This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft File: AOT2p3Not87P5nIgtDZXax4Aiuw.mft (raw, json) Hash identifier: FemKik7F+6cXUOb5lnzpvIwGdFOOqRhw+x7cKUPJdXI= Subject key identifier: 2D:29:57:D3:3B:84:ED:17:30:86:FD:D6:C8:09:C7:82:8F:73:4F:65 Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec Certificate serial: 019C26986A472BF2E662D16D0FE14E5C79F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft Manifest number: 1902 Signing time: Wed 04 Feb 2026 03:00:48 +0000 Manifest this update: Wed 04 Feb 2026 03:00:48 +0000 Manifest next update: Thu 05 Feb 2026 03:00:48 +0000 Files and hashes: 1: 1-7-GRl1DpJL9MX_Eh7vVlgQAtds.roa (hash: qBQ+Yv34RT+76LqwEUvZMWK4vq87p/Tm5N2E03sJUtE=) 2: AOT2p3Not87P5nIgtDZXax4Aiuw.crl (hash: VDIS2K5YmerMO6WpOmlMj/s7IpiTlXRmTF8FurJ2KIY=) 3: CP1700xQhoIo0eqZb96w49fwMZU.roa (hash: FhGMMmXWb4O7zbwANRuKCF/ES8PwzOmEkZV99iTN5xU=) 4: H0mOY9wuLVETq2ln9i8nsRGizPs.roa (hash: f6tqfXk1h6HwESq3+qY8gA0p10qoZtvqkambfiIyPc4=) 5: MQ0e7OQgina0hHLbzkJJI7ocRMY.roa (hash: lYlPT7y2KTJ0qjKzQaLtDJlIn+M8xo18ZCJuzXN583Y=) 6: VcGOwSBLa8MeclenBwYCnJTkc6Q.roa (hash: ZpKqr8OOjlncepBvaT8KeQio9IThw68qGgH8coHhuVI=) 7: a7fmewR9JdjnsMaHhIpEnMvRrtE.roa (hash: i7/n8DiKsj3BxkwJUc52TE1W/4S7Doq4RW4ZXouA4BQ=) 8: gF0x-IgTBvCJCERAByN93AH9MjM.roa (hash: f9L9sZ2MryoARd93KF5kcE6ImNuSL3mNiWJ8yZc3d58=) 9: hGF5HckbV_mO1zNnnUvLaxvGgg0.roa (hash: LswWVKDsb8V0ubfBEeUCi7BkiOP6J97pjosqCGNORUk=) 10: oPPgaBYxfthIjxyRNKKvuQhADcA.roa (hash: vJpx4imZl2f0ZsJVLjSi4WZMmzQUNNlQIXHfoEUu3/k=) 11: tDS2Cs2obRP0GxSw9_zcJ3O6_H8.roa (hash: 6+3w2X7QmyZajlkvHT3Z32O7WpWvoPyxaW4Oqr2oNl8=) 12: v3K9UBCZQXetZHCASn_v-Er6z80.roa (hash: M01ADTQv5+WF8EwvS7wZ9W7tolykwshPsb2JjYqw3EQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:26:98:6a:47:2b:f2:e6:62:d1:6d:0f:e1:4e:5c:79:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec Validity Not Before: Feb 4 03:00:48 2026 GMT Not After : Feb 5 03:00:48 2026 GMT Subject: CN=2d2957d33b84ed173086fdd6c809c7828f734f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:c1:fd:77:f2:aa:e9:77:f9:3d:62:64:90: ca:43:47:4c:67:e2:61:c9:52:92:8a:a5:c5:f5:36: f2:7e:36:30:0e:1a:08:92:bc:92:15:df:f1:4a:92: 36:6f:78:4c:48:27:e0:67:7a:44:31:41:56:25:8e: 97:4d:5c:74:cb:74:45:d3:d7:32:78:28:8a:77:b7: 53:7c:2a:90:e7:39:cd:6f:4c:2b:a3:5a:5b:d8:c0: c9:03:0f:d2:e0:39:90:a9:f2:d9:63:ea:d5:30:83: dc:a0:06:a4:a8:c3:ff:c8:55:68:39:ee:86:62:6c: 0e:cc:e6:95:e0:5a:55:85:b3:39:95:59:7a:ce:0e: cc:4f:12:06:9b:53:6f:06:12:bd:50:28:1f:3b:59: 6a:e8:c6:75:bb:8c:e8:7b:8d:09:72:a9:83:ba:e0: 04:7d:58:04:6b:46:bf:ea:66:01:bf:cb:7e:35:df: 37:23:1e:b8:b9:5d:8c:54:1e:0a:53:55:06:35:bf: 80:56:3d:d1:18:96:3b:34:0c:3e:f1:47:af:28:44: dd:b3:76:b0:5a:3f:8a:72:b2:1f:bc:1e:4f:9b:ce: b9:d4:97:de:3f:55:2c:71:3b:d6:3a:63:ed:1c:e9: 9a:c8:45:8a:40:ff:62:b9:57:3f:88:91:14:65:a7: 10:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:29:57:D3:3B:84:ED:17:30:86:FD:D6:C8:09:C7:82:8F:73:4F:65 X509v3 Authority Key Identifier: keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:e5:8e:d4:8c:e6:0d:b7:ac:f1:3b:50:cb:99:89:3b:8f:86: f9:aa:43:fb:07:55:1e:03:f8:17:ce:84:78:6c:89:e6:b0:e0: be:cd:a2:22:15:cb:6e:23:3d:ad:7e:d2:78:b5:7c:2e:c4:63: 12:2a:6a:c2:4f:a6:cc:80:c7:7b:3a:ca:59:05:49:1c:2f:fb: bc:94:1e:da:26:e7:30:22:91:db:ab:da:5f:b3:e9:bb:78:54: 29:bc:db:b9:b0:30:ae:0b:b8:5f:7c:62:63:90:bb:2a:9e:d7: c8:fb:46:52:b4:ff:46:a3:52:2e:fc:74:2f:cf:86:cc:b1:7d: dd:50:21:7e:55:30:da:34:f8:30:9d:55:5c:b3:e3:f4:77:b5: 58:a1:39:48:f9:c0:8f:58:7a:b1:69:03:91:88:15:64:9c:46: 4e:7c:ce:f8:3a:e9:f0:4d:82:97:96:4c:ca:c1:cf:24:7d:dc: 7c:b6:63:0e:9a:ba:93:9d:ec:34:53:df:f2:d9:a4:34:af:09: f7:be:44:c7:65:e6:3d:96:10:6d:df:9b:51:84:4b:79:26:9b: 2c:ff:23:7c:d9:2a:6e:41:7e:f3:46:e0:f3:f1:26:6b:d6:1b: 41:10:68:a2:de:c2:6c:51:8a:9d:4e:e7:52:fb:89:83:de:45: 07:5d:82:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwmmGpHK/LmYtFtD+FOXHn0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTRmNmE3NzM2OGI3Y2VjZmU2NzIyMGI0MzY1NzZiMWUw MDhhZWMwHhcNMjYwMjA0MDMwMDQ4WhcNMjYwMjA1MDMwMDQ4WjAzMTEwLwYDVQQD EygyZDI5NTdkMzNiODRlZDE3MzA4NmZkZDZjODA5Yzc4MjhmNzM0ZjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHnB/Xfyqul3+T1iZJDKQ0dMZ+Jh yVKSiqXF9TbyfjYwDhoIkrySFd/xSpI2b3hMSCfgZ3pEMUFWJY6XTVx0y3RF09cy eCiKd7dTfCqQ5znNb0wro1pb2MDJAw/S4DmQqfLZY+rVMIPcoAakqMP/yFVoOe6G YmwOzOaV4FpVhbM5lVl6zg7MTxIGm1NvBhK9UCgfO1lq6MZ1u4zoe40JcqmDuuAE fVgEa0a/6mYBv8t+Nd83Ix64uV2MVB4KU1UGNb+AVj3RGJY7NAw+8UevKETds3aw Wj+KcrIfvB5Pm8651JfeP1UscTvWOmPtHOmayEWKQP9iuVc/iJEUZacQyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0pV9M7hO0XMIb91sgJx4KPc09lMB8GA1UdIwQY MBaAFADk9qdzaLfOz+ZyILQ2V2seAIrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMt YjA3ZDg0MTZhZTRhLzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82NTJkYTktYWZjNC00ZTIwLTgyZmMtYjA3ZDg0MTZhZTRh LzEvQU9UMnAzTm90ODdQNW5JZ3REWlhheDRBaXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAreWO1Izm Dbes8TtQy5mJO4+G+apD+wdVHgP4F86EeGyJ5rDgvs2iIhXLbiM9rX7SeLV8LsRj Eipqwk+mzIDHezrKWQVJHC/7vJQe2ibnMCKR26vaX7Ppu3hUKbzbubAwrgu4X3xi Y5C7Kp7XyPtGUrT/RqNSLvx0L8+GzLF93VAhflUw2jT4MJ1VXLPj9He1WKE5SPnA j1h6sWkDkYgVZJxGTnzO+Drp8E2Cl5ZMysHPJH3cfLZjDpq6k53sNFPf8tmkNK8J 975Ex2XmPZYQbd+bUYRLeSabLP8jfNkqbkF+80bg8/Ema9YbQRBoot7CbFGKnU7n UvuJg95FB12CIA== -----END CERTIFICATE-----Generated at Wed Feb 4 08:29:37 2026 by rpki-client