This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft File: OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft (raw, json) Hash identifier: Ogq6nmVbpwvcFUeJ+2toLjT8E5BBc7r9EH/VItogFM4= Subject key identifier: 38:90:A4:BF:98:98:BB:64:3B:F2:24:20:12:B3:98:7F:0A:C5:A1:55 Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5 Certificate issuer: /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5 Certificate serial: 019BF53DDF5B5AEC8FD9D7EF77C88657A40C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft Manifest number: 0EFC Signing time: Sun 25 Jan 2026 13:00:31 +0000 Manifest this update: Sun 25 Jan 2026 13:00:31 +0000 Manifest next update: Mon 26 Jan 2026 13:00:31 +0000 Files and hashes: 1: OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl (hash: cQQ6bNUaidO4KsN/9X1ZpMqqY23GiHh+1UUnQ4Jhfoo=) 2: _DDyWE_6qVEDbwKdTSOKXXWZzhc.asa (hash: WJa84hCJWVripI8IQcJ6DuU9yIGH2uiiGIsBWDQ40Zs=) 3: cTrZsyD5TZ5z3ErmrXdlBIUqC7k.roa (hash: kFvba9VnGvbidEsHHI8Wcjcp/+eUykc2W3uRbNK02kM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3d:df:5b:5a:ec:8f:d9:d7:ef:77:c8:86:57:a4:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5 Validity Not Before: Jan 25 13:00:31 2026 GMT Not After : Jan 26 13:00:31 2026 GMT Subject: CN=3890a4bf9898bb643bf2242012b3987f0ac5a155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:70:e8:83:dd:56:a2:fa:67:a8:c6:4a:d5:95: 21:a7:9a:4c:fc:46:ac:5b:cd:fc:f3:e4:5c:9d:5d: a5:70:31:23:f2:63:a2:a0:8a:97:34:d7:12:5f:8d: ed:15:a8:29:8f:8e:c2:5c:07:ec:68:7f:36:32:01: 72:6d:35:09:30:d9:30:23:f1:65:09:c6:b0:36:55: ac:ef:70:d3:75:34:c1:c1:6d:65:71:6f:7a:2b:8c: ed:90:06:c8:ae:6e:c3:ee:57:9f:7c:5e:86:bc:65: 4a:26:d6:ff:56:cf:2e:8f:8b:2b:ff:6f:1d:5c:b2: 53:74:78:35:b4:84:f8:06:6a:57:3d:fe:73:d6:e2: 65:12:d9:6b:36:04:64:38:e8:cd:f0:95:b3:f8:69: 3a:ac:43:6f:ae:d8:37:8d:9f:98:2c:f0:f9:88:96: e6:f4:f6:36:29:a1:e8:52:79:6b:2b:eb:2c:20:f1: ad:c7:9a:7d:a0:eb:39:99:74:52:12:90:09:c9:87: fd:66:a4:4a:f2:d7:41:96:24:a3:98:ff:d9:b0:e6: a7:1e:9f:db:63:78:b2:93:26:45:3e:91:b1:da:5f: a4:f2:4d:c0:be:48:89:59:17:de:bc:0e:c5:0c:fb: 6d:e7:05:d0:1d:e2:87:20:a3:24:d5:ff:01:48:96: 2c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:90:A4:BF:98:98:BB:64:3B:F2:24:20:12:B3:98:7F:0A:C5:A1:55 X509v3 Authority Key Identifier: keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:8c:fd:d2:50:41:29:39:e1:86:33:6b:ed:cb:c3:ff:b1:da: ad:6d:ab:4d:c2:b3:b5:7a:23:b5:43:4c:2d:f8:f8:d0:9d:70: 4e:86:ca:c0:0a:df:27:5b:95:c0:b9:2a:43:0d:9c:95:6d:80: d9:79:53:43:97:be:8f:2d:49:86:cf:e2:cb:80:4d:08:e0:6d: 68:a4:59:4b:89:d6:de:c8:d6:4a:82:a4:35:42:91:f9:05:4c: fe:3f:bd:41:fc:d8:9f:b5:e7:4b:27:3a:75:ff:0a:c5:15:57: 5a:5c:34:c2:38:68:97:bc:60:b4:8d:5c:6a:e5:dd:58:3a:2f: e4:7e:9b:95:47:ce:ff:f9:21:d4:5e:fb:bd:5d:d5:99:99:30: d0:38:96:88:ec:84:91:98:4b:2d:9d:5e:b9:98:86:9f:c6:a7: 18:a0:d4:98:07:39:ce:b8:bc:38:af:32:b9:eb:97:bb:93:51: 6c:1c:71:a5:01:8c:ab:53:a7:28:c3:05:2e:04:24:c5:56:a6: 9b:15:ad:17:0e:25:cb:df:e8:90:74:f5:4a:38:77:35:82:f1: 64:3e:f5:d5:eb:f6:41:1c:40:5c:9c:db:59:ce:02:9f:9d:03: 6b:20:2b:09:24:26:3d:14:65:f0:11:aa:12:77:4b:28:25:f2: 63:0a:70:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Pd9bWuyP2dfvd8iGV6QMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4OWMxM2M2YjNjMWRjNmIyMjE1MDM1YTY0MmYxZWZiOWIw MGRkZjUwHhcNMjYwMTI1MTMwMDMxWhcNMjYwMTI2MTMwMDMxWjAzMTEwLwYDVQQD EygzODkwYTRiZjk4OThiYjY0M2JmMjI0MjAxMmIzOTg3ZjBhYzVhMTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHDog91WovpnqMZK1ZUhp5pM/Eas W8388+RcnV2lcDEj8mOioIqXNNcSX43tFagpj47CXAfsaH82MgFybTUJMNkwI/Fl CcawNlWs73DTdTTBwW1lcW96K4ztkAbIrm7D7leffF6GvGVKJtb/Vs8uj4sr/28d XLJTdHg1tIT4BmpXPf5z1uJlEtlrNgRkOOjN8JWz+Gk6rENvrtg3jZ+YLPD5iJbm 9PY2KaHoUnlrK+ssIPGtx5p9oOs5mXRSEpAJyYf9ZqRK8tdBliSjmP/ZsOanHp/b Y3iykyZFPpGx2l+k8k3AvkiJWRfevA7FDPtt5wXQHeKHIKMk1f8BSJYs4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDiQpL+YmLtkO/IkIBKzmH8KxaFVMB8GA1UdIwQY MBaAFDicE8azwdxrIhUDWmQvHvubAN31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84MGViMjEtYWYyMC00OGViLWEyZGMt NjIxMGVhYjA1YjcwLzEvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC84MGViMjEtYWYyMC00OGViLWEyZGMtNjIxMGVhYjA1Yjcw LzEvT0p3VHhyUEIzR3NpRlFOYVpDOGUtNXNBM2ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIz90lBB KTnhhjNr7cvD/7HarW2rTcKztXojtUNMLfj40J1wTobKwArfJ1uVwLkqQw2clW2A 2XlTQ5e+jy1Jhs/iy4BNCOBtaKRZS4nW3sjWSoKkNUKR+QVM/j+9QfzYn7XnSyc6 df8KxRVXWlw0wjhol7xgtI1cauXdWDov5H6blUfO//kh1F77vV3VmZkw0DiWiOyE kZhLLZ1euZiGn8anGKDUmAc5zri8OK8yueuXu5NRbBxxpQGMq1OnKMMFLgQkxVam mxWtFw4ly9/okHT1Sjh3NYLxZD711ev2QRxAXJzbWc4Cn50DayArCSQmPRRl8BGq EndLKCXyYwpwQg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:11:33 2026 by rpki-client