This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft File: O-_lCkD7FzJUHoqXRQq13ndHcdg.mft (raw, json) Hash identifier: OTAEaFbZFuWfuUE818IACUVT62PzMVlBGquZRv9694c= Subject key identifier: FA:1C:AF:F2:05:EE:42:2E:71:19:0C:94:5B:12:0B:75:89:D0:07:68 Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8 Certificate issuer: /CN=3befe50a40fb1732541e8a97450ab5de774771d8 Certificate serial: 019BF6BEEEC560F5F8CAC747B8CFF74C4693 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft Manifest number: 057A Signing time: Sun 25 Jan 2026 20:01:06 +0000 Manifest this update: Sun 25 Jan 2026 20:01:06 +0000 Manifest next update: Mon 26 Jan 2026 20:01:06 +0000 Files and hashes: 1: 1UG_i4X68HiPHviRW1z0p_TSsXk.roa (hash: Rxi5VpSkCVYP7zpaawxiqgEVbztptEcbkSS6G+faZaE=) 2: 921A09PidqQ_DPqribEcJ4Ns9ic.roa (hash: 1p6ZvcbQbV5L2uaDpeFuyGxdzNA8guzksazYOvFT/c0=) 3: O-_lCkD7FzJUHoqXRQq13ndHcdg.crl (hash: 77SkwFikY0DrBrmi+EOjuPxPYVwrm2mfaZm8SH86+sQ=) 4: QakAbn2qL6zC8DUBjSIVZLBbpXc.roa (hash: 6xvVEYi0a4GqVQ6WMVJR2REYvzQK/KHG+c6HRFsJwKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:ee:c5:60:f5:f8:ca:c7:47:b8:cf:f7:4c:46:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8 Validity Not Before: Jan 25 20:01:06 2026 GMT Not After : Jan 26 20:01:06 2026 GMT Subject: CN=fa1caff205ee422e71190c945b120b7589d00768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6a:a2:5f:b7:26:a2:4b:de:b6:dd:18:f4:07: bb:ad:51:24:e2:0a:cc:db:4f:f0:c0:df:9f:6b:d4: 82:f2:1b:b1:ce:82:3f:6b:8d:54:ae:01:75:ee:c9: 4f:cd:89:19:71:6a:c5:ed:8f:df:e6:42:07:91:14: b9:ef:c1:84:91:71:82:ca:ea:2e:1f:91:2e:54:86: 30:08:b5:47:67:b0:d7:e4:16:47:8d:1c:d2:62:25: 26:29:91:51:33:25:f3:61:3f:ee:ec:91:6c:b6:88: ea:bf:76:bb:88:31:39:ec:47:b1:63:44:f0:73:c7: 64:16:e4:a0:af:67:42:b2:2a:7a:29:ad:da:64:6b: 96:ab:4e:eb:dc:08:87:53:fc:11:98:fc:2d:88:70: a6:86:e5:18:4e:d5:86:88:1b:93:5b:6b:91:24:78: e7:ac:c1:86:1a:d8:46:ca:a6:e0:7e:28:c3:80:c0: 30:0f:31:f9:af:55:d3:1e:b8:37:ae:de:9b:3c:e9: ae:a7:08:e1:9f:fe:12:86:da:6a:9b:f5:d5:f6:18: 7d:6b:3a:94:7f:d1:70:96:63:63:b7:f8:a1:25:04: de:c7:40:0b:f3:fd:3f:64:03:54:70:3f:8c:5b:10: a6:1d:1b:7a:e8:e9:27:e8:04:a7:8b:72:c2:41:f4: 2f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1C:AF:F2:05:EE:42:2E:71:19:0C:94:5B:12:0B:75:89:D0:07:68 X509v3 Authority Key Identifier: keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:cb:b6:9b:2b:0a:fe:13:fc:97:95:6e:36:a0:0a:45:64:27: 39:76:5c:70:87:a5:1f:64:32:79:85:79:36:59:11:da:da:76: 6c:0f:f3:31:c4:99:f0:a5:2a:93:c3:53:8b:11:8f:80:85:65: 22:31:4e:bc:78:e9:dc:05:67:68:a5:ed:fb:0b:6d:ad:30:6d: 85:78:f2:3d:70:b5:8e:7a:af:9d:46:8f:5c:37:74:59:46:d7: 06:f6:96:69:b0:26:27:1e:ea:eb:11:db:55:e7:0b:2d:82:aa: 7e:3a:fe:24:13:76:68:51:b7:67:91:ad:93:2d:bf:8b:cf:af: e4:f5:75:98:3e:14:4c:e0:ec:d6:a3:99:2e:cd:8e:f0:7b:2c: 58:45:7a:58:7b:dc:98:48:f3:72:f2:d5:b9:69:ae:3a:29:05: a0:fd:90:74:bc:03:01:c8:da:17:e4:a1:5b:7a:46:96:95:67: c4:e0:25:3e:7f:06:e8:34:e5:9c:15:7b:fb:ad:57:99:f0:89: 2f:a1:a2:01:f0:68:28:92:c7:fd:ce:c9:c1:07:74:65:a8:3b: bb:b7:a8:6c:0c:3f:2c:3d:a5:c4:43:db:4d:37:2c:e0:f6:ad: 3b:83:06:fc:d4:69:ec:66:3d:c1:7f:36:11:af:48:ef:b9:5f: b2:0b:3f:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vu7FYPX4ysdHuM/3TEaTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZWZlNTBhNDBmYjE3MzI1NDFlOGE5NzQ1MGFiNWRlNzc0 NzcxZDgwHhcNMjYwMTI1MjAwMTA2WhcNMjYwMTI2MjAwMTA2WjAzMTEwLwYDVQQD EyhmYTFjYWZmMjA1ZWU0MjJlNzExOTBjOTQ1YjEyMGI3NTg5ZDAwNzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2qiX7cmokvett0Y9Ae7rVEk4grM 20/wwN+fa9SC8huxzoI/a41UrgF17slPzYkZcWrF7Y/f5kIHkRS578GEkXGCyuou H5EuVIYwCLVHZ7DX5BZHjRzSYiUmKZFRMyXzYT/u7JFstojqv3a7iDE57EexY0Tw c8dkFuSgr2dCsip6Ka3aZGuWq07r3AiHU/wRmPwtiHCmhuUYTtWGiBuTW2uRJHjn rMGGGthGyqbgfijDgMAwDzH5r1XTHrg3rt6bPOmupwjhn/4Shtpqm/XV9hh9azqU f9FwlmNjt/ihJQTex0AL8/0/ZANUcD+MWxCmHRt66Okn6ASni3LCQfQvvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPocr/IF7kIucRkMlFsSC3WJ0AdoMB8GA1UdIwQY MBaAFDvv5QpA+xcyVB6Kl0UKtd53R3HYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTy1fbENrRDdGekpVSG9xWFJRcTEzbmRIY2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84ZWY3NDAtMTA1Mi00OWVjLWE0MDkt ZTYxNTQ5MzExN2QyLzEvTy1fbENrRDdGekpVSG9xWFJRcTEzbmRIY2RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi84ZWY3NDAtMTA1Mi00OWVjLWE0MDktZTYxNTQ5MzExN2Qy LzEvTy1fbENrRDdGekpVSG9xWFJRcTEzbmRIY2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu8u2mysK /hP8l5VuNqAKRWQnOXZccIelH2QyeYV5NlkR2tp2bA/zMcSZ8KUqk8NTixGPgIVl IjFOvHjp3AVnaKXt+wttrTBthXjyPXC1jnqvnUaPXDd0WUbXBvaWabAmJx7q6xHb VecLLYKqfjr+JBN2aFG3Z5Gtky2/i8+v5PV1mD4UTODs1qOZLs2O8HssWEV6WHvc mEjzcvLVuWmuOikFoP2QdLwDAcjaF+ShW3pGlpVnxOAlPn8G6DTlnBV7+61XmfCJ L6GiAfBoKJLH/c7JwQd0Zag7u7eobAw/LD2lxEPbTTcs4PatO4MG/NRp7GY9wX82 Ea9I77lfsgs/8g== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:01 2026 by rpki-client