This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft File: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json) Hash identifier: clJDZaSu8n4ii7HtT1lHYc/AkMnK2Jyd5p+n63NQzvs= Subject key identifier: CF:41:49:BA:14:AE:81:98:77:7B:C2:E3:AA:20:DB:FF:3C:1A:7F:1C Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E Certificate issuer: /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e Certificate serial: 019BF83FA5B4DEBC851453967148EF5C68F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft Manifest number: 0788 Signing time: Mon 26 Jan 2026 03:01:19 +0000 Manifest this update: Mon 26 Jan 2026 03:01:19 +0000 Manifest next update: Tue 27 Jan 2026 03:01:19 +0000 Files and hashes: 1: 3_ICGJ04_o-B78xtxe-BL1771oM.roa (hash: ISb9BZPlnND5DSOlgTsgHag+YAm+Sabx40NlDe58dfY=) 2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: 0ULareXRzs0+UGs+Z3hSJj7Fnp4oeTfEFjto6nsQS98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:a5:b4:de:bc:85:14:53:96:71:48:ef:5c:68:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e Validity Not Before: Jan 26 03:01:19 2026 GMT Not After : Jan 27 03:01:19 2026 GMT Subject: CN=cf4149ba14ae8198777bc2e3aa20dbff3c1a7f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e6:77:2a:57:0d:48:1f:4f:50:40:f3:93:ee: b2:bc:72:34:ac:9b:bc:da:8b:87:e5:a2:b8:78:46: 6c:f1:d5:8d:3e:14:42:97:71:9e:54:e4:d4:4d:95: cb:59:2c:7f:18:71:72:ef:60:20:52:97:57:97:2a: 1c:23:f8:74:9a:e1:4a:69:61:d2:ae:cd:33:d4:53: 55:12:7d:42:ff:c1:33:eb:d1:b0:87:cd:19:36:57: d7:83:dc:36:93:fe:41:d8:af:b9:d5:fb:06:4b:57: 0a:7c:8f:7b:11:50:62:7b:4d:7c:18:2d:a0:b8:af: 23:0c:4c:08:6f:5a:f2:65:70:d5:57:a6:4c:e9:2b: ea:bf:c1:18:f8:c3:45:9e:7f:ce:fb:ab:0c:ca:cd: 32:d7:70:50:0e:bd:27:d7:84:e4:47:5f:a8:09:b1: 2b:40:93:5a:92:76:55:eb:b4:a4:bf:f6:d4:ed:d3: de:90:2e:3c:ab:f0:ed:91:17:55:62:48:bf:42:8a: e2:fc:a0:5a:d9:cb:f3:9d:a7:6b:ab:65:eb:4a:a2: fa:55:bb:42:96:b5:86:e0:ba:c0:1c:37:c4:d3:dc: d0:0e:9e:97:d6:9a:1d:30:dc:d8:e8:f1:fb:8e:9b: ef:6c:10:a4:5f:7f:b3:79:48:60:a1:32:3a:72:5c: 06:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:41:49:BA:14:AE:81:98:77:7B:C2:E3:AA:20:DB:FF:3C:1A:7F:1C X509v3 Authority Key Identifier: keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:16:f1:84:5d:7a:b1:e0:2f:4e:27:f2:7f:a5:c3:ac:c0:a8: bd:1f:ac:8c:7b:a1:98:e0:6d:8a:bc:68:23:cb:d4:15:4f:ba: 99:a0:e6:22:3c:72:f5:0a:ec:63:f1:d5:ca:2b:3a:16:62:80: 89:bb:8f:11:6d:5b:4b:c1:8f:7e:c3:4e:ba:86:9b:a8:e1:89: e7:6c:64:b1:52:69:6d:d1:64:3e:16:6c:cd:5f:c6:5a:21:4d: bc:02:f6:62:0c:e1:1a:16:18:e0:c2:87:25:fb:14:0e:49:31: 46:3d:e8:41:36:6b:68:5f:bb:eb:d9:33:6c:e0:b0:25:d4:49: 86:b6:86:c0:50:d6:2b:21:09:02:03:aa:9f:0c:da:a4:84:e6: 5a:c0:18:40:95:03:cd:18:a0:d6:70:9e:5e:fb:d6:76:c5:0c: e7:69:df:0b:ab:ce:ff:63:7f:c5:d6:2b:c6:fa:cc:95:c0:8a: d3:c3:a3:6c:fe:fa:8d:53:fb:a9:02:fb:f1:83:45:ba:04:c6: 7f:f5:af:df:d4:29:11:10:b1:b7:e4:9b:ae:46:85:ed:14:83: 4f:c3:69:3c:2a:87:48:39:5a:7c:fc:26:e4:ba:17:cf:9e:26: ab:c7:fd:81:13:24:65:a2:b9:29:85:63:fd:ba:fc:55:53:16: ec:38:bf:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P6W03ryFFFOWcUjvXGj1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNWIxOTYzODYxMWYzZTFmNzY0NGE3ZTNiYjcxZDBjYTM3 NDkxOWUwHhcNMjYwMTI2MDMwMTE5WhcNMjYwMTI3MDMwMTE5WjAzMTEwLwYDVQQD EyhjZjQxNDliYTE0YWU4MTk4Nzc3YmMyZTNhYTIwZGJmZjNjMWE3ZjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+Z3KlcNSB9PUEDzk+6yvHI0rJu8 2ouH5aK4eEZs8dWNPhRCl3GeVOTUTZXLWSx/GHFy72AgUpdXlyocI/h0muFKaWHS rs0z1FNVEn1C/8Ez69Gwh80ZNlfXg9w2k/5B2K+51fsGS1cKfI97EVBie018GC2g uK8jDEwIb1ryZXDVV6ZM6Svqv8EY+MNFnn/O+6sMys0y13BQDr0n14TkR1+oCbEr QJNaknZV67Skv/bU7dPekC48q/DtkRdVYki/Qori/KBa2cvznadrq2XrSqL6VbtC lrWG4LrAHDfE09zQDp6X1podMNzY6PH7jpvvbBCkX3+zeUhgoTI6clwGrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9BSboUroGYd3vC46og2/88Gn8cMB8GA1UdIwQY MBaAFKFbGWOGEfPh92RKfju3HQyjdJGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYt MTI1MTg0MjlmYTYzLzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iNTc4NTItMWZkNy00MGZkLTkxZmYtMTI1MTg0MjlmYTYz LzEvb1ZzWlk0WVI4LUgzWkVwLU83Y2RES04wa1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRbxhF16 seAvTifyf6XDrMCovR+sjHuhmOBtirxoI8vUFU+6maDmIjxy9QrsY/HVyis6FmKA ibuPEW1bS8GPfsNOuoabqOGJ52xksVJpbdFkPhZszV/GWiFNvAL2YgzhGhYY4MKH JfsUDkkxRj3oQTZraF+769kzbOCwJdRJhraGwFDWKyEJAgOqnwzapITmWsAYQJUD zRig1nCeXvvWdsUM52nfC6vO/2N/xdYrxvrMlcCK08OjbP76jVP7qQL78YNFugTG f/Wv39QpERCxt+SbrkaF7RSDT8NpPCqHSDlafPwm5LoXz54mq8f9gRMkZaK5KYVj /br8VVMW7Di/cQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:58 2026 by rpki-client