This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft File: aZ11B_muHIs_3kVDOu6Pz5haIfo.mft (raw, json) Hash identifier: i6cNhG0g89kR7fAPZeYb5mdQXIokjkQlvsWXrNPbsGU= Subject key identifier: 2A:97:81:1B:6E:07:8B:03:5A:C0:CD:13:2B:63:64:F5:F3:B4:FC:80 Authority key identifier: 69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA Certificate issuer: /CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa Certificate serial: 019BFAD2D7C4D3EE35E9D64073DCD8B72964 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft Manifest number: 1080 Signing time: Mon 26 Jan 2026 15:01:20 +0000 Manifest this update: Mon 26 Jan 2026 15:01:20 +0000 Manifest next update: Tue 27 Jan 2026 15:01:20 +0000 Files and hashes: 1: aZ11B_muHIs_3kVDOu6Pz5haIfo.crl (hash: 2pChuvRmAKBGQqgP9GxIEn3IQAppCck1w6iRD5W551s=) 2: uxIFoYaci_ec-DO8z0hezY7ktq4.asa (hash: SDJifCzUIO+4H118O2u0CQ5c1Yer68j64MbpD0n6+XE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:d2:d7:c4:d3:ee:35:e9:d6:40:73:dc:d8:b7:29:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa Validity Not Before: Jan 26 15:01:20 2026 GMT Not After : Jan 27 15:01:20 2026 GMT Subject: CN=2a97811b6e078b035ac0cd132b6364f5f3b4fc80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:e1:35:8f:c4:a9:c4:0c:09:28:6e:14:14: 73:0e:09:f4:e4:6f:60:55:f4:45:14:9b:db:74:a4: 8c:c0:8c:02:5f:7b:e3:72:d5:62:1c:0e:be:af:1e: 22:b1:f5:3f:94:ac:d5:ce:93:a9:89:fb:71:47:f4: 03:27:d8:30:23:eb:03:82:23:64:eb:b3:3e:e3:a7: c4:11:f4:bd:93:d8:fb:3c:d5:5d:e1:ea:20:cc:30: 7c:bf:84:89:71:53:a4:24:37:62:76:e4:ad:ae:3d: 23:82:33:e6:83:ca:83:aa:3b:05:6b:1b:9d:f3:5d: c1:40:30:0c:d7:3c:ae:f2:83:41:34:62:a8:6b:6a: 94:31:f5:e8:66:da:3d:d3:9f:bf:8a:99:62:91:0e: 7a:8c:cc:fa:0c:a3:b1:b5:77:3c:8b:0c:3d:66:bf: 73:dc:dc:19:fb:c2:33:2c:cb:3a:0f:e0:4a:03:56: d2:cd:7f:24:f3:22:d6:e6:1b:1b:a6:dd:fe:ba:2f: 15:e8:0a:7b:be:74:8e:c7:de:52:2c:5b:78:d8:78: 8d:2a:9e:33:06:93:ef:32:3b:1d:62:bc:c3:8d:fd: 29:84:18:e0:ba:86:7f:d5:b0:f6:33:e2:84:46:7d: cf:2c:80:47:76:9d:ae:84:92:5f:41:f1:c6:16:e2: d8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:97:81:1B:6E:07:8B:03:5A:C0:CD:13:2B:63:64:F5:F3:B4:FC:80 X509v3 Authority Key Identifier: keyid:69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:ef:0d:f5:41:81:71:f5:b5:2f:30:df:73:d8:76:1d:90:b9: a4:0f:0c:bd:c2:69:1b:53:bc:0c:b1:df:c3:be:c4:8d:4e:e6: c8:ba:0f:0b:dc:31:53:38:e6:bc:fe:16:ec:90:b2:c8:54:be: 95:7a:71:be:5c:96:66:f3:de:9a:5c:dc:01:e8:9b:b8:05:34: 89:17:24:3e:c3:a5:a5:51:df:da:06:36:e4:d8:93:3e:f1:42: 06:ab:f4:2e:7d:7d:0b:a5:99:84:f7:88:9a:84:0f:f7:a9:02: 7f:ac:2e:5f:10:8c:80:97:11:f3:a9:2d:50:31:24:43:85:ca: 62:b3:ff:49:df:c0:f8:7a:2e:fc:fc:d0:18:48:18:c6:a2:9e: 10:9e:c5:63:b0:65:6b:6c:14:8e:f6:f5:e5:64:d4:00:6d:e6: db:1f:f0:f4:65:38:ed:80:da:c7:60:95:bd:c8:be:32:56:ef: b1:93:44:d2:61:86:88:c3:fa:7b:16:e7:6e:07:50:eb:76:94: a8:cb:a2:ae:02:62:f5:26:51:aa:bb:17:0f:0f:5a:9c:86:c8: 2a:9d:ad:90:48:37:a4:bb:64:87:58:2a:63:a1:47:47:91:b5: 64:1d:1e:85:21:fd:0f:47:2d:58:57:f4:3b:20:c1:c7:fd:a9: 4a:61:1c:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv60tfE0+416dZAc9zYtylkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OWQ3NTA3ZjlhZTFjOGIzZmRlNDU0MzNhZWU4ZmNmOTg1 YTIxZmEwHhcNMjYwMTI2MTUwMTIwWhcNMjYwMTI3MTUwMTIwWjAzMTEwLwYDVQQD EygyYTk3ODExYjZlMDc4YjAzNWFjMGNkMTMyYjYzNjRmNWYzYjRmYzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqThNY/EqcQMCShuFBRzDgn05G9g VfRFFJvbdKSMwIwCX3vjctViHA6+rx4isfU/lKzVzpOpiftxR/QDJ9gwI+sDgiNk 67M+46fEEfS9k9j7PNVd4eogzDB8v4SJcVOkJDdiduStrj0jgjPmg8qDqjsFaxud 813BQDAM1zyu8oNBNGKoa2qUMfXoZto905+/iplikQ56jMz6DKOxtXc8iww9Zr9z 3NwZ+8IzLMs6D+BKA1bSzX8k8yLW5hsbpt3+ui8V6Ap7vnSOx95SLFt42HiNKp4z BpPvMjsdYrzDjf0phBjguoZ/1bD2M+KERn3PLIBHdp2uhJJfQfHGFuLYWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqXgRtuB4sDWsDNEytjZPXztPyAMB8GA1UdIwQY MBaAFGmddQf5rhyLP95FQzruj8+YWiH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81NWM3MWItM2QwNi00MzZmLTgxMjIt MjI0MTY1ZWMxODBhLzEvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC81NWM3MWItM2QwNi00MzZmLTgxMjItMjI0MTY1ZWMxODBh LzEvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtO8N9UGB cfW1LzDfc9h2HZC5pA8MvcJpG1O8DLHfw77EjU7myLoPC9wxUzjmvP4W7JCyyFS+ lXpxvlyWZvPemlzcAeibuAU0iRckPsOlpVHf2gY25NiTPvFCBqv0Ln19C6WZhPeI moQP96kCf6wuXxCMgJcR86ktUDEkQ4XKYrP/Sd/A+Hou/PzQGEgYxqKeEJ7FY7Bl a2wUjvb15WTUAG3m2x/w9GU47YDax2CVvci+MlbvsZNE0mGGiMP6exbnbgdQ63aU qMuirgJi9SZRqrsXDw9anIbIKp2tkEg3pLtkh1gqY6FHR5G1ZB0ehSH9D0ctWFf0 OyDBx/2pSmEcJg== -----END CERTIFICATE-----Generated at Mon Jan 26 16:27:44 2026 by rpki-client