This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json) Hash identifier: D0YMT2/1hMUe+CQW/eZz0fNsvg6wKWVegkOSwIEKxMQ= Subject key identifier: 03:36:A8:B4:96:6D:B2:30:5B:CB:DC:90:48:27:0E:0E:6A:74:AD:A7 Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a Certificate serial: 019BF3BD7E3CDD6AEF1F0B2DAF5B7108E6A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft Manifest number: 072E Signing time: Sun 25 Jan 2026 06:00:40 +0000 Manifest this update: Sun 25 Jan 2026 06:00:40 +0000 Manifest next update: Mon 26 Jan 2026 06:00:40 +0000 Files and hashes: 1: 6aW5lIi7oMnv0JtmoIYru-ajW2U.roa (hash: hiLXgzBLgftqnSKxGdk0TFz/543p7sGbEcxREIu87FA=) 2: S-RMQEkkwvfYfawnBJNoX94LUrE.roa (hash: nIoc7KRI4N/DJ2IEhEzxl+cIg51XEYc6Xl/2RODy9Qc=) 3: i_fheKNVQZhWFTdE7yImbk9ro-w.roa (hash: eeoqLJuO/FD+LMpZeegvKuJwG9knkScCqqvz3uiCruM=) 4: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: ylr8CBeVxWw8NL5j4qbSXS8ycd9pgCEpss4ZgqrSj+g=) 5: rSwX2196FbpLG8u1F6t0YHqRbLQ.roa (hash: CP3uHv55fI/3QUOaoOcIQK1lwrzri0LzFHDnorRyRxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:7e:3c:dd:6a:ef:1f:0b:2d:af:5b:71:08:e6:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a Validity Not Before: Jan 25 06:00:40 2026 GMT Not After : Jan 26 06:00:40 2026 GMT Subject: CN=0336a8b4966db2305bcbdc9048270e0e6a74ada7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:53:b1:c4:dd:86:25:90:a4:03:c3:df:11:d0: 81:12:86:f5:96:96:5c:b9:a3:54:b0:69:2b:a0:27: 39:48:b1:17:07:b6:1a:d5:20:f5:a3:b5:6f:6b:d1: 07:4b:72:72:52:cf:82:da:6e:0e:8e:9e:26:fb:26: f4:7c:3e:e2:08:1b:de:cb:8d:c6:35:de:e2:4e:e9: 8b:2a:01:03:67:1b:57:01:4b:e3:87:35:27:96:e4: df:74:cb:07:57:70:a9:bd:57:65:9b:62:39:33:05: 35:48:8e:54:fa:7e:40:b5:43:a2:a6:b0:5a:08:fa: 9e:ad:84:ba:14:9c:0a:6a:7d:4e:e8:fd:51:81:a5: 74:46:cb:35:f9:4d:de:10:68:5f:4a:7b:87:60:3e: 79:27:6a:f9:1e:28:3b:0d:25:89:44:cd:54:a0:24: 60:02:8f:2f:d6:a7:86:7f:4a:79:0a:9d:0f:49:3a: 99:87:ad:ba:94:b8:07:52:61:f7:3d:8d:b0:9a:58: f8:4c:67:d4:cb:48:6c:0c:da:75:98:e9:3b:92:24: 95:81:7a:2d:5b:3d:ed:de:43:6c:76:59:3d:70:7c: c4:8f:c9:7e:ee:a0:2d:ff:64:75:99:96:9f:79:95: 97:2d:fd:5b:bd:69:fa:7b:6d:ba:0c:a4:0f:6a:19: 58:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:36:A8:B4:96:6D:B2:30:5B:CB:DC:90:48:27:0E:0E:6A:74:AD:A7 X509v3 Authority Key Identifier: keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:1c:9e:6c:35:c2:58:af:22:b7:43:a1:f4:aa:cd:65:b2:43: f7:d3:a4:f7:a4:a4:57:af:92:85:1d:ff:08:66:45:21:d8:cb: 0f:1a:c3:19:1a:c4:7f:da:8b:87:c3:65:92:ac:67:a6:46:5f: 43:61:79:06:35:fc:89:e5:b6:3c:42:fa:a4:60:fe:ca:a3:01: 6a:2a:b9:5a:91:eb:1f:5e:99:5f:ad:c7:8f:b5:ce:a6:77:f0: b3:c8:33:59:27:e9:34:7f:50:ef:08:fb:33:08:1a:44:4f:4a: 0a:3e:b0:0f:12:f4:f9:7b:7a:48:33:c2:87:6d:13:77:03:73: e3:04:1c:37:90:18:00:05:8d:a7:cc:dc:92:01:4a:8b:72:04: 93:5c:8e:e7:33:d3:88:79:a1:eb:1f:30:4e:db:3c:4b:42:a4: 25:ca:88:70:0e:8c:59:32:6c:27:a3:96:6e:96:ec:c6:c5:ea: cd:8e:2a:7b:c6:98:7e:a9:c5:c2:b8:33:e4:ff:99:10:32:90: b5:78:73:d4:df:37:5a:38:7d:4b:30:f6:c9:40:a3:bc:23:c9: cb:a7:de:c1:2e:f2:a7:7b:76:14:47:69:d0:25:fd:b8:39:df: 77:16:c0:5a:65:a7:8c:9b:95:4e:65:4f:c2:22:15:b7:48:7e: f9:8e:46:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvX483WrvHwstr1txCOaiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYTU1YmYyODg4NzUzZTQ0Njc1YjYxZGRhMzAzOTRkOTAx NTZjMGEwHhcNMjYwMTI1MDYwMDQwWhcNMjYwMTI2MDYwMDQwWjAzMTEwLwYDVQQD EygwMzM2YThiNDk2NmRiMjMwNWJjYmRjOTA0ODI3MGUwZTZhNzRhZGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1OxxN2GJZCkA8PfEdCBEob1lpZc uaNUsGkroCc5SLEXB7Ya1SD1o7Vva9EHS3JyUs+C2m4Ojp4m+yb0fD7iCBvey43G Nd7iTumLKgEDZxtXAUvjhzUnluTfdMsHV3CpvVdlm2I5MwU1SI5U+n5AtUOiprBa CPqerYS6FJwKan1O6P1RgaV0Rss1+U3eEGhfSnuHYD55J2r5Hig7DSWJRM1UoCRg Ao8v1qeGf0p5Cp0PSTqZh626lLgHUmH3PY2wmlj4TGfUy0hsDNp1mOk7kiSVgXot Wz3t3kNsdlk9cHzEj8l+7qAt/2R1mZafeZWXLf1bvWn6e226DKQPahlY9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAM2qLSWbbIwW8vckEgnDg5qdK2nMB8GA1UdIwQY MBaAFKGlW/KIh1PkRnW2HdowOU2QFWwKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yZGFiMTgtN2JiNy00YWExLTk4YWQt MjdjOWQ5MTE0MjM4LzEvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yZGFiMTgtN2JiNy00YWExLTk4YWQtMjdjOWQ5MTE0MjM4 LzEvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhyebDXC WK8it0Oh9KrNZbJD99Ok96SkV6+ShR3/CGZFIdjLDxrDGRrEf9qLh8NlkqxnpkZf Q2F5BjX8ieW2PEL6pGD+yqMBaiq5WpHrH16ZX63Hj7XOpnfws8gzWSfpNH9Q7wj7 MwgaRE9KCj6wDxL0+Xt6SDPCh20TdwNz4wQcN5AYAAWNp8zckgFKi3IEk1yO5zPT iHmh6x8wTts8S0KkJcqIcA6MWTJsJ6OWbpbsxsXqzY4qe8aYfqnFwrgz5P+ZEDKQ tXhz1N83Wjh9SzD2yUCjvCPJy6fewS7yp3t2FEdp0CX9uDnfdxbAWmWnjJuVTmVP wiIVt0h++Y5GlA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:23:39 2026 by rpki-client