This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft File: oE_JgO38R54EauArEOVyRbuSyLc.mft (raw, json) Hash identifier: k9G5qB+5QhmbPAEzB75YJx1nHRAbkaIFbhWmQztSuPI= Subject key identifier: 84:E3:E7:29:FB:50:C4:94:A2:99:D5:F1:72:D2:FA:58:D6:8D:7D:5E Authority key identifier: A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7 Certificate issuer: /CN=a04fc980edfc479e046ae02b10e57245bb92c8b7 Certificate serial: 019BF875E079E74D9D3A0E55D741229EFAD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft Manifest number: 07EC Signing time: Mon 26 Jan 2026 04:00:33 +0000 Manifest this update: Mon 26 Jan 2026 04:00:33 +0000 Manifest next update: Tue 27 Jan 2026 04:00:33 +0000 Files and hashes: 1: WEYbQOexwhK2R5FdPsKVkoGciLs.asa (hash: ayn/GAW27PYPeNMdAvkXgJDPQwOtHPGncDveGGykbgw=) 2: oE_JgO38R54EauArEOVyRbuSyLc.crl (hash: ua/cQAyOwkNzn4z77O7F1WB3YmI/8rmOOIh1mCvGMPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:75:e0:79:e7:4d:9d:3a:0e:55:d7:41:22:9e:fa:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a04fc980edfc479e046ae02b10e57245bb92c8b7 Validity Not Before: Jan 26 04:00:33 2026 GMT Not After : Jan 27 04:00:33 2026 GMT Subject: CN=84e3e729fb50c494a299d5f172d2fa58d68d7d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d7:09:29:47:b9:51:60:17:a6:13:0c:59:b0: 9f:49:40:c1:1e:da:bf:0d:71:f6:3a:d9:66:b0:c8: 97:b1:e1:3a:96:f6:82:8d:45:81:d0:78:30:dc:07: c5:19:8c:99:a6:37:cf:a3:89:49:1a:c5:54:2f:ec: 1a:00:cd:5c:32:db:5e:b0:3a:18:fb:c6:fe:ac:60: 45:91:f5:3e:ed:4d:43:1d:95:66:72:fb:70:f8:39: 66:55:43:d9:5d:84:7c:0d:3d:a0:e6:a9:e2:4a:5f: ef:c1:be:0a:47:ab:55:d7:52:10:8f:ee:6c:43:40: 6d:c9:14:23:c3:33:29:43:b4:b9:3f:ce:74:f1:60: 2e:57:c2:54:1a:ab:a6:05:81:85:e2:ed:7c:f6:da: 27:cf:19:f0:3f:30:8f:ad:e5:ba:4a:47:e5:1b:7a: e3:65:5c:34:4e:44:73:55:25:e4:64:dd:eb:76:ff: 07:7b:fa:1f:a9:5e:9c:77:3b:1a:30:55:e1:62:fa: a3:eb:66:e5:a4:e0:ab:c8:7b:01:65:06:f7:7f:a8: e3:22:e6:d6:be:ed:63:0b:15:d6:5a:5d:89:49:09: f9:5f:3a:01:07:23:03:84:ff:57:2c:df:74:28:78: 75:d8:83:9b:2b:fd:c5:25:ed:9b:ee:5a:81:61:1d: 46:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E3:E7:29:FB:50:C4:94:A2:99:D5:F1:72:D2:FA:58:D6:8D:7D:5E X509v3 Authority Key Identifier: keyid:A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:54:c8:f5:7d:88:9b:7f:5d:94:50:3c:80:36:16:f4:22:69: 44:4e:d4:97:04:45:e9:3c:a1:99:aa:9b:7b:ae:54:90:87:e4: 45:3a:a0:57:75:4f:f1:44:55:c3:e1:4c:e4:03:f2:72:45:9f: a9:28:e6:f8:26:77:53:bd:cb:df:b5:31:e3:d2:cd:56:20:dc: f0:99:65:8c:f7:fb:9d:37:c8:72:bb:e2:48:73:94:df:c8:89: ae:09:bb:83:00:17:13:5b:d8:85:1d:ce:96:fe:ff:66:6f:4b: a5:96:e9:0b:be:79:7f:bf:65:b4:eb:a3:d3:cd:d1:48:4f:b1: 97:c1:d9:40:0f:e7:35:d6:80:cf:a1:3c:fe:36:13:61:eb:4b: 5b:4c:f0:67:4b:37:b2:6c:64:c5:0b:1a:dc:93:4a:35:d4:fc: ae:61:96:5f:42:86:79:79:42:dd:34:98:e9:44:60:df:cb:b2: b1:02:7d:19:6e:1e:6e:20:6e:ee:1b:88:71:09:31:af:2a:5a: 88:25:40:14:40:34:5b:8b:7e:c5:6a:92:4a:7b:e5:94:68:49: f6:f3:4b:57:cd:1f:a0:6c:6f:9b:c8:64:16:a1:d8:a4:13:96: 2a:17:5e:b2:b7:9b:17:f0:a9:22:9c:f4:96:e5:f8:b1:67:54: 02:01:a1:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4deB5502dOg5V10EinvrSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNGZjOTgwZWRmYzQ3OWUwNDZhZTAyYjEwZTU3MjQ1YmI5 MmM4YjcwHhcNMjYwMTI2MDQwMDMzWhcNMjYwMTI3MDQwMDMzWjAzMTEwLwYDVQQD Eyg4NGUzZTcyOWZiNTBjNDk0YTI5OWQ1ZjE3MmQyZmE1OGQ2OGQ3ZDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tcJKUe5UWAXphMMWbCfSUDBHtq/ DXH2OtlmsMiXseE6lvaCjUWB0Hgw3AfFGYyZpjfPo4lJGsVUL+waAM1cMttesDoY +8b+rGBFkfU+7U1DHZVmcvtw+DlmVUPZXYR8DT2g5qniSl/vwb4KR6tV11IQj+5s Q0BtyRQjwzMpQ7S5P8508WAuV8JUGqumBYGF4u189tonzxnwPzCPreW6SkflG3rj ZVw0TkRzVSXkZN3rdv8He/ofqV6cdzsaMFXhYvqj62blpOCryHsBZQb3f6jjIubW vu1jCxXWWl2JSQn5XzoBByMDhP9XLN90KHh12IObK/3FJe2b7lqBYR1G3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITj5yn7UMSUopnV8XLS+ljWjX1eMB8GA1UdIwQY MBaAFKBPyYDt/EeeBGrgKxDlckW7ksi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNTVkZjEtMGJhNi00MzBmLTgwOWQt NmIwMzVjZWUxOTgxLzEvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9mNTVkZjEtMGJhNi00MzBmLTgwOWQtNmIwMzVjZWUxOTgx LzEvb0VfSmdPMzhSNTRFYXVBckVPVnlSYnVTeUxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlTI9X2I m39dlFA8gDYW9CJpRE7UlwRF6Tyhmaqbe65UkIfkRTqgV3VP8URVw+FM5APyckWf qSjm+CZ3U73L37Ux49LNViDc8JlljPf7nTfIcrviSHOU38iJrgm7gwAXE1vYhR3O lv7/Zm9LpZbpC755f79ltOuj083RSE+xl8HZQA/nNdaAz6E8/jYTYetLW0zwZ0s3 smxkxQsa3JNKNdT8rmGWX0KGeXlC3TSY6URg38uysQJ9GW4ebiBu7huIcQkxrypa iCVAFEA0W4t+xWqSSnvllGhJ9vNLV80foGxvm8hkFqHYpBOWKhdesrebF/CpIpz0 luX4sWdUAgGhMQ== -----END CERTIFICATE-----Generated at Mon Jan 26 12:35:50 2026 by rpki-client