This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft File: Oexx3D1ozej5B3069mdRwp_O6kw.mft (raw, json) Hash identifier: zYXrcNgbUen0O+qZ5ivMqmqajRl5bdmVcSm9g5CGpIk= Subject key identifier: 80:1C:4A:CA:53:28:54:3D:F3:E4:E3:CB:8E:EF:B1:86:71:58:8F:34 Authority key identifier: 39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C Certificate issuer: /CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c Certificate serial: 019BF5E3654CECAB0E411CB4379AE0F7A470 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft Manifest number: 0B43 Signing time: Sun 25 Jan 2026 16:01:18 +0000 Manifest this update: Sun 25 Jan 2026 16:01:18 +0000 Manifest next update: Mon 26 Jan 2026 16:01:18 +0000 Files and hashes: 1: GWIPuzYrr1ZkVb6zUh724dGRI1w.roa (hash: 8ZDylGUDk0rJ7fPM3ZJJKDsoUpKFNi+95rGt5nvLIKg=) 2: Oexx3D1ozej5B3069mdRwp_O6kw.crl (hash: 1XGZFs4rV3drmmJtD/nlgfXboLZkEhd9yvluGDQHMr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:65:4c:ec:ab:0e:41:1c:b4:37:9a:e0:f7:a4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c Validity Not Before: Jan 25 16:01:18 2026 GMT Not After : Jan 26 16:01:18 2026 GMT Subject: CN=801c4aca5328543df3e4e3cb8eefb18671588f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ac:42:fb:85:83:bd:16:39:2f:1c:21:d2:e3: 0a:da:65:62:d4:6d:00:cf:87:55:3b:01:82:11:53: 33:e1:42:df:74:46:b1:5f:75:8e:1b:f1:e7:61:47: ec:9a:f0:95:e8:94:94:e7:f3:76:14:3b:f0:15:7a: 9b:09:35:66:6d:42:61:0d:05:d0:6f:8b:cb:e3:e4: 10:ca:61:cd:5e:79:98:07:b3:b4:a0:e4:20:b9:a6: 67:52:69:f8:91:bb:07:72:b5:07:ba:02:4e:a6:d5: 20:2c:cd:31:d8:03:8d:2c:60:72:0a:95:13:0b:f5: 13:38:9a:c3:43:23:a3:88:47:85:84:8a:75:4a:10: 52:23:21:18:96:92:3a:0e:ef:d9:fa:b9:53:6a:28: 35:c1:47:71:22:fe:e7:b9:8f:68:f0:a2:19:a6:9c: e3:9e:4d:3f:6a:2f:2e:ad:03:63:a2:0d:98:08:1d: bd:6d:af:e1:f1:81:67:dc:d1:e0:ff:a2:55:7e:af: 65:da:4c:ce:a1:6c:7c:c5:c4:b6:78:78:1a:03:55: d5:86:83:f9:e2:5f:0d:82:99:48:91:3e:62:10:b6: bd:e9:28:a7:59:a7:cf:7e:25:c4:90:37:70:1f:37: 10:47:5b:01:8d:43:ad:67:0e:25:47:72:22:7f:64: 8f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1C:4A:CA:53:28:54:3D:F3:E4:E3:CB:8E:EF:B1:86:71:58:8F:34 X509v3 Authority Key Identifier: keyid:39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:eb:35:3c:48:05:35:8d:33:b2:27:ad:ad:f8:89:d8:7c:fa: d8:56:6f:9a:1d:4d:f9:e5:7c:fb:b8:55:6c:8c:e6:9a:93:10: 4c:54:d2:d3:d7:66:52:13:bc:61:37:f9:dc:5e:50:35:2d:10: c0:6b:b2:bd:a3:f7:68:8a:b6:55:55:76:6e:65:6a:b2:d5:eb: e3:03:f5:4c:eb:5c:5c:da:e2:4b:e0:0a:1f:18:00:a8:21:51: 95:2e:81:8a:2b:ac:57:18:0c:03:93:c9:ab:cd:0d:5a:29:96: 0f:d5:4c:16:d3:34:6e:f0:7f:8e:57:db:4c:cf:1b:cf:94:10: 4d:ed:e3:12:f9:27:7f:9c:c8:e2:ab:48:7f:13:3f:28:98:0e: 52:5d:fb:07:72:53:a5:d5:92:94:d8:44:24:d7:d3:bc:95:0a: 38:77:8b:f4:05:3f:e4:94:a1:f6:93:5f:a0:1d:f5:73:69:d4: 38:c3:d5:e3:12:51:b5:11:5e:76:e3:44:64:53:93:c4:55:76: cc:9a:cf:2a:70:71:a6:08:35:2c:e8:14:2f:71:16:7e:ca:76: b7:2b:9e:9e:11:c7:aa:34:4a:58:fc:fd:6f:b1:ba:d7:90:25: f0:94:02:7d:5d:7f:ea:ad:7c:ed:1d:96:ce:4b:19:eb:b4:76: 33:c3:8b:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv142VM7KsOQRy0N5rg96RwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5ZWM3MWRjM2Q2OGNkZThmOTA3N2QzYWY2Njc1MWMyOWZj ZWVhNGMwHhcNMjYwMTI1MTYwMTE4WhcNMjYwMTI2MTYwMTE4WjAzMTEwLwYDVQQD Eyg4MDFjNGFjYTUzMjg1NDNkZjNlNGUzY2I4ZWVmYjE4NjcxNTg4ZjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqxC+4WDvRY5Lxwh0uMK2mVi1G0A z4dVOwGCEVMz4ULfdEaxX3WOG/HnYUfsmvCV6JSU5/N2FDvwFXqbCTVmbUJhDQXQ b4vL4+QQymHNXnmYB7O0oOQguaZnUmn4kbsHcrUHugJOptUgLM0x2AONLGByCpUT C/UTOJrDQyOjiEeFhIp1ShBSIyEYlpI6Du/Z+rlTaig1wUdxIv7nuY9o8KIZppzj nk0/ai8urQNjog2YCB29ba/h8YFn3NHg/6JVfq9l2kzOoWx8xcS2eHgaA1XVhoP5 4l8NgplIkT5iELa96SinWafPfiXEkDdwHzcQR1sBjUOtZw4lR3Iif2SPewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAcSspTKFQ98+Tjy47vsYZxWI80MB8GA1UdIwQY MBaAFDnscdw9aM3o+Qd9OvZnUcKfzupMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2V4eDNEMW96ZWo1QjMwNjltZFJ3cF9PNmt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8xYmZkZjctYTE5Zi00MThlLTg5Yzct ZGIzZjIyNzA1ZGQ2LzEvT2V4eDNEMW96ZWo1QjMwNjltZFJ3cF9PNmt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8xYmZkZjctYTE5Zi00MThlLTg5YzctZGIzZjIyNzA1ZGQ2 LzEvT2V4eDNEMW96ZWo1QjMwNjltZFJ3cF9PNmt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIes1PEgF NY0zsietrfiJ2Hz62FZvmh1N+eV8+7hVbIzmmpMQTFTS09dmUhO8YTf53F5QNS0Q wGuyvaP3aIq2VVV2bmVqstXr4wP1TOtcXNriS+AKHxgAqCFRlS6BiiusVxgMA5PJ q80NWimWD9VMFtM0bvB/jlfbTM8bz5QQTe3jEvknf5zI4qtIfxM/KJgOUl37B3JT pdWSlNhEJNfTvJUKOHeL9AU/5JSh9pNfoB31c2nUOMPV4xJRtRFeduNEZFOTxFV2 zJrPKnBxpgg1LOgUL3EWfsp2tyuenhHHqjRKWPz9b7G615Al8JQCfV1/6q187R2W zksZ67R2M8OLbw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:51 2026 by rpki-client