This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft File: aZbfqRr5HsxjhBKLGMUDoywoNxM.mft (raw, json) Hash identifier: kjIIdwBCMCJOUOGUSqCpHoZRhFY8r7Bbd/0ZzWZrKsQ= Subject key identifier: 37:E7:0E:AC:F2:05:69:4D:57:8A:88:CB:6B:75:F7:E5:1D:8D:4B:35 Authority key identifier: 69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13 Certificate issuer: /CN=6996dfa91af91ecc6384128b18c503a32c283713 Certificate serial: 019BF38712ED0123EB94AB470EBAAA03FE6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft Manifest number: 82 Signing time: Sun 25 Jan 2026 05:01:14 +0000 Manifest this update: Sun 25 Jan 2026 05:01:14 +0000 Manifest next update: Mon 26 Jan 2026 05:01:14 +0000 Files and hashes: 1: Vyqhid55byeG8LolohKo-3zBV4k.roa (hash: 11dk3jNFxCUzgdfOzDadI8TnuPaxlnCKPPEDYhwIvBY=) 2: aZbfqRr5HsxjhBKLGMUDoywoNxM.crl (hash: 1aAASu2WD0hr32EK+E5WxCo1139dYVZ9qevcsjOxTAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:87:12:ed:01:23:eb:94:ab:47:0e:ba:aa:03:fe:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6996dfa91af91ecc6384128b18c503a32c283713 Validity Not Before: Jan 25 05:01:14 2026 GMT Not After : Jan 26 05:01:14 2026 GMT Subject: CN=37e70eacf205694d578a88cb6b75f7e51d8d4b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2e:fa:a4:f2:e3:1e:53:1e:4c:d3:2f:4d:b2: fa:ca:80:c1:97:57:5d:4e:3b:53:32:ba:99:f5:24: 09:ab:e3:d4:45:63:d1:4f:37:b4:c6:3b:bd:ea:37: 59:ef:db:cc:8d:24:bc:a2:b0:6f:8d:16:11:ba:03: fe:15:01:82:88:7e:e5:fc:68:45:6f:bd:61:a5:f9: 41:c5:16:fb:f4:7a:b5:9f:dd:44:56:27:72:ae:56: 4c:d6:d3:b0:70:da:94:98:42:46:fa:d7:94:2b:a8: 6f:77:e4:23:4a:92:24:a6:de:16:2d:0c:8b:39:09: 15:74:7f:8e:0c:10:15:9a:21:10:ab:3f:f5:a7:5d: 1a:dc:86:ee:19:20:ad:f2:70:04:80:43:33:d3:4c: c3:1d:45:1f:0f:f1:95:2c:a9:ae:82:02:5b:89:8a: e9:3b:94:e6:c2:63:0d:d3:d1:3f:63:88:c3:d6:e5: 00:91:a1:fc:47:b7:a0:de:9c:c2:20:c2:83:28:1a: 91:92:46:d4:16:4a:a2:fe:40:a2:bb:5f:30:26:bb: a9:73:93:49:29:6d:b6:87:06:6b:76:41:fb:30:02: b8:e4:31:42:47:a4:eb:bd:00:d8:81:e1:36:6e:50: 93:77:7c:71:52:5a:4a:55:e9:aa:84:1b:b8:d7:ed: e6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E7:0E:AC:F2:05:69:4D:57:8A:88:CB:6B:75:F7:E5:1D:8D:4B:35 X509v3 Authority Key Identifier: keyid:69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:5a:cc:75:06:ea:d8:0e:01:ac:58:cc:dd:ef:11:90:5e:05: 3f:67:f4:5c:a0:6b:a2:dd:91:95:af:07:4d:56:08:1a:53:85: e4:d9:49:da:8b:94:aa:9a:4b:7c:0b:eb:bb:54:c5:1f:be:be: 06:77:25:9b:84:05:f4:7e:06:ee:97:33:a5:54:fd:a7:4c:0b: 78:b8:87:dd:77:38:ae:c0:71:8f:be:29:17:87:0c:9d:81:65: 57:15:d7:e7:11:ff:2d:52:38:2b:cb:13:27:c3:da:e7:0d:bd: 00:0a:09:e7:09:9d:56:69:6a:b0:98:2f:4a:84:f2:d7:b9:fc: 02:84:e7:2d:1a:25:78:b0:2a:06:a0:a7:c3:7e:54:c2:1b:8b: 54:b3:3a:66:33:7c:c0:25:24:50:c9:5a:3e:b6:80:88:8e:66: c6:90:46:26:de:5f:f1:da:88:66:65:03:ae:a8:c0:8a:63:e4: d2:44:a6:48:8e:b4:c4:58:72:2e:1e:f2:48:bd:9f:fa:c4:1d: 18:5e:f9:dc:49:77:8d:32:26:1f:02:17:ae:52:34:34:82:07: 46:6f:94:9c:b5:85:11:63:5c:45:25:97:f0:43:5e:80:8b:e9: 67:b0:ee:03:6a:49:89:e3:eb:b3:52:67:95:8e:39:ec:80:8b: d0:c2:51:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhxLtASPrlKtHDrqqA/5rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTZkZmE5MWFmOTFlY2M2Mzg0MTI4YjE4YzUwM2EzMmMy ODM3MTMwHhcNMjYwMTI1MDUwMTE0WhcNMjYwMTI2MDUwMTE0WjAzMTEwLwYDVQQD EygzN2U3MGVhY2YyMDU2OTRkNTc4YTg4Y2I2Yjc1ZjdlNTFkOGQ0YjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS76pPLjHlMeTNMvTbL6yoDBl1dd TjtTMrqZ9SQJq+PURWPRTze0xju96jdZ79vMjSS8orBvjRYRugP+FQGCiH7l/GhF b71hpflBxRb79Hq1n91EVidyrlZM1tOwcNqUmEJG+teUK6hvd+QjSpIkpt4WLQyL OQkVdH+ODBAVmiEQqz/1p10a3IbuGSCt8nAEgEMz00zDHUUfD/GVLKmuggJbiYrp O5TmwmMN09E/Y4jD1uUAkaH8R7eg3pzCIMKDKBqRkkbUFkqi/kCiu18wJrupc5NJ KW22hwZrdkH7MAK45DFCR6TrvQDYgeE2blCTd3xxUlpKVemqhBu41+3mgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfnDqzyBWlNV4qIy2t19+UdjUs1MB8GA1UdIwQY MBaAFGmW36ka+R7MY4QSixjFA6MsKDcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpiZnFScjVIc3hqaEJLTEdNVURveXdvTnhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ODRmNzQtZTgzZi00NWI2LWFhMzIt OGFkM2MwZDExNTY1LzEvYVpiZnFScjVIc3hqaEJLTEdNVURveXdvTnhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82ODRmNzQtZTgzZi00NWI2LWFhMzItOGFkM2MwZDExNTY1 LzEvYVpiZnFScjVIc3hqaEJLTEdNVURveXdvTnhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFrMdQbq 2A4BrFjM3e8RkF4FP2f0XKBrot2Rla8HTVYIGlOF5NlJ2ouUqppLfAvru1TFH76+ Bnclm4QF9H4G7pczpVT9p0wLeLiH3Xc4rsBxj74pF4cMnYFlVxXX5xH/LVI4K8sT J8Pa5w29AAoJ5wmdVmlqsJgvSoTy17n8AoTnLRoleLAqBqCnw35UwhuLVLM6ZjN8 wCUkUMlaPraAiI5mxpBGJt5f8dqIZmUDrqjAimPk0kSmSI60xFhyLh7ySL2f+sQd GF753El3jTImHwIXrlI0NIIHRm+UnLWFEWNcRSWX8ENegIvpZ7DuA2pJiePrs1Jn lY457ICL0MJRkQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:33:01 2026 by rpki-client