This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft File: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft (raw, json) Hash identifier: yQtYD/5Rr3MHy9xjLW77TthMSgnfK3V+W+s8KwQ+YkQ= Subject key identifier: 74:A8:55:5A:F7:1A:CE:E9:6B:DC:D9:55:A5:E2:1E:62:FE:6E:F2:BF Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C Certificate issuer: /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c Certificate serial: 019BF79ADE8BABAA9E16D585EC032BAC3596 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft Manifest number: 17EE Signing time: Mon 26 Jan 2026 00:01:20 +0000 Manifest this update: Mon 26 Jan 2026 00:01:20 +0000 Manifest next update: Tue 27 Jan 2026 00:01:20 +0000 Files and hashes: 1: RbQOKPPCGMpyM4K5C4AKNXpnbds.roa (hash: Gf2GIsuTgxftxzUXHkquqSxcD5pOA/yKwpoQBnJXO2Y=) 2: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl (hash: NVISy8rmTI/eAse3fFii/C2dRrY+AwpjXtOWOrGQL7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:de:8b:ab:aa:9e:16:d5:85:ec:03:2b:ac:35:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c Validity Not Before: Jan 26 00:01:20 2026 GMT Not After : Jan 27 00:01:20 2026 GMT Subject: CN=74a8555af71acee96bdcd955a5e21e62fe6ef2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7a:4d:37:9f:da:52:27:a4:2a:a4:b7:fe:60: 3b:a2:d2:4a:22:76:69:6a:7f:98:60:d0:bc:1d:46: f1:99:50:e3:62:9f:db:20:7f:fb:a6:a7:66:5e:be: fb:ba:cb:da:66:bd:9a:62:68:3b:ba:1a:d1:c2:1b: 54:b4:ec:e9:5c:64:e9:d6:6a:92:34:b3:d0:b7:38: d6:27:19:2e:fb:8f:e9:0f:a5:ab:79:86:ce:77:8e: d1:4f:4a:12:08:58:a4:8a:ef:4e:7b:91:d1:47:4c: 29:cd:b5:5c:e5:00:94:19:52:ad:ba:a7:c1:8c:70: 9b:2c:a4:1b:9f:12:96:5e:e0:25:bf:a0:44:12:60: fe:53:e4:78:d6:24:cf:ed:ba:ee:d8:83:b0:de:59: 0f:aa:d5:67:f3:54:bf:33:e3:65:50:36:a6:15:24: 77:e5:6e:0b:a5:c8:9d:8c:87:4c:fa:eb:6b:a0:7c: e8:27:71:ea:62:5b:49:40:2a:29:37:6f:0d:d4:7f: fa:7f:9f:2c:49:95:61:28:32:bb:b3:73:ab:4f:2e: 87:6a:a9:79:e6:0b:72:6e:a4:08:4f:0e:12:ef:bc: 88:23:bb:77:9e:5d:df:1b:25:77:d0:4d:0e:a9:af: d7:4b:d7:08:62:35:e8:04:a6:54:d4:64:5a:76:18: 7d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A8:55:5A:F7:1A:CE:E9:6B:DC:D9:55:A5:E2:1E:62:FE:6E:F2:BF X509v3 Authority Key Identifier: keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:a4:7f:ca:27:56:44:91:9b:be:38:cd:a1:c6:42:ee:b4:6e: ba:1f:70:b7:37:21:7d:a2:7c:b1:54:1d:64:bc:73:c5:73:10: ec:92:6a:e8:ba:c9:e7:60:92:65:f4:03:5b:1e:6f:47:1b:b8: 9f:cb:15:85:28:bd:ff:4b:45:8e:56:81:9c:dc:39:91:ab:2b: 0e:b1:88:aa:c6:0c:1b:2d:b0:2c:2f:8b:21:59:b8:86:32:0e: b1:a2:e5:9e:7b:5c:f9:6b:2a:0b:5f:cf:78:df:19:63:74:ef: c9:62:68:f3:ca:c4:35:63:46:b9:ae:16:fd:f8:79:ab:06:86: f1:b0:60:f9:e5:57:76:b0:70:88:be:8e:a7:82:06:5d:f0:58: f2:1c:2d:a7:56:35:c1:cc:d8:06:d4:18:86:62:7b:50:b9:c6: ec:ed:2b:b8:42:05:8e:0c:b6:6a:9f:42:3b:e8:37:de:fb:40: f4:3a:6a:aa:44:af:d9:43:f5:1f:55:79:de:2e:0d:4d:ad:28: d0:10:1f:f5:ed:5a:c5:74:e7:43:bf:c3:98:55:d0:c9:ab:37: 18:c8:6e:e4:44:c2:ba:f0:e1:26:cc:05:40:93:5f:da:4b:0d: d5:29:15:00:d8:21:49:0a:89:65:c5:2b:2e:01:21:7e:40:d2: 6d:4d:84:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mt6Lq6qeFtWF7AMrrDWWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMGVjZGJmNTEzNjBjZWNhZTYxN2FiZTFhM2FjNmE2ZmYw YTViNmMwHhcNMjYwMTI2MDAwMTIwWhcNMjYwMTI3MDAwMTIwWjAzMTEwLwYDVQQD Eyg3NGE4NTU1YWY3MWFjZWU5NmJkY2Q5NTVhNWUyMWU2MmZlNmVmMmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnpNN5/aUiekKqS3/mA7otJKInZp an+YYNC8HUbxmVDjYp/bIH/7pqdmXr77usvaZr2aYmg7uhrRwhtUtOzpXGTp1mqS NLPQtzjWJxku+4/pD6WreYbOd47RT0oSCFikiu9Oe5HRR0wpzbVc5QCUGVKtuqfB jHCbLKQbnxKWXuAlv6BEEmD+U+R41iTP7bru2IOw3lkPqtVn81S/M+NlUDamFSR3 5W4LpcidjIdM+utroHzoJ3HqYltJQCopN28N1H/6f58sSZVhKDK7s3OrTy6Haql5 5gtybqQITw4S77yII7t3nl3fGyV30E0Oqa/XS9cIYjXoBKZU1GRadhh9owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSoVVr3Gs7pa9zZVaXiHmL+bvK/MB8GA1UdIwQY MBaAFGsOzb9RNgzsrmF6vho6xqb/CltsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xYWNiMGMtMzFhMy00NzE4LTk5M2Qt MTFkZmZlMTA4MTQ3LzEvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xYWNiMGMtMzFhMy00NzE4LTk5M2QtMTFkZmZlMTA4MTQ3 LzEvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3aR/yidW RJGbvjjNocZC7rRuuh9wtzchfaJ8sVQdZLxzxXMQ7JJq6LrJ52CSZfQDWx5vRxu4 n8sVhSi9/0tFjlaBnNw5kasrDrGIqsYMGy2wLC+LIVm4hjIOsaLlnntc+WsqC1/P eN8ZY3TvyWJo88rENWNGua4W/fh5qwaG8bBg+eVXdrBwiL6Op4IGXfBY8hwtp1Y1 wczYBtQYhmJ7ULnG7O0ruEIFjgy2ap9CO+g33vtA9DpqqkSv2UP1H1V53i4NTa0o 0BAf9e1axXTnQ7/DmFXQyas3GMhu5ETCuvDhJswFQJNf2ksN1SkVANghSQqJZcUr LgEhfkDSbU2ElA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:27:38 2026 by rpki-client