This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft File: ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft (raw, json) Hash identifier: m6JJenWAmzWAe4v68kR0YswIeoB9H1ZCjPIZdVQ7nIU= Subject key identifier: 1B:D0:05:52:84:36:FB:27:3D:75:40:F9:CD:93:E5:F1:EB:52:A6:14 Authority key identifier: 6A:10:B7:C5:4E:6F:95:B1:D9:B8:4A:AC:3D:9D:A7:42:A0:E0:2A:6C Certificate issuer: /CN=6a10b7c54e6f95b1d9b84aac3d9da742a0e02a6c Certificate serial: 019BB24CD8DAF23CE600413B84C6290FDCD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft Manifest number: 1384 Signing time: Mon 12 Jan 2026 13:02:19 +0000 Manifest this update: Mon 12 Jan 2026 13:02:19 +0000 Manifest next update: Tue 13 Jan 2026 13:02:19 +0000 Files and hashes: 1: ahC3xU5vlbHZuEqsPZ2nQqDgKmw.crl (hash: N4DzBrloQ4RzjqZR8stHe6EwRWv5/KWbIur3awe2b7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.crl rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft rsync://rpki.ripe.net/repository/DEFAULT/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 13:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:4c:d8:da:f2:3c:e6:00:41:3b:84:c6:29:0f:dc:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a10b7c54e6f95b1d9b84aac3d9da742a0e02a6c Validity Not Before: Jan 12 13:02:19 2026 GMT Not After : Jan 13 13:02:19 2026 GMT Subject: CN=1bd005528436fb273d7540f9cd93e5f1eb52a614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:40:4c:18:02:f7:e5:a3:20:d1:ae:c3:ef:4e: 6a:98:d5:eb:dd:da:48:3e:49:15:51:0d:6a:67:ae: fd:75:7a:66:56:b9:b9:be:c3:49:c3:ab:99:b5:4b: 0e:6b:ff:55:46:d2:fe:c7:2a:70:b1:ef:50:d7:a3: 1a:57:3b:fa:3b:3f:11:d3:bc:46:c6:99:4b:0d:c6: 82:01:bc:aa:88:61:d6:a1:f8:ef:b5:75:a6:c1:8a: 9a:6c:a4:ae:a9:51:fa:32:65:b7:bb:c2:2a:18:ac: ed:39:fd:33:4a:eb:72:a7:b5:3c:20:ae:4c:f4:9a: b4:89:88:f2:87:a1:93:c5:02:97:0e:27:ea:38:dd: af:5e:96:2d:e2:4e:ce:c3:ec:10:b1:86:51:b5:58: 01:5b:dc:fa:aa:6f:73:47:8a:70:51:0d:d7:ba:d2: 92:60:4a:04:4f:c4:10:63:96:f7:25:9a:8a:33:6c: 15:89:f8:4e:55:20:20:46:3b:fc:31:03:67:f6:bd: 0c:49:a0:40:76:03:29:b5:f9:9b:82:91:22:0f:c5: 9e:24:a5:ac:48:0c:ef:68:9e:ec:b8:ce:03:23:9f: fd:84:1c:a1:b7:10:e2:0b:18:bb:b1:74:dc:ca:1e: 2b:21:a0:13:97:dd:bd:23:5f:1d:63:7b:32:bf:7c: b8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D0:05:52:84:36:FB:27:3D:75:40:F9:CD:93:E5:F1:EB:52:A6:14 X509v3 Authority Key Identifier: keyid:6A:10:B7:C5:4E:6F:95:B1:D9:B8:4A:AC:3D:9D:A7:42:A0:E0:2A:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:be:f7:23:85:88:a9:89:d8:3a:6e:1d:48:91:1e:22:50:53: 18:13:bf:20:99:31:d8:f6:bb:1e:d0:a4:30:f3:36:61:fd:c8: b1:80:b4:35:7f:2d:34:7d:63:4e:48:3f:4f:61:d5:c7:0d:73: 11:45:cd:37:6b:a4:ff:05:52:d7:64:b4:83:82:fc:e2:d1:2d: 36:b1:bd:c3:bd:31:1a:5f:f1:45:a6:6c:67:50:6f:5d:9f:3c: 53:37:83:3d:02:a1:76:67:9d:bc:de:6b:be:db:6d:ab:25:21: 37:4a:d5:9d:66:00:8e:d4:2c:67:be:94:1f:32:ca:37:88:d8: 88:55:d2:81:53:f6:8f:54:44:ce:c1:5a:ed:cf:c9:a1:44:32: b8:83:6f:80:7a:2f:b5:5c:c7:67:5d:5c:ff:63:87:69:68:a8: 3f:51:cd:0a:78:f4:d8:fc:d8:32:dd:c2:dc:ff:82:bd:45:42: 07:3f:17:67:ea:b5:60:c1:9a:66:ab:b8:56:9e:bf:84:b1:7b: 6d:58:9a:47:61:33:52:6f:7a:93:cf:d5:01:7f:48:6e:1e:2a: 2b:1c:8b:2a:96:67:dd:56:d3:69:66:32:28:51:44:ec:aa:aa: 01:c2:18:15:aa:74:15:a6:93:56:40:e8:8a:36:6e:d1:1b:d6: 47:df:53:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuyTNja8jzmAEE7hMYpD9zUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMTBiN2M1NGU2Zjk1YjFkOWI4NGFhYzNkOWRhNzQyYTBl MDJhNmMwHhcNMjYwMTEyMTMwMjE5WhcNMjYwMTEzMTMwMjE5WjAzMTEwLwYDVQQD EygxYmQwMDU1Mjg0MzZmYjI3M2Q3NTQwZjljZDkzZTVmMWViNTJhNjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUBMGAL35aMg0a7D705qmNXr3dpI PkkVUQ1qZ679dXpmVrm5vsNJw6uZtUsOa/9VRtL+xypwse9Q16MaVzv6Oz8R07xG xplLDcaCAbyqiGHWofjvtXWmwYqabKSuqVH6MmW3u8IqGKztOf0zSutyp7U8IK5M 9Jq0iYjyh6GTxQKXDifqON2vXpYt4k7Ow+wQsYZRtVgBW9z6qm9zR4pwUQ3XutKS YEoET8QQY5b3JZqKM2wVifhOVSAgRjv8MQNn9r0MSaBAdgMptfmbgpEiD8WeJKWs SAzvaJ7suM4DI5/9hByhtxDiCxi7sXTcyh4rIaATl929I18dY3syv3y4GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvQBVKENvsnPXVA+c2T5fHrUqYUMB8GA1UdIwQY MBaAFGoQt8VOb5Wx2bhKrD2dp0Kg4CpsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWhDM3hVNXZsYkhadUVxc1BaMm5RcURnS213LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS84YTJlODUtOTQ4MC00MWEyLWEyNTUt MmRjYWQ2ZWU3MWZiLzEvYWhDM3hVNXZsYkhadUVxc1BaMm5RcURnS213Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS84YTJlODUtOTQ4MC00MWEyLWEyNTUtMmRjYWQ2ZWU3MWZi LzEvYWhDM3hVNXZsYkhadUVxc1BaMm5RcURnS213LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP773I4WI qYnYOm4dSJEeIlBTGBO/IJkx2Pa7HtCkMPM2Yf3IsYC0NX8tNH1jTkg/T2HVxw1z EUXNN2uk/wVS12S0g4L84tEtNrG9w70xGl/xRaZsZ1BvXZ88UzeDPQKhdmedvN5r vtttqyUhN0rVnWYAjtQsZ76UHzLKN4jYiFXSgVP2j1REzsFa7c/JoUQyuINvgHov tVzHZ11c/2OHaWioP1HNCnj02PzYMt3C3P+CvUVCBz8XZ+q1YMGaZqu4Vp6/hLF7 bViaR2EzUm96k8/VAX9Ibh4qKxyLKpZn3VbTaWYyKFFE7KqqAcIYFap0FaaTVkDo ijZu0RvWR99TKw== -----END CERTIFICATE-----Generated at Mon Jan 12 22:58:10 2026 by rpki-client