This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft File: 10AeAklBizV1RyaIJPYkSSXY2zk.mft (raw, json) Hash identifier: kaoAOzIQHvrH4y1HCojjWVDJ0McwkfPHmMnwa01frjY= Subject key identifier: 9E:6B:07:6F:02:D9:0E:9A:EC:E9:A9:20:D4:4A:81:F5:91:CF:EE:C7 Authority key identifier: D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39 Certificate issuer: /CN=d7401e0249418b357547268824f6244925d8db39 Certificate serial: 019B77B78DAF0045A0FE4661C2E019580070 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft Manifest number: 0927 Signing time: Thu 01 Jan 2026 04:01:16 +0000 Manifest this update: Thu 01 Jan 2026 04:01:16 +0000 Manifest next update: Fri 02 Jan 2026 04:01:16 +0000 Files and hashes: 1: 10AeAklBizV1RyaIJPYkSSXY2zk.crl (hash: hTzREvSgxkzo3Ez4ApWJ1yHHOak8dz20sd2X47GOnaI=) 2: RjYX-V2efI1Zqu_dPnOuCSQqr1I.roa (hash: +pG1/ZRTZezQr6XfSyRunIJDq4WCFmSkYW6ipsa40Rw=) 3: cBlGJ5bNODNILYzK1oNt3QzAw7M.roa (hash: 7wWvEWZaVuq+kybNFqA4kbf75m0LmBkO8WIx9pDUDFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 04:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:b7:8d:af:00:45:a0:fe:46:61:c2:e0:19:58:00:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7401e0249418b357547268824f6244925d8db39 Validity Not Before: Jan 1 04:01:16 2026 GMT Not After : Jan 2 04:01:16 2026 GMT Subject: CN=9e6b076f02d90e9aece9a920d44a81f591cfeec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:73:00:a8:75:d7:17:8e:7a:37:69:1d:0c:0f: 7a:60:c8:37:1e:fc:89:8c:51:15:16:0a:09:b2:71: 1c:c5:e2:3c:94:c0:f9:f0:52:25:ca:29:78:de:3a: e6:bc:1b:65:b5:c4:e3:94:8a:65:08:3b:dd:7a:a5: a6:86:f4:cf:dc:43:5b:61:0e:24:20:c5:1d:1a:f0: 94:a7:b4:75:86:5a:0b:91:43:4c:e4:d0:b6:f4:7e: 16:f6:30:fb:aa:7b:15:45:ef:e8:4e:ae:79:92:c6: 01:2f:52:93:dc:dc:d0:7a:b1:90:50:89:a5:a0:21: af:ce:26:9f:0a:ef:bf:46:fc:7f:1b:5b:0d:04:a8: 80:2c:4c:fe:83:f7:af:94:40:07:ed:d3:cc:41:5d: 4b:63:14:53:47:a9:23:fe:fe:c2:cd:e0:13:e3:be: 9b:3c:01:07:15:42:03:59:6b:ed:c7:2e:47:08:81: 09:9a:96:f3:67:a9:a0:dd:0c:f3:33:ba:db:3b:47: 4a:99:da:e0:3c:16:77:e2:80:df:dd:a5:e0:41:9f: d5:b4:6f:da:39:a8:db:cb:3e:fc:80:a6:0d:ea:78: 79:74:6f:4c:95:be:78:10:e0:49:0d:33:4d:6f:71: ad:20:dc:0f:33:98:43:4f:3a:28:55:6b:96:cc:be: 3f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6B:07:6F:02:D9:0E:9A:EC:E9:A9:20:D4:4A:81:F5:91:CF:EE:C7 X509v3 Authority Key Identifier: keyid:D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:ed:17:01:3f:28:55:48:77:7a:c7:0b:5d:d6:bc:86:41:b2: be:9f:bc:d8:6b:dc:8c:e7:a1:9d:87:4e:25:c6:aa:33:75:32: 88:8d:76:60:ba:da:6b:c5:20:41:6b:d8:5d:27:17:9c:10:d5: 74:79:4c:c9:dc:16:34:27:2a:6c:14:95:9a:39:01:ce:f2:a7: cb:ea:a5:f1:28:4d:0c:33:c6:01:a2:1a:d6:88:b3:d3:e6:18: fe:04:e0:a1:d3:dc:ed:a6:ec:d7:92:63:05:2c:af:4e:d6:15: 3a:dd:28:02:f1:b7:ff:c2:17:b9:c2:c9:5b:27:5a:d1:61:ee: 88:f2:4a:99:69:d9:fa:90:f8:5c:d3:97:40:27:a2:4f:8b:ea: 47:86:ec:b4:52:af:b4:67:9b:29:61:98:8b:5b:e8:2d:74:42: b6:62:3e:1f:df:78:2f:35:a5:ae:f3:38:d6:16:98:8d:7b:ec: 27:83:14:03:16:4a:f7:28:d0:6f:23:aa:7c:7b:c8:4f:cc:36: 90:17:0d:c1:ab:4e:68:04:fb:14:9b:2f:4d:f5:11:9f:ea:95: 4e:67:b4:9d:a9:e5:f2:9a:bc:88:6b:c5:74:d1:8b:bb:50:fa: 44:82:9c:45:db:3e:91:fc:e8:3c:7c:be:e8:5e:b5:73:f2:47: a9:cc:70:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3t42vAEWg/kZhwuAZWABwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDAxZTAyNDk0MThiMzU3NTQ3MjY4ODI0ZjYyNDQ5MjVk OGRiMzkwHhcNMjYwMTAxMDQwMTE2WhcNMjYwMTAyMDQwMTE2WjAzMTEwLwYDVQQD Eyg5ZTZiMDc2ZjAyZDkwZTlhZWNlOWE5MjBkNDRhODFmNTkxY2ZlZWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3MAqHXXF456N2kdDA96YMg3HvyJ jFEVFgoJsnEcxeI8lMD58FIlyil43jrmvBtltcTjlIplCDvdeqWmhvTP3ENbYQ4k IMUdGvCUp7R1hloLkUNM5NC29H4W9jD7qnsVRe/oTq55ksYBL1KT3NzQerGQUIml oCGvziafCu+/Rvx/G1sNBKiALEz+g/evlEAH7dPMQV1LYxRTR6kj/v7CzeAT476b PAEHFUIDWWvtxy5HCIEJmpbzZ6mg3QzzM7rbO0dKmdrgPBZ34oDf3aXgQZ/VtG/a Oajbyz78gKYN6nh5dG9Mlb54EOBJDTNNb3GtINwPM5hDTzooVWuWzL4/7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5rB28C2Q6a7OmpINRKgfWRz+7HMB8GA1UdIwQY MBaAFNdAHgJJQYs1dUcmiCT2JEkl2Ns5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBBZUFrbEJpelYxUnlhSUpQWWtTU1hZMnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kNzMxMzctYjA4OS00ZGI0LWI2YjIt NTA3ODkxMzk1NDE3LzEvMTBBZUFrbEJpelYxUnlhSUpQWWtTU1hZMnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9kNzMxMzctYjA4OS00ZGI0LWI2YjItNTA3ODkxMzk1NDE3 LzEvMTBBZUFrbEJpelYxUnlhSUpQWWtTU1hZMnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz+0XAT8o VUh3escLXda8hkGyvp+82GvcjOehnYdOJcaqM3UyiI12YLraa8UgQWvYXScXnBDV dHlMydwWNCcqbBSVmjkBzvKny+ql8ShNDDPGAaIa1oiz0+YY/gTgodPc7abs15Jj BSyvTtYVOt0oAvG3/8IXucLJWyda0WHuiPJKmWnZ+pD4XNOXQCeiT4vqR4bstFKv tGebKWGYi1voLXRCtmI+H994LzWlrvM41haYjXvsJ4MUAxZK9yjQbyOqfHvIT8w2 kBcNwatOaAT7FJsvTfURn+qVTme0nanl8pq8iGvFdNGLu1D6RIKcRds+kfzoPHy+ 6F61c/JHqcxwhA== -----END CERTIFICATE-----Generated at Thu Jan 1 11:05:02 2026 by rpki-client