This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft File: asNOSfupZAuD6rqvupxKuWyMNUQ.mft (raw, json) Hash identifier: Zwe6pYjeN5jXS6z/zWtaBIe3wHwuEM7VejN5fThVeK4= Subject key identifier: AB:36:92:FD:FA:5A:DA:B0:0B:58:91:5C:D1:93:B0:A7:C8:94:AD:EF Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44 Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544 Certificate serial: 019BD95966261CC52432DD61B6354DEB1028 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft Manifest number: 1159 Signing time: Tue 20 Jan 2026 03:01:13 +0000 Manifest this update: Tue 20 Jan 2026 03:01:13 +0000 Manifest next update: Wed 21 Jan 2026 03:01:13 +0000 Files and hashes: 1: 3ko4FNTHS3dYJgP5A7wcLtBHA6o.roa (hash: tK64bc5P7HI3Kfo106hTjUUsaeAWlW26+32w7wIp23o=) 2: M9TO4mLPx12QNOxhU6_MrD2r794.roa (hash: 9JzmkneLii+LpnbpPrpyhCSpEye5RnU2UT4N+IzPQY0=) 3: asNOSfupZAuD6rqvupxKuWyMNUQ.crl (hash: KwBUBA0K48Q9k8RahbaUpjpov+pTwL/eS6SFSw4QASo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:59:66:26:1c:c5:24:32:dd:61:b6:35:4d:eb:10:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544 Validity Not Before: Jan 20 03:01:13 2026 GMT Not After : Jan 21 03:01:13 2026 GMT Subject: CN=ab3692fdfa5adab00b58915cd193b0a7c894adef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ac:d4:9b:d2:94:3f:0b:42:b6:15:27:3f:b3: b4:45:c3:57:70:fc:0c:31:30:4f:c3:e0:e6:0e:e8: c3:f1:4a:84:75:3a:55:c5:0d:49:d0:da:53:04:b4: b2:24:3c:90:c6:b3:76:53:0e:da:d4:a8:7d:df:a1: 40:34:2a:16:4f:98:32:16:72:b2:23:6e:fd:be:ef: 1c:69:5b:5b:7c:ac:bf:f9:4f:47:b6:11:37:ee:3b: 4d:22:ea:86:75:35:66:cd:7a:72:33:ca:42:df:ba: c8:64:22:58:a5:b9:13:a3:83:e3:1d:1a:06:6a:8c: 3d:d9:ed:40:46:37:be:fd:03:40:01:3c:3d:67:1b: ed:a1:ef:7f:f1:d1:df:80:83:de:b3:11:dd:1d:0b: cf:ed:c7:d0:79:e6:1d:c1:db:6a:f5:e2:60:88:f0: b6:a4:50:d1:44:6d:4a:ca:dc:cd:20:58:20:a6:a4: 67:95:1c:17:b2:c4:88:78:a2:a4:6a:20:63:8a:a1: df:4e:7f:08:7f:e1:52:85:b4:12:c0:e7:3b:4d:2e: 13:5c:1d:dd:54:1e:f3:60:b5:eb:e7:95:79:0b:e4: fe:a1:96:6e:5d:4e:f9:e6:c1:37:72:f4:44:48:34: 54:ae:9e:21:ee:e4:b4:e0:4f:a3:e2:25:77:c9:54: 3a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:36:92:FD:FA:5A:DA:B0:0B:58:91:5C:D1:93:B0:A7:C8:94:AD:EF X509v3 Authority Key Identifier: keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:b0:87:37:d3:b8:58:d0:91:3d:e0:b7:c9:40:49:c4:90:df: 9c:50:3a:e5:44:f7:72:db:a4:85:ac:be:3a:55:c3:13:fc:b9: dd:88:14:ee:e2:12:fa:f5:8c:7f:8a:53:f6:23:79:df:fc:1f: 5e:15:8a:f3:97:d3:5d:b4:f0:14:5c:4a:75:8b:2b:a1:22:80: c1:da:1e:14:11:fa:72:d0:af:31:3e:9f:ee:8f:11:83:11:20: a5:a7:de:28:16:15:47:5e:e5:61:69:1f:e2:18:0a:8b:f5:2d: 4b:11:85:3d:4e:ed:2f:f4:18:c2:ab:0e:c5:c6:ee:2d:cc:bb: af:4d:d6:78:30:58:61:52:a3:99:29:7a:dc:bc:98:08:d1:47: 52:38:1f:71:e2:1b:24:3b:59:5d:a6:a8:5a:73:ed:05:36:f8: 3f:31:f1:f7:81:ab:4b:e0:e1:4c:a6:9f:d1:47:a5:c8:da:53: 00:70:16:f7:cd:34:1d:f2:38:c7:73:f8:85:53:b0:db:df:82: 49:87:7e:c5:ae:9a:2d:cd:ac:b9:13:ba:03:b3:00:10:dc:1d: 95:c3:74:96:98:58:bf:4b:f2:ad:c8:4c:1d:8c:f9:c2:44:09: e7:d4:9a:62:9a:10:b3:fd:3b:79:ea:4b:87:7f:9c:bc:e4:00: 83:fb:d0:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZWWYmHMUkMt1htjVN6xAoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYzM0ZTQ5ZmJhOTY0MGI4M2VhYmFhZmJhOWM0YWI5NmM4 YzM1NDQwHhcNMjYwMTIwMDMwMTEzWhcNMjYwMTIxMDMwMTEzWjAzMTEwLwYDVQQD EyhhYjM2OTJmZGZhNWFkYWIwMGI1ODkxNWNkMTkzYjBhN2M4OTRhZGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKzUm9KUPwtCthUnP7O0RcNXcPwM MTBPw+DmDujD8UqEdTpVxQ1J0NpTBLSyJDyQxrN2Uw7a1Kh936FANCoWT5gyFnKy I279vu8caVtbfKy/+U9HthE37jtNIuqGdTVmzXpyM8pC37rIZCJYpbkTo4PjHRoG aow92e1ARje+/QNAATw9Zxvtoe9/8dHfgIPesxHdHQvP7cfQeeYdwdtq9eJgiPC2 pFDRRG1KytzNIFggpqRnlRwXssSIeKKkaiBjiqHfTn8If+FShbQSwOc7TS4TXB3d VB7zYLXr55V5C+T+oZZuXU755sE3cvRESDRUrp4h7uS04E+j4iV3yVQ6GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKs2kv36WtqwC1iRXNGTsKfIlK3vMB8GA1UdIwQY MBaAFGrDTkn7qWQLg+q6r7qcSrlsjDVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXNOT1NmdXBaQXVENnJxdnVweEt1V3lNTlVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYmVmYjktYzEwMy00MGFmLTg5NzAt OTNjNDU2OGIxMDNiLzEvYXNOT1NmdXBaQXVENnJxdnVweEt1V3lNTlVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xYmVmYjktYzEwMy00MGFmLTg5NzAtOTNjNDU2OGIxMDNi LzEvYXNOT1NmdXBaQXVENnJxdnVweEt1V3lNTlVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbCHN9O4 WNCRPeC3yUBJxJDfnFA65UT3ctukhay+OlXDE/y53YgU7uIS+vWMf4pT9iN53/wf XhWK85fTXbTwFFxKdYsroSKAwdoeFBH6ctCvMT6f7o8RgxEgpafeKBYVR17lYWkf 4hgKi/UtSxGFPU7tL/QYwqsOxcbuLcy7r03WeDBYYVKjmSl63LyYCNFHUjgfceIb JDtZXaaoWnPtBTb4PzHx94GrS+DhTKaf0UelyNpTAHAW9800HfI4x3P4hVOw29+C SYd+xa6aLc2suRO6A7MAENwdlcN0lphYv0vyrchMHYz5wkQJ59SaYpoQs/07eepL h3+cvOQAg/vQeg== -----END CERTIFICATE-----Generated at Tue Jan 20 07:36:18 2026 by rpki-client