45:d1:5a:a6:a6:ce:23: 29:1b:4c:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LP+jaLJjaPzBN9nSotB9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YTUxZDQ0NWI3NjdhYjliNjYyNzcwMmU0YTJiMzkwNGQy MDNmNzcwHhcNMjYwMTI1MjIwMTE5WhcNMjYwMTI2MjIwMTE5WjAzMTEwLwYDVQQD EyhiMTZlYTE1MDNkZjc2ZjQxY2FhN2Q0ZDNmOGUxYWQ4YjgxNGNhYmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH66VxCCKbvuXziGLoi6gCjlxu1o ogTyK07tseFpkzji0EfmQYhG9cYX/kUDcUnaSk5UkB09viXDcZ65SP+K5Dlu7gk+ LdsGKvLPinoLiov8milNEN8WJecr2COjxbGzs6OgYvVbFlzmcRKi7k5qdlq3+kiL zwtrGjYURRYR++fYzOuJj12AiVsauPdCBoISaR4qjDmB/uy7e1NMJTsYAHr+ODsp mZTcLHZOmd3p4R8/v+adym/UbnLm6IirW6n9j8U3cWd9YtYFfqedLxjjO8ExI0ap RsOLAsBXUu1BvVG+xBecQplqp+/616jA6gE4/Eovf8Ecy6Yu7bgVSSxQFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFuoVA9929ByqfU0/jhrYuBTKuzMB8GA1UdIwQY MBaAFGmlHURbdnq5tmJ3AuSis5BNID93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDkt NzA1MjBlYTc2MzY5LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8yYmE2NmUtNWIzZS00MWZlLThhMDktNzA1MjBlYTc2MzY5 LzEvYWFVZFJGdDJlcm0yWW5jQzVLS3prRTBnUDNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+MrStHQ J0Am/58/bXrUTt3FGcdWVsv1doO0bYlQSyORLUX0BbT7fs7wKiwLUQSz6A5dIdDe FntScU/9rizwbySVLfxDIjqqAMvmI8u6N9SGoPRjKM4yj/O3v0JINeOSXy1wIHmV iHG8tP29DzKGZeWAt/B8J8ujDxePPPPWQYr3nsMLBdyhkTd5ABLNapAOWFK7DEyH mChHrc3wNP/br8qLFT2qBiAT+WWRbEKa4mDMmboFWcm15EPwjH0BRPiY4StJ2pR/ Nhm6UHwT6gJE/1yZXsMdqfTPifTbpCUyH6VXSJ2dsuEc0mrCcO0FVvLbC0XjIIpF 0Vqmps4jKRtMzw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:24:03 2026 by rpki-client