This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft File: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft (raw, json) Hash identifier: 8ddz+p75K66ye/ScZUQt/gSI6SzDbJ2V0NII+dHlQeM= Subject key identifier: 51:25:FE:29:50:E5:AC:01:AB:89:79:80:EC:EB:41:69:FA:F3:D3:44 Authority key identifier: 6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98 Certificate issuer: /CN=6ad38bd4c0d0e9f3028021984cd83556047f6398 Certificate serial: 019BF651D28C4F53FC406F71A8C9E214FC0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft Manifest number: 0162 Signing time: Sun 25 Jan 2026 18:01:55 +0000 Manifest this update: Sun 25 Jan 2026 18:01:55 +0000 Manifest next update: Mon 26 Jan 2026 18:01:55 +0000 Files and hashes: 1: Oqj1Ttz2i8mATEEUkFaL7xibRq4.roa (hash: o5FJc5XuskwqI7qAYVTfbbhlM+Mf4Qj9G3YZZAgXrmE=) 2: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl (hash: 1BsUurk6IPc6GIAmuy9jOsLO6llg0DntfJL4feC+uoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:d2:8c:4f:53:fc:40:6f:71:a8:c9:e2:14:fc:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ad38bd4c0d0e9f3028021984cd83556047f6398 Validity Not Before: Jan 25 18:01:55 2026 GMT Not After : Jan 26 18:01:55 2026 GMT Subject: CN=5125fe2950e5ac01ab897980eceb4169faf3d344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0f:ed:e8:9c:ce:ff:8a:48:05:4f:8d:fc:3a: 1b:08:d3:d3:6b:97:b6:2d:64:ec:8a:88:56:ef:39: 9a:fb:66:b0:9f:2c:80:82:77:20:1b:6f:b9:ce:be: b5:72:2d:b8:02:6b:99:45:b6:31:de:53:96:46:06: 48:11:51:14:ba:27:13:6e:7c:47:f4:d1:0b:0c:81: 06:e9:07:32:5e:ed:04:06:0d:4e:2e:f1:2e:6c:48: fb:13:5b:de:e7:02:83:4f:4d:1c:f6:3f:c7:63:fd: c0:c5:7a:ad:e8:db:10:c2:47:6a:fb:71:00:2d:f2: 52:30:3c:0c:86:81:ca:be:85:54:39:6e:ec:46:cb: bd:7d:b3:9e:12:d6:b3:29:53:94:c6:5c:a0:c2:2c: cb:75:28:ff:a7:ca:6b:6e:fd:43:42:5a:4f:56:a3: 8a:d5:c8:f9:b5:ae:86:89:e4:b4:c5:67:f5:6e:18: 34:48:0d:fe:0d:6a:99:99:a8:d8:7e:56:5f:1b:bc: 39:b3:af:ed:a5:66:1c:57:c7:f8:80:13:9e:33:a7: 0f:51:47:9b:78:9e:d5:bb:b2:79:3b:5d:4b:d2:be: 0c:c3:9a:c5:d4:19:75:9a:9d:11:01:e0:f7:c1:0d: 59:e6:4b:c6:2e:c6:8c:99:24:dc:04:e5:cd:61:09: ae:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:25:FE:29:50:E5:AC:01:AB:89:79:80:EC:EB:41:69:FA:F3:D3:44 X509v3 Authority Key Identifier: keyid:6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:ca:20:3d:a9:f9:69:6f:99:b4:76:f9:86:5e:9e:ba:2e:a0: af:7f:6f:4c:3b:3c:03:0d:55:40:91:9f:62:97:01:95:12:07: e1:66:37:ee:88:4b:65:d5:63:39:b0:c2:1f:a2:2c:23:e3:74: 1f:b6:ef:c6:9e:f5:e2:15:ba:4a:60:ce:3c:df:dd:27:de:08: fb:41:28:87:da:6e:a0:5d:6c:f5:eb:c3:ea:dd:1a:f0:c9:29: da:78:02:f5:7e:8e:8b:05:e0:c3:fa:2e:82:3a:b8:71:8a:23: f6:58:9b:a1:0c:3c:f6:35:36:b3:51:ac:19:31:92:a1:d2:0b: 68:0c:05:0d:14:c4:ae:9b:c7:87:f1:27:d8:5b:22:ae:89:22: 89:25:97:ae:54:e8:57:88:3f:db:45:a6:d0:4d:14:8c:a5:e3: 14:cf:3d:f4:dc:fe:22:7b:c0:1c:6e:1b:66:64:7c:15:11:f4: 44:05:c4:38:38:51:20:e7:56:f7:8c:0e:4f:2d:39:e7:cb:85: bf:4f:db:eb:e1:b7:d6:29:22:a0:67:cf:df:cd:ff:f2:98:d8: 5d:3b:2f:90:09:8c:70:b7:80:d7:76:98:c8:c3:55:96:77:3c: f8:00:7c:5c:05:13:e8:a7:cc:0f:29:af:17:0e:03:6b:a2:41: 58:f8:10:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UdKMT1P8QG9xqMniFPwOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZDM4YmQ0YzBkMGU5ZjMwMjgwMjE5ODRjZDgzNTU2MDQ3 ZjYzOTgwHhcNMjYwMTI1MTgwMTU1WhcNMjYwMTI2MTgwMTU1WjAzMTEwLwYDVQQD Eyg1MTI1ZmUyOTUwZTVhYzAxYWI4OTc5ODBlY2ViNDE2OWZhZjNkMzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg/t6JzO/4pIBU+N/DobCNPTa5e2 LWTsiohW7zma+2awnyyAgncgG2+5zr61ci24AmuZRbYx3lOWRgZIEVEUuicTbnxH 9NELDIEG6QcyXu0EBg1OLvEubEj7E1ve5wKDT00c9j/HY/3AxXqt6NsQwkdq+3EA LfJSMDwMhoHKvoVUOW7sRsu9fbOeEtazKVOUxlygwizLdSj/p8prbv1DQlpPVqOK 1cj5ta6GieS0xWf1bhg0SA3+DWqZmajYflZfG7w5s6/tpWYcV8f4gBOeM6cPUUeb eJ7Vu7J5O11L0r4Mw5rF1Bl1mp0RAeD3wQ1Z5kvGLsaMmSTcBOXNYQmumwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEl/ilQ5awBq4l5gOzrQWn689NEMB8GA1UdIwQY MBaAFGrTi9TA0OnzAoAhmEzYNVYEf2OYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXRPTDFNRFE2Zk1DZ0NHWVROZzFWZ1JfWTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85Mjg2MTgtMmE2OS00ZmJmLTk2Yzkt Y2U3MDAwNzRhN2ZjLzEvYXRPTDFNRFE2Zk1DZ0NHWVROZzFWZ1JfWTVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS85Mjg2MTgtMmE2OS00ZmJmLTk2YzktY2U3MDAwNzRhN2Zj LzEvYXRPTDFNRFE2Zk1DZ0NHWVROZzFWZ1JfWTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMogPan5 aW+ZtHb5hl6eui6gr39vTDs8Aw1VQJGfYpcBlRIH4WY37ohLZdVjObDCH6IsI+N0 H7bvxp714hW6SmDOPN/dJ94I+0Eoh9puoF1s9evD6t0a8Mkp2ngC9X6OiwXgw/ou gjq4cYoj9liboQw89jU2s1GsGTGSodILaAwFDRTErpvHh/En2FsirokiiSWXrlTo V4g/20Wm0E0UjKXjFM899Nz+InvAHG4bZmR8FRH0RAXEODhRIOdW94wOTy0558uF v0/b6+G31ikioGfP383/8pjYXTsvkAmMcLeA13aYyMNVlnc8+AB8XAUT6KfMDymv Fw4Da6JBWPgQkw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:27:42 2026 by rpki-client