This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft File: ADoNFLA-o0Lt47L0mtjKor904XA.mft (raw, json) Hash identifier: 0IkHoeV7nFF4PTHzx9KbVr2y8DgKAeQU17cmaF+YS3U= Subject key identifier: 00:AA:F9:7E:DE:E2:30:AF:3B:CE:AB:C0:AF:4C:77:13:18:BB:71:18 Authority key identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70 Certificate issuer: /CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170 Certificate serial: 019BF8AD179541236CC80874414F50D7AA09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft Manifest number: 177D Signing time: Mon 26 Jan 2026 05:00:51 +0000 Manifest this update: Mon 26 Jan 2026 05:00:51 +0000 Manifest next update: Tue 27 Jan 2026 05:00:51 +0000 Files and hashes: 1: ADoNFLA-o0Lt47L0mtjKor904XA.crl (hash: tuNQZrYWCB151O8AS0F2s7X9Bnlr3peAYJQvBZxztYc=) 2: u_0x-93wRipLEsiXiJYw22k7HiU.roa (hash: +BCrolIUDpbIUCoEtT/iRhQzDMhtVgzJiegCAfiFXec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:17:95:41:23:6c:c8:08:74:41:4f:50:d7:aa:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170 Validity Not Before: Jan 26 05:00:51 2026 GMT Not After : Jan 27 05:00:51 2026 GMT Subject: CN=00aaf97edee230af3bceabc0af4c771318bb7118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e7:0b:80:54:97:59:9f:46:22:f7:81:7c:7a: 2e:79:74:55:6e:c8:87:90:bc:e8:49:e4:f2:85:d4: 1b:cf:fb:67:75:62:9a:e9:87:55:d0:67:fb:13:5e: 4b:35:29:a5:f6:22:08:86:f6:4b:ef:0b:36:0b:b5: d4:a4:6c:0f:22:80:da:cb:db:4b:5f:c1:f7:08:19: 8f:b0:66:33:ac:8a:5b:f1:08:8b:92:7c:f3:04:38: fd:68:a9:72:e0:ec:8f:03:b4:1e:04:80:6b:4b:98: a5:43:c6:0e:46:62:60:a9:ee:a5:51:47:75:c0:ad: b2:ff:4e:ff:8f:12:d9:43:60:45:da:4a:f3:b1:5c: b1:c9:e8:d5:3b:ac:d2:99:9c:19:11:91:d5:9d:7e: 39:fa:20:95:98:80:95:9b:c7:a7:6b:30:f0:33:01: ec:b3:84:24:02:b6:41:4d:8f:c1:c9:64:0d:00:19: a1:52:0e:70:28:40:eb:61:19:ce:cb:2e:86:a1:67: 0b:81:7d:4d:39:78:76:e6:0f:8f:8b:e0:dd:97:75: a2:96:05:ff:f2:79:61:26:7b:04:fa:47:75:e1:fe: a7:7b:2c:97:c5:65:7a:60:79:c9:e2:a3:d8:7f:49: 5a:c8:c3:21:6e:7e:68:1f:a9:6d:1a:59:9f:72:c8: 7e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AA:F9:7E:DE:E2:30:AF:3B:CE:AB:C0:AF:4C:77:13:18:BB:71:18 X509v3 Authority Key Identifier: keyid:00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:3f:51:f2:e5:d7:79:19:f0:e3:0f:a9:6e:8d:87:36:d4:ea: 7d:ca:ba:3b:5d:16:3f:ad:55:08:54:c5:c8:fa:61:40:53:0f: a0:73:7d:56:c8:d3:c0:fa:9c:93:69:26:42:5f:a6:ed:8d:8d: 11:99:16:79:63:4b:94:ea:9a:a1:b3:6b:ec:ed:b1:9f:58:69: e9:88:d7:11:4d:f5:72:40:7f:1c:c2:a7:82:d0:48:fe:8e:31: 33:44:63:a4:d3:06:7a:e7:30:2f:25:b5:d6:27:8a:30:ee:06: c1:31:cf:e4:a6:5e:4f:91:c3:12:61:76:b1:ca:b9:9d:86:07: 0e:89:16:5d:48:1e:ce:be:65:31:f0:73:91:91:36:74:c7:2a: c5:0a:93:5d:58:3f:bd:99:1b:75:cc:7f:bf:6f:89:7a:d1:3c: d2:e6:f1:63:df:61:79:90:69:55:ad:77:5e:01:1b:fc:62:01: 9c:73:9a:4d:53:81:61:35:21:e7:7f:13:66:52:b3:ba:9b:74: 0e:2c:39:b1:83:45:66:26:dc:89:5b:2d:0e:ef:e4:35:80:f9: ed:c6:b7:c5:94:d9:f1:29:b9:02:25:22:6f:c9:0b:05:eb:cb: 2e:bd:3e:8d:b8:aa:19:96:87:6f:83:c4:2c:2f:3b:47:da:56: 00:0b:88:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rReVQSNsyAh0QU9Q16oJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwM2EwZDE0YjAzZWEzNDJlZGUzYjJmNDlhZDhjYWEyYmY3 NGUxNzAwHhcNMjYwMTI2MDUwMDUxWhcNMjYwMTI3MDUwMDUxWjAzMTEwLwYDVQQD EygwMGFhZjk3ZWRlZTIzMGFmM2JjZWFiYzBhZjRjNzcxMzE4YmI3MTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOcLgFSXWZ9GIveBfHoueXRVbsiH kLzoSeTyhdQbz/tndWKa6YdV0Gf7E15LNSml9iIIhvZL7ws2C7XUpGwPIoDay9tL X8H3CBmPsGYzrIpb8QiLknzzBDj9aKly4OyPA7QeBIBrS5ilQ8YORmJgqe6lUUd1 wK2y/07/jxLZQ2BF2krzsVyxyejVO6zSmZwZEZHVnX45+iCVmICVm8enazDwMwHs s4QkArZBTY/ByWQNABmhUg5wKEDrYRnOyy6GoWcLgX1NOXh25g+Pi+Ddl3WilgX/ 8nlhJnsE+kd14f6neyyXxWV6YHnJ4qPYf0layMMhbn5oH6ltGlmfcsh+hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACq+X7e4jCvO86rwK9MdxMYu3EYMB8GA1UdIwQY MBaAFAA6DRSwPqNC7eOy9JrYyqK/dOFwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYTI1MmEtYWY0Yi00ZWVhLWFjZGIt MmZkZDFmZDk5NjU3LzEvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zYTI1MmEtYWY0Yi00ZWVhLWFjZGItMmZkZDFmZDk5NjU3 LzEvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJz9R8uXX eRnw4w+pbo2HNtTqfcq6O10WP61VCFTFyPphQFMPoHN9VsjTwPqck2kmQl+m7Y2N EZkWeWNLlOqaobNr7O2xn1hp6YjXEU31ckB/HMKngtBI/o4xM0RjpNMGeucwLyW1 1ieKMO4GwTHP5KZeT5HDEmF2scq5nYYHDokWXUgezr5lMfBzkZE2dMcqxQqTXVg/ vZkbdcx/v2+JetE80ubxY99heZBpVa13XgEb/GIBnHOaTVOBYTUh538TZlKzupt0 Diw5sYNFZibciVstDu/kNYD57ca3xZTZ8Sm5AiUib8kLBevLLr0+jbiqGZaHb4PE LC87R9pWAAuIGg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:54 2026 by rpki-client