This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft File: oWldVVgkHgSoctwTRomPLOpw3-c.mft (raw, json) Hash identifier: KuHbnNLvm2JgskaIs0LMREnYBrTsleIOOoHj0UjWpS4= Subject key identifier: 72:0F:CF:D7:87:69:60:92:80:DD:C2:7E:6D:46:69:49:8C:36:9B:EA Authority key identifier: A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7 Certificate issuer: /CN=a1695d5558241e04a872dc1346898f2cea70dfe7 Certificate serial: 019BF87663C4F233116806C97D693E20D34F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft Manifest number: 07AD Signing time: Mon 26 Jan 2026 04:01:06 +0000 Manifest this update: Mon 26 Jan 2026 04:01:06 +0000 Manifest next update: Tue 27 Jan 2026 04:01:06 +0000 Files and hashes: 1: UEDe2YcCkK60qxLQ7EMjKMaLeVk.roa (hash: 9ZEiLEpeNHQPSSjaHm5KtU2EfQDw++56segRjLKG218=) 2: oWldVVgkHgSoctwTRomPLOpw3-c.crl (hash: OTR6bARIjGjpGt4SQymaUSJcTNFqafOFnMca4LCz/Oc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:63:c4:f2:33:11:68:06:c9:7d:69:3e:20:d3:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1695d5558241e04a872dc1346898f2cea70dfe7 Validity Not Before: Jan 26 04:01:06 2026 GMT Not After : Jan 27 04:01:06 2026 GMT Subject: CN=720fcfd78769609280ddc27e6d4669498c369bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f1:e8:ba:04:01:97:1d:ec:45:85:6c:ac:f3: 9f:c3:d7:38:1a:22:03:6d:d8:23:e3:fd:59:6f:7b: cb:55:23:81:6a:67:00:fe:a5:d3:a8:eb:1d:d6:62: b7:a2:d5:9b:f9:e3:35:cf:17:cf:90:ce:88:38:8f: 83:c8:b7:48:25:7e:e1:ab:f5:f9:18:d8:4b:25:01: 31:c2:68:0a:f5:00:0a:27:52:b3:85:57:e3:16:1c: 06:6e:fe:85:fc:5f:25:5b:b3:51:c3:a5:1e:5d:0f: 97:72:a5:de:09:00:f4:2a:ec:b6:9a:6a:25:de:3c: af:1d:6e:68:74:b7:0e:5b:16:02:6e:f4:81:29:82: 82:4c:7b:6e:af:fd:62:48:5d:e5:55:42:93:9b:ef: 02:78:7e:5c:6b:06:7f:57:a4:44:fe:67:90:09:98: 96:cc:9c:70:4e:32:b3:47:d9:49:59:29:36:d9:af: ad:be:79:cb:3c:9f:6d:61:5b:f7:4a:49:76:a4:da: 1a:31:2d:a6:d4:73:d1:b5:22:0b:f4:65:13:2b:11: 75:5a:d3:ce:e5:06:22:54:b2:74:be:cf:95:a3:01: fe:04:48:e1:a2:2a:53:60:a6:e4:a3:3f:08:a7:3b: 3a:be:b8:80:2e:6a:f6:e0:fd:c4:c1:fa:34:68:84: c2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0F:CF:D7:87:69:60:92:80:DD:C2:7E:6D:46:69:49:8C:36:9B:EA X509v3 Authority Key Identifier: keyid:A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:66:52:03:83:ae:40:a9:07:a1:ba:bb:6f:20:54:62:5c:8f: 67:0c:ba:17:c4:fa:b8:41:55:e1:1e:8d:14:d5:c5:81:f0:0f: 52:07:b0:85:ce:9e:2e:cd:43:f6:62:8b:e1:59:a4:d5:2e:78: 26:80:e0:e9:d0:22:65:8d:49:6b:e4:36:50:58:f6:e0:1b:49: a7:02:b5:8a:b3:24:d0:9f:70:34:3b:9e:cd:c3:8a:e7:28:46: fb:14:34:b3:3d:60:6b:23:12:7e:d3:d0:c8:6f:93:63:8b:e3: 16:80:c4:52:3d:dd:d3:69:50:75:cf:8c:76:17:dc:db:0d:c6: dc:9e:0e:9a:a9:d6:67:57:d0:14:ac:3f:67:15:86:31:3c:5f: d0:70:54:88:af:b4:76:7c:3f:ac:ee:ee:41:cb:52:ad:65:98: 31:87:4d:84:04:55:bc:0a:94:68:f8:26:0d:d4:ab:4a:85:96: b9:f2:40:74:36:15:18:47:f1:ae:b5:b6:66:0c:bb:0a:fe:4d: 28:ab:b0:3b:fd:1a:24:1f:d4:56:f9:f1:65:bd:6f:58:4f:f1: 02:1f:82:53:63:56:ca:64:60:fc:51:37:a1:68:53:a6:9d:97: ca:20:01:2d:50:9e:c8:28:43:c1:73:71:8b:3d:04:f2:6e:a5: 7e:17:cb:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dmPE8jMRaAbJfWk+INNPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNjk1ZDU1NTgyNDFlMDRhODcyZGMxMzQ2ODk4ZjJjZWE3 MGRmZTcwHhcNMjYwMTI2MDQwMTA2WhcNMjYwMTI3MDQwMTA2WjAzMTEwLwYDVQQD Eyg3MjBmY2ZkNzg3Njk2MDkyODBkZGMyN2U2ZDQ2Njk0OThjMzY5YmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/HougQBlx3sRYVsrPOfw9c4GiID bdgj4/1Zb3vLVSOBamcA/qXTqOsd1mK3otWb+eM1zxfPkM6IOI+DyLdIJX7hq/X5 GNhLJQExwmgK9QAKJ1KzhVfjFhwGbv6F/F8lW7NRw6UeXQ+XcqXeCQD0Kuy2mmol 3jyvHW5odLcOWxYCbvSBKYKCTHtur/1iSF3lVUKTm+8CeH5cawZ/V6RE/meQCZiW zJxwTjKzR9lJWSk22a+tvnnLPJ9tYVv3Skl2pNoaMS2m1HPRtSIL9GUTKxF1WtPO 5QYiVLJ0vs+VowH+BEjhoipTYKbkoz8Ipzs6vriALmr24P3Ewfo0aITCUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIPz9eHaWCSgN3Cfm1GaUmMNpvqMB8GA1UdIwQY MBaAFKFpXVVYJB4EqHLcE0aJjyzqcN/nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1dsZFZWZ2tIZ1NvY3R3VFJvbVBMT3B3My1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8yN2NhN2YtNjZiNC00YmIxLTlmNWYt ZjViYTRmZTJiZjU0LzEvb1dsZFZWZ2tIZ1NvY3R3VFJvbVBMT3B3My1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8yN2NhN2YtNjZiNC00YmIxLTlmNWYtZjViYTRmZTJiZjU0 LzEvb1dsZFZWZ2tIZ1NvY3R3VFJvbVBMT3B3My1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmZSA4Ou QKkHobq7byBUYlyPZwy6F8T6uEFV4R6NFNXFgfAPUgewhc6eLs1D9mKL4Vmk1S54 JoDg6dAiZY1Ja+Q2UFj24BtJpwK1irMk0J9wNDuezcOK5yhG+xQ0sz1gayMSftPQ yG+TY4vjFoDEUj3d02lQdc+Mdhfc2w3G3J4OmqnWZ1fQFKw/ZxWGMTxf0HBUiK+0 dnw/rO7uQctSrWWYMYdNhARVvAqUaPgmDdSrSoWWufJAdDYVGEfxrrW2Zgy7Cv5N KKuwO/0aJB/UVvnxZb1vWE/xAh+CU2NWymRg/FE3oWhTpp2XyiABLVCeyChDwXNx iz0E8m6lfhfL7Q== -----END CERTIFICATE-----Generated at Mon Jan 26 12:25:33 2026 by rpki-client