This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft File: aotaN08UbXtqbcfTFujrsS3upnA.mft (raw, json) Hash identifier: e5HmLoxjzwk7aHjyEPz54Xe1W/t8JXMeOw/CoJYYiYU= Subject key identifier: EE:A6:0C:64:E5:1B:44:30:74:2C:0D:62:66:DE:9C:CC:F4:57:3A:20 Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70 Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670 Certificate serial: 019BF619B0C01693056E1790C0B2619BB511 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft Manifest number: 0EC0 Signing time: Sun 25 Jan 2026 17:00:37 +0000 Manifest this update: Sun 25 Jan 2026 17:00:37 +0000 Manifest next update: Mon 26 Jan 2026 17:00:37 +0000 Files and hashes: 1: aotaN08UbXtqbcfTFujrsS3upnA.crl (hash: 3st8snCnfhZzowHj5LnL6Z+FhYzAAsETpcYc1qlYtTo=) 2: bet4fdymyOIlEb-62LJXEqjZz4M.roa (hash: z3hr8kxRBm3emLdFWmkitNGZ2vCXqhwRUzbp9y48TSg=) 3: xzOtkf3m_unGZDJuyTmOZRDo1vs.roa (hash: AqWTAJg+/JR+tTmpK3jZUrDvB6ISeUjMegyS/xS/c3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:b0:c0:16:93:05:6e:17:90:c0:b2:61:9b:b5:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670 Validity Not Before: Jan 25 17:00:37 2026 GMT Not After : Jan 26 17:00:37 2026 GMT Subject: CN=eea60c64e51b4430742c0d6266de9cccf4573a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a1:0a:99:0b:fa:cc:7c:0a:4f:a2:76:11:03: 12:89:b5:bb:e3:57:12:d9:5c:ef:97:1f:43:e8:06: d0:ae:48:53:47:14:74:25:43:5d:6f:29:7c:6f:43: 15:3c:02:1b:eb:88:14:16:e3:90:21:bb:a0:32:64: 12:c3:70:e6:43:3d:f8:b2:85:dc:fe:7e:57:e9:4b: b4:7d:77:03:30:57:ed:17:82:5d:b8:c2:27:60:9d: 60:9b:86:aa:ce:94:aa:b8:8b:13:54:f1:3a:83:ec: 86:70:65:71:03:62:ee:40:af:55:8e:82:8c:e6:c7: 4f:df:5a:39:25:00:a4:64:b2:18:bd:d5:14:65:89: eb:2e:8e:43:0d:6f:16:db:07:d4:9b:97:fa:6d:7e: 50:f6:0a:6c:0a:9a:d8:18:d3:50:d8:8b:32:62:f4: 5d:93:bf:2f:af:3c:60:be:46:12:08:04:d3:9b:ac: 01:30:06:92:81:82:04:30:26:ce:ab:ad:47:45:ce: 0e:7d:5a:cb:3a:cb:86:92:d3:ff:2b:be:ef:9a:c9: 30:45:19:65:82:cc:66:b9:40:87:e4:4b:a7:01:d1: d0:b5:4d:7f:1d:92:d1:d8:59:5c:7a:64:38:96:1d: b9:f6:fe:36:83:e8:91:e9:35:f6:09:3b:c3:56:a3: f1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A6:0C:64:E5:1B:44:30:74:2C:0D:62:66:DE:9C:CC:F4:57:3A:20 X509v3 Authority Key Identifier: keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:ef:a4:4f:83:98:9a:09:b4:9e:89:b0:fb:92:73:6d:cf:34: c4:6a:d3:df:28:62:50:89:08:09:ee:9d:d3:6d:f7:49:a9:f7: 1b:9a:fa:d8:b0:cb:47:af:3f:bc:d0:57:70:50:c9:85:5b:67: 6b:87:13:75:d7:a0:1e:1e:b8:8c:22:30:72:14:e0:72:1a:f1: 83:33:3a:14:87:53:aa:0e:f1:9c:07:f0:a3:ed:97:ce:2c:57: e7:ef:3b:49:3d:7d:47:0d:73:ee:69:97:fa:ef:da:92:b7:14: db:41:6b:78:05:ab:10:98:50:eb:7e:83:bb:96:fb:4e:4e:d7: ce:15:80:22:e9:92:dc:6d:5f:19:61:a3:0e:5e:ea:b8:c1:16: 92:6c:3c:88:47:ea:40:3c:87:3c:5d:73:5f:49:1e:fb:57:0c: 70:f6:ba:97:da:41:21:91:2f:84:7d:f2:3c:69:5f:ce:c1:b5: 66:04:46:50:e3:db:94:81:df:17:5d:f2:c1:4b:fc:91:a7:58: 43:19:10:1e:0a:55:c9:ef:a1:2e:98:a2:40:fb:e0:d5:e2:cc: e1:15:ea:ec:13:2a:10:a7:8e:7b:87:9b:96:14:5b:20:2c:1c: dc:34:6f:1f:1f:7c:6a:b9:78:8d:8a:05:85:44:d6:6e:42:97: bf:0b:b2:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GbDAFpMFbheQwLJhm7URMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhOGI1YTM3NGYxNDZkN2I2YTZkYzdkMzE2ZThlYmIxMmRl ZWE2NzAwHhcNMjYwMTI1MTcwMDM3WhcNMjYwMTI2MTcwMDM3WjAzMTEwLwYDVQQD EyhlZWE2MGM2NGU1MWI0NDMwNzQyYzBkNjI2NmRlOWNjY2Y0NTczYTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraEKmQv6zHwKT6J2EQMSibW741cS 2Vzvlx9D6AbQrkhTRxR0JUNdbyl8b0MVPAIb64gUFuOQIbugMmQSw3DmQz34soXc /n5X6Uu0fXcDMFftF4JduMInYJ1gm4aqzpSquIsTVPE6g+yGcGVxA2LuQK9VjoKM 5sdP31o5JQCkZLIYvdUUZYnrLo5DDW8W2wfUm5f6bX5Q9gpsCprYGNNQ2IsyYvRd k78vrzxgvkYSCATTm6wBMAaSgYIEMCbOq61HRc4OfVrLOsuGktP/K77vmskwRRll gsxmuUCH5EunAdHQtU1/HZLR2FlcemQ4lh259v42g+iR6TX2CTvDVqPxdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6mDGTlG0QwdCwNYmbenMz0VzogMB8GA1UdIwQY MBaAFGqLWjdPFG17am3H0xbo67Et7qZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQt NDQyNDFmZWMxYTlmLzEvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQtNDQyNDFmZWMxYTlm LzEvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAou+kT4OY mgm0nomw+5Jzbc80xGrT3yhiUIkICe6d0233San3G5r62LDLR68/vNBXcFDJhVtn a4cTddegHh64jCIwchTgchrxgzM6FIdTqg7xnAfwo+2XzixX5+87ST19Rw1z7mmX +u/akrcU20FreAWrEJhQ636Du5b7Tk7XzhWAIumS3G1fGWGjDl7quMEWkmw8iEfq QDyHPF1zX0ke+1cMcPa6l9pBIZEvhH3yPGlfzsG1ZgRGUOPblIHfF13ywUv8kadY QxkQHgpVye+hLpiiQPvg1eLM4RXq7BMqEKeOe4eblhRbICwc3DRvHx98arl4jYoF hUTWbkKXvwuyJA== -----END CERTIFICATE-----Generated at Mon Jan 26 00:19:34 2026 by rpki-client