This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft File: atCw5EzIalF2lUfCKteWGEtUsJI.mft (raw, json) Hash identifier: 0iLmMgKmkacLOcOKPB+N1F6fvDKsTCNqfN0AC7g1h9M= Subject key identifier: 98:41:33:B4:C3:7F:83:3E:E6:37:DF:01:AF:66:22:4F:87:F1:03:BC Authority key identifier: 6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92 Certificate issuer: /CN=6ad0b0e44cc86a51769547c22ad796184b54b092 Certificate serial: 019BF9522C94593BB3DB7054999207055438 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft Manifest number: 07E8 Signing time: Mon 26 Jan 2026 08:01:10 +0000 Manifest this update: Mon 26 Jan 2026 08:01:10 +0000 Manifest next update: Tue 27 Jan 2026 08:01:10 +0000 Files and hashes: 1: atCw5EzIalF2lUfCKteWGEtUsJI.crl (hash: 1NZI9MpgEWd9p1hSzuEiKSHZTJtqq5CWvo52AZiOGXc=) 2: yfIVfxN62mXPNIQcBAIr1HDWsQ0.roa (hash: IDg/3WOtqztOAgh+Loowhsk9bIJzHnk5Pz6kWQuqSiQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:52:2c:94:59:3b:b3:db:70:54:99:92:07:05:54:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ad0b0e44cc86a51769547c22ad796184b54b092 Validity Not Before: Jan 26 08:01:10 2026 GMT Not After : Jan 27 08:01:10 2026 GMT Subject: CN=984133b4c37f833ee637df01af66224f87f103bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:93:78:d2:de:ae:ca:bf:c9:3d:8c:4a:c7:3d: 46:cc:92:cb:0f:74:56:e4:d0:02:c8:b7:4d:83:b2: 14:8d:5e:4d:8d:d0:a6:c5:56:5c:db:8c:95:10:34: a6:34:ae:bf:b9:02:d0:f3:5b:59:db:3a:fe:b9:2a: 25:93:07:3d:3d:c0:a6:42:8e:27:a8:b0:ad:7c:eb: 23:39:de:d2:d4:22:d2:82:3b:b9:0a:f2:87:df:6a: 21:90:2e:1f:57:41:db:df:37:23:57:3b:20:c4:4d: 74:e9:fc:98:3d:53:67:c6:f8:97:7e:5d:29:d8:27: 96:e3:ac:a0:f1:7d:b7:32:c9:86:44:7f:3c:58:50: 26:c4:2b:b4:9a:50:21:42:0e:63:e5:94:21:17:b5: a5:32:61:83:37:a4:bc:83:43:48:25:2c:36:d6:e2: a1:39:07:3e:b8:3c:84:52:37:96:88:76:04:86:d3: 59:2c:c4:c4:6e:66:ad:2b:b1:51:88:2e:ed:8a:4f: f6:bf:95:63:c3:68:ad:0e:66:d4:c6:e9:db:72:28: f5:5f:28:ab:ea:42:34:50:2c:06:e9:0b:f3:f1:1c: ef:70:b1:cd:bc:fd:01:16:19:86:d5:92:fb:41:1d: fa:eb:00:29:9e:60:a2:8e:6d:7a:11:2a:5d:b7:fc: d5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:41:33:B4:C3:7F:83:3E:E6:37:DF:01:AF:66:22:4F:87:F1:03:BC X509v3 Authority Key Identifier: keyid:6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:07:82:f5:0d:84:6d:4b:05:76:bd:91:50:55:3b:09:2d:9e: 6a:26:ba:ca:cb:08:6f:a5:27:de:62:d5:ac:9e:04:67:79:ae: 9a:d6:c4:43:ab:0d:17:e7:fe:46:fd:1a:61:3c:94:69:a2:51: 1c:d7:de:91:5c:8a:fd:29:b1:dc:44:2d:ee:20:37:e8:7e:96: be:99:ba:2b:c6:82:c3:45:60:72:3a:31:ef:2a:3d:c2:44:2d: a0:86:48:4d:35:05:2b:2e:aa:61:a5:45:34:26:f2:5d:3c:70: 6c:8d:67:a5:ad:60:8c:d8:b6:7f:92:da:79:82:f4:94:a6:5e: 0c:37:14:83:31:82:07:7d:0e:71:44:a4:fe:e3:33:ac:93:a6: 53:60:4d:b5:c8:12:a1:ba:e5:88:59:8d:02:85:28:f9:7b:77: e2:12:f6:db:7c:37:b1:32:49:3f:8e:80:3b:1d:4f:04:85:56: f3:36:60:5b:4b:4a:88:46:4e:23:b4:fb:e5:d0:74:62:e0:d2: 47:6a:48:b7:24:52:db:f9:1e:10:da:38:2b:12:76:82:47:63: a7:fa:af:d8:40:c1:2f:b0:db:46:f6:4f:a5:d8:f4:b7:39:c3: 41:af:3a:9a:f6:38:d8:ca:5c:b4:a7:2d:88:8e:9a:f7:de:75: 84:77:52:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UiyUWTuz23BUmZIHBVQ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZDBiMGU0NGNjODZhNTE3Njk1NDdjMjJhZDc5NjE4NGI1 NGIwOTIwHhcNMjYwMTI2MDgwMTEwWhcNMjYwMTI3MDgwMTEwWjAzMTEwLwYDVQQD Eyg5ODQxMzNiNGMzN2Y4MzNlZTYzN2RmMDFhZjY2MjI0Zjg3ZjEwM2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopN40t6uyr/JPYxKxz1GzJLLD3RW 5NACyLdNg7IUjV5NjdCmxVZc24yVEDSmNK6/uQLQ81tZ2zr+uSolkwc9PcCmQo4n qLCtfOsjOd7S1CLSgju5CvKH32ohkC4fV0Hb3zcjVzsgxE106fyYPVNnxviXfl0p 2CeW46yg8X23MsmGRH88WFAmxCu0mlAhQg5j5ZQhF7WlMmGDN6S8g0NIJSw21uKh OQc+uDyEUjeWiHYEhtNZLMTEbmatK7FRiC7tik/2v5Vjw2itDmbUxunbcij1Xyir 6kI0UCwG6Qvz8RzvcLHNvP0BFhmG1ZL7QR366wApnmCijm16ESpdt/zVcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhBM7TDf4M+5jffAa9mIk+H8QO8MB8GA1UdIwQY MBaAFGrQsORMyGpRdpVHwirXlhhLVLCSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXRDdzVFeklhbEYybFVmQ0t0ZVdHRXRVc0pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81YTFlZjctZjNhNC00NzNjLWE2OWMt NDgyMjVmMzExMWNmLzEvYXRDdzVFeklhbEYybFVmQ0t0ZVdHRXRVc0pJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81YTFlZjctZjNhNC00NzNjLWE2OWMtNDgyMjVmMzExMWNm LzEvYXRDdzVFeklhbEYybFVmQ0t0ZVdHRXRVc0pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgeC9Q2E bUsFdr2RUFU7CS2eaia6yssIb6Un3mLVrJ4EZ3mumtbEQ6sNF+f+Rv0aYTyUaaJR HNfekVyK/Smx3EQt7iA36H6Wvpm6K8aCw0Vgcjox7yo9wkQtoIZITTUFKy6qYaVF NCbyXTxwbI1npa1gjNi2f5LaeYL0lKZeDDcUgzGCB30OcUSk/uMzrJOmU2BNtcgS obrliFmNAoUo+Xt34hL223w3sTJJP46AOx1PBIVW8zZgW0tKiEZOI7T75dB0YuDS R2pItyRS2/keENo4KxJ2gkdjp/qv2EDBL7DbRvZPpdj0tznDQa86mvY42MpctKct iI6a9951hHdSKQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:27:37 2026 by rpki-client