This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft File: AMxNUIjbceIYd32XbQqtxJjEbP0.mft (raw, json) Hash identifier: r3lGDR8OQOaJh20Rv1qWd67RqpCvelJuSBCp8aqzv8s= Subject key identifier: B0:88:FB:2C:CE:32:92:44:5B:1B:A8:59:61:04:76:3A:F0:80:41:53 Authority key identifier: 00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD Certificate issuer: /CN=00cc4d5088db71e218777d976d0aadc498c46cfd Certificate serial: 019BF6BEA01F0E349388373D87965E054E07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft Manifest number: 14EF Signing time: Sun 25 Jan 2026 20:00:46 +0000 Manifest this update: Sun 25 Jan 2026 20:00:46 +0000 Manifest next update: Mon 26 Jan 2026 20:00:46 +0000 Files and hashes: 1: AMxNUIjbceIYd32XbQqtxJjEbP0.crl (hash: yfyoJ3iH/D7ijEW/4/ycQqr+wpmUwxhZ2akSGtTN80w=) 2: Rhq1sSRTv0uhjPvLHpvW3CtDGlE.roa (hash: UX/Nini/8UeNEyL2NxKXe/jqFkFeqxqH/DiIg76RiTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:a0:1f:0e:34:93:88:37:3d:87:96:5e:05:4e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00cc4d5088db71e218777d976d0aadc498c46cfd Validity Not Before: Jan 25 20:00:46 2026 GMT Not After : Jan 26 20:00:46 2026 GMT Subject: CN=b088fb2cce3292445b1ba8596104763af0804153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:53:d2:8c:0e:c3:f1:85:27:b3:28:e8:bb:2a: 5f:e9:c0:73:9b:fa:4c:9b:0b:e4:d4:0b:2a:e9:c9: e8:7a:d6:d4:e9:57:27:93:e4:50:cc:45:fb:87:9a: a4:78:ed:76:34:b9:da:73:e8:13:11:38:dc:11:45: 84:c0:39:de:63:bd:a8:b1:97:aa:3a:8a:11:f2:dc: f9:ed:43:46:5e:a0:aa:9a:61:a2:1d:59:c2:67:e2: 03:91:15:1d:2a:d4:98:dc:46:87:f8:22:d7:92:b3: bb:9a:56:0e:69:4d:f0:52:cb:e6:25:45:08:92:dd: 3e:a9:86:9a:ac:d3:4a:48:90:b4:62:68:8b:73:c1: d6:3f:20:94:90:43:3f:c7:3d:75:a4:a1:6c:bb:7e: a2:15:5d:88:26:d4:1b:f8:63:50:8d:a7:55:d0:f9: f5:13:2f:ff:3c:fb:7f:46:31:86:9b:fe:25:9e:9f: 1f:26:e3:6a:6c:27:19:a9:f7:6d:96:9b:ce:af:92: 09:ba:73:d1:00:5d:3f:e4:ff:70:d8:5c:b9:70:ac: 74:94:c0:f5:ed:81:7e:2e:21:33:65:dd:56:3f:dc: f1:11:56:75:2a:4f:db:c1:7f:6c:e2:b9:eb:b4:de: 81:67:54:ab:8c:84:6b:e3:b9:d7:b6:ad:b9:6f:2b: bc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:88:FB:2C:CE:32:92:44:5B:1B:A8:59:61:04:76:3A:F0:80:41:53 X509v3 Authority Key Identifier: keyid:00:CC:4D:50:88:DB:71:E2:18:77:7D:97:6D:0A:AD:C4:98:C4:6C:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMxNUIjbceIYd32XbQqtxJjEbP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9c73ff-6642-4b33-b564-a2381c36c054/1/AMxNUIjbceIYd32XbQqtxJjEbP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ab:a1:a4:e4:6b:15:64:6e:4e:40:3f:13:cb:e3:8c:a5:5b: ae:6c:df:11:50:0d:f8:ba:8d:8a:a9:a5:f4:ef:71:53:d4:33: fd:4c:ff:da:21:5b:c2:0b:e5:ce:aa:85:62:f0:85:25:2b:9a: 7e:31:6c:3c:49:c3:1b:6a:4d:a2:24:f5:99:e8:c8:2e:dd:75: ed:1c:b8:6b:72:e3:a8:70:73:76:e3:bd:07:ba:0d:9b:6a:2c: 7b:05:39:16:d9:02:f3:6f:52:30:45:2b:56:45:ba:bd:98:6d: 05:56:b6:9d:13:1d:8a:67:8d:9b:90:0c:d2:e6:27:fa:4c:20: 58:a8:59:f5:a1:d9:cc:19:ec:c8:a1:b5:26:11:a2:1e:76:f4: 73:6c:1f:73:cd:74:af:b2:23:76:01:1e:d1:06:2e:17:b4:90: 19:5c:8e:83:65:bb:5c:cb:c5:0f:74:49:b5:e7:7d:86:41:e9: ba:e3:10:f2:c1:9d:7b:d6:05:ee:60:60:1c:1d:56:c6:2e:ab: e2:ac:15:55:c2:4a:8e:a8:5a:06:87:99:ee:ef:68:3d:7b:e3: 79:7d:94:b1:7e:1a:7c:d8:d2:e6:ab:9f:fe:59:89:ff:87:eb: e7:7c:ae:5c:85:4d:95:6f:55:d6:ea:12:6b:d9:c3:3a:02:4a: 3e:89:2b:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vqAfDjSTiDc9h5ZeBU4HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwY2M0ZDUwODhkYjcxZTIxODc3N2Q5NzZkMGFhZGM0OThj NDZjZmQwHhcNMjYwMTI1MjAwMDQ2WhcNMjYwMTI2MjAwMDQ2WjAzMTEwLwYDVQQD EyhiMDg4ZmIyY2NlMzI5MjQ0NWIxYmE4NTk2MTA0NzYzYWYwODA0MTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/FPSjA7D8YUnsyjouypf6cBzm/pM mwvk1Asq6cnoetbU6Vcnk+RQzEX7h5qkeO12NLnac+gTETjcEUWEwDneY72osZeq OooR8tz57UNGXqCqmmGiHVnCZ+IDkRUdKtSY3EaH+CLXkrO7mlYOaU3wUsvmJUUI kt0+qYaarNNKSJC0YmiLc8HWPyCUkEM/xz11pKFsu36iFV2IJtQb+GNQjadV0Pn1 Ey//PPt/RjGGm/4lnp8fJuNqbCcZqfdtlpvOr5IJunPRAF0/5P9w2Fy5cKx0lMD1 7YF+LiEzZd1WP9zxEVZ1Kk/bwX9s4rnrtN6BZ1SrjIRr47nXtq25byu80wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCI+yzOMpJEWxuoWWEEdjrwgEFTMB8GA1UdIwQY MBaAFADMTVCI23HiGHd9l20KrcSYxGz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85YzczZmYtNjY0Mi00YjMzLWI1NjQt YTIzODFjMzZjMDU0LzEvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi85YzczZmYtNjY0Mi00YjMzLWI1NjQtYTIzODFjMzZjMDU0 LzEvQU14TlVJamJjZUlZZDMyWGJRcXR4SmpFYlAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANKuhpORr FWRuTkA/E8vjjKVbrmzfEVAN+LqNiqml9O9xU9Qz/Uz/2iFbwgvlzqqFYvCFJSua fjFsPEnDG2pNoiT1mejILt117Ry4a3LjqHBzduO9B7oNm2osewU5FtkC829SMEUr VkW6vZhtBVa2nRMdimeNm5AM0uYn+kwgWKhZ9aHZzBnsyKG1JhGiHnb0c2wfc810 r7IjdgEe0QYuF7SQGVyOg2W7XMvFD3RJted9hkHpuuMQ8sGde9YF7mBgHB1Wxi6r 4qwVVcJKjqhaBoeZ7u9oPXvjeX2UsX4afNjS5quf/lmJ/4fr53yuXIVNlW9V1uoS a9nDOgJKPokr/Q== -----END CERTIFICATE-----Generated at Sun Jan 25 23:09:47 2026 by rpki-client