This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft File: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json) Hash identifier: HRhpZORvdUE6wwO3jnHqdpuF6MfOpHaBr1k3uFYBZZI= Subject key identifier: D4:9F:BA:73:3E:D2:AF:FF:72:D2:B8:51:40:C0:26:2E:25:EF:19:77 Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64 Certificate issuer: /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64 Certificate serial: 019BF5ABCC6F2845118D8EB7F5572C739C5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft Manifest number: 040E Signing time: Sun 25 Jan 2026 15:00:35 +0000 Manifest this update: Sun 25 Jan 2026 15:00:35 +0000 Manifest next update: Mon 26 Jan 2026 15:00:35 +0000 Files and hashes: 1: 7jGC3eByRg_Kov58Z9afFa1zFhk.roa (hash: 01p3EgWoHQZuC7lRAyeIevnlE5QEkxh9vvqWiCkIFPs=) 2: JiK8psPNS7Q8TSWjkJH1pP9BmF8.roa (hash: 3M1URB5bq4S79c9mtyyaPbUG6/SErUNxltBv4XVCKoY=) 3: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: R86oklrIsdtfa8taB8CdurtospwYccIAmzGwVVPV6EY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:cc:6f:28:45:11:8d:8e:b7:f5:57:2c:73:9c:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64 Validity Not Before: Jan 25 15:00:35 2026 GMT Not After : Jan 26 15:00:35 2026 GMT Subject: CN=d49fba733ed2afff72d2b85140c0262e25ef1977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:81:ce:6a:22:f2:97:aa:11:75:59:b9:d3:a5: 71:05:5c:2e:88:22:7b:80:b1:95:59:83:4f:a3:5c: f5:6d:bc:f8:68:cb:28:e7:e2:80:36:15:20:16:9a: f3:b1:53:46:3a:bd:4e:a8:db:c8:56:cc:48:b4:0b: ca:f4:e7:49:bb:87:c5:f4:63:2e:90:15:e2:05:00: 44:f6:6f:94:d5:90:27:70:6c:89:26:53:68:9e:33: 0a:a3:b6:d5:72:ef:18:42:a6:57:4a:7c:dc:a7:51: b0:e5:07:a4:9f:f7:6e:b6:3c:e1:ae:fb:93:71:68: 5f:f7:c9:90:ac:cc:4f:0b:b9:9c:93:81:aa:c6:ef: cd:68:30:24:45:f8:ee:15:d4:4d:ce:82:ab:7d:a2: 29:04:6e:a8:cf:2a:e2:db:bb:18:c8:7b:2b:80:4d: 7c:76:de:e0:ec:aa:91:91:22:b7:32:87:92:60:1e: 8e:ef:8e:68:08:cb:5c:1b:c4:fe:51:fd:77:99:d0: 7e:47:ee:69:50:40:d1:b7:2e:d3:3f:59:5b:d6:36: fe:b5:71:eb:f0:f6:a5:3c:8f:45:2e:59:fa:7b:d3: fc:65:37:10:38:b5:fc:cb:4b:50:44:34:ae:af:1c: 47:b7:d2:eb:fc:78:f7:7c:08:60:a0:ce:ad:91:8f: 8c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9F:BA:73:3E:D2:AF:FF:72:D2:B8:51:40:C0:26:2E:25:EF:19:77 X509v3 Authority Key Identifier: keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:30:27:8d:22:76:18:13:e5:03:52:c4:01:a9:3e:26:e0:d4: 33:bf:df:fa:11:20:50:e9:0b:98:38:88:0d:0c:6a:ed:00:49: f1:8f:31:82:8d:6b:8a:e6:18:51:a0:f6:e5:9e:40:cd:91:1a: e7:52:b1:fa:75:4a:bf:2e:d8:4d:5c:7f:39:bf:57:61:7f:e9: d9:df:be:7f:0d:be:63:c5:3c:2b:f0:99:d8:d1:43:06:43:ff: 5c:14:39:1a:94:7e:29:11:c8:7d:27:87:75:f8:a1:a5:f8:33: 3c:9e:1c:0a:0b:68:5c:76:2b:60:70:66:a2:9c:b7:aa:d7:02: 9c:0a:a6:70:ef:ae:12:14:28:43:a2:1f:a2:9c:92:5f:40:55: de:35:0f:cb:e3:b5:fe:1f:cb:0e:dd:7c:b8:c1:ae:e6:e7:4e: a9:8f:6b:ee:92:dd:e4:6d:a0:83:02:c1:50:82:c4:7c:29:c6: a3:40:b9:4d:4f:ba:8f:8f:f7:5f:5b:09:b1:e3:22:91:a1:0c: a1:61:4b:51:5e:a3:98:da:e9:a1:ce:05:31:a6:61:1b:b3:d0: 39:59:b1:f8:16:d9:e0:d9:88:bb:df:cd:a3:39:90:ca:89:24: 4e:9e:a2:b3:51:04:d9:4c:b0:95:47:fd:44:14:88:5e:55:d4: d3:45:2a:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q8xvKEURjY639Vcsc5xeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhM2VhMzNhZWE4YjM4NDI3ZjJiY2VmNWVkNGMyMTQyM2Ey YTlkNjQwHhcNMjYwMTI1MTUwMDM1WhcNMjYwMTI2MTUwMDM1WjAzMTEwLwYDVQQD EyhkNDlmYmE3MzNlZDJhZmZmNzJkMmI4NTE0MGMwMjYyZTI1ZWYxOTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoHOaiLyl6oRdVm506VxBVwuiCJ7 gLGVWYNPo1z1bbz4aMso5+KANhUgFprzsVNGOr1OqNvIVsxItAvK9OdJu4fF9GMu kBXiBQBE9m+U1ZAncGyJJlNonjMKo7bVcu8YQqZXSnzcp1Gw5Qekn/dutjzhrvuT cWhf98mQrMxPC7mck4Gqxu/NaDAkRfjuFdRNzoKrfaIpBG6ozyri27sYyHsrgE18 dt7g7KqRkSK3MoeSYB6O745oCMtcG8T+Uf13mdB+R+5pUEDRty7TP1lb1jb+tXHr 8PalPI9FLln6e9P8ZTcQOLX8y0tQRDSurxxHt9Lr/Hj3fAhgoM6tkY+MnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSfunM+0q//ctK4UUDAJi4l7xl3MB8GA1UdIwQY MBaAFDo+ozrqizhCfyvO9e1MIUI6Kp1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2o2ak91cUxPRUpfSzg3MTdVd2hRam9xbldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wNjdiMDctNWViNi00M2YxLTg2ZmYt MWQ2N2MzMjQ1MDFmLzEvT2o2ak91cUxPRUpfSzg3MTdVd2hRam9xbldRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8wNjdiMDctNWViNi00M2YxLTg2ZmYtMWQ2N2MzMjQ1MDFm LzEvT2o2ak91cUxPRUpfSzg3MTdVd2hRam9xbldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoDAnjSJ2 GBPlA1LEAak+JuDUM7/f+hEgUOkLmDiIDQxq7QBJ8Y8xgo1riuYYUaD25Z5AzZEa 51Kx+nVKvy7YTVx/Ob9XYX/p2d++fw2+Y8U8K/CZ2NFDBkP/XBQ5GpR+KRHIfSeH dfihpfgzPJ4cCgtoXHYrYHBmopy3qtcCnAqmcO+uEhQoQ6IfopySX0BV3jUPy+O1 /h/LDt18uMGu5udOqY9r7pLd5G2ggwLBUILEfCnGo0C5TU+6j4/3X1sJseMikaEM oWFLUV6jmNrpoc4FMaZhG7PQOVmx+BbZ4NmIu9/NozmQyokkTp6is1EE2UywlUf9 RBSIXlXU00UqRw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:01 2026 by rpki-client