This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft File: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft (raw, json) Hash identifier: O/tgy3Cy5p5mHU9RHZZefPsLaYFEeO0yYNyVn8RxEAE= Subject key identifier: 71:41:C7:3C:A6:91:7E:AC:93:EC:CA:22:1A:FB:AF:4D:3A:8A:B5:30 Authority key identifier: 38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83 Certificate issuer: /CN=3896d9f39201a49fa1369582e18f1a2bb965b283 Certificate serial: 019BF462507329D3C139D7BB9ED9CD8A2984 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft Manifest number: 0A09 Signing time: Sun 25 Jan 2026 09:00:42 +0000 Manifest this update: Sun 25 Jan 2026 09:00:42 +0000 Manifest next update: Mon 26 Jan 2026 09:00:42 +0000 Files and hashes: 1: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl (hash: ijFsj94vAb3U7Bpkc+mrmP+yTXWglnuSwc/aGxsNri8=) 2: a8XnUOfpz8ZY7eKp-4bvRwhsoUk.roa (hash: ezF+mZ7l6Eoc1jbkNrsOHMCf2Y5Hcn8BAe23t9pa+WQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:50:73:29:d3:c1:39:d7:bb:9e:d9:cd:8a:29:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3896d9f39201a49fa1369582e18f1a2bb965b283 Validity Not Before: Jan 25 09:00:42 2026 GMT Not After : Jan 26 09:00:42 2026 GMT Subject: CN=7141c73ca6917eac93ecca221afbaf4d3a8ab530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:37:69:75:1d:0d:44:5c:ff:9d:74:f6:95:d0: cd:0b:77:4d:35:c4:c4:b7:83:a4:11:64:56:aa:9b: b0:3d:02:20:95:57:3d:62:22:12:e9:63:72:8c:78: fc:40:6e:22:7f:03:dc:11:3d:40:af:f5:90:55:71: da:7d:dd:ff:e3:e7:25:fb:f2:65:85:85:8a:26:bd: e1:66:f9:94:41:15:c9:8b:80:c6:ef:38:03:c3:17: 5f:69:7a:8b:c4:9e:df:a9:d1:8d:58:1a:9c:0d:b3: d1:48:89:82:86:07:3b:ba:b5:13:a4:22:c4:6e:3f: 9b:ed:1c:0c:40:4f:c4:29:6b:61:86:65:a0:d2:91: 03:b6:06:fe:2e:2d:7f:76:34:f8:16:25:fd:ec:12: 85:b4:94:d2:c4:de:71:d8:dc:5c:1c:9f:4d:66:2f: bb:72:a9:6a:a7:2f:b8:c6:67:f5:25:0a:59:ee:4b: ed:90:08:70:54:a0:4f:a3:e2:ff:28:3a:06:c2:99: cd:d4:d3:12:74:12:22:9a:8c:2c:ab:13:59:c0:c7: 91:c2:d3:ea:f0:c4:d5:fd:a7:d7:ff:00:44:8f:fc: ef:13:eb:76:6b:98:25:56:61:1e:ea:98:cf:4d:e7: d1:fe:59:84:7e:a4:63:42:f2:b8:7a:be:5d:c8:ae: 35:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:41:C7:3C:A6:91:7E:AC:93:EC:CA:22:1A:FB:AF:4D:3A:8A:B5:30 X509v3 Authority Key Identifier: keyid:38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:4d:8c:b7:60:bc:11:37:38:47:fb:fc:f3:4a:95:15:80:66: 1e:57:a4:7d:0d:56:2f:b5:fc:d2:c9:68:0d:3b:32:88:01:14: 47:e1:1f:a2:2e:25:70:24:db:26:34:74:bd:b6:04:a0:fb:ef: 47:79:e7:5b:78:fc:b4:e0:e5:5e:bb:b3:ae:64:16:47:e3:5f: ed:71:55:ff:a1:bf:72:9f:6e:58:d0:11:26:5c:0c:e9:e0:6f: 95:26:66:9d:9d:0b:a6:47:95:17:cd:02:da:05:79:2c:8b:93: 92:03:3b:50:46:cc:3b:d7:da:29:26:95:d7:5f:09:1a:6e:e7: 4e:09:15:fa:58:dd:f0:95:bc:3e:1d:50:37:43:3e:35:fa:7c: be:e3:e1:44:51:e2:70:19:ca:72:40:fd:52:42:e8:1a:0b:9e: 86:2a:10:61:d5:2f:55:cb:ff:d3:fe:d7:52:d2:50:ad:2d:45: 25:f4:9b:51:27:86:fa:c3:1e:21:44:e8:b4:b6:0b:7a:8e:7a: 7a:fe:41:04:3c:a5:a8:8e:f3:b8:dc:79:9d:04:c6:46:71:c9: 5e:ba:28:da:8d:15:41:fa:5f:e9:aa:64:5a:dd:23:60:f7:1f: 3e:19:05:84:61:12:9c:88:3d:ae:45:2e:0d:20:3b:5e:fb:5f: a3:8d:ac:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YlBzKdPBOde7ntnNiimEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4OTZkOWYzOTIwMWE0OWZhMTM2OTU4MmUxOGYxYTJiYjk2 NWIyODMwHhcNMjYwMTI1MDkwMDQyWhcNMjYwMTI2MDkwMDQyWjAzMTEwLwYDVQQD Eyg3MTQxYzczY2E2OTE3ZWFjOTNlY2NhMjIxYWZiYWY0ZDNhOGFiNTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDdpdR0NRFz/nXT2ldDNC3dNNcTE t4OkEWRWqpuwPQIglVc9YiIS6WNyjHj8QG4ifwPcET1Ar/WQVXHafd3/4+cl+/Jl hYWKJr3hZvmUQRXJi4DG7zgDwxdfaXqLxJ7fqdGNWBqcDbPRSImChgc7urUTpCLE bj+b7RwMQE/EKWthhmWg0pEDtgb+Li1/djT4FiX97BKFtJTSxN5x2NxcHJ9NZi+7 cqlqpy+4xmf1JQpZ7kvtkAhwVKBPo+L/KDoGwpnN1NMSdBIimowsqxNZwMeRwtPq 8MTV/afX/wBEj/zvE+t2a5glVmEe6pjPTefR/lmEfqRjQvK4er5dyK416wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFBxzymkX6sk+zKIhr7r006irUwMB8GA1UdIwQY MBaAFDiW2fOSAaSfoTaVguGPGiu5ZbKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0piWjg1SUJwSi1oTnBXQzRZOGFLN2xsc29NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83ODQ2MDEtMDQ2MS00NzUzLThhNTIt ZTgwYTA1ZTM5ZjRiLzEvT0piWjg1SUJwSi1oTnBXQzRZOGFLN2xsc29NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy83ODQ2MDEtMDQ2MS00NzUzLThhNTItZTgwYTA1ZTM5ZjRi LzEvT0piWjg1SUJwSi1oTnBXQzRZOGFLN2xsc29NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE02Mt2C8 ETc4R/v880qVFYBmHlekfQ1WL7X80sloDTsyiAEUR+Efoi4lcCTbJjR0vbYEoPvv R3nnW3j8tODlXruzrmQWR+Nf7XFV/6G/cp9uWNARJlwM6eBvlSZmnZ0LpkeVF80C 2gV5LIuTkgM7UEbMO9faKSaV118JGm7nTgkV+ljd8JW8Ph1QN0M+Nfp8vuPhRFHi cBnKckD9UkLoGguehioQYdUvVcv/0/7XUtJQrS1FJfSbUSeG+sMeIUTotLYLeo56 ev5BBDylqI7zuNx5nQTGRnHJXroo2o0VQfpf6apkWt0jYPcfPhkFhGESnIg9rkUu DSA7Xvtfo42s6A== -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:53 2026 by rpki-client