This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft File: ADoNFLA-o0Lt47L0mtjKor904XA.mft (raw, json) Hash identifier: Ul5y3yUGwNZAjGuvUnQjwdf7xsqyPfumLOguFeiA1Xg= Subject key identifier: F9:0F:EB:20:8C:77:A1:A3:9D:4C:B1:91:0A:A0:46:09:4E:90:37:54 Authority key identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70 Certificate issuer: /CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170 Certificate serial: 019C1D5EF044FAEB4D31ECEF64F06C6C7CF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft Manifest number: 1790 Signing time: Mon 02 Feb 2026 08:01:26 +0000 Manifest this update: Mon 02 Feb 2026 08:01:26 +0000 Manifest next update: Tue 03 Feb 2026 08:01:26 +0000 Files and hashes: 1: ADoNFLA-o0Lt47L0mtjKor904XA.crl (hash: PmmJxpTQnUmViRpaOYDhvlYafVrM2LL6elOq5sHVEMk=) 2: u_0x-93wRipLEsiXiJYw22k7HiU.roa (hash: +BCrolIUDpbIUCoEtT/iRhQzDMhtVgzJiegCAfiFXec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:5e:f0:44:fa:eb:4d:31:ec:ef:64:f0:6c:6c:7c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170 Validity Not Before: Feb 2 08:01:26 2026 GMT Not After : Feb 3 08:01:26 2026 GMT Subject: CN=f90feb208c77a1a39d4cb1910aa046094e903754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:31:fc:d5:b2:af:51:2b:5a:12:1c:be:27:64: 54:cd:eb:4f:6c:18:b6:77:af:06:13:ff:a7:eb:c8: f7:2b:ed:e7:8e:7c:72:bd:3d:93:95:b2:20:9c:36: 43:0c:6c:9f:20:00:15:1a:99:8e:60:c3:b1:af:1b: 97:7b:d0:25:5d:f4:b2:89:71:a3:c0:56:cc:31:44: f2:33:5e:27:7f:02:98:b5:a6:93:88:90:11:1f:65: b4:64:53:a4:f5:a8:cb:01:9f:1c:f4:24:15:de:f1: 72:80:6d:2a:24:bc:05:d3:f5:46:60:25:c0:65:1f: 1b:ab:41:cf:a9:f4:23:98:08:27:82:2e:bf:5b:99: c0:78:65:7d:c6:4f:d9:74:e5:f5:ff:ec:56:38:82: f9:ea:57:5c:8a:68:dc:63:98:fe:fd:53:21:3e:b6: c7:2f:41:08:02:f7:58:75:57:b4:d5:1e:48:da:13: c3:2d:16:27:93:a7:29:7c:1f:cc:86:57:95:57:a0: bb:0a:7d:16:47:5c:4b:e5:f7:45:0b:37:76:2d:96: 0e:34:03:d0:b1:2b:17:8d:c8:42:56:94:d5:fe:24: 71:e2:43:55:69:d9:1b:6e:41:44:c3:58:e5:6d:b1: c7:f1:6e:40:b0:5e:22:27:10:35:fa:f6:26:5a:46: 5d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0F:EB:20:8C:77:A1:A3:9D:4C:B1:91:0A:A0:46:09:4E:90:37:54 X509v3 Authority Key Identifier: keyid:00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:9a:de:7e:a8:12:22:bc:a2:e9:37:88:41:33:68:58:62:8d: 38:52:ad:5a:05:99:55:3c:43:e5:63:f3:67:ef:b7:c6:4d:ad: 2b:b1:b9:b5:44:a1:8d:51:30:14:e6:2c:7d:a0:c1:09:60:0a: 56:2d:52:2f:d5:68:8e:f7:d6:51:62:62:57:37:79:2c:8b:24: aa:f0:82:75:8f:7f:70:08:05:ec:c7:35:06:6b:fd:8a:e9:38: 70:cb:a4:9b:42:db:31:6b:73:4a:a4:88:5f:37:45:15:e8:58: 17:6d:26:54:db:64:64:74:3a:89:42:6a:4d:a9:2d:c0:ce:7d: e4:82:f4:93:9a:bf:05:c4:3f:6d:92:ce:ab:bc:1a:53:d4:85: 8c:fb:3f:21:17:53:07:34:97:21:a0:bd:cf:86:51:7f:59:0d: 62:b5:c6:5c:73:69:c7:e1:c7:92:d7:d0:6e:09:81:e0:8e:c4: 90:c9:25:5b:bd:de:9b:b3:3a:72:46:3a:60:3a:aa:4c:88:af: 7d:88:b8:c1:72:39:d0:5a:8c:f3:6e:32:a6:35:27:d4:79:ce: 6a:f6:fb:96:1f:ae:b3:30:57:f9:c3:83:37:c4:bd:e2:fd:85: 7f:e9:7d:fc:15:28:e1:5a:66:c9:01:66:c3:82:36:6a:10:36: 75:9e:73:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwdXvBE+utNMezvZPBsbHzyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwM2EwZDE0YjAzZWEzNDJlZGUzYjJmNDlhZDhjYWEyYmY3 NGUxNzAwHhcNMjYwMjAyMDgwMTI2WhcNMjYwMjAzMDgwMTI2WjAzMTEwLwYDVQQD EyhmOTBmZWIyMDhjNzdhMWEzOWQ0Y2IxOTEwYWEwNDYwOTRlOTAzNzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDH81bKvUStaEhy+J2RUzetPbBi2 d68GE/+n68j3K+3njnxyvT2TlbIgnDZDDGyfIAAVGpmOYMOxrxuXe9AlXfSyiXGj wFbMMUTyM14nfwKYtaaTiJARH2W0ZFOk9ajLAZ8c9CQV3vFygG0qJLwF0/VGYCXA ZR8bq0HPqfQjmAgngi6/W5nAeGV9xk/ZdOX1/+xWOIL56ldcimjcY5j+/VMhPrbH L0EIAvdYdVe01R5I2hPDLRYnk6cpfB/MhleVV6C7Cn0WR1xL5fdFCzd2LZYONAPQ sSsXjchCVpTV/iRx4kNVadkbbkFEw1jlbbHH8W5AsF4iJxA1+vYmWkZdJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkP6yCMd6GjnUyxkQqgRglOkDdUMB8GA1UdIwQY MBaAFAA6DRSwPqNC7eOy9JrYyqK/dOFwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYTI1MmEtYWY0Yi00ZWVhLWFjZGIt MmZkZDFmZDk5NjU3LzEvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zYTI1MmEtYWY0Yi00ZWVhLWFjZGItMmZkZDFmZDk5NjU3 LzEvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcprefqgS Iryi6TeIQTNoWGKNOFKtWgWZVTxD5WPzZ++3xk2tK7G5tUShjVEwFOYsfaDBCWAK Vi1SL9VojvfWUWJiVzd5LIskqvCCdY9/cAgF7Mc1Bmv9iuk4cMukm0LbMWtzSqSI XzdFFehYF20mVNtkZHQ6iUJqTaktwM595IL0k5q/BcQ/bZLOq7waU9SFjPs/IRdT BzSXIaC9z4ZRf1kNYrXGXHNpx+HHktfQbgmB4I7EkMklW73em7M6ckY6YDqqTIiv fYi4wXI50FqM824ypjUn1HnOavb7lh+uszBX+cODN8S94v2Ff+l9/BUo4VpmyQFm w4I2ahA2dZ5z8w== -----END CERTIFICATE-----Generated at Mon Feb 2 15:48:04 2026 by rpki-client