This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft File: ayuSHZprREq1jmbriPfBI5jqBLU.mft (raw, json) Hash identifier: X3DnjZBQBbQmj0DlzcIZKpTVUvDP5ILlLUaHJBvpI5Y= Subject key identifier: F5:6B:EA:CB:F5:D9:D0:F6:0E:3C:AE:CC:03:47:22:CA:73:31:81:15 Authority key identifier: 6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5 Certificate issuer: /CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5 Certificate serial: 019BF72CFF99B21CE1E579A5E73959D60E78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft Manifest number: 02F7 Signing time: Sun 25 Jan 2026 22:01:19 +0000 Manifest this update: Sun 25 Jan 2026 22:01:19 +0000 Manifest next update: Mon 26 Jan 2026 22:01:19 +0000 Files and hashes: 1: E2O5g-3u7QFDSnqyhGOqtBMannc.roa (hash: LyXDleKJ3gZrrfu8ZQu1gqPieNpy6nIwJ9/Oz5vq8aE=) 2: ayuSHZprREq1jmbriPfBI5jqBLU.crl (hash: /vFQaVynGiGmd4rvoj/aKEWii3EBNaMV7RaKmufcpRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:ff:99:b2:1c:e1:e5:79:a5:e7:39:59:d6:0e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5 Validity Not Before: Jan 25 22:01:19 2026 GMT Not After : Jan 26 22:01:19 2026 GMT Subject: CN=f56beacbf5d9d0f60e3caecc034722ca73318115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c8:e4:f0:fe:ed:1d:e8:69:6a:20:02:6d:c2: e5:df:6b:ac:f0:eb:bb:d7:54:bf:57:8c:37:f0:55: d1:c8:82:39:c3:7a:d0:c4:3b:6b:bc:af:4c:39:28: 22:da:9d:a9:bd:18:e8:88:60:bb:70:d9:ff:2e:49: 2a:91:17:a5:aa:a5:13:55:d1:9d:14:5a:26:06:ef: 34:71:4b:e7:3a:5d:f9:a5:6b:22:4d:7c:73:0a:c8: 01:15:ee:f0:4e:f8:4e:12:65:0a:a6:ee:d4:c4:eb: 93:1a:77:7e:ec:0d:72:75:d2:7e:e8:02:d8:f9:47: 6e:d8:90:fe:5f:9f:ff:0c:6d:9c:18:4a:52:5b:55: 4b:b2:90:22:8d:c6:6a:33:ed:e2:f3:d4:e6:cb:9b: 94:5b:9d:3d:76:a5:8d:f7:b2:c8:3c:58:2a:78:58: 82:87:a6:92:57:2f:65:22:ec:28:b2:b1:a9:1e:e6: 21:0e:30:df:49:09:1b:96:a0:b4:34:73:ba:19:b7: aa:2f:9e:15:41:bb:6b:b7:d1:7e:a0:ee:d0:8b:af: 62:41:ec:88:2e:a9:ee:00:e4:66:51:fb:30:ce:0f: 1b:76:5f:e1:f6:68:dd:f0:85:c2:cb:00:3d:69:07: 44:ce:e6:b9:f3:a3:89:28:d5:a2:3f:ca:c1:bc:eb: e1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6B:EA:CB:F5:D9:D0:F6:0E:3C:AE:CC:03:47:22:CA:73:31:81:15 X509v3 Authority Key Identifier: keyid:6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:3f:c2:d3:06:1e:02:e4:ae:57:5d:03:a4:5d:bc:40:db:9b: 2a:7a:a7:0e:36:37:43:8e:8d:ee:77:2c:36:08:f2:87:ad:da: c5:75:da:cc:3a:36:48:97:5b:27:18:9d:b9:15:a2:90:e1:44: 5b:aa:84:59:d8:40:7b:98:aa:4e:3d:9e:e7:ce:cb:69:aa:69: ea:9f:93:32:24:ac:67:05:ec:b7:f0:b5:41:72:12:ff:01:9e: 65:2f:16:08:06:6d:b3:6f:63:76:84:3b:a2:c8:ad:b0:30:b0: 3f:38:6f:21:eb:95:bd:5a:ee:65:b7:68:39:ed:c1:7d:e0:9a: 78:ea:44:ad:f9:2a:be:4d:20:8e:83:f4:b8:13:41:fe:9f:af: 45:85:ec:32:f2:af:aa:46:57:b9:9d:48:54:02:b7:ea:4a:ec: 27:8e:f9:e2:84:97:3b:15:b1:da:1a:f9:ba:b1:de:1b:14:74: 32:51:90:c2:88:87:61:6a:bc:c6:dd:00:5b:85:e4:48:56:ce: 5b:fc:c2:e2:50:c6:7a:44:f3:e1:b0:7f:a3:cb:a0:4e:12:4e: e4:d0:23:97:61:56:bb:dd:47:f8:35:da:ea:d8:88:87:ab:1e: fe:6e:2e:67:68:cb:73:b9:18:66:23:f7:72:6e:40:14:57:9f: d4:b2:c6:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LP+Zshzh5Xml5zlZ1g54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMmI5MjFkOWE2YjQ0NGFiNThlNjZlYjg4ZjdjMTIzOThl YTA0YjUwHhcNMjYwMTI1MjIwMTE5WhcNMjYwMTI2MjIwMTE5WjAzMTEwLwYDVQQD EyhmNTZiZWFjYmY1ZDlkMGY2MGUzY2FlY2MwMzQ3MjJjYTczMzE4MTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicjk8P7tHehpaiACbcLl32us8Ou7 11S/V4w38FXRyII5w3rQxDtrvK9MOSgi2p2pvRjoiGC7cNn/LkkqkRelqqUTVdGd FFomBu80cUvnOl35pWsiTXxzCsgBFe7wTvhOEmUKpu7UxOuTGnd+7A1yddJ+6ALY +Udu2JD+X5//DG2cGEpSW1VLspAijcZqM+3i89Tmy5uUW509dqWN97LIPFgqeFiC h6aSVy9lIuwosrGpHuYhDjDfSQkblqC0NHO6GbeqL54VQbtrt9F+oO7Qi69iQeyI LqnuAORmUfswzg8bdl/h9mjd8IXCywA9aQdEzua586OJKNWiP8rBvOvhewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVr6sv12dD2DjyuzANHIspzMYEVMB8GA1UdIwQY MBaAFGsrkh2aa0RKtY5m64j3wSOY6gS1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXl1U0hacHJSRXExam1icmlQZkJJNWpxQkxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iNjIzYTktZjRlMS00ZWMyLWJlNGQt OWI1NTk1MjlhZDE2LzEvYXl1U0hacHJSRXExam1icmlQZkJJNWpxQkxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9iNjIzYTktZjRlMS00ZWMyLWJlNGQtOWI1NTk1MjlhZDE2 LzEvYXl1U0hacHJSRXExam1icmlQZkJJNWpxQkxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApj/C0wYe AuSuV10DpF28QNubKnqnDjY3Q46N7ncsNgjyh63axXXazDo2SJdbJxiduRWikOFE W6qEWdhAe5iqTj2e587Laapp6p+TMiSsZwXst/C1QXIS/wGeZS8WCAZts29jdoQ7 ositsDCwPzhvIeuVvVruZbdoOe3BfeCaeOpErfkqvk0gjoP0uBNB/p+vRYXsMvKv qkZXuZ1IVAK36krsJ4754oSXOxWx2hr5urHeGxR0MlGQwoiHYWq8xt0AW4XkSFbO W/zC4lDGekTz4bB/o8ugThJO5NAjl2FWu91H+DXa6tiIh6se/m4uZ2jLc7kYZiP3 cm5AFFef1LLGcQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:19:28 2026 by rpki-client