This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft File: AF_5zInGaoo6XXNKDWXGH9yFGL4.mft (raw, json) Hash identifier: n2S4JYw5pzx257k0C8XAa49QRYJNYHiknkAADAiUlJ8= Subject key identifier: 33:7E:5C:CD:39:08:6A:3B:D7:8E:B7:3A:D9:BA:BD:F0:A3:B9:04:37 Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE Certificate issuer: /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be Certificate serial: 019BF4627C0F89FE1B9C5B7C52EBB9F17B4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 09:00:53 +0000 Manifest this update: Sun 25 Jan 2026 09:00:53 +0000 Manifest next update: Mon 26 Jan 2026 09:00:53 +0000 Files and hashes: 1: AF_5zInGaoo6XXNKDWXGH9yFGL4.crl (hash: 2q5Fee8GjtiHHnBSz9FfW9izyGFRz7h2ohrvj93a8KU=) 2: KbY29WtKZkz8Fbjj7QvLlg811Iw.roa (hash: vGh5FY7zuISKMd7QAir+eppKFgiFx2llO5uFQh7FV0A=) 3: Yczj7zwVDs2cX_wNQ-ssqLpurf0.roa (hash: lpodXqk6t7MJFjfZg1Uow8LLK/4R3ylcdMkmlTgRneo=) 4: hkJYoKxZ5NaqYkSY0GG7dfC0J6M.roa (hash: M6l2Qx3MyNr2ADezdHbYqYOeyWWrHzzKzTBcWubDLyY=) 5: iN3PbeV3-UffGNWyXfh7JHJfK74.roa (hash: JtoeR6EU9pVtvyEClltI2vcG5Q/h7OJRN/rUzf7IfP8=) 6: qydppjeYfUzDVxdV73Ghn9vaAYk.roa (hash: F/o5ke8f18yC9oKEjHkU0hNCPxAS0/yMbN5QTK0st0g=) 7: sH1teYqG2FqEXd7RfMCaBcOnmaw.roa (hash: suxWcXpZV2IMJ73fGzjwM37LJ58quwhaki1YE7N0sRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:7c:0f:89:fe:1b:9c:5b:7c:52:eb:b9:f1:7b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be Validity Not Before: Jan 25 09:00:53 2026 GMT Not After : Jan 26 09:00:53 2026 GMT Subject: CN=337e5ccd39086a3bd78eb73ad9babdf0a3b90437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ae:13:87:ba:c7:65:84:52:8c:2f:8d:2c:64: 27:76:9a:1b:1c:9e:bf:09:98:36:99:5c:78:e1:5f: da:31:bf:fe:1c:a6:df:82:09:fa:bb:ab:7b:77:4f: 90:61:f5:18:b1:7f:8c:c7:7a:ba:ad:50:cf:ac:47: 79:f7:f1:46:4d:a3:b0:0a:0d:57:36:54:09:af:d2: 54:ae:b5:c5:33:57:77:34:9c:8d:a1:48:51:6b:77: 73:4e:5e:2c:cf:09:3c:9d:6a:21:6c:4e:32:12:24: 96:8e:92:b2:29:8d:84:9c:e7:b2:93:64:d5:65:88: 8d:22:cc:b4:85:3e:92:43:32:25:0e:11:20:81:30: 01:28:34:33:16:37:13:14:d1:4a:a5:89:cf:04:bb: 7a:80:87:9b:8c:f8:f4:45:3b:5a:57:65:5b:f5:86: e3:05:9c:a8:e7:d0:dd:a6:da:74:a2:84:a0:da:23: 75:97:25:c5:24:0f:d5:0b:c5:77:3a:4c:a7:c6:bd: b8:22:f0:6e:3b:a7:81:ae:70:f3:26:20:98:37:96: 1d:d5:05:4d:3c:ef:9a:4d:f9:1f:b4:d9:16:79:40: 9c:d1:65:8d:fc:49:ed:b4:86:ff:bb:a7:ae:60:0a: 5f:ef:0a:d1:db:4f:ee:09:5c:a2:f1:ea:65:ef:c0: a8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7E:5C:CD:39:08:6A:3B:D7:8E:B7:3A:D9:BA:BD:F0:A3:B9:04:37 X509v3 Authority Key Identifier: keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:70:c5:10:9d:78:e8:e4:ea:32:6a:6b:f0:90:12:38:d6:96: 83:9a:72:6e:dd:1b:25:73:5a:c3:e5:82:c9:41:31:ba:70:5c: 74:50:c9:22:b9:55:fd:66:81:58:0e:c3:fa:89:9e:dd:7f:8f: 39:cd:a1:79:a2:e2:2a:d0:3a:5d:c0:67:53:9b:94:9e:d9:5b: 83:51:dd:b4:05:21:3e:a5:ab:41:bf:7b:19:df:28:10:44:1d: cb:cf:7e:89:e0:58:96:34:ec:6a:82:04:6d:52:1f:b7:77:85: 46:e3:00:45:e6:7e:8b:a8:94:1d:a3:02:c9:5c:81:b4:ce:9c: 6a:19:2a:b0:29:58:ae:e5:42:cb:9e:d7:a7:15:9e:1e:b2:23: 3b:34:c7:04:03:00:00:82:7c:ab:e8:24:ad:ea:e2:6c:a9:50: d9:18:26:5d:9d:e0:58:56:be:d9:45:c4:b3:4e:ec:b6:1c:e6: 66:c9:d7:5c:99:6a:10:87:2e:c8:66:01:44:46:89:1c:8a:65: e9:48:80:7a:64:08:68:d6:d2:37:77:02:28:e0:46:b5:ac:c1: c7:45:7e:63:37:fb:27:00:87:2d:80:0d:62:e6:90:28:88:f9: 9e:60:17:ec:ac:7f:15:cc:12:cf:02:f0:fe:29:46:8e:cb:0d: 3e:e6:98:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YnwPif4bnFt8Uuu58XtLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNWZmOWNjODljNjZhOGEzYTVkNzM0YTBkNjVjNjFmZGM4 NTE4YmUwHhcNMjYwMTI1MDkwMDUzWhcNMjYwMTI2MDkwMDUzWjAzMTEwLwYDVQQD EygzMzdlNWNjZDM5MDg2YTNiZDc4ZWI3M2FkOWJhYmRmMGEzYjkwNDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q4Th7rHZYRSjC+NLGQndpobHJ6/ CZg2mVx44V/aMb/+HKbfggn6u6t7d0+QYfUYsX+Mx3q6rVDPrEd59/FGTaOwCg1X NlQJr9JUrrXFM1d3NJyNoUhRa3dzTl4szwk8nWohbE4yEiSWjpKyKY2EnOeyk2TV ZYiNIsy0hT6SQzIlDhEggTABKDQzFjcTFNFKpYnPBLt6gIebjPj0RTtaV2Vb9Ybj BZyo59Ddptp0ooSg2iN1lyXFJA/VC8V3Okynxr24IvBuO6eBrnDzJiCYN5Yd1QVN PO+aTfkftNkWeUCc0WWN/EnttIb/u6euYApf7wrR20/uCVyi8epl78CoFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDN+XM05CGo71463Otm6vfCjuQQ3MB8GA1UdIwQY MBaAFABf+cyJxmqKOl1zSg1lxh/chRi+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUZfNXpJbkdhb282WFhOS0RXWEdIOXlGR0w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kNTNjNzgtMGQ1Yi00MjM3LTk5OTkt MGUyZDY5N2IyN2UzLzEvQUZfNXpJbkdhb282WFhOS0RXWEdIOXlGR0w0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9kNTNjNzgtMGQ1Yi00MjM3LTk5OTktMGUyZDY5N2IyN2Uz LzEvQUZfNXpJbkdhb282WFhOS0RXWEdIOXlGR0w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3DFEJ14 6OTqMmpr8JASONaWg5pybt0bJXNaw+WCyUExunBcdFDJIrlV/WaBWA7D+ome3X+P Oc2heaLiKtA6XcBnU5uUntlbg1HdtAUhPqWrQb97Gd8oEEQdy89+ieBYljTsaoIE bVIft3eFRuMAReZ+i6iUHaMCyVyBtM6cahkqsClYruVCy57XpxWeHrIjOzTHBAMA AIJ8q+gkreribKlQ2RgmXZ3gWFa+2UXEs07sthzmZsnXXJlqEIcuyGYBREaJHIpl 6UiAemQIaNbSN3cCKOBGtazBx0V+Yzf7JwCHLYANYuaQKIj5nmAX7Kx/FcwSzwLw /ilGjssNPuaYHw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:14:42 2026 by rpki-client