This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft File: avqwkWjnzGa2Y8YWLVyNRUllzOI.mft (raw, json) Hash identifier: vpl3XNn35KqAnH2SBFA35ZjNSIA7ZUtE5B08LgMr5ZY= Subject key identifier: C0:90:CA:65:CE:DB:3A:67:9C:32:DF:4F:A6:4C:5F:66:84:45:ED:AF Authority key identifier: 6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2 Certificate issuer: /CN=6afab09168e7cc66b663c6162d5c8d454965cce2 Certificate serial: 019BF49963B8481B2CD05120DFDA0434CA4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 10:00:51 +0000 Manifest this update: Sun 25 Jan 2026 10:00:51 +0000 Manifest next update: Mon 26 Jan 2026 10:00:51 +0000 Files and hashes: 1: avqwkWjnzGa2Y8YWLVyNRUllzOI.crl (hash: uhrQfBmBWXrWC6DRy+974UxKZYANbSQ4s1gG/ZMp62M=) 2: hBPMfJjzisDLgAAy42OAPWTEtn4.roa (hash: 7+lbylCTdmTyru0tkrcTEDn3h1rEwAZ3WSEJuuLSstI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:63:b8:48:1b:2c:d0:51:20:df:da:04:34:ca:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6afab09168e7cc66b663c6162d5c8d454965cce2 Validity Not Before: Jan 25 10:00:51 2026 GMT Not After : Jan 26 10:00:51 2026 GMT Subject: CN=c090ca65cedb3a679c32df4fa64c5f668445edaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:53:03:72:97:66:f6:d3:82:68:78:2d:21:f6: 97:3d:39:53:d5:f1:0e:f8:b2:0e:5b:27:65:4a:9a: 8b:80:64:37:66:17:b0:46:8f:91:90:50:0a:93:41: b5:63:2f:0e:75:5e:42:ea:41:42:80:d7:e5:44:21: 99:d0:6c:cc:0d:66:68:ab:3c:13:ec:e2:7b:fb:26: f4:d9:f4:7d:a7:1d:cd:50:59:09:1c:44:93:ec:8f: ac:b0:05:00:16:04:f7:2c:33:28:43:95:61:3e:93: a6:54:cb:8b:49:a4:6e:34:e0:ba:1b:0e:13:a7:66: ea:5c:35:fa:e5:70:7d:2a:05:69:28:e6:65:66:08: bc:c6:6c:6b:df:74:8a:66:25:c4:82:bc:7d:5f:f1: be:cd:ae:3a:c3:17:4e:28:92:f4:a4:84:89:c9:d7: cc:c6:46:44:35:9b:0d:b2:9e:a5:64:23:70:72:0f: fc:57:43:48:39:be:fb:a1:82:f8:a3:bc:81:77:8d: fb:9b:8e:9d:15:43:50:a7:b4:b2:26:0d:17:8d:42: 2a:ee:2b:c2:1f:1d:cc:6b:b8:b2:f5:ed:49:18:64: 19:5c:54:9b:7e:6e:e8:a1:1a:26:de:dc:2f:f6:d1: f1:b7:4f:e1:26:50:3b:5d:c7:f3:16:4f:45:80:92: 46:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:90:CA:65:CE:DB:3A:67:9C:32:DF:4F:A6:4C:5F:66:84:45:ED:AF X509v3 Authority Key Identifier: keyid:6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ee:7b:49:ce:68:6a:9a:47:4b:3f:66:06:c1:27:7e:96:96:ea: b6:cc:da:cf:86:b8:88:5f:a7:bf:10:55:f5:db:47:7a:db:7f: 10:fc:89:0e:d5:c6:b0:31:77:ff:a5:6a:73:0c:00:ec:9d:02: 8d:9b:2e:2d:53:c1:4a:18:80:ef:1c:aa:8e:44:89:da:00:f6: ad:89:23:55:a8:58:08:54:4c:b6:72:8f:ea:c5:04:85:c1:fc: 06:6e:87:68:ec:1f:ce:49:22:73:9c:f2:2c:4b:96:d7:ad:fd: d7:e2:3c:72:ac:76:c9:fd:9c:ab:66:18:16:ae:c7:92:51:f3: 04:13:67:6d:7e:d6:1d:c1:a2:9e:3a:1c:d1:0f:8a:fd:1b:be: bd:37:9b:71:01:22:5d:e2:52:7f:8f:80:0f:8b:48:a2:f3:bb: 59:07:d8:57:ce:4a:a6:c2:61:71:be:a7:8f:72:88:1f:fb:00: 49:9e:98:94:1d:f0:b0:95:37:77:03:b9:d8:af:62:0f:b6:6a: 9d:87:9d:c4:39:b6:a1:37:9d:8e:75:e2:67:d1:29:b0:d7:2a: 14:ad:f8:a0:4b:4f:74:a1:9d:2a:b2:c8:0e:5f:cc:25:b1:8f: 53:28:c1:ac:11:db:88:41:b5:32:68:bb:32:44:88:b0:3c:be: 4c:bd:c1:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mWO4SBss0FEg39oENMpMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZmFiMDkxNjhlN2NjNjZiNjYzYzYxNjJkNWM4ZDQ1NDk2 NWNjZTIwHhcNMjYwMTI1MTAwMDUxWhcNMjYwMTI2MTAwMDUxWjAzMTEwLwYDVQQD EyhjMDkwY2E2NWNlZGIzYTY3OWMzMmRmNGZhNjRjNWY2Njg0NDVlZGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVMDcpdm9tOCaHgtIfaXPTlT1fEO +LIOWydlSpqLgGQ3ZhewRo+RkFAKk0G1Yy8OdV5C6kFCgNflRCGZ0GzMDWZoqzwT 7OJ7+yb02fR9px3NUFkJHEST7I+ssAUAFgT3LDMoQ5VhPpOmVMuLSaRuNOC6Gw4T p2bqXDX65XB9KgVpKOZlZgi8xmxr33SKZiXEgrx9X/G+za46wxdOKJL0pISJydfM xkZENZsNsp6lZCNwcg/8V0NIOb77oYL4o7yBd437m46dFUNQp7SyJg0XjUIq7ivC Hx3Ma7iy9e1JGGQZXFSbfm7ooRom3twv9tHxt0/hJlA7XcfzFk9FgJJGQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCQymXO2zpnnDLfT6ZMX2aERe2vMB8GA1UdIwQY MBaAFGr6sJFo58xmtmPGFi1cjUVJZcziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXZxd2tXam56R2EyWThZV0xWeU5SVWxsek9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9hYWZjYjItNDkxZC00YjgwLTkxNjgt NWYzMzgxYjA3MWRhLzEvYXZxd2tXam56R2EyWThZV0xWeU5SVWxsek9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9hYWZjYjItNDkxZC00YjgwLTkxNjgtNWYzMzgxYjA3MWRh LzEvYXZxd2tXam56R2EyWThZV0xWeU5SVWxsek9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7ntJzmhq mkdLP2YGwSd+lpbqtszaz4a4iF+nvxBV9dtHett/EPyJDtXGsDF3/6VqcwwA7J0C jZsuLVPBShiA7xyqjkSJ2gD2rYkjVahYCFRMtnKP6sUEhcH8Bm6HaOwfzkkic5zy LEuW16391+I8cqx2yf2cq2YYFq7HklHzBBNnbX7WHcGinjoc0Q+K/Ru+vTebcQEi XeJSf4+AD4tIovO7WQfYV85KpsJhcb6nj3KIH/sASZ6YlB3wsJU3dwO52K9iD7Zq nYedxDm2oTedjnXiZ9EpsNcqFK34oEtPdKGdKrLIDl/MJbGPUyjBrBHbiEG1Mmi7 MkSIsDy+TL3Bdw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:45:30 2026 by rpki-client