This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft File: r_oT8a4FORYoDsaO4bCXb569Pqg.mft (raw, json) Hash identifier: 2OxxSn5zCms0dXpHRo2xqTv8nXiJca/MLomjpI70k98= Subject key identifier: C2:72:58:F2:17:A5:7A:D9:98:BC:7E:AC:BC:14:D8:4D:CA:56:0B:35 Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Certificate serial: 019BF46280BC172F2C57750CFB4C611BCC6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft Manifest number: 16BE Signing time: Sun 25 Jan 2026 09:00:54 +0000 Manifest this update: Sun 25 Jan 2026 09:00:54 +0000 Manifest next update: Mon 26 Jan 2026 09:00:54 +0000 Files and hashes: 1: 0XVL1DRx75lawy_xFW5mJsQGHSU.roa (hash: BELOWMUZ3k/HbcEYsajsYqC3iV1ihvP6qfT8um9x+wM=) 2: NGPMuWiFeknKXkwM3nxouEoeXyk.roa (hash: /tIDGmKeCM03QTIplLTQuWQW/TuDx6K9okVMkl68do8=) 3: XwluJi7gd_3bLnOhsXiaCK78UGQ.roa (hash: Vg2POX67iN2CB7gqcNW3j2zG6gzZxQs5uZV1T7iRkdU=) 4: dxXzSfG6tk-xq80nFlAI2V6Jabk.roa (hash: 7x8bVi5e937j8BHSzgO3xnPhQaxhg84Gj8bsT5Yzlz8=) 5: e9OVXRSbzNQf13RbQTlh13igYgM.roa (hash: r2tePYmkh+jGXI1UJWjqWc2c/q/1ZOM+w32r5mXWyNE=) 6: r_oT8a4FORYoDsaO4bCXb569Pqg.crl (hash: wpUr8u1/CuPlJw2aYxcbTX/niBFwopWjsgYMOQ9KA8k=) 7: sgQIBkFFp9Zlr_0nrRPVgJN0CEQ.roa (hash: S9CdDbT1ld2vusmvuJyBIT32yXTScPbapiKiAqKYB1k=) 8: tBE2DXCg9mo6HQNSmwQwa4AaEKw.roa (hash: /Uu7Wfq1cKcIhIObzC72sU7ALGmExyntY4syvrkFG/U=) 9: vhwquoEVrfx9ZFPHOlvKpZ1eMgQ.roa (hash: /W94YDKehwEOG4IGpuPHROQ+73Ocm3mWSD9qbK70W14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:80:bc:17:2f:2c:57:75:0c:fb:4c:61:1b:cc:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Validity Not Before: Jan 25 09:00:54 2026 GMT Not After : Jan 26 09:00:54 2026 GMT Subject: CN=c27258f217a57ad998bc7eacbc14d84dca560b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ba:48:eb:ed:06:64:df:b3:42:c1:29:f2:13: cc:36:63:5b:58:66:03:c5:ae:60:89:fe:77:ef:15: 51:67:9c:9c:a3:27:50:c4:a5:ad:4b:7a:e6:ec:f4: 86:3f:fd:49:2c:39:e0:a2:45:3a:83:35:f4:49:7a: 5f:6d:55:fa:76:b9:15:42:c7:d6:61:9c:f1:74:d0: 15:b6:36:dd:e1:e7:e0:a8:8b:89:be:a6:f7:52:24: ce:c4:51:31:45:1c:09:96:79:40:0c:96:95:0b:b9: c1:cd:85:a0:42:d2:fd:b2:ca:2f:cb:29:1d:7e:c7: 84:5b:95:f3:9c:6f:ff:11:c9:fd:1c:08:f4:48:b6: 5b:0a:7e:c3:a5:bf:5a:69:f9:74:5f:c8:20:e5:89: 37:a6:5c:e7:c5:0d:d0:b4:8d:e5:7e:df:fb:85:32: 80:fb:3d:bc:52:00:99:53:a6:a1:07:0a:6c:9b:ef: a1:80:3b:40:a1:8a:03:03:c1:8e:e2:23:22:bd:ee: c6:91:f5:77:af:b0:91:0d:f6:55:a8:a5:51:1e:19: 93:01:e5:83:4b:cb:2e:ca:1d:2c:53:d5:dc:52:bb: 16:ce:0b:0d:fc:e3:09:f2:0e:8a:f1:b0:ad:d8:00: b2:24:ee:0c:08:40:83:79:64:8b:9b:37:12:1b:86: 69:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:72:58:F2:17:A5:7A:D9:98:BC:7E:AC:BC:14:D8:4D:CA:56:0B:35 X509v3 Authority Key Identifier: keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:1d:cd:1d:1a:19:a1:62:01:4d:56:8c:dd:a8:9c:bf:cd:77: b2:b4:2d:78:77:d1:12:78:39:04:0a:8f:6f:62:33:03:cd:1f: 26:b3:56:2b:5c:54:ef:6b:cf:f5:0f:70:0a:7c:86:a0:09:be: eb:4f:90:98:a1:a6:b9:ca:7f:c7:6d:ac:77:e9:3c:30:db:48: 3a:88:96:cb:af:ac:e3:5f:bb:e2:5c:39:2b:52:c3:e5:a9:62: 1b:35:63:55:d6:39:87:56:e1:3a:71:3c:50:5e:f8:5a:93:c0: ee:65:f0:a0:a3:ba:9a:c9:d9:df:07:8a:71:59:6a:67:21:1b: ec:0a:7e:c5:74:1c:ee:be:be:9a:f7:b1:37:e7:0d:62:6a:a8: 22:fd:38:65:32:74:e0:b4:2b:9b:43:4f:05:51:e4:ca:dd:6c: e5:67:f0:74:00:58:e2:4a:36:1a:1a:5e:b6:0b:34:36:d1:c0: 19:c2:28:3d:5d:73:98:8a:c1:1b:80:57:19:2a:92:19:08:10: 10:6b:cb:88:46:30:a9:9e:a8:14:90:42:bb:26:47:09:77:5e: 28:8c:d2:07:c0:6e:bc:d1:f1:51:03:40:06:bd:b6:dc:5f:64: 4c:bf:e5:c2:11:97:d3:f5:7c:ea:6d:1e:b8:a1:0f:e8:02:33: bb:33:2b:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YoC8Fy8sV3UM+0xhG8xuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZmExM2YxYWUwNTM5MTYyODBlYzY4ZWUxYjA5NzZmOWVi ZDNlYTgwHhcNMjYwMTI1MDkwMDU0WhcNMjYwMTI2MDkwMDU0WjAzMTEwLwYDVQQD EyhjMjcyNThmMjE3YTU3YWQ5OThiYzdlYWNiYzE0ZDg0ZGNhNTYwYjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLpI6+0GZN+zQsEp8hPMNmNbWGYD xa5gif537xVRZ5ycoydQxKWtS3rm7PSGP/1JLDngokU6gzX0SXpfbVX6drkVQsfW YZzxdNAVtjbd4efgqIuJvqb3UiTOxFExRRwJlnlADJaVC7nBzYWgQtL9ssovyykd fseEW5XznG//Ecn9HAj0SLZbCn7Dpb9aafl0X8gg5Yk3plznxQ3QtI3lft/7hTKA +z28UgCZU6ahBwpsm++hgDtAoYoDA8GO4iMive7GkfV3r7CRDfZVqKVRHhmTAeWD S8suyh0sU9XcUrsWzgsN/OMJ8g6K8bCt2ACyJO4MCECDeWSLmzcSG4ZptQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJyWPIXpXrZmLx+rLwU2E3KVgs1MB8GA1UdIwQY MBaAFK/6E/GuBTkWKA7GjuGwl2+evT6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAt NDc4YzJjOGNiMmEwLzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAtNDc4YzJjOGNiMmEw LzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyh3NHRoZ oWIBTVaM3aicv813srQteHfREng5BAqPb2IzA80fJrNWK1xU72vP9Q9wCnyGoAm+ 60+QmKGmucp/x22sd+k8MNtIOoiWy6+s41+74lw5K1LD5aliGzVjVdY5h1bhOnE8 UF74WpPA7mXwoKO6msnZ3weKcVlqZyEb7Ap+xXQc7r6+mvexN+cNYmqoIv04ZTJ0 4LQrm0NPBVHkyt1s5WfwdABY4ko2Ghpetgs0NtHAGcIoPV1zmIrBG4BXGSqSGQgQ EGvLiEYwqZ6oFJBCuyZHCXdeKIzSB8BuvNHxUQNABr223F9kTL/lwhGX0/V86m0e uKEP6AIzuzMrEg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:12:32 2026 by rpki-client