This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft File: aotaN08UbXtqbcfTFujrsS3upnA.mft (raw, json) Hash identifier: IqK7tdl87upAJc/Eu1w9QrEbHcHsJ3uIluoOI6MXiKk= Subject key identifier: A3:E3:17:39:5E:A2:B8:97:C8:D9:C5:45:06:24:61:61:B1:AD:92:7D Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70 Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670 Certificate serial: 019BD733AE8BE7098FA911D4611BB3E908B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft Manifest number: 0EB0 Signing time: Mon 19 Jan 2026 17:00:47 +0000 Manifest this update: Mon 19 Jan 2026 17:00:47 +0000 Manifest next update: Tue 20 Jan 2026 17:00:47 +0000 Files and hashes: 1: aotaN08UbXtqbcfTFujrsS3upnA.crl (hash: C7IwXxNr+2ykE2K+QLmKGQhyhq1XNe8dtzTThEMgnE4=) 2: bet4fdymyOIlEb-62LJXEqjZz4M.roa (hash: z3hr8kxRBm3emLdFWmkitNGZ2vCXqhwRUzbp9y48TSg=) 3: xzOtkf3m_unGZDJuyTmOZRDo1vs.roa (hash: AqWTAJg+/JR+tTmpK3jZUrDvB6ISeUjMegyS/xS/c3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:33:ae:8b:e7:09:8f:a9:11:d4:61:1b:b3:e9:08:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670 Validity Not Before: Jan 19 17:00:47 2026 GMT Not After : Jan 20 17:00:47 2026 GMT Subject: CN=a3e317395ea2b897c8d9c54506246161b1ad927d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fd:14:e5:67:65:9c:e9:0e:f0:cd:99:04:c4: 81:d3:9a:46:49:81:7d:4d:5f:2f:7c:91:4f:67:4c: 76:8e:57:b4:49:fb:a7:b2:9b:29:08:fd:77:74:b9: 89:a1:e8:0a:23:43:76:b8:ce:3e:6e:3b:7b:8e:d0: 16:c2:93:a6:19:31:25:a5:86:7e:83:ba:6e:b5:36: 90:eb:17:07:30:7c:2a:f0:94:e8:4e:6e:1e:67:6d: 4b:9e:2d:28:95:e5:a6:cf:bc:80:b0:10:bb:3e:47: 3c:29:71:0c:a6:fe:74:cb:b7:1a:dd:54:5e:ab:5d: e9:30:77:6b:fe:64:a2:b2:06:fa:f5:53:6d:1d:fe: f9:a7:03:a9:11:cd:b4:4c:09:f4:a8:19:c2:13:0b: 0e:21:82:9c:ba:14:2e:11:0e:0f:28:08:4c:9f:c6: fc:a5:8b:2c:52:c9:b4:3e:7c:cc:5c:4a:e6:1e:6c: fd:97:2f:02:97:dd:4e:e9:52:9b:1b:da:e8:ad:28: fa:20:97:1e:98:1b:05:b5:9f:fb:93:0d:c4:7a:1b: b4:31:9c:7b:95:b9:b8:1d:12:4f:f8:cc:08:d3:97: 9e:89:dc:ce:a1:1e:d5:9a:a5:d5:8e:51:dc:6d:a5: 20:fe:07:71:84:ff:91:c7:09:ad:a9:c6:95:e7:e4: 47:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E3:17:39:5E:A2:B8:97:C8:D9:C5:45:06:24:61:61:B1:AD:92:7D X509v3 Authority Key Identifier: keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:46:6c:3e:27:69:1c:28:14:12:bd:e4:60:10:92:ce:06:ef: 16:a9:b1:62:84:47:53:f1:c0:ee:c3:53:ff:26:11:d2:7e:f8: 06:fd:83:9f:3b:33:f8:bd:ea:62:ce:a3:ff:64:b2:89:3e:e9: 27:1e:4a:bb:7d:ae:2a:a4:7b:81:6f:00:c4:07:7c:54:8d:fa: c5:46:8f:a2:0d:5a:35:3b:dc:97:db:a4:81:b5:9d:f5:5e:3c: a6:68:7c:a8:36:9f:e2:f0:07:2e:09:29:04:c0:2a:77:f0:00: 85:29:b9:71:b8:11:60:cd:8b:ed:ee:a1:44:13:ee:77:49:1e: c8:81:78:b7:b5:7b:3e:0a:63:d8:79:7f:db:a8:48:a9:55:d1: e9:76:7d:21:11:c2:c0:5f:01:99:e7:10:6d:9c:a7:cb:38:05: 1e:ce:59:8c:01:0f:eb:33:9b:78:c5:12:64:a2:ac:6a:a9:cb: 52:75:57:31:95:eb:1a:ca:af:c1:2d:24:4f:9c:f3:f7:b8:e5: 6c:55:61:ae:c0:dd:50:83:f8:bb:4a:d2:32:f5:f2:40:a2:3c: 19:56:e3:4a:2d:70:83:58:1b:20:cf:f6:22:a8:66:97:85:e1: 31:27:0e:fb:a6:88:3c:fd:5b:0b:fd:37:8c:a6:7e:a5:08:a5: 48:2d:7e:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvXM66L5wmPqRHUYRuz6QizMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhOGI1YTM3NGYxNDZkN2I2YTZkYzdkMzE2ZThlYmIxMmRl ZWE2NzAwHhcNMjYwMTE5MTcwMDQ3WhcNMjYwMTIwMTcwMDQ3WjAzMTEwLwYDVQQD EyhhM2UzMTczOTVlYTJiODk3YzhkOWM1NDUwNjI0NjE2MWIxYWQ5MjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf0U5WdlnOkO8M2ZBMSB05pGSYF9 TV8vfJFPZ0x2jle0SfunspspCP13dLmJoegKI0N2uM4+bjt7jtAWwpOmGTElpYZ+ g7putTaQ6xcHMHwq8JToTm4eZ21Lni0oleWmz7yAsBC7Pkc8KXEMpv50y7ca3VRe q13pMHdr/mSisgb69VNtHf75pwOpEc20TAn0qBnCEwsOIYKcuhQuEQ4PKAhMn8b8 pYssUsm0PnzMXErmHmz9ly8Cl91O6VKbG9rorSj6IJcemBsFtZ/7kw3Eehu0MZx7 lbm4HRJP+MwI05eeidzOoR7VmqXVjlHcbaUg/gdxhP+RxwmtqcaV5+RHmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPjFzleoriXyNnFRQYkYWGxrZJ9MB8GA1UdIwQY MBaAFGqLWjdPFG17am3H0xbo67Et7qZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQt NDQyNDFmZWMxYTlmLzEvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mNmM4NjItYWY4Yi00M2YzLTk4YWQtNDQyNDFmZWMxYTlm LzEvYW90YU4wOFViWHRxYmNmVEZ1anJzUzN1cG5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIkZsPidp HCgUEr3kYBCSzgbvFqmxYoRHU/HA7sNT/yYR0n74Bv2Dnzsz+L3qYs6j/2SyiT7p Jx5Ku32uKqR7gW8AxAd8VI36xUaPog1aNTvcl9ukgbWd9V48pmh8qDaf4vAHLgkp BMAqd/AAhSm5cbgRYM2L7e6hRBPud0keyIF4t7V7Pgpj2Hl/26hIqVXR6XZ9IRHC wF8BmecQbZynyzgFHs5ZjAEP6zObeMUSZKKsaqnLUnVXMZXrGsqvwS0kT5zz97jl bFVhrsDdUIP4u0rSMvXyQKI8GVbjSi1wg1gbIM/2Iqhml4XhMScO+6aIPP1bC/03 jKZ+pQilSC1+gA== -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:55 2026 by rpki-client