This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft File: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft (raw, json) Hash identifier: xl4kcRltBq86p0glUE3ylmB4x8+bl7JPupzImLIXnyQ= Subject key identifier: 42:CC:11:2D:55:BB:56:57:79:46:22:18:1D:E8:80:CD:D0:6C:7D:CD Authority key identifier: A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4 Certificate issuer: /CN=a15e3f974b5f974656ccf4d45596caad1b9096d4 Certificate serial: 019BF4D0F73E5FCF156AB825A9075C942700 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft Manifest number: 17ED Signing time: Sun 25 Jan 2026 11:01:34 +0000 Manifest this update: Sun 25 Jan 2026 11:01:34 +0000 Manifest next update: Mon 26 Jan 2026 11:01:34 +0000 Files and hashes: 1: 1D6VdZ93vriFw0vJq3zsA_SVHYQ.roa (hash: wfcEJ94VdVBOXkIE/uYqWDRHCjqI3CAKjspAjKdc5FA=) 2: 6ANG8OJh4OznV_DcZX5PWVtHheM.roa (hash: NqWuvD35Q6Kj2pzaFTf900GyG3MSTmGkmgkkAWcoTkE=) 3: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl (hash: S5/Fgd00x0qIuJtnFZI4bfdLBBRclLJP+0aYEYMIeF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:f7:3e:5f:cf:15:6a:b8:25:a9:07:5c:94:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15e3f974b5f974656ccf4d45596caad1b9096d4 Validity Not Before: Jan 25 11:01:34 2026 GMT Not After : Jan 26 11:01:34 2026 GMT Subject: CN=42cc112d55bb5657794622181de880cdd06c7dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7b:ef:a0:e6:c5:38:98:5e:f1:c4:4a:39:a7: 85:74:e7:ba:90:1a:86:c5:81:48:b0:3b:96:7d:57: fd:2e:cc:22:01:50:86:55:5b:0c:ef:f4:e5:2c:01: 86:f6:c6:1d:43:6d:75:93:ef:47:d8:2b:4e:86:08: f3:51:c0:20:53:b5:14:a2:3f:6f:87:e9:16:11:eb: 6a:46:7d:67:b7:4e:0c:75:6f:b6:89:0d:52:47:5c: a2:5a:2e:9a:34:7b:da:3e:e4:c2:e1:b0:d1:91:8f: 34:df:09:87:9f:1e:f6:6c:02:f4:6a:ad:3f:2c:58: f3:e7:fc:3b:6f:37:55:da:5c:92:08:1e:66:cd:c8: 30:90:47:11:ce:ea:0e:f4:eb:65:a3:58:7d:b4:f0: 57:09:e5:33:62:65:50:cf:d6:9a:8c:90:3d:a3:25: 95:70:dd:f6:20:f1:ee:b0:8c:40:44:3e:7b:30:b4: 4b:4f:ab:d6:4a:7c:15:8c:3e:95:e0:c2:d6:84:98: 8d:09:ad:68:76:d9:7b:f2:6e:4b:ac:9f:9f:49:f1: c4:bc:6c:ec:35:3d:8d:9d:3f:75:14:7f:14:f3:60: 1f:b8:5f:4b:02:a7:25:59:6d:f0:6d:a1:2b:14:89: 2d:76:a3:a9:b8:45:eb:d9:20:41:0f:33:17:85:8c: 7a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CC:11:2D:55:BB:56:57:79:46:22:18:1D:E8:80:CD:D0:6C:7D:CD X509v3 Authority Key Identifier: keyid:A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:e0:04:d6:6f:bf:a3:b1:27:63:3a:8e:73:93:51:a8:43:70: 83:ec:b1:75:41:13:50:50:ab:7f:75:6a:a7:99:16:e8:bb:71: 64:11:98:fd:34:19:a9:5f:22:35:68:f9:e7:61:37:49:b7:3d: 6a:d8:5b:e9:f6:49:6b:5c:fb:6b:9c:80:2c:02:c3:d1:28:48: a9:98:2b:7e:25:03:b0:65:59:0c:5f:61:59:50:e1:26:66:9c: 66:17:22:d2:06:9c:24:26:e3:2f:7b:6e:ad:8a:15:44:31:96: 05:84:d8:af:6a:de:9a:e5:cc:fe:55:d4:00:45:4b:c4:ee:26: 20:41:96:d5:86:0a:8e:48:69:1c:1b:67:d5:3e:ab:ad:e8:23: ee:90:28:59:77:38:c9:68:6c:85:be:f9:57:b0:67:74:2e:71: bf:17:ea:ed:08:e5:42:a8:70:e4:da:32:97:dd:27:23:86:37: d9:be:1a:ce:c2:46:a8:38:d5:b5:cc:22:2a:3e:02:8b:5e:56: d4:a7:7a:9c:ba:d2:a0:24:4a:ea:9d:b5:61:e3:6a:02:36:79: fe:c2:86:ae:9d:50:c0:00:4e:21:91:86:61:58:13:3c:0e:ef: 5c:c1:83:6b:70:25:06:90:34:45:c2:7d:24:ca:1c:6d:16:07: b2:97:a7:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00Pc+X88VarglqQdclCcAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNWUzZjk3NGI1Zjk3NDY1NmNjZjRkNDU1OTZjYWFkMWI5 MDk2ZDQwHhcNMjYwMTI1MTEwMTM0WhcNMjYwMTI2MTEwMTM0WjAzMTEwLwYDVQQD Eyg0MmNjMTEyZDU1YmI1NjU3Nzk0NjIyMTgxZGU4ODBjZGQwNmM3ZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnvvoObFOJhe8cRKOaeFdOe6kBqG xYFIsDuWfVf9LswiAVCGVVsM7/TlLAGG9sYdQ211k+9H2CtOhgjzUcAgU7UUoj9v h+kWEetqRn1nt04MdW+2iQ1SR1yiWi6aNHvaPuTC4bDRkY803wmHnx72bAL0aq0/ LFjz5/w7bzdV2lySCB5mzcgwkEcRzuoO9Otlo1h9tPBXCeUzYmVQz9aajJA9oyWV cN32IPHusIxARD57MLRLT6vWSnwVjD6V4MLWhJiNCa1odtl78m5LrJ+fSfHEvGzs NT2NnT91FH8U82AfuF9LAqclWW3wbaErFIktdqOpuEXr2SBBDzMXhYx6EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELMES1Vu1ZXeUYiGB3ogM3QbH3NMB8GA1UdIwQY MBaAFKFeP5dLX5dGVsz01FWWyq0bkJbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1Y0X2wwdGZsMFpXelBUVVZaYktyUnVRbHRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kNmE0MjItMzYxMi00NWFmLTgzYWIt ZDI0YjY4OTY2ZTBlLzEvb1Y0X2wwdGZsMFpXelBUVVZaYktyUnVRbHRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kNmE0MjItMzYxMi00NWFmLTgzYWItZDI0YjY4OTY2ZTBl LzEvb1Y0X2wwdGZsMFpXelBUVVZaYktyUnVRbHRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOAE1m+/ o7EnYzqOc5NRqENwg+yxdUETUFCrf3Vqp5kW6LtxZBGY/TQZqV8iNWj552E3Sbc9 athb6fZJa1z7a5yALALD0ShIqZgrfiUDsGVZDF9hWVDhJmacZhci0gacJCbjL3tu rYoVRDGWBYTYr2remuXM/lXUAEVLxO4mIEGW1YYKjkhpHBtn1T6rregj7pAoWXc4 yWhshb75V7BndC5xvxfq7QjlQqhw5Noyl90nI4Y32b4azsJGqDjVtcwiKj4Ci15W 1Kd6nLrSoCRK6p21YeNqAjZ5/sKGrp1QwABOIZGGYVgTPA7vXMGDa3AlBpA0RcJ9 JMocbRYHspenoQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:26:30 2026 by rpki-client