This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft File: AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft (raw, json) Hash identifier: 9hVp4JOimzWGu9ifdtXbgwG6ppGcYQZZHjVSOKVbUQo= Subject key identifier: 3F:4B:BB:1A:9A:31:2C:16:3B:9C:4B:43:DD:4F:F9:89:4C:FC:56:BE Authority key identifier: 03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B Certificate issuer: /CN=030b00e6074502e6538391feab18358281a3279b Certificate serial: 019BB51655BE456F192EA27058164C3B0300 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft Manifest number: 039F Signing time: Tue 13 Jan 2026 02:01:38 +0000 Manifest this update: Tue 13 Jan 2026 02:01:38 +0000 Manifest next update: Wed 14 Jan 2026 02:01:38 +0000 Files and hashes: 1: AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl (hash: +rjktJifwv2YAajcnCLAMfYk4dYJxrOcCVpEriEwMhc=) 2: CmiC5mJyQYGGKAJggm-od_rF7aY.roa (hash: VDuSSA+oUsQz/2iqadrnhGgyrgM5bD5FatxlCOVAvTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b5:16:55:be:45:6f:19:2e:a2:70:58:16:4c:3b:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=030b00e6074502e6538391feab18358281a3279b Validity Not Before: Jan 13 02:01:38 2026 GMT Not After : Jan 14 02:01:38 2026 GMT Subject: CN=3f4bbb1a9a312c163b9c4b43dd4ff9894cfc56be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:92:4d:ba:0d:e2:e0:27:a7:e2:2d:1a:66:47: 0d:52:34:55:b7:55:73:a2:eb:98:2f:1b:80:91:a0: b9:14:ef:f4:de:c4:1e:51:6c:84:3c:7c:88:21:0c: 7b:7d:3b:89:d3:a9:df:8c:c0:35:87:4c:b7:4b:25: b4:ce:7b:ef:df:3f:16:c2:0f:ac:39:8b:7b:a1:69: bf:37:57:9a:9f:31:78:d2:b5:69:23:2d:a0:c8:eb: f4:df:1e:06:2c:78:df:cb:c9:c2:84:86:8c:64:7b: f5:82:b5:ca:c0:af:1a:84:64:2a:91:b5:c3:88:29: b6:f4:32:af:05:c2:5a:d9:a4:c3:3a:a6:eb:6c:44: 75:4d:75:d3:2d:58:41:67:70:f0:c9:22:f1:a8:3e: b9:b5:bd:f0:4e:7e:e4:35:d3:e8:45:85:bf:29:d9: 24:24:3a:aa:0c:e2:fd:75:31:4e:a1:9f:a3:99:e2: 01:07:e7:c8:d1:d4:36:a5:7d:93:5b:9c:8a:5f:a9: 4f:54:ad:49:3d:5d:5b:0e:62:3d:fd:c9:5d:29:47: e2:25:77:3a:ff:c0:6b:db:71:a2:96:e1:f6:81:62: e8:a8:19:46:81:7e:da:38:ad:f3:41:cc:23:11:8f: 1b:f1:ab:f9:1c:61:21:97:51:70:82:c7:0a:cf:0c: 09:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4B:BB:1A:9A:31:2C:16:3B:9C:4B:43:DD:4F:F9:89:4C:FC:56:BE X509v3 Authority Key Identifier: keyid:03:0B:00:E6:07:45:02:E6:53:83:91:FE:AB:18:35:82:81:A3:27:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwsA5gdFAuZTg5H-qxg1goGjJ5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c26458-fda8-4f0a-957a-7756438544ca/1/AwsA5gdFAuZTg5H-qxg1goGjJ5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:a6:b0:20:95:64:1c:e6:01:b9:6e:93:b4:30:a9:cc:8d:d9: 3e:b5:8d:e2:e5:8c:a2:b1:95:ad:9e:eb:fc:dc:72:ac:34:e8: 2c:2a:c7:91:5a:2a:3c:1c:7e:29:cd:4a:de:54:78:a3:9c:0f: 32:5c:2a:2c:0a:65:02:f5:ff:01:5d:6b:15:21:e9:5e:0e:31: 08:e7:ff:c0:d4:1a:e0:e3:57:ed:4b:48:12:c4:79:81:5e:d6: c9:ec:c3:04:27:b7:6d:09:4d:10:2c:5f:fa:a1:b2:01:65:e1: ec:1d:63:d0:16:84:eb:47:39:b5:c7:5d:a7:09:0a:91:cf:58: 09:b1:e3:e2:69:a1:b6:c8:fd:36:c2:c0:14:25:58:f9:14:e9: 8b:c7:8e:23:96:34:e8:a6:fb:2a:09:21:50:60:1a:51:d0:a5: 74:9a:41:3a:28:41:c5:bb:93:44:56:13:f9:2b:66:9a:18:6d: 37:49:cd:94:b4:81:c9:65:56:74:0a:6e:7b:e8:47:cd:91:dd: 97:9a:28:50:ef:79:64:97:32:b8:12:d0:c6:e5:fa:53:91:da: cb:9e:73:a6:74:d4:94:09:0f:7f:38:ff:2f:97:05:a4:ac:c1: d1:1c:89:d7:2f:be:a8:4d:e9:4b:a2:a4:b8:1f:da:0e:77:4a: 59:7c:ef:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu1FlW+RW8ZLqJwWBZMOwMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMGIwMGU2MDc0NTAyZTY1MzgzOTFmZWFiMTgzNTgyODFh MzI3OWIwHhcNMjYwMTEzMDIwMTM4WhcNMjYwMTE0MDIwMTM4WjAzMTEwLwYDVQQD EygzZjRiYmIxYTlhMzEyYzE2M2I5YzRiNDNkZDRmZjk4OTRjZmM1NmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupJNug3i4Cen4i0aZkcNUjRVt1Vz ouuYLxuAkaC5FO/03sQeUWyEPHyIIQx7fTuJ06nfjMA1h0y3SyW0znvv3z8Wwg+s OYt7oWm/N1eanzF40rVpIy2gyOv03x4GLHjfy8nChIaMZHv1grXKwK8ahGQqkbXD iCm29DKvBcJa2aTDOqbrbER1TXXTLVhBZ3DwySLxqD65tb3wTn7kNdPoRYW/Kdkk JDqqDOL9dTFOoZ+jmeIBB+fI0dQ2pX2TW5yKX6lPVK1JPV1bDmI9/cldKUfiJXc6 /8Br23GiluH2gWLoqBlGgX7aOK3zQcwjEY8b8av5HGEhl1FwgscKzwwJzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9LuxqaMSwWO5xLQ91P+YlM/Fa+MB8GA1UdIwQY MBaAFAMLAOYHRQLmU4OR/qsYNYKBoyebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXdzQTVnZEZBdVpUZzVILXF4ZzFnb0dqSjVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9jMjY0NTgtZmRhOC00ZjBhLTk1N2Et Nzc1NjQzODU0NGNhLzEvQXdzQTVnZEZBdVpUZzVILXF4ZzFnb0dqSjVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9jMjY0NTgtZmRhOC00ZjBhLTk1N2EtNzc1NjQzODU0NGNh LzEvQXdzQTVnZEZBdVpUZzVILXF4ZzFnb0dqSjVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWaawIJVk HOYBuW6TtDCpzI3ZPrWN4uWMorGVrZ7r/NxyrDToLCrHkVoqPBx+Kc1K3lR4o5wP MlwqLAplAvX/AV1rFSHpXg4xCOf/wNQa4ONX7UtIEsR5gV7WyezDBCe3bQlNECxf +qGyAWXh7B1j0BaE60c5tcddpwkKkc9YCbHj4mmhtsj9NsLAFCVY+RTpi8eOI5Y0 6Kb7KgkhUGAaUdCldJpBOihBxbuTRFYT+StmmhhtN0nNlLSByWVWdApue+hHzZHd l5ooUO95ZJcyuBLQxuX6U5Hay55zpnTUlAkPfzj/L5cFpKzB0RyJ1y++qE3pS6Kk uB/aDndKWXzvSQ== -----END CERTIFICATE-----Generated at Tue Jan 13 06:24:48 2026 by rpki-client