This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json) Hash identifier: 2hQlUmcK67Cjmb4Xp7Iun9ts6d4dywsbTh2Cxaq+cH4= Subject key identifier: F5:B9:6B:B9:B7:7C:49:C9:60:6C:51:4A:AA:89:CE:6A:76:81:B7:94 Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13 Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113 Certificate serial: 019BF619CCA6710FC46C129CD2BE73EC3B0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft Manifest number: 09B3 Signing time: Sun 25 Jan 2026 17:00:44 +0000 Manifest this update: Sun 25 Jan 2026 17:00:44 +0000 Manifest next update: Mon 26 Jan 2026 17:00:44 +0000 Files and hashes: 1: JovM9qLDTSF0r7lJzUPHMrQ0xao.roa (hash: 4dqZ0F/L3AkzHbjIMXfFCC9fJDXHCJg315zdCzCaEj8=) 2: VkWKoCYJk1pWtkk-dy2jH6BJ6i8.roa (hash: eLNcMJS9zmG6fpcaCEV5Z2pweWkSp78ckb47RfVUzpc=) 3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: IPZcbshnFmmt51dAeEAVoLlnz0uOVT8kMQ2xjkH5I3s=) 4: xlt8n39Q7R1g_e7UkyAibvBbcF8.roa (hash: ftgA+Nk8I70LNZsiK4LFzKj5GyUztPEQG6JXnLUxej0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:cc:a6:71:0f:c4:6c:12:9c:d2:be:73:ec:3b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113 Validity Not Before: Jan 25 17:00:44 2026 GMT Not After : Jan 26 17:00:44 2026 GMT Subject: CN=f5b96bb9b77c49c9606c514aaa89ce6a7681b794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d2:20:67:8b:9e:2c:e6:31:e4:7a:24:2d:81: 36:8d:31:73:31:8d:cf:79:1c:c2:8f:55:2a:4f:c0: be:8f:42:af:32:e2:4d:d8:de:49:5c:b9:07:5b:d0: 40:89:89:2d:6b:d5:f5:c5:66:c9:24:ef:ab:36:d6: 0f:1b:8c:6e:fd:bd:8a:4c:70:1f:d2:37:bd:2b:ef: 35:b3:7e:86:25:58:33:2d:b8:50:d3:62:6e:b6:17: 3d:0d:1d:9a:c5:02:3d:30:01:bf:fe:0a:36:9e:9a: 9e:70:b0:2f:bc:31:6a:f6:ab:cc:f3:6d:b2:35:be: 1f:f7:c7:e4:31:0f:df:88:8d:8c:32:3b:74:8d:bc: d5:ea:0f:07:85:a5:84:11:d6:de:b3:7a:22:15:32: 99:bc:92:04:32:3a:c7:be:e8:a9:b4:6e:20:35:35: 9b:70:56:8c:a9:3d:74:b1:be:f5:46:ed:14:8c:f6: 42:11:e0:a6:d4:34:bc:d3:9e:7c:98:67:c9:30:83: f0:65:a3:9a:02:1e:ba:e2:00:11:a7:bd:3c:47:9d: ac:52:d3:08:f4:41:cf:5b:0b:31:0b:96:e8:74:d5: 41:d2:d4:4f:e2:f3:1b:8c:1a:ff:b6:26:f0:4c:b3: e3:56:56:ff:df:1d:e0:98:51:70:5f:31:07:1f:32: 70:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B9:6B:B9:B7:7C:49:C9:60:6C:51:4A:AA:89:CE:6A:76:81:B7:94 X509v3 Authority Key Identifier: keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:75:3e:bb:9e:65:f0:1c:29:f1:fd:fe:00:57:92:41:45:ff: f9:65:1d:ea:c0:0e:24:21:68:cc:60:8e:1e:a4:73:2e:26:53: 02:52:44:44:b9:82:6b:b3:e3:08:34:4f:4b:9d:f9:10:c7:ed: 8a:b0:20:2f:8d:4b:0c:bb:91:da:ca:7c:2a:0b:02:3d:ec:11: fe:c5:77:2f:dc:b7:a5:c1:7b:86:0d:21:df:b5:70:a0:7c:88: fc:4e:a2:28:5d:6c:56:b2:d9:ec:06:6e:ae:5c:ff:dc:ce:5d: ea:db:25:55:3f:64:dc:94:7f:52:19:d9:a9:fb:09:86:16:3c: ef:5a:17:ca:cc:1d:86:21:ea:92:df:d1:32:63:81:52:da:72: 54:0a:39:e8:da:e6:57:54:01:e5:e5:ad:8b:ec:c8:a7:39:2d: b1:5b:0d:f2:b9:c7:a2:3f:ca:e2:b5:ad:01:81:18:51:e8:9a: 6d:7c:0d:94:fd:cf:1d:42:20:46:c1:12:d7:93:81:5c:83:47: 74:ca:41:c8:79:50:01:a9:a6:a7:61:b8:66:88:fa:cf:36:e8: 29:d7:45:56:57:cd:61:e3:c5:ef:d3:bc:32:7a:c5:14:2e:fc: 43:4c:05:a0:a6:f6:de:2a:6e:0d:7a:e0:d1:1a:4e:b1:51:47: 75:9a:21:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GcymcQ/EbBKc0r5z7DsMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NjM3MDgxY2E3YzJlYmE0MTAxMGFiZWFhZDY0YTdjNjFm NmExMTMwHhcNMjYwMTI1MTcwMDQ0WhcNMjYwMTI2MTcwMDQ0WjAzMTEwLwYDVQQD EyhmNWI5NmJiOWI3N2M0OWM5NjA2YzUxNGFhYTg5Y2U2YTc2ODFiNzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNIgZ4ueLOYx5HokLYE2jTFzMY3P eRzCj1UqT8C+j0KvMuJN2N5JXLkHW9BAiYkta9X1xWbJJO+rNtYPG4xu/b2KTHAf 0je9K+81s36GJVgzLbhQ02Juthc9DR2axQI9MAG//go2npqecLAvvDFq9qvM822y Nb4f98fkMQ/fiI2MMjt0jbzV6g8HhaWEEdbes3oiFTKZvJIEMjrHvuiptG4gNTWb cFaMqT10sb71Ru0UjPZCEeCm1DS80558mGfJMIPwZaOaAh664gARp708R52sUtMI 9EHPWwsxC5bodNVB0tRP4vMbjBr/tibwTLPjVlb/3x3gmFFwXzEHHzJw+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPW5a7m3fEnJYGxRSqqJzmp2gbeUMB8GA1UdIwQY MBaAFGhjcIHKfC66QQEKvqrWSnxh9qETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2Et ZTY2NzllN2I3OTVhLzEvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2EtZTY2NzllN2I3OTVh LzEvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3U+u55l 8Bwp8f3+AFeSQUX/+WUd6sAOJCFozGCOHqRzLiZTAlJERLmCa7PjCDRPS535EMft irAgL41LDLuR2sp8KgsCPewR/sV3L9y3pcF7hg0h37VwoHyI/E6iKF1sVrLZ7AZu rlz/3M5d6tslVT9k3JR/UhnZqfsJhhY871oXyswdhiHqkt/RMmOBUtpyVAo56Nrm V1QB5eWti+zIpzktsVsN8rnHoj/K4rWtAYEYUeiabXwNlP3PHUIgRsES15OBXINH dMpByHlQAammp2G4Zoj6zzboKddFVlfNYePF79O8MnrFFC78Q0wFoKb23ipuDXrg 0RpOsVFHdZohhQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:08:31 2026 by rpki-client