This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json) Hash identifier: 63R5x4vTt2b3upCy7IVBVjeNN+yrYFjmADq7S41/pYQ= Subject key identifier: 2E:6A:9B:92:81:07:FD:0A:E9:5C:2B:22:9A:8C:8A:84:42:5C:7E:8D Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04 Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04 Certificate serial: 019BF5ABFAF86E444EAF9F53B108C1E3B904 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft Manifest number: 0D0B Signing time: Sun 25 Jan 2026 15:00:47 +0000 Manifest this update: Sun 25 Jan 2026 15:00:47 +0000 Manifest next update: Mon 26 Jan 2026 15:00:47 +0000 Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: 0mw64NFiD/o6ZSqblo0vus9xOF19wakg00S5te32VCY=) 2: UFBgy25q3CguK3nxfqwvatepW1g.roa (hash: m6Q6Vl1NfvutDppfODeVLNYdAatkJRM43X4ANyU2Y1Q=) 3: opow8uP9IKSNWNqVgii4cTwADfA.roa (hash: +b/EweslPo3iR9ssvZX7aiO4HVHajEP37IxcMi09yZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:fa:f8:6e:44:4e:af:9f:53:b1:08:c1:e3:b9:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04 Validity Not Before: Jan 25 15:00:47 2026 GMT Not After : Jan 26 15:00:47 2026 GMT Subject: CN=2e6a9b928107fd0ae95c2b229a8c8a84425c7e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a4:a0:f4:5f:80:34:22:02:f1:38:9d:b6:93: 50:0a:b8:98:ea:cd:0f:69:fa:2b:16:f1:d1:21:6f: 35:9c:22:69:3b:56:41:c4:21:59:a4:15:f0:e5:62: 02:17:40:45:24:b6:3b:d4:4b:68:64:28:88:5d:5c: 6a:65:2c:7c:52:55:aa:93:26:95:68:e6:f5:e8:c9: d3:2a:d6:c3:ab:1e:37:fb:a6:70:49:8b:a1:1c:0b: 47:83:aa:c2:68:b4:f1:b9:14:38:a8:15:c7:b9:d4: 2c:9e:4c:3c:ea:7d:1a:60:3e:40:8f:cd:b8:fb:35: 98:ba:97:07:e4:65:93:4c:c9:05:b6:5f:32:58:6a: 22:71:1e:f9:c6:32:d3:04:10:a1:22:f8:45:6a:4c: 4e:3e:fe:fc:14:ef:a9:0e:9a:af:a1:96:91:13:2c: c9:db:69:99:66:a1:fd:10:84:79:77:67:84:6c:e2: 21:32:a5:b7:f2:a3:fd:87:4c:83:04:6a:60:94:fb: 24:b3:df:05:7b:06:c0:cd:10:37:b8:72:ff:a1:da: 5c:26:fa:f7:df:fd:fa:96:49:d0:a8:08:77:09:f4: 09:df:30:4a:cf:3a:53:21:74:3c:1b:12:1b:a0:d1: 43:a6:21:8b:5f:e0:4a:df:6e:58:48:ae:bf:2f:6f: 78:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6A:9B:92:81:07:FD:0A:E9:5C:2B:22:9A:8C:8A:84:42:5C:7E:8D X509v3 Authority Key Identifier: keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d2:66:45:08:17:d2:7b:5f:a2:74:ed:ce:13:e4:53:70:44: a9:cc:fb:2c:4d:cf:7f:cd:55:96:bc:8c:87:a7:f4:c1:19:2b: 62:78:a4:59:ee:78:00:01:d9:0b:ff:43:b9:92:9a:19:17:54: fc:75:a3:10:dd:ed:9c:a2:b3:c3:42:df:cb:7e:29:f3:5b:71: 89:1f:f7:fd:ba:28:16:b9:39:f9:e9:93:cd:ed:98:46:82:a6: 4c:48:e6:5b:7e:de:db:f3:35:4d:7f:2a:e9:e0:13:ab:57:75: 66:d7:dc:32:77:5d:22:23:37:d2:c3:74:8a:41:44:65:25:11: 2f:7c:f8:82:a1:92:f3:ae:36:ee:82:22:97:36:56:be:bb:e0: a7:25:1c:ed:4f:6d:84:52:9d:47:af:d2:a7:5d:c0:3a:d3:7e: 0b:5e:31:72:c8:15:19:33:75:14:63:d5:60:7b:1c:93:75:21: 72:ed:a4:65:e9:3d:26:92:01:2d:2a:ce:79:03:1e:36:3c:89: da:c9:03:e4:a0:4f:e5:48:09:89:e3:56:c3:ca:c2:ef:b3:fd: 7c:d7:86:33:8e:03:b1:ef:82:d9:f6:e7:1f:69:4c:04:bb:71: 85:8b:e6:05:3c:01:af:f8:30:96:18:ea:05:fd:ab:fe:ae:3d: cf:f3:6d:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q/r4bkROr59TsQjB47kEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5YTNjZWJiODExMDQ2YTA5NjZlOTU1NGQwN2U1ZDE2YjM2 ZGJmMDQwHhcNMjYwMTI1MTUwMDQ3WhcNMjYwMTI2MTUwMDQ3WjAzMTEwLwYDVQQD EygyZTZhOWI5MjgxMDdmZDBhZTk1YzJiMjI5YThjOGE4NDQyNWM3ZThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqSg9F+ANCIC8TidtpNQCriY6s0P aforFvHRIW81nCJpO1ZBxCFZpBXw5WICF0BFJLY71EtoZCiIXVxqZSx8UlWqkyaV aOb16MnTKtbDqx43+6ZwSYuhHAtHg6rCaLTxuRQ4qBXHudQsnkw86n0aYD5Aj824 +zWYupcH5GWTTMkFtl8yWGoicR75xjLTBBChIvhFakxOPv78FO+pDpqvoZaREyzJ 22mZZqH9EIR5d2eEbOIhMqW38qP9h0yDBGpglPsks98FewbAzRA3uHL/odpcJvr3 3/36lknQqAh3CfQJ3zBKzzpTIXQ8GxIboNFDpiGLX+BK325YSK6/L294DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5qm5KBB/0K6VwrIpqMioRCXH6NMB8GA1UdIwQY MBaAFDmjzruBEEaglm6VVNB+XRazbb8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kODRhNTQtMTg4Zi00ZmFmLTlkNDUt NmYyMWY0Yzc1MWYzLzEvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kODRhNTQtMTg4Zi00ZmFmLTlkNDUtNmYyMWY0Yzc1MWYz LzEvT2FQT3U0RVFScUNXYnBWVTBINWRGck50dndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtJmRQgX 0ntfonTtzhPkU3BEqcz7LE3Pf81VlryMh6f0wRkrYnikWe54AAHZC/9DuZKaGRdU /HWjEN3tnKKzw0Lfy34p81txiR/3/booFrk5+emTze2YRoKmTEjmW37e2/M1TX8q 6eATq1d1ZtfcMnddIiM30sN0ikFEZSURL3z4gqGS86427oIilzZWvrvgpyUc7U9t hFKdR6/Sp13AOtN+C14xcsgVGTN1FGPVYHsck3Uhcu2kZek9JpIBLSrOeQMeNjyJ 2skD5KBP5UgJieNWw8rC77P9fNeGM44Dse+C2fbnH2lMBLtxhYvmBTwBr/gwlhjq Bf2r/q49z/NtTQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:29:14 2026 by rpki-client