This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: eL5hMoKuwnHkC0xDDyB6rBtRyJMnbcEKZ2I+OWeuAfo= Subject key identifier: A3:C3:DE:2F:85:DE:DC:49:65:F4:9B:7F:13:9A:28:3F:A3:FD:2E:28 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 019BF2E1DD95F41BE8CD62E4508148F40BC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 1A0A Signing time: Sun 25 Jan 2026 02:00:47 +0000 Manifest this update: Sun 25 Jan 2026 02:00:47 +0000 Manifest next update: Mon 26 Jan 2026 02:00:47 +0000 Files and hashes: 1: 1-w50uf7dyWqaJkX9rSj1j1QAdmU.roa (hash: 0u4M/3+LwWC6jREF5PvgbwEVkEiATzx8ptRinGLU0tM=) 2: 23Ksdmesqt4r9pFq88Ry7wURSYs.roa (hash: 1pkthufb3IANOLwI1vTEitNpAdzGfEhU2OEKG5L6yPI=) 3: 3QNvsW8uqI5SRJ2arDoqnLh1Snk.roa (hash: 6UcWlt5kutrk7QnYcIIi10ehqxpEztrBDXBmmSnWosA=) 4: 6WYJ5c573Gr_KRb0JwGk58GZmRA.roa (hash: XYaL4wIPxaOSs/g6SnHIZJCIHUh/dDVlbRDLWPnfvIM=) 5: B-4Y5enlVk_Sd-7mbbGmudhFVWs.roa (hash: VrFv29MZjRI9WiKBoXLP+DEm/34C4C5KG6TpaM7VLEg=) 6: B7v_4u9tce5LsJfrgNghTzfNK-I.roa (hash: S9ySYWeINxU7ifdLKKBgxnw/x+kZ8pDp0WrRyO3fq48=) 7: DSmFcc3CMB07sjJqwgYvCDZ71oA.roa (hash: KbPU8Oi7PTcvYEb3lmld7J6qciV9VSvqVrEzwyBTsnw=) 8: DerH0dJWAmvoDiwGMEZlimFM_U4.roa (hash: KnWLwVLoMaWntfuMP+lElDsCBomb3AO+k0zvdHWXSrI=) 9: FpwdnH1vSeaA9IvOMd_9OlvXF-Q.roa (hash: dR81pd4Z3d3hQtP7AcMh1To0rqIYfbx/ZlCHk7Sp1DE=) 10: KyVEKpHR2pEtmXPUgs4zC61gxuI.roa (hash: Q7viCoyzEt3Uww0tv97oy1K7pyQCSZn83eGufGRHE/A=) 11: N1YrFwz6MvPNL8pUon6iWLIL4KM.roa (hash: ZFgtvNP8aWZk/IJlZoc7a3QhXLBKA7t9LfcmdbeQpkw=) 12: NRPhnSsp6ID8skg7poMTmgp3wbc.roa (hash: EVzVbFUnz06DaUAsq7BcezR6aSKAnjizU9IS3eT5X/c=) 13: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: 1B5O8pjkrOu9eBvwj+DLZ/FiPiMAyRSUK9MQHsbAhsI=) 14: PTFRjHbNQ0x7a6o3WCQgunxoXw0.roa (hash: u7FUc9Q3tf0joiXtSaAFS9p+EHttrk7nD8+X8I6oCJg=) 15: Wm9W969s1zDEYvgyNxsbOsCfZp0.roa (hash: 61/WUb1UHZ1kTPcgP7deUj+87twLfiFFSlO7jtM4U7o=) 16: XMyLdOS2bIE96SI_Y7vrT4NRElA.roa (hash: 7LMGDq5jvyak0GBeomNmhFa4WQbFzhagQ7kTGAIWNrE=) 17: ZHjrMIIuBI_qQT1tqktox6tWP0k.roa (hash: vAGDF0tBRhMWmE5i/QGHZPddjWd+aTlczLmtgu2Z3Zk=) 18: _Kp7PDTcmGkJiJKewtOccSGpSgs.roa (hash: WM5hEQgIwiPSrdXKA7JsjCjXu6TD5zpoJlxCQduZru4=) 19: b6Ec59zC9lFvp8qO1E_qy7bLbBY.roa (hash: SQckYCa4+okO5I+DMGHM5Y4dE0WQTR0MxL1ypMQXcJc=) 20: bwoiMEggEI0_m6pZdfzYa9h9k8I.roa (hash: X7uCsgHm8j8WgodIw/TQSyD36izqLmuOx/JJhDqSNQ4=) 21: fM0pSnChmM-aO_sLHSbdChqHH7g.roa (hash: 2W4rCamqxt549Cj/WG+ZzhurssUczkcfb5l9wZfO9vo=) 22: imz4zogpz3gRWTsTrtdPdQHFIJI.roa (hash: Omm2qGrQmn0g7Ax1AVDShwbJWCjhszNL2cv6OMuwfQg=) 23: iytQpP8cOKt_SZr-dWu1mE4wm4s.roa (hash: yu00tFptzGFBvQTaVZf5FqouszpkfBRiVtW4WyFln90=) 24: k3CHmqm8bf5CFWrmI8gISAff4Ls.roa (hash: 0TtRSWp3DHVRAcU5oUWrjNT0y48VCPBzWE6NO1CodU4=) 25: lm75HHEcKEQYMEgpFwyjgGRLyjc.roa (hash: XMQzZRr9ncs35MQaTZF1itYg/Ala9EzzNWhAg3mK6QM=) 26: oQjGS8W_5tPPwVVXM-fDZ4QfqFs.roa (hash: qhQNTicoIxuhBTufRlzaBk+rgI949V+sKKIRwlKBeDI=) 27: s9hdUOcr5iK1cMq9Ku29bPGK4J8.roa (hash: mMj51buuh9FmgxCNkmkR6sf4CWfub5BrWWfrUcyb71Q=) 28: v1tSGd3C-K9-06m4B94Gav_UhK0.roa (hash: KWqnrWgZy/fH64jimxEEgQFW0ax9yNje1IAv772G7mg=) 29: vObQf-9yIZlLVVZBDoK-sQ5xsoM.roa (hash: YZx/dQuYWJM5ToVcfaVtj/imOld/qG4uL61E0uaObng=) 30: xCXozcn9c0Mbv_ZuLNQQ3wcrQE8.roa (hash: MyfMnA4B0kEcMbNuuFWpOjSrpeuA79be/rrhJI05eIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e1:dd:95:f4:1b:e8:cd:62:e4:50:81:48:f4:0b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Jan 25 02:00:47 2026 GMT Not After : Jan 26 02:00:47 2026 GMT Subject: CN=a3c3de2f85dedc4965f49b7f139a283fa3fd2e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d3:20:76:7a:ee:be:ac:70:71:ca:42:c7:ac: aa:32:82:71:21:49:e1:32:f1:f3:d9:8d:64:0c:07: 84:6a:b6:06:ee:54:41:49:64:de:e7:c3:18:08:28: ba:b1:0e:ab:09:e4:a8:39:3c:9a:e2:da:f3:a1:f2: d7:54:d8:5c:b8:f1:db:1d:14:4f:b9:d3:a2:a8:8d: 02:cc:65:18:c8:36:98:f7:ed:48:26:64:c4:d1:77: 73:b0:ef:00:ea:20:d1:b7:30:aa:3b:18:1d:2f:47: cd:ec:6e:43:59:07:48:a4:c6:a0:ec:c5:eb:7b:35: 9b:f9:ca:24:51:ee:e6:7d:d0:60:08:20:ba:5e:72: dc:cb:0b:6f:0a:1c:e5:55:4b:a5:cf:a4:2e:e1:3c: 70:bb:b0:cd:5e:0c:4c:c5:db:2a:7e:c2:f8:29:c1: cc:7a:a8:98:05:85:83:0b:cd:42:4f:fb:e6:c8:19: ba:e5:84:7f:50:d5:d4:7d:60:39:88:1d:7b:f4:71: d7:ac:25:66:80:ee:dd:e6:6d:71:dc:68:16:70:e3: 6f:15:49:4a:44:41:7d:f8:67:2f:fd:8e:35:5e:02: 20:1d:c8:64:2f:de:3e:ab:a5:65:b0:ab:3e:ac:69: 45:b4:d0:74:58:a1:2e:96:a8:a1:ce:2f:81:6f:60: 1b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C3:DE:2F:85:DE:DC:49:65:F4:9B:7F:13:9A:28:3F:A3:FD:2E:28 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a1:4f:5e:a0:8b:83:43:36:d4:88:a8:9b:c5:0c:64:8f:81: 8c:76:36:8d:04:fa:0b:09:94:91:fb:e3:1b:c2:d7:89:60:63: 2b:bc:91:5b:24:de:0e:03:34:da:d8:7d:b9:b7:1d:7f:4c:a7: ce:97:88:f6:96:d3:63:ea:81:ff:ab:85:a8:1f:a0:9f:b6:8f: 99:26:5b:de:21:01:b4:c6:73:9a:45:16:3d:6f:04:90:d4:45: c7:1f:ef:1a:d8:e5:1a:22:27:2b:fd:f8:9d:d7:b8:c4:a7:34: d0:11:2a:84:91:f9:a3:08:79:bf:1b:fa:75:41:57:70:bf:0f: 5b:e8:3f:45:c6:27:d0:6d:53:d5:53:49:e0:3b:e9:39:32:77: 1f:ab:21:f0:43:03:96:d8:e3:3b:1f:cc:d0:80:af:bf:97:0e: c3:05:7b:bd:12:2c:62:f2:02:90:f2:9c:ac:32:5a:cb:17:de: 45:5a:b7:df:d4:91:ec:f1:33:00:d3:ee:a0:f3:c7:04:65:ba: 63:25:02:15:6e:d9:82:62:8b:0b:a6:5a:8b:a1:01:76:25:73: bf:84:ce:a2:87:f3:5e:20:b8:a6:ac:45:5d:9a:f4:9a:1d:4c: a1:8f:b5:25:4a:d1:49:09:a7:dc:cc:3d:2b:02:6f:5e:28:56: b3:7d:4c:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4d2V9BvozWLkUIFI9AvJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjYwMTI1MDIwMDQ3WhcNMjYwMTI2MDIwMDQ3WjAzMTEwLwYDVQQD EyhhM2MzZGUyZjg1ZGVkYzQ5NjVmNDliN2YxMzlhMjgzZmEzZmQyZTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9MgdnruvqxwccpCx6yqMoJxIUnh MvHz2Y1kDAeEarYG7lRBSWTe58MYCCi6sQ6rCeSoOTya4trzofLXVNhcuPHbHRRP udOiqI0CzGUYyDaY9+1IJmTE0XdzsO8A6iDRtzCqOxgdL0fN7G5DWQdIpMag7MXr ezWb+cokUe7mfdBgCCC6XnLcywtvChzlVUulz6Qu4Txwu7DNXgxMxdsqfsL4KcHM eqiYBYWDC81CT/vmyBm65YR/UNXUfWA5iB179HHXrCVmgO7d5m1x3GgWcONvFUlK REF9+Gcv/Y41XgIgHchkL94+q6VlsKs+rGlFtNB0WKEulqihzi+Bb2AbvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPD3i+F3txJZfSbfxOaKD+j/S4oMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFaFPXqCL g0M21Iiom8UMZI+BjHY2jQT6CwmUkfvjG8LXiWBjK7yRWyTeDgM02th9ubcdf0yn zpeI9pbTY+qB/6uFqB+gn7aPmSZb3iEBtMZzmkUWPW8EkNRFxx/vGtjlGiInK/34 nde4xKc00BEqhJH5owh5vxv6dUFXcL8PW+g/RcYn0G1T1VNJ4DvpOTJ3H6sh8EMD ltjjOx/M0ICvv5cOwwV7vRIsYvICkPKcrDJayxfeRVq339SR7PEzANPuoPPHBGW6 YyUCFW7ZgmKLC6Zai6EBdiVzv4TOoofzXiC4pqxFXZr0mh1MoY+1JUrRSQmn3Mw9 KwJvXihWs31Mag== -----END CERTIFICATE-----Generated at Sun Jan 25 05:41:46 2026 by rpki-client