This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft File: oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json) Hash identifier: pbV69DDVtwUNTGjV+DESLUXAbbtVYurvHqNWr0HJc3A= Subject key identifier: 4C:3C:EA:5A:EE:84:61:25:34:C4:9B:32:52:0F:1C:2C:03:D7:34:66 Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3 Certificate issuer: /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3 Certificate serial: 019BF8087FB6A4ABF44F0874B1ED97B8781A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft Manifest number: 0820 Signing time: Mon 26 Jan 2026 02:01:05 +0000 Manifest this update: Mon 26 Jan 2026 02:01:05 +0000 Manifest next update: Tue 27 Jan 2026 02:01:05 +0000 Files and hashes: 1: 1-dKs6JiGc-gWNM_u3hT68Z-M9-E.roa (hash: NUuaKTsuVI94pE+iA9XsbEXpRar3w3VZVCIsvU2Qp6M=) 2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: 3JkWYoqqNJ4w/IX79fHrEGD9BoBM+63wZGfHbPjFFDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:7f:b6:a4:ab:f4:4f:08:74:b1:ed:97:b8:78:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3 Validity Not Before: Jan 26 02:01:05 2026 GMT Not After : Jan 27 02:01:05 2026 GMT Subject: CN=4c3cea5aee84612534c49b32520f1c2c03d73466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cb:dd:18:f6:6f:7b:53:57:bb:e4:5b:48:f8: 95:3f:c0:25:92:ce:7b:53:51:2c:8a:4c:ac:08:ff: 1f:46:30:ed:39:4c:07:7a:cb:b5:8f:9f:9a:f5:92: 00:67:40:b7:65:99:26:7c:1c:ed:44:1e:06:52:76: 96:ab:14:57:4d:ff:ad:2c:79:d1:74:49:2b:6f:36: 72:73:ff:f4:7d:79:c4:10:40:f2:e4:a6:b4:80:6a: 29:bc:71:97:fa:42:2d:76:f4:b9:65:fa:7d:57:fe: 71:e2:64:0c:7b:8f:f5:7c:3a:39:7e:b2:c3:ba:52: 44:92:c5:97:f0:41:28:33:d3:01:05:7e:e5:0b:53: 0b:59:df:89:6b:f6:aa:18:29:78:fd:85:8a:11:61: 81:2b:73:d0:72:9f:22:c0:8c:ac:e2:44:61:ea:b6: 81:5f:f1:87:16:33:bc:6e:1a:b6:e6:eb:1f:04:11: a4:33:13:52:ed:c1:f1:88:47:f6:e3:4d:c3:78:84: f8:3f:12:6d:15:27:18:54:eb:71:0d:11:a6:c0:f6: 08:37:cf:e5:4c:93:09:e5:8d:9b:4b:2e:d3:01:de: bd:1c:6f:2c:aa:3f:18:69:bf:a3:e7:98:2b:79:d7: 0a:92:1a:c5:5d:e9:5c:d4:9a:90:44:26:af:6d:05: ce:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3C:EA:5A:EE:84:61:25:34:C4:9B:32:52:0F:1C:2C:03:D7:34:66 X509v3 Authority Key Identifier: keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:b8:ee:32:45:06:38:e0:1f:17:80:14:68:46:fa:48:1d:b3: e6:25:26:74:d9:8a:8e:9e:be:ec:c9:85:c9:fc:22:d7:8e:d8: 2b:1e:59:80:48:e2:54:d5:42:4f:4b:bd:4d:95:67:0f:be:f8: 83:70:dd:b1:2b:dc:6e:78:ff:a9:02:15:d2:5b:15:9a:ac:38: d1:9a:40:bf:2d:50:cb:91:38:f6:39:b2:ea:f1:6c:7e:80:a6: 1d:35:97:3d:f8:cc:6f:77:99:6f:75:57:af:c9:58:e6:c1:ff: 19:6d:c4:4e:e9:97:5d:ff:d0:3f:7f:67:41:39:55:e8:e5:e9: ba:27:eb:62:9b:a2:24:af:c0:96:c7:54:cf:7d:2b:8e:1c:67: bb:ba:99:38:31:b7:a0:fc:86:45:51:4b:f9:69:7f:d5:d8:bc: c8:b6:54:57:8b:fb:08:04:2b:31:b7:97:d6:58:2a:23:09:73: 8e:ec:ca:b2:0c:2e:1d:a3:7e:96:07:1f:c4:d9:9e:e1:27:aa: e8:95:8e:f1:3b:56:94:2c:e7:02:9b:94:2b:5c:76:c1:4b:1f: 1f:53:16:b8:67:5c:c7:b7:5c:44:03:19:d9:fd:4b:97:dc:53: 57:ae:b4:c9:e4:f2:f2:23:6b:a2:dc:cc:3e:ac:21:60:be:42: f4:ab:6f:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CH+2pKv0Twh0se2XuHgaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwY2VmMWNhYTM0NTliOGIwMzljMjE3ODEzNjQ4ZGNhYmNl OGMyZDMwHhcNMjYwMTI2MDIwMTA1WhcNMjYwMTI3MDIwMTA1WjAzMTEwLwYDVQQD Eyg0YzNjZWE1YWVlODQ2MTI1MzRjNDliMzI1MjBmMWMyYzAzZDczNDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMvdGPZve1NXu+RbSPiVP8Alks57 U1EsikysCP8fRjDtOUwHesu1j5+a9ZIAZ0C3ZZkmfBztRB4GUnaWqxRXTf+tLHnR dEkrbzZyc//0fXnEEEDy5Ka0gGopvHGX+kItdvS5Zfp9V/5x4mQMe4/1fDo5frLD ulJEksWX8EEoM9MBBX7lC1MLWd+Ja/aqGCl4/YWKEWGBK3PQcp8iwIys4kRh6raB X/GHFjO8bhq25usfBBGkMxNS7cHxiEf2403DeIT4PxJtFScYVOtxDRGmwPYIN8/l TJMJ5Y2bSy7TAd69HG8sqj8Yab+j55gredcKkhrFXelc1JqQRCavbQXONQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEw86lruhGElNMSbMlIPHCwD1zRmMB8GA1UdIwQY MBaAFKDO8cqjRZuLA5wheBNkjcq86MLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84NThlZDgtNzMxYS00NzYxLTgyYzAt NmIwMTc5ZWUxZGQ5LzEvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84NThlZDgtNzMxYS00NzYxLTgyYzAtNmIwMTc5ZWUxZGQ5 LzEvb003eHlxTkZtNHNEbkNGNEUyU055cnpvd3RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuLjuMkUG OOAfF4AUaEb6SB2z5iUmdNmKjp6+7MmFyfwi147YKx5ZgEjiVNVCT0u9TZVnD774 g3DdsSvcbnj/qQIV0lsVmqw40ZpAvy1Qy5E49jmy6vFsfoCmHTWXPfjMb3eZb3VX r8lY5sH/GW3ETumXXf/QP39nQTlV6OXpuifrYpuiJK/AlsdUz30rjhxnu7qZODG3 oPyGRVFL+Wl/1di8yLZUV4v7CAQrMbeX1lgqIwlzjuzKsgwuHaN+lgcfxNme4Seq 6JWO8TtWlCznApuUK1x2wUsfH1MWuGdcx7dcRAMZ2f1Ll9xTV660yeTy8iNrotzM PqwhYL5C9KtvQA== -----END CERTIFICATE-----Generated at Mon Jan 26 09:01:57 2026 by rpki-client