This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft File: O618kdgYkaWUfX4UpmhJEgY6Xdk.mft (raw, json) Hash identifier: 9ZAsUmt0CkvCjb9y+P+Me0IXlmOPj9lxSYI6TC4XHBo= Subject key identifier: 24:EB:10:E6:43:DF:F0:AD:86:C4:D8:D1:FC:6C:7D:E9:D2:5A:BB:DF Authority key identifier: 3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9 Certificate issuer: /CN=3bad7c91d81891a5947d7e14a6684912063a5dd9 Certificate serial: 019BF79A23F9DE47A586D3BE497C6F365E4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft Manifest number: 4B Signing time: Mon 26 Jan 2026 00:00:32 +0000 Manifest this update: Mon 26 Jan 2026 00:00:32 +0000 Manifest next update: Tue 27 Jan 2026 00:00:32 +0000 Files and hashes: 1: 1dnKy71ofDf4gYNI2KAkrU9kzh8.roa (hash: MZO4jDWSpb/PyhryjkODVE5dJvKnrUZbR0xYvl98uuA=) 2: O618kdgYkaWUfX4UpmhJEgY6Xdk.crl (hash: 70VzVGjEerV6kHGtHKrGzLGaUpPJETAxaAtKTGnjN5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:23:f9:de:47:a5:86:d3:be:49:7c:6f:36:5e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bad7c91d81891a5947d7e14a6684912063a5dd9 Validity Not Before: Jan 26 00:00:32 2026 GMT Not After : Jan 27 00:00:32 2026 GMT Subject: CN=24eb10e643dff0ad86c4d8d1fc6c7de9d25abbdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:68:de:05:7c:35:d8:66:56:d7:5f:ab:b0:ef: bf:1a:bf:d5:63:8e:98:76:3d:d0:40:59:97:f3:73: b8:92:03:49:ef:f3:33:0f:22:4a:65:35:d1:08:fd: f1:a2:15:6a:63:14:49:3b:70:8b:b6:f8:fd:a4:08: 66:43:6d:44:2c:3c:31:df:d8:eb:36:68:bd:59:89: 81:21:37:7b:23:0c:ae:7b:b9:91:6f:03:a6:45:d0: ea:06:f5:99:d9:19:ba:d9:25:5d:91:8c:92:32:6b: 35:f6:b9:7c:79:56:bd:d2:c6:c3:15:43:11:43:81: 3b:29:69:dd:d9:c0:3d:d0:8c:a6:a8:b4:e1:75:bb: 73:9e:6b:b9:e9:8e:43:9b:b0:c4:ff:31:7f:f1:66: 2b:64:c3:ed:76:91:65:cd:18:68:af:0e:ea:84:58: dd:9a:bf:17:4f:bf:61:cd:c4:18:09:c3:26:78:89: fe:a6:33:a2:87:d4:e9:e6:11:72:e6:78:05:7c:25: bf:db:79:85:df:6e:0b:42:7c:17:bb:1a:a1:84:b8: 38:62:d8:86:17:01:49:fb:09:37:ff:96:06:50:47: 4d:89:8f:93:08:f7:8b:d4:65:b3:a6:b1:25:d0:da: e3:1a:5a:f1:0a:c5:61:c6:fe:bb:5d:be:40:9a:e3: af:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EB:10:E6:43:DF:F0:AD:86:C4:D8:D1:FC:6C:7D:E9:D2:5A:BB:DF X509v3 Authority Key Identifier: keyid:3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:e7:69:27:c1:e7:be:c5:4a:d7:ae:83:ed:f3:97:94:54:8e: 1f:23:55:14:e3:b9:c3:5f:6f:4f:01:43:b9:3c:15:61:36:69: 26:44:22:21:8c:5b:35:2d:b4:e4:cd:ee:94:19:65:e9:3b:0e: ab:14:59:cf:dd:ec:6c:a0:76:e1:2c:69:25:23:92:d9:eb:26: 91:f8:ae:b3:dd:36:6e:5e:0c:88:fe:0f:f9:af:6b:3b:ee:7d: 44:d8:98:a3:8e:d9:70:5d:28:98:f1:40:15:26:3d:83:25:ae: e5:37:b6:cc:7d:87:a7:b4:01:d5:a2:45:a2:eb:41:44:b0:3b: 69:cc:eb:85:c3:15:e2:21:01:16:e3:91:09:3b:9b:45:f5:8b: 02:d7:6a:99:23:f8:82:8b:f0:1e:55:dc:d7:8b:5e:a4:0e:dd: 66:83:dc:5c:1a:df:51:e2:70:43:0d:aa:6b:4b:95:9e:a6:5a: 63:b3:58:7d:bf:d1:df:b9:e6:5a:c5:a0:3f:13:a6:96:1d:ec: 8d:c1:53:6b:5e:2d:3c:28:92:0b:aa:3b:5c:88:fb:54:15:f3: 52:5a:3b:1a:d9:8a:fd:e7:96:29:bb:4a:4f:32:5d:f9:a6:56: 63:fb:d8:a7:2e:fd:92:23:1e:cc:25:c2:f6:7d:23:01:a2:63: 03:a0:b3:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3miP53kelhtO+SXxvNl5MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYWQ3YzkxZDgxODkxYTU5NDdkN2UxNGE2Njg0OTEyMDYz YTVkZDkwHhcNMjYwMTI2MDAwMDMyWhcNMjYwMTI3MDAwMDMyWjAzMTEwLwYDVQQD EygyNGViMTBlNjQzZGZmMGFkODZjNGQ4ZDFmYzZjN2RlOWQyNWFiYmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2jeBXw12GZW11+rsO+/Gr/VY46Y dj3QQFmX83O4kgNJ7/MzDyJKZTXRCP3xohVqYxRJO3CLtvj9pAhmQ21ELDwx39jr Nmi9WYmBITd7Iwyue7mRbwOmRdDqBvWZ2Rm62SVdkYySMms19rl8eVa90sbDFUMR Q4E7KWnd2cA90IymqLThdbtznmu56Y5Dm7DE/zF/8WYrZMPtdpFlzRhorw7qhFjd mr8XT79hzcQYCcMmeIn+pjOih9Tp5hFy5ngFfCW/23mF324LQnwXuxqhhLg4YtiG FwFJ+wk3/5YGUEdNiY+TCPeL1GWzprEl0NrjGlrxCsVhxv67Xb5AmuOvhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTrEOZD3/CthsTY0fxsfenSWrvfMB8GA1UdIwQY MBaAFDutfJHYGJGllH1+FKZoSRIGOl3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzYxOGtkZ1lrYVdVZlg0VXBtaEpFZ1k2WGRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85NDkzZWUtN2EwNS00MWVmLWJjZjYt NDIyMDIyNDk5YWNhLzEvTzYxOGtkZ1lrYVdVZlg0VXBtaEpFZ1k2WGRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC85NDkzZWUtN2EwNS00MWVmLWJjZjYtNDIyMDIyNDk5YWNh LzEvTzYxOGtkZ1lrYVdVZlg0VXBtaEpFZ1k2WGRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxOdpJ8Hn vsVK166D7fOXlFSOHyNVFOO5w19vTwFDuTwVYTZpJkQiIYxbNS205M3ulBll6TsO qxRZz93sbKB24SxpJSOS2esmkfius902bl4MiP4P+a9rO+59RNiYo47ZcF0omPFA FSY9gyWu5Te2zH2Hp7QB1aJFoutBRLA7aczrhcMV4iEBFuORCTubRfWLAtdqmSP4 govwHlXc14tepA7dZoPcXBrfUeJwQw2qa0uVnqZaY7NYfb/R37nmWsWgPxOmlh3s jcFTa14tPCiSC6o7XIj7VBXzUlo7GtmK/eeWKbtKTzJd+aZWY/vYpy79kiMezCXC 9n0jAaJjA6CzeQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:06:04 2026 by rpki-client