This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft File: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft (raw, json) Hash identifier: 3RvNo39ZJtgnZNsDfQdDXLXnAZrdXTHNlmosOg5BP14= Subject key identifier: 18:65:2D:44:35:0A:3E:D4:E9:B1:A1:80:AE:F1:7B:4D:07:96:A7:7C Authority key identifier: 6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98 Certificate issuer: /CN=6ad38bd4c0d0e9f3028021984cd83556047f6398 Certificate serial: 019C2C640ED4627A1ADBA140DA808B3154B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft Manifest number: 017E Signing time: Thu 05 Feb 2026 06:01:20 +0000 Manifest this update: Thu 05 Feb 2026 06:01:20 +0000 Manifest next update: Fri 06 Feb 2026 06:01:20 +0000 Files and hashes: 1: Oqj1Ttz2i8mATEEUkFaL7xibRq4.roa (hash: o5FJc5XuskwqI7qAYVTfbbhlM+Mf4Qj9G3YZZAgXrmE=) 2: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl (hash: ce5ILopSPzFsJqHoZsw+E9z0xgJCzKuWA0lbD5tk9GE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2c:64:0e:d4:62:7a:1a:db:a1:40:da:80:8b:31:54:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ad38bd4c0d0e9f3028021984cd83556047f6398 Validity Not Before: Feb 5 06:01:20 2026 GMT Not After : Feb 6 06:01:20 2026 GMT Subject: CN=18652d44350a3ed4e9b1a180aef17b4d0796a77c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e1:26:22:41:b7:f2:1f:17:77:94:0d:1b:51: 65:58:d2:30:48:eb:87:16:af:31:99:aa:7f:b9:38: 29:fe:76:4d:ca:b2:76:ae:0b:9a:5d:36:1e:55:78: 36:32:2e:fd:fc:15:35:2f:b5:81:38:74:d5:68:49: c8:1c:c9:07:2e:2f:c9:82:cc:8d:b5:2e:e0:70:89: e5:0e:0a:e6:15:af:9d:29:42:6a:6f:b3:27:a3:83: 01:29:5a:80:ff:09:23:b0:45:cf:29:6f:33:13:88: 27:db:8f:21:c0:44:95:15:58:0b:1e:44:0f:29:a5: 7f:b2:f4:20:a7:58:b3:1c:a3:3a:67:47:33:d3:2e: 9c:32:50:60:cb:c5:fe:8e:92:88:02:81:cf:1f:c0: fa:85:6e:68:65:c6:6e:d6:74:3c:fa:e4:06:c6:84: c5:30:5f:fd:1b:6c:db:45:a7:a8:35:44:2f:88:1c: 54:cc:af:2c:00:89:99:4f:43:a0:f3:08:19:7d:6e: 38:cf:84:6c:4f:d2:60:a8:52:69:6d:08:1e:2a:2d: a9:9e:6b:af:c9:b0:1f:70:25:84:99:e6:38:89:02: 80:d7:01:54:dc:d7:ab:18:57:2d:e8:50:55:de:e7: d0:2e:13:b1:99:6a:22:4b:14:00:6a:f7:a6:0c:29: 02:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:65:2D:44:35:0A:3E:D4:E9:B1:A1:80:AE:F1:7B:4D:07:96:A7:7C X509v3 Authority Key Identifier: keyid:6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:9b:ed:e5:ef:59:d3:80:cd:7e:aa:02:b6:bc:aa:75:c8:63: 12:c2:38:56:97:50:70:86:72:23:e8:c9:e0:23:7a:31:6c:e1: e9:88:86:d7:15:14:e2:2d:15:04:8b:48:ac:85:be:77:76:93: 3e:89:2d:01:1a:2b:3a:d0:9e:22:c2:46:3c:11:a8:69:bf:b0: 2e:5a:28:e4:be:4e:49:99:43:5e:98:36:2e:68:7d:df:58:d5: ac:45:96:02:ba:29:a2:14:e0:27:d3:d4:32:47:8d:42:8f:f4: 66:d2:d3:37:c0:25:a9:25:65:63:09:7d:b8:91:8e:20:5f:0b: 29:3a:1e:da:80:c9:8a:3a:b1:db:cb:fd:ad:85:9e:49:1c:7f: 9d:8d:1f:ad:64:09:bf:83:d2:18:4b:f5:91:ea:92:dc:04:4b: 4d:91:12:7d:0b:37:95:a5:c4:53:dc:ca:30:dd:fc:c0:71:2b: 77:79:40:93:a5:2b:4b:fd:41:8b:35:d0:ce:10:92:fb:09:36: 3e:d3:c0:62:47:5d:4e:4b:f0:68:94:eb:c2:19:d9:ce:13:44: 5e:9b:a0:03:4b:32:fa:c0:c3:ee:0b:fd:b1:bf:b1:3b:39:25: e7:a6:10:60:ac:61:99:a6:79:66:f7:13:31:4d:3b:ee:82:29: 30:9c:ac:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwsZA7UYnoa26FA2oCLMVS2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZDM4YmQ0YzBkMGU5ZjMwMjgwMjE5ODRjZDgzNTU2MDQ3 ZjYzOTgwHhcNMjYwMjA1MDYwMTIwWhcNMjYwMjA2MDYwMTIwWjAzMTEwLwYDVQQD EygxODY1MmQ0NDM1MGEzZWQ0ZTliMWExODBhZWYxN2I0ZDA3OTZhNzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+EmIkG38h8Xd5QNG1FlWNIwSOuH Fq8xmap/uTgp/nZNyrJ2rguaXTYeVXg2Mi79/BU1L7WBOHTVaEnIHMkHLi/JgsyN tS7gcInlDgrmFa+dKUJqb7Mno4MBKVqA/wkjsEXPKW8zE4gn248hwESVFVgLHkQP KaV/svQgp1izHKM6Z0cz0y6cMlBgy8X+jpKIAoHPH8D6hW5oZcZu1nQ8+uQGxoTF MF/9G2zbRaeoNUQviBxUzK8sAImZT0Og8wgZfW44z4RsT9JgqFJpbQgeKi2pnmuv ybAfcCWEmeY4iQKA1wFU3NerGFct6FBV3ufQLhOxmWoiSxQAavemDCkCVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhlLUQ1Cj7U6bGhgK7xe00Hlqd8MB8GA1UdIwQY MBaAFGrTi9TA0OnzAoAhmEzYNVYEf2OYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXRPTDFNRFE2Zk1DZ0NHWVROZzFWZ1JfWTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85Mjg2MTgtMmE2OS00ZmJmLTk2Yzkt Y2U3MDAwNzRhN2ZjLzEvYXRPTDFNRFE2Zk1DZ0NHWVROZzFWZ1JfWTVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS85Mjg2MTgtMmE2OS00ZmJmLTk2YzktY2U3MDAwNzRhN2Zj LzEvYXRPTDFNRFE2Zk1DZ0NHWVROZzFWZ1JfWTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxpvt5e9Z 04DNfqoCtryqdchjEsI4VpdQcIZyI+jJ4CN6MWzh6YiG1xUU4i0VBItIrIW+d3aT PoktARorOtCeIsJGPBGoab+wLloo5L5OSZlDXpg2Lmh931jVrEWWAropohTgJ9PU MkeNQo/0ZtLTN8AlqSVlYwl9uJGOIF8LKToe2oDJijqx28v9rYWeSRx/nY0frWQJ v4PSGEv1keqS3ARLTZESfQs3laXEU9zKMN38wHErd3lAk6UrS/1BizXQzhCS+wk2 PtPAYkddTkvwaJTrwhnZzhNEXpugA0sy+sDD7gv9sb+xOzkl56YQYKxhmaZ5ZvcT MU077oIpMJyspg== -----END CERTIFICATE-----Generated at Thu Feb 5 12:28:32 2026 by rpki-client