This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft File: ATx0EyWXFizbLdY3YKvZlx4wv2M.mft (raw, json) Hash identifier: VshaNcSP3Pm89ALJDmDtWPEEO7xqUz9RyVNIG2K+PA8= Subject key identifier: F1:AD:E6:55:1B:C9:40:93:FA:B9:9F:8A:B5:80:37:F2:DD:65:44:02 Authority key identifier: 01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63 Certificate issuer: /CN=013c74132597162cdb2dd63760abd9971e30bf63 Certificate serial: 019BF72D037B54A82CE8381EC4E93F958932 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft Manifest number: 0E6A Signing time: Sun 25 Jan 2026 22:01:20 +0000 Manifest this update: Sun 25 Jan 2026 22:01:20 +0000 Manifest next update: Mon 26 Jan 2026 22:01:20 +0000 Files and hashes: 1: 5QIRXwbGdujxdQZQo1ogf2n4ECU.roa (hash: swE11M7pxffwm23eQGI729DPqze3M2Czs+U2Z9G7DZk=) 2: ATx0EyWXFizbLdY3YKvZlx4wv2M.crl (hash: wvDZZ9wpkYs3qXNbb1NotQV1X/Xw76ht7OTH5nvyxT4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:03:7b:54:a8:2c:e8:38:1e:c4:e9:3f:95:89:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=013c74132597162cdb2dd63760abd9971e30bf63 Validity Not Before: Jan 25 22:01:20 2026 GMT Not After : Jan 26 22:01:20 2026 GMT Subject: CN=f1ade6551bc94093fab99f8ab58037f2dd654402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4b:4d:bd:42:a7:5c:29:8d:80:66:f1:b9:e8: 38:e2:0f:33:67:ed:ac:5a:21:25:81:24:c1:69:8a: 22:bb:ea:6a:3e:b2:52:8a:ad:61:1c:55:41:21:6a: e0:82:2f:98:2e:82:7b:52:64:88:35:d9:aa:7c:b6: 16:47:9c:f4:68:39:64:1d:df:35:86:e4:e6:e0:98: be:bd:ba:e3:2b:ac:42:78:fd:d7:ad:25:81:79:b4: 51:53:b5:65:50:7b:69:1c:72:77:3f:18:cc:9a:38: 1c:7f:5f:ae:0f:77:c3:7c:b1:78:99:ac:82:ef:b9: 70:c7:15:4f:55:26:3d:e3:85:e8:1b:ac:7d:0b:92: b8:7d:b3:a5:55:13:74:54:b7:b6:fb:ae:08:36:d2: 11:18:53:80:c2:73:98:46:77:58:19:0a:cc:98:ee: 22:d8:b1:94:4d:bc:32:06:83:96:b3:cd:dc:ad:85: 7e:da:be:d2:d2:ca:71:98:5c:c1:07:86:30:12:d3: 17:51:a4:72:a1:48:d8:0e:bd:75:69:0f:0a:2c:9a: f1:ee:86:bf:d7:22:68:7b:12:5f:75:6f:33:c8:c6: 2e:2f:a3:dd:b6:8d:25:85:ec:ad:5f:aa:39:4e:b5: 52:1a:5d:41:64:85:d2:c5:f3:16:2d:26:79:34:77: 7d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AD:E6:55:1B:C9:40:93:FA:B9:9F:8A:B5:80:37:F2:DD:65:44:02 X509v3 Authority Key Identifier: keyid:01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f3:d6:7c:98:a3:3b:97:18:a8:0d:0b:78:1b:7d:1b:0f:f1: 0b:bd:b4:27:3e:87:02:e0:1b:89:68:6f:19:16:16:37:58:3f: cc:d2:06:43:26:53:a8:9b:19:dc:2f:fd:e1:fd:80:5c:8a:6d: 9e:b4:43:14:20:6e:5c:8e:c2:60:73:b9:1e:fc:40:ab:94:31: 65:f1:26:98:36:64:79:1f:5e:59:fc:e5:45:53:d1:fa:83:89: 67:52:7b:13:16:9a:7e:43:8e:b8:9c:8c:0a:df:75:4c:5b:cc: e3:ee:64:8d:c2:44:ca:3a:98:e8:84:a9:f7:a1:0f:04:8f:21: 31:c8:93:99:f4:b8:20:69:d8:73:6a:ea:41:21:55:4b:f4:dd: 48:27:56:fa:40:e7:b6:f6:0f:13:42:10:d5:67:1b:ca:03:aa: 4f:2b:26:5d:39:89:df:b5:60:2e:a6:30:c5:6c:6a:5e:f1:6f: 87:14:6e:b6:0f:1c:da:3f:28:86:a1:67:c0:ca:b4:4c:54:36: 27:5a:7c:7b:e3:eb:ff:10:99:ba:a5:a4:38:dd:c3:59:22:be: e2:c5:52:6c:d5:14:4b:f2:f2:01:aa:dd:1f:88:88:e9:04:2d: 4f:dc:d3:5e:2b:56:a2:d1:4c:35:e9:d8:06:5c:95:fa:0a:a7: 00:dd:c2:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LQN7VKgs6DgexOk/lYkyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxM2M3NDEzMjU5NzE2MmNkYjJkZDYzNzYwYWJkOTk3MWUz MGJmNjMwHhcNMjYwMTI1MjIwMTIwWhcNMjYwMTI2MjIwMTIwWjAzMTEwLwYDVQQD EyhmMWFkZTY1NTFiYzk0MDkzZmFiOTlmOGFiNTgwMzdmMmRkNjU0NDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEtNvUKnXCmNgGbxueg44g8zZ+2s WiElgSTBaYoiu+pqPrJSiq1hHFVBIWrggi+YLoJ7UmSINdmqfLYWR5z0aDlkHd81 huTm4Ji+vbrjK6xCeP3XrSWBebRRU7VlUHtpHHJ3PxjMmjgcf1+uD3fDfLF4mayC 77lwxxVPVSY944XoG6x9C5K4fbOlVRN0VLe2+64INtIRGFOAwnOYRndYGQrMmO4i 2LGUTbwyBoOWs83crYV+2r7S0spxmFzBB4YwEtMXUaRyoUjYDr11aQ8KLJrx7oa/ 1yJoexJfdW8zyMYuL6Pdto0lheytX6o5TrVSGl1BZIXSxfMWLSZ5NHd9bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGt5lUbyUCT+rmfirWAN/LdZUQCMB8GA1UdIwQY MBaAFAE8dBMllxYs2y3WN2Cr2ZceML9jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVR4MEV5V1hGaXpiTGRZM1lLdlpseDR3djJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYTZjODAtMDNhMS00YTRjLTkxY2Yt MDY4Yjc3ZTkwM2EwLzEvQVR4MEV5V1hGaXpiTGRZM1lLdlpseDR3djJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9jYTZjODAtMDNhMS00YTRjLTkxY2YtMDY4Yjc3ZTkwM2Ew LzEvQVR4MEV5V1hGaXpiTGRZM1lLdlpseDR3djJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/PWfJij O5cYqA0LeBt9Gw/xC720Jz6HAuAbiWhvGRYWN1g/zNIGQyZTqJsZ3C/94f2AXIpt nrRDFCBuXI7CYHO5HvxAq5QxZfEmmDZkeR9eWfzlRVPR+oOJZ1J7ExaafkOOuJyM Ct91TFvM4+5kjcJEyjqY6ISp96EPBI8hMciTmfS4IGnYc2rqQSFVS/TdSCdW+kDn tvYPE0IQ1WcbygOqTysmXTmJ37VgLqYwxWxqXvFvhxRutg8c2j8ohqFnwMq0TFQ2 J1p8e+Pr/xCZuqWkON3DWSK+4sVSbNUUS/LyAardH4iI6QQtT9zTXitWotFMNenY BlyV+gqnAN3CaQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:22:58 2026 by rpki-client