This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft File: aXejEW7MnXpCnxNlFhPorRSf8yQ.mft (raw, json) Hash identifier: w+3xW+08ZrRqQP2LHotTK/AHrYzmRCHaXjNkz3nm1NE= Subject key identifier: 28:15:03:FB:45:BF:CC:87:C6:28:60:E8:06:90:93:49:30:77:E4:EA Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24 Certificate issuer: /CN=6977a3116ecc9d7a429f13651613e8ad149ff324 Certificate serial: 019BF87693F9B1BF77F4817C955F6351F64C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft Manifest number: 043B Signing time: Mon 26 Jan 2026 04:01:19 +0000 Manifest this update: Mon 26 Jan 2026 04:01:19 +0000 Manifest next update: Tue 27 Jan 2026 04:01:19 +0000 Files and hashes: 1: aXejEW7MnXpCnxNlFhPorRSf8yQ.crl (hash: 7kHKWmu8Ds0UnW0bxDkY53P2rw2jE5EiwE0nNVx58es=) 2: in7k9AsBx6NUh7nZ9FStJpwqNZg.roa (hash: yJqv69g4lr/AY0F4ca8NJpDHwd0prBk+i0+widUpdZY=) 3: ktSQWFwbI3FpGsTRyfTaMNFXl1s.roa (hash: zx3d6M9/eCKOvbINTMTpaKIin9u2fDnkb4axNDW8ebU=) 4: t6vcjb2H7PuOWUOpwo93r5z0oxI.roa (hash: 1GLmpuGcjJsniOe3fkdTrgkyiEByM7yt7fx1eGhJpyE=) 5: xdD8NQIISgmL_50DWggSpNqYxt0.roa (hash: bRThL8e+G01mdmKwHZooaTSEY26dPEyMkLWkAKNdxkM=) 6: yIFRoeWjck6xnKFGs8xoT0Cbvh4.roa (hash: DBST9YRixBf8rcw2+0ZbzwNRViwczCOARaNwqn1FCgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:93:f9:b1:bf:77:f4:81:7c:95:5f:63:51:f6:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324 Validity Not Before: Jan 26 04:01:19 2026 GMT Not After : Jan 27 04:01:19 2026 GMT Subject: CN=281503fb45bfcc87c62860e8069093493077e4ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d5:5c:21:90:18:3b:da:2a:48:0a:b4:ef:1b: 1e:2b:0d:93:1c:e7:cc:c4:f2:a6:1d:15:45:d9:1e: d7:0d:b3:76:ee:03:b4:f7:23:63:f2:40:34:a1:9c: 09:38:7c:dc:ea:bf:73:49:e3:37:2b:e3:87:bb:5d: 4e:f4:a3:52:fb:0f:8e:2d:5d:01:59:b4:6c:3b:a1: e5:54:c9:27:5c:d8:8b:3c:d7:cd:54:28:f4:4f:d6: 8b:a3:b4:69:15:67:33:87:f4:31:53:cd:4f:63:c5: 2e:f7:8c:29:ff:cf:a8:ea:9b:e5:cc:38:6d:b5:8c: 4f:a3:08:78:2b:0a:dd:28:23:27:e8:ea:7e:b1:5b: 59:af:05:3d:49:fc:4a:07:31:a5:6e:f1:13:8a:ba: 3f:36:91:5b:2d:2a:e5:f9:01:97:08:43:30:ba:fe: 5a:41:fe:fc:33:3b:fb:67:98:93:94:cf:73:d6:9f: 61:7b:cf:27:d1:de:32:f3:7d:89:02:e0:f1:02:f2: 96:f1:a0:ee:af:68:e1:c3:aa:0f:16:ec:a5:7b:5c: 98:af:3d:0c:92:d8:4d:1b:a6:af:bf:98:1b:c2:d4: b9:fa:4c:cb:54:30:1b:f1:6a:16:07:22:d5:53:c9: 2f:f6:08:66:82:1d:69:89:af:c4:68:82:ef:92:3c: c0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:15:03:FB:45:BF:CC:87:C6:28:60:E8:06:90:93:49:30:77:E4:EA X509v3 Authority Key Identifier: keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:65:c9:3c:70:a5:08:eb:6c:d7:1a:86:89:81:d8:38:ac:96: 1d:f7:8e:37:45:ec:bb:66:1a:14:e3:54:22:97:51:17:49:07: 2f:b1:c8:3c:0b:ed:92:60:cd:43:df:79:f5:3e:3d:7e:29:5c: 4f:eb:62:fc:df:a4:5b:28:fb:8e:f6:c5:3c:d2:88:e1:8d:f2: e7:ca:4a:bc:0a:09:33:c8:f8:ad:b3:97:70:1a:da:ca:ec:da: f2:3c:04:09:1b:5a:6d:ef:f2:77:79:c1:58:c7:5a:64:6e:75: bc:c6:09:7c:42:25:ab:92:f2:07:41:a7:a8:31:40:09:3d:9d: b1:92:3f:14:1e:e5:85:bd:b5:3e:5a:27:75:b9:ce:6e:43:30: 9a:5b:d8:aa:af:1f:00:c1:7c:9e:d0:fe:fb:9c:aa:c1:cf:49: 92:eb:21:78:dd:73:3c:04:9f:23:de:59:3d:2f:07:75:3d:0d: 73:d0:fc:6b:ee:ae:1a:04:6a:ab:43:2e:e6:d7:ab:9d:8c:4f: 1c:dd:ef:68:c7:91:2e:85:be:35:8c:70:6a:ba:6d:91:77:47: 70:e8:70:90:20:1b:87:fe:ad:1d:74:fb:83:60:84:c8:66:a3: 77:26:81:d3:d2:89:79:08:31:46:50:ad:47:34:c0:4a:73:53: e5:d3:42:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dpP5sb939IF8lV9jUfZMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NzdhMzExNmVjYzlkN2E0MjlmMTM2NTE2MTNlOGFkMTQ5 ZmYzMjQwHhcNMjYwMTI2MDQwMTE5WhcNMjYwMTI3MDQwMTE5WjAzMTEwLwYDVQQD EygyODE1MDNmYjQ1YmZjYzg3YzYyODYwZTgwNjkwOTM0OTMwNzdlNGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNVcIZAYO9oqSAq07xseKw2THOfM xPKmHRVF2R7XDbN27gO09yNj8kA0oZwJOHzc6r9zSeM3K+OHu11O9KNS+w+OLV0B WbRsO6HlVMknXNiLPNfNVCj0T9aLo7RpFWczh/QxU81PY8Uu94wp/8+o6pvlzDht tYxPowh4KwrdKCMn6Op+sVtZrwU9SfxKBzGlbvETiro/NpFbLSrl+QGXCEMwuv5a Qf78Mzv7Z5iTlM9z1p9he88n0d4y832JAuDxAvKW8aDur2jhw6oPFuyle1yYrz0M kthNG6avv5gbwtS5+kzLVDAb8WoWByLVU8kv9ghmgh1pia/EaILvkjzAIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgVA/tFv8yHxihg6AaQk0kwd+TqMB8GA1UdIwQY MBaAFGl3oxFuzJ16Qp8TZRYT6K0Un/MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85YzY2OTEtYWRhYy00MWU1LThjZTkt ZjRiN2IzOThjNjM0LzEvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85YzY2OTEtYWRhYy00MWU1LThjZTktZjRiN2IzOThjNjM0 LzEvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAomXJPHCl COts1xqGiYHYOKyWHfeON0Xsu2YaFONUIpdRF0kHL7HIPAvtkmDNQ9959T49filc T+ti/N+kWyj7jvbFPNKI4Y3y58pKvAoJM8j4rbOXcBrayuza8jwECRtabe/yd3nB WMdaZG51vMYJfEIlq5LyB0GnqDFACT2dsZI/FB7lhb21PlondbnObkMwmlvYqq8f AMF8ntD++5yqwc9JkusheN1zPASfI95ZPS8HdT0Nc9D8a+6uGgRqq0Mu5ternYxP HN3vaMeRLoW+NYxwarptkXdHcOhwkCAbh/6tHXT7g2CEyGajdyaB09KJeQgxRlCt RzTASnNT5dNCjw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:40:35 2026 by rpki-client