This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft File: Aq2woU5Vr3chH_18j80XsqMGSaA.mft (raw, json) Hash identifier: 9D0SxiVy8tcBgOz97w+g0pGRYD4OiYZ7LGwGqat11o4= Subject key identifier: BF:36:74:79:96:FD:FE:7D:CA:60:4C:FB:C2:ED:4A:34:14:C3:B7:97 Authority key identifier: 02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0 Certificate issuer: /CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0 Certificate serial: 019BF5753FA22239258C2AACBEBF1770E7F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft Manifest number: 8B Signing time: Sun 25 Jan 2026 14:01:00 +0000 Manifest this update: Sun 25 Jan 2026 14:01:00 +0000 Manifest next update: Mon 26 Jan 2026 14:01:00 +0000 Files and hashes: 1: 09-zaUiMG_MEvZyLAayw8c8dD2o.roa (hash: mlo4Fy/vYQlZD5DG/4fKQPLNyIxwdQPuWa8p3np4+JY=) 2: Aq2woU5Vr3chH_18j80XsqMGSaA.crl (hash: KvfJLf/uz6ZeQ4jQVD0GC/h+nl3ZkDxWlea9pCWIVPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:3f:a2:22:39:25:8c:2a:ac:be:bf:17:70:e7:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0 Validity Not Before: Jan 25 14:01:00 2026 GMT Not After : Jan 26 14:01:00 2026 GMT Subject: CN=bf36747996fdfe7dca604cfbc2ed4a3414c3b797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:85:74:7e:03:84:e9:e1:27:51:5c:e7:38:b5: d6:3c:9b:8f:f9:a8:43:b7:e6:9d:a2:fc:15:6f:57: 87:0c:0f:7e:21:ad:ed:98:81:30:78:b3:d8:af:65: b4:cc:b9:2e:98:56:7d:82:b2:bd:4e:37:85:78:38: 64:7f:3d:66:1d:5f:4b:4f:d6:57:24:a5:c0:68:f4: a8:33:8d:2d:f7:21:1f:28:88:d8:25:0a:2d:a8:82: 4b:c6:d6:77:61:93:00:7e:f9:5b:30:34:c3:b2:1e: 48:9d:36:5f:e8:b7:97:0c:f0:5d:b1:23:af:d3:eb: f3:b6:b6:3f:e0:3c:15:b1:e5:01:16:c2:4e:3e:03: 75:27:92:ff:4e:f5:5a:e6:1c:32:98:5f:72:cb:7b: 68:d9:9f:77:38:4c:25:12:b3:da:e2:2d:d6:26:9a: 5b:5f:96:71:42:10:d1:b3:1d:a3:ea:fc:f1:de:09: cf:18:10:77:79:3b:0c:28:f2:38:15:0b:d1:2f:30: 54:f3:90:36:2d:53:29:17:ab:5f:45:5c:2f:7f:d5: 99:73:f1:88:74:07:ab:51:71:95:4b:97:df:4e:c0: 4b:af:1a:ac:a9:b8:4c:d3:97:e3:f9:31:d4:bd:e5: 22:c9:d2:66:ff:de:e3:b1:5c:94:7e:aa:25:52:29: f6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:36:74:79:96:FD:FE:7D:CA:60:4C:FB:C2:ED:4A:34:14:C3:B7:97 X509v3 Authority Key Identifier: keyid:02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:14:a2:98:25:41:07:0c:c2:de:2f:54:f8:40:c0:5e:25:96: 9f:a1:54:ce:8d:90:fb:a9:41:9b:16:e8:b2:25:56:0b:b0:a2: 02:0d:65:ef:af:de:3f:97:6d:ac:e9:b5:79:ec:32:80:3f:2b: 85:ad:de:a4:97:86:fb:18:33:c3:cb:5d:6a:ce:e2:d1:e8:b9: cd:6e:c3:af:41:19:6a:be:57:e1:00:31:ff:4d:b6:4b:57:52: 77:be:17:a5:c2:d4:a9:4d:9e:1e:b8:2b:97:6e:33:f3:e5:69: db:15:89:51:81:18:06:e1:4c:88:22:6e:24:46:7c:24:00:d0: 5c:ed:09:08:cc:a5:d5:49:40:2b:54:73:de:ab:4b:d7:8f:fb: 66:7a:39:b7:dd:79:7c:9f:e4:91:43:72:9b:61:41:09:9e:9e: 5c:2b:6c:29:3a:c4:6f:63:d2:a3:3e:e5:fd:ef:cc:c4:9a:53: f4:f6:14:a7:f5:d5:19:6e:31:d5:1c:70:f1:5b:db:9a:3c:4b: ab:ce:1d:cf:f5:90:32:a4:60:f3:97:da:f3:c6:bf:e5:af:da: ea:7e:ff:b5:b7:01:54:59:92:e0:38:04:b1:a0:24:4c:e4:64: b8:fc:0e:59:1e:d4:cc:40:67:63:52:0b:f9:02:fc:c6:46:d3: b6:df:6f:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dT+iIjkljCqsvr8XcOf4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYWRiMGExNGU1NWFmNzcyMTFmZmQ3YzhmY2QxN2IyYTMw NjQ5YTAwHhcNMjYwMTI1MTQwMTAwWhcNMjYwMTI2MTQwMTAwWjAzMTEwLwYDVQQD EyhiZjM2NzQ3OTk2ZmRmZTdkY2E2MDRjZmJjMmVkNGEzNDE0YzNiNzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24V0fgOE6eEnUVznOLXWPJuP+ahD t+adovwVb1eHDA9+Ia3tmIEweLPYr2W0zLkumFZ9grK9TjeFeDhkfz1mHV9LT9ZX JKXAaPSoM40t9yEfKIjYJQotqIJLxtZ3YZMAfvlbMDTDsh5InTZf6LeXDPBdsSOv 0+vztrY/4DwVseUBFsJOPgN1J5L/TvVa5hwymF9yy3to2Z93OEwlErPa4i3WJppb X5ZxQhDRsx2j6vzx3gnPGBB3eTsMKPI4FQvRLzBU85A2LVMpF6tfRVwvf9WZc/GI dAerUXGVS5ffTsBLrxqsqbhM05fj+THUveUiydJm/97jsVyUfqolUin20wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL82dHmW/f59ymBM+8LtSjQUw7eXMB8GA1UdIwQY MBaAFAKtsKFOVa93IR/9fI/NF7KjBkmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXEyd29VNVZyM2NoSF8xOGo4MFhzcU1HU2FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMTAzODMtY2Y2ZS00NmM0LWI4ZTYt Y2E0MWM3MmNhZjk2LzEvQXEyd29VNVZyM2NoSF8xOGo4MFhzcU1HU2FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jMTAzODMtY2Y2ZS00NmM0LWI4ZTYtY2E0MWM3MmNhZjk2 LzEvQXEyd29VNVZyM2NoSF8xOGo4MFhzcU1HU2FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBSimCVB BwzC3i9U+EDAXiWWn6FUzo2Q+6lBmxbosiVWC7CiAg1l76/eP5dtrOm1eewygD8r ha3epJeG+xgzw8tdas7i0ei5zW7Dr0EZar5X4QAx/022S1dSd74XpcLUqU2eHrgr l24z8+Vp2xWJUYEYBuFMiCJuJEZ8JADQXO0JCMyl1UlAK1Rz3qtL14/7Zno5t915 fJ/kkUNym2FBCZ6eXCtsKTrEb2PSoz7l/e/MxJpT9PYUp/XVGW4x1Rxw8VvbmjxL q84dz/WQMqRg85fa88a/5a/a6n7/tbcBVFmS4DgEsaAkTORkuPwOWR7UzEBnY1IL +QL8xkbTtt9vlQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:40 2026 by rpki-client