This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft File: r_oT8a4FORYoDsaO4bCXb569Pqg.mft (raw, json) Hash identifier: 8+R2y70zbwmgenwRCyWdD2noWTuXxKsgNrDp/5/O6Gw= Subject key identifier: 6E:E8:AD:19:44:33:42:5D:1C:7D:CD:9F:A7:3A:80:B3:E0:D9:AF:3F Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Certificate serial: 019BF83F352902E57BACEAC0B43A0E5804BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft Manifest number: 16C0 Signing time: Mon 26 Jan 2026 03:00:50 +0000 Manifest this update: Mon 26 Jan 2026 03:00:50 +0000 Manifest next update: Tue 27 Jan 2026 03:00:50 +0000 Files and hashes: 1: 0XVL1DRx75lawy_xFW5mJsQGHSU.roa (hash: BELOWMUZ3k/HbcEYsajsYqC3iV1ihvP6qfT8um9x+wM=) 2: NGPMuWiFeknKXkwM3nxouEoeXyk.roa (hash: /tIDGmKeCM03QTIplLTQuWQW/TuDx6K9okVMkl68do8=) 3: XwluJi7gd_3bLnOhsXiaCK78UGQ.roa (hash: Vg2POX67iN2CB7gqcNW3j2zG6gzZxQs5uZV1T7iRkdU=) 4: dxXzSfG6tk-xq80nFlAI2V6Jabk.roa (hash: 7x8bVi5e937j8BHSzgO3xnPhQaxhg84Gj8bsT5Yzlz8=) 5: e9OVXRSbzNQf13RbQTlh13igYgM.roa (hash: r2tePYmkh+jGXI1UJWjqWc2c/q/1ZOM+w32r5mXWyNE=) 6: r_oT8a4FORYoDsaO4bCXb569Pqg.crl (hash: nhvu00t6vdsDL1KZtf1ySSyqls6B1NkmVTXHz31BRkU=) 7: sgQIBkFFp9Zlr_0nrRPVgJN0CEQ.roa (hash: S9CdDbT1ld2vusmvuJyBIT32yXTScPbapiKiAqKYB1k=) 8: tBE2DXCg9mo6HQNSmwQwa4AaEKw.roa (hash: /Uu7Wfq1cKcIhIObzC72sU7ALGmExyntY4syvrkFG/U=) 9: vhwquoEVrfx9ZFPHOlvKpZ1eMgQ.roa (hash: /W94YDKehwEOG4IGpuPHROQ+73Ocm3mWSD9qbK70W14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:35:29:02:e5:7b:ac:ea:c0:b4:3a:0e:58:04:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8 Validity Not Before: Jan 26 03:00:50 2026 GMT Not After : Jan 27 03:00:50 2026 GMT Subject: CN=6ee8ad194433425d1c7dcd9fa73a80b3e0d9af3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a3:f4:e8:6c:d1:c1:c1:f5:7f:9d:78:cf:de: dc:e0:e8:fe:cb:63:5b:8c:f9:2c:7f:db:60:c5:9b: 10:8f:10:5a:76:91:9d:d8:6c:7c:2e:76:3b:a1:c8: 74:70:7c:23:34:e3:dd:cb:12:8c:5e:ca:2b:c0:c2: 61:5e:88:4b:58:7b:ee:06:8f:93:6b:74:ac:d7:db: 9a:4d:a1:7b:8c:02:00:cc:72:22:34:5f:46:b7:3f: 79:1b:c8:9b:7f:c4:bc:6b:dd:77:b2:01:e1:ef:4a: 0a:8d:bc:3f:0e:14:98:b1:ea:f1:0e:8f:d5:93:da: f2:27:8b:c7:ae:77:4c:b2:37:36:4e:53:d4:47:ae: c1:7c:6f:d1:e9:7f:7e:1a:fc:db:79:ef:b4:e8:2e: c7:35:25:9c:a3:65:f6:ad:4f:ba:af:40:04:3e:f9: 8b:32:10:01:51:8b:05:c6:ef:df:92:03:cf:be:25: 6c:32:6d:a4:65:b4:5d:59:c5:cb:2a:9a:91:a7:33: 61:e4:e2:23:b0:a7:77:bf:ea:31:33:3f:e0:8f:44: 8b:37:6c:bc:04:40:d7:6e:0b:e1:84:dd:df:81:e9: b0:b1:85:75:f3:21:f6:a3:c6:9a:b1:8c:87:29:5d: a0:86:c2:2a:cc:ab:a7:f4:e5:28:d9:dc:e8:5c:68: 61:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E8:AD:19:44:33:42:5D:1C:7D:CD:9F:A7:3A:80:B3:E0:D9:AF:3F X509v3 Authority Key Identifier: keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:48:3e:a1:01:ab:79:03:d3:9b:bd:e2:39:0c:8a:3c:7f:cf: 9e:8a:ef:d7:14:cc:4d:45:2a:86:08:13:08:58:2d:91:00:8e: 10:8c:91:75:00:5a:ec:51:33:54:30:8d:c5:5f:20:68:75:cd: fa:e8:cf:14:10:a5:e4:28:47:c8:1c:18:86:40:cc:06:ca:2c: cc:d1:9d:b3:52:03:73:d0:c4:38:20:27:98:d3:03:2f:85:ed: 51:66:3e:e0:b7:5a:8f:82:59:e2:93:17:a6:3a:5e:23:2b:c4: 8c:3c:8f:8e:24:e9:7e:19:1c:c4:76:f2:6e:92:c1:a5:d0:d5: 87:14:03:1d:c2:05:99:36:e2:9f:dc:d2:45:74:48:18:4a:3f: 66:96:e0:1b:1e:99:8f:04:95:56:21:3a:35:88:95:b2:b5:53: 67:e3:70:a8:1c:d7:ed:50:72:27:e3:bf:4d:5d:f1:d9:bd:b1: af:a7:2d:b2:38:bf:92:11:70:6f:62:a5:1f:eb:9d:4c:51:66: fd:8d:fe:b2:ec:1f:58:ff:35:19:ff:4a:bc:53:c4:50:3c:9e: 9c:f1:0f:cb:3f:73:e6:d8:44:95:45:a5:40:71:a2:a9:ac:b3: ba:6a:73:d0:9b:9d:6f:4d:a8:52:8e:43:34:ec:e6:ba:1a:a8: 8a:bf:78:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4PzUpAuV7rOrAtDoOWAS+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZmExM2YxYWUwNTM5MTYyODBlYzY4ZWUxYjA5NzZmOWVi ZDNlYTgwHhcNMjYwMTI2MDMwMDUwWhcNMjYwMTI3MDMwMDUwWjAzMTEwLwYDVQQD Eyg2ZWU4YWQxOTQ0MzM0MjVkMWM3ZGNkOWZhNzNhODBiM2UwZDlhZjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaP06GzRwcH1f514z97c4Oj+y2Nb jPksf9tgxZsQjxBadpGd2Gx8LnY7och0cHwjNOPdyxKMXsorwMJhXohLWHvuBo+T a3Ss19uaTaF7jAIAzHIiNF9Gtz95G8ibf8S8a913sgHh70oKjbw/DhSYserxDo/V k9ryJ4vHrndMsjc2TlPUR67BfG/R6X9+Gvzbee+06C7HNSWco2X2rU+6r0AEPvmL MhABUYsFxu/fkgPPviVsMm2kZbRdWcXLKpqRpzNh5OIjsKd3v+oxMz/gj0SLN2y8 BEDXbgvhhN3fgemwsYV18yH2o8aasYyHKV2ghsIqzKun9OUo2dzoXGhhZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7orRlEM0JdHH3Nn6c6gLPg2a8/MB8GA1UdIwQY MBaAFK/6E/GuBTkWKA7GjuGwl2+evT6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAt NDc4YzJjOGNiMmEwLzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAtNDc4YzJjOGNiMmEw LzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkg+oQGr eQPTm73iOQyKPH/Pnorv1xTMTUUqhggTCFgtkQCOEIyRdQBa7FEzVDCNxV8gaHXN +ujPFBCl5ChHyBwYhkDMBsoszNGds1IDc9DEOCAnmNMDL4XtUWY+4Ldaj4JZ4pMX pjpeIyvEjDyPjiTpfhkcxHbybpLBpdDVhxQDHcIFmTbin9zSRXRIGEo/ZpbgGx6Z jwSVViE6NYiVsrVTZ+NwqBzX7VByJ+O/TV3x2b2xr6ctsji/khFwb2KlH+udTFFm /Y3+suwfWP81Gf9KvFPEUDyenPEPyz9z5thElUWlQHGiqayzumpz0Judb02oUo5D NOzmuhqoir94og== -----END CERTIFICATE-----Generated at Mon Jan 26 11:08:41 2026 by rpki-client