This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft File: AFSIJAGwckhkqMzLrq_kLIUkBFY.mft (raw, json) Hash identifier: Zvt9vwOz0DM2McBlmGd8eHP6jwQ0YYISnOAuu21VVf4= Subject key identifier: 2F:7F:E2:10:EC:3A:66:DA:81:0B:96:19:21:D4:03:99:90:1A:B9:1D Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56 Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456 Certificate serial: 019BA5354EB8EBD1CD0341D2CF2B31EDB7C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft Manifest number: 17C0 Signing time: Sat 10 Jan 2026 00:01:32 +0000 Manifest this update: Sat 10 Jan 2026 00:01:32 +0000 Manifest next update: Sun 11 Jan 2026 00:01:32 +0000 Files and hashes: 1: AFSIJAGwckhkqMzLrq_kLIUkBFY.crl (hash: i0gajnlRcgKYoghV/1ubwMGn0hMxY9wn/eawVlHeyy8=) 2: NcBIwWrVfFqKGC-Ejlu0skUAVME.roa (hash: QpyQXhGs4Yf3p6aesaO1I7bW/lGukmfPe/wqoZKA1Vg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a5:35:4e:b8:eb:d1:cd:03:41:d2:cf:2b:31:ed:b7:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456 Validity Not Before: Jan 10 00:01:32 2026 GMT Not After : Jan 11 00:01:32 2026 GMT Subject: CN=2f7fe210ec3a66da810b961921d40399901ab91d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9b:f9:dd:67:70:13:77:4e:d9:39:e6:8f:38: 22:7f:b0:86:19:90:52:6d:12:39:28:77:c3:1c:31: 44:38:ac:9f:8d:26:4b:b9:99:51:6c:19:5d:b8:57: eb:32:66:0e:5d:f6:56:cf:90:7f:e0:c5:03:3c:f8: 18:16:33:0c:6b:fa:a1:49:7e:ab:81:ff:fe:87:6f: 33:7d:b5:eb:d5:86:74:ca:a7:e2:31:69:f2:82:cf: a4:64:90:0d:24:64:1a:ce:71:96:bf:1c:32:cc:33: a3:75:43:b6:82:25:f5:dd:e4:b6:9b:fa:fd:c5:18: 52:a2:17:ef:5b:30:03:f6:61:9e:36:7e:9b:ef:9c: fc:9a:d8:da:f6:24:3f:c4:2f:db:c4:2f:1c:d5:d3: 56:06:aa:8d:06:fe:d2:9a:90:54:62:3c:f2:13:06: 0f:a4:a4:68:39:a4:c9:76:b0:87:df:9f:76:7f:01: dc:d8:76:03:a5:03:7d:69:c9:cc:9b:12:62:a6:e3: 19:b4:0b:41:7b:ef:39:0c:34:a1:30:2d:8b:d3:86: 1f:41:20:4d:43:e6:55:e3:b9:d7:81:ff:86:e8:f3: 1a:4a:ba:71:24:14:85:ab:c6:db:3a:87:e0:f5:0a: 03:73:ea:f4:46:8b:75:8b:4c:d6:6e:eb:3c:1d:59: ac:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7F:E2:10:EC:3A:66:DA:81:0B:96:19:21:D4:03:99:90:1A:B9:1D X509v3 Authority Key Identifier: keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b9:11:87:25:c6:3f:2d:2f:36:06:86:37:42:3a:da:c3:59: bb:2a:0b:20:1f:6e:d2:59:cc:41:ce:d0:cf:c7:c0:a2:0f:1e: 30:0c:da:2e:1e:fa:aa:a2:6f:4c:f2:4f:3c:da:c6:da:5b:3d: db:0c:2e:a6:28:f3:ef:48:79:46:bc:49:eb:b3:d5:27:e8:58: f2:b2:86:67:3e:c1:4e:6e:ba:7b:b8:57:46:d2:ca:62:20:e2: 1f:d1:5d:84:a5:e0:65:78:9c:38:a1:9f:5e:d7:7a:e3:f0:fd: 94:97:ee:e2:6e:72:18:6f:38:80:dc:96:ba:32:4d:d2:4c:94: d3:33:d4:b9:1a:6b:86:29:72:8c:6d:01:08:39:db:98:b4:7d: 2d:f5:b8:13:be:4f:ad:90:57:6c:71:80:c7:3b:19:60:66:98: fc:af:49:2b:ea:99:29:de:b6:ad:97:3a:8b:9f:98:de:aa:a1: 2e:c0:1b:c7:6b:d2:09:82:80:68:c2:e2:57:23:ee:05:47:bf: f1:ff:8d:09:a3:58:b7:35:75:9a:18:32:07:d6:60:d9:40:9e: 1a:e9:05:19:97:3d:e9:01:f9:b8:60:1a:30:47:ce:a3:b8:dd: 67:37:07:55:45:0b:d2:2c:21:b0:be:0a:77:a5:a4:00:d5:23: f6:e4:1e:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZulNU6469HNA0HSzysx7bfGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNTQ4ODI0MDFiMDcyNDg2NGE4Y2NjYmFlYWZlNDJjODUy NDA0NTYwHhcNMjYwMTEwMDAwMTMyWhcNMjYwMTExMDAwMTMyWjAzMTEwLwYDVQQD EygyZjdmZTIxMGVjM2E2NmRhODEwYjk2MTkyMWQ0MDM5OTkwMWFiOTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZv53WdwE3dO2Tnmjzgif7CGGZBS bRI5KHfDHDFEOKyfjSZLuZlRbBlduFfrMmYOXfZWz5B/4MUDPPgYFjMMa/qhSX6r gf/+h28zfbXr1YZ0yqfiMWnygs+kZJANJGQaznGWvxwyzDOjdUO2giX13eS2m/r9 xRhSohfvWzAD9mGeNn6b75z8mtja9iQ/xC/bxC8c1dNWBqqNBv7SmpBUYjzyEwYP pKRoOaTJdrCH3592fwHc2HYDpQN9acnMmxJipuMZtAtBe+85DDShMC2L04YfQSBN Q+ZV47nXgf+G6PMaSrpxJBSFq8bbOofg9QoDc+r0Rot1i0zWbus8HVmssQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9/4hDsOmbagQuWGSHUA5mQGrkdMB8GA1UdIwQY MBaAFABUiCQBsHJIZKjMy66v5CyFJARWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85NWZlNDQtYjAzOS00YzkzLWI5NzUt NDZlZTk5YTFlZTMwLzEvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85NWZlNDQtYjAzOS00YzkzLWI5NzUtNDZlZTk5YTFlZTMw LzEvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOrkRhyXG Py0vNgaGN0I62sNZuyoLIB9u0lnMQc7Qz8fAog8eMAzaLh76qqJvTPJPPNrG2ls9 2wwupijz70h5RrxJ67PVJ+hY8rKGZz7BTm66e7hXRtLKYiDiH9FdhKXgZXicOKGf Xtd64/D9lJfu4m5yGG84gNyWujJN0kyU0zPUuRprhilyjG0BCDnbmLR9LfW4E75P rZBXbHGAxzsZYGaY/K9JK+qZKd62rZc6i5+Y3qqhLsAbx2vSCYKAaMLiVyPuBUe/ 8f+NCaNYtzV1mhgyB9Zg2UCeGukFGZc96QH5uGAaMEfOo7jdZzcHVUUL0iwhsL4K d6WkANUj9uQeBQ== -----END CERTIFICATE-----Generated at Sat Jan 10 08:56:24 2026 by rpki-client