This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft File: ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json) Hash identifier: yo1WgHNDPRVl15+bEaiXiFJZS6cQh+ollj8hmrrSE08= Subject key identifier: 5A:02:17:03:AA:FA:E3:BC:F7:04:A0:4A:11:EE:62:CE:34:05:F9:3A Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88 Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688 Certificate serial: 019BF3BE2229331959CE19CBE18758A06E73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 06:01:22 +0000 Manifest this update: Sun 25 Jan 2026 06:01:22 +0000 Manifest next update: Mon 26 Jan 2026 06:01:22 +0000 Files and hashes: 1: 4QHKJAt_J6Dk7DS-fI90Y5fyecM.roa (hash: /2OJEfbC2dma7BW4mnYblDtLqxXKsA1Bb6esmzFMKVw=) 2: J4Me2HY4xHGWyE1Tp-R8f3Ui9Q8.roa (hash: tQW9ueGnv8G7jNjqLoCvmaNsDJOWMXM0waQOLK2+m+U=) 3: OSMOWPw5_NNyYhC4AJAUWNDj5xI.roa (hash: ThZPinIztYZdRJgEkaP3N9iyXW8sDTnUnnqJV/mG1Tc=) 4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: FFXEYuT+8c4zzaLY0tfJKQ8ftM40+/SQ1n2KwfQSehs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:be:22:29:33:19:59:ce:19:cb:e1:87:58:a0:6e:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2893a4b284acb5d8a4164289045492109511688 Validity Not Before: Jan 25 06:01:22 2026 GMT Not After : Jan 26 06:01:22 2026 GMT Subject: CN=5a021703aafae3bcf704a04a11ee62ce3405f93a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:32:01:ab:36:0b:ad:f2:20:5b:e9:bf:7b:84: 29:56:93:b9:37:f7:cf:76:a1:9d:6c:7b:4e:86:f5: b0:d5:65:7c:79:78:71:24:e3:80:5d:3f:b8:be:d4: 26:c6:85:59:96:3e:11:b4:7c:29:0d:7c:cb:59:19: aa:64:48:a8:79:e2:15:25:66:eb:16:50:f4:94:ec: be:a5:de:50:08:c9:8d:c8:e8:cc:1d:77:76:41:61: f1:a7:c9:4b:7d:18:e5:3d:9e:8c:85:94:10:5c:74: b2:96:99:7e:b7:03:4b:ff:9e:0d:16:28:87:b1:c2: 58:82:77:1c:b8:cf:d7:45:91:d9:8f:ea:24:71:4d: 69:6a:32:98:c8:f4:f6:55:e5:34:2c:8b:b7:d1:c0: 90:a6:d3:f7:45:92:07:8e:22:de:15:77:a0:9f:26: 15:8f:21:f5:77:03:73:8b:02:c5:d8:53:02:59:d1: 8a:a3:3d:c6:f8:59:d8:35:46:91:d5:28:61:55:23: e6:95:2c:54:9e:ec:56:f0:40:4b:44:dc:24:c0:df: 16:b4:71:21:d9:17:8b:ec:d4:47:37:c0:bb:cb:62: 49:c9:c5:08:b8:b9:ae:c3:45:6f:13:2b:30:1d:f6: c1:be:ba:ac:5c:31:02:a6:00:36:c7:ae:c7:08:dc: e5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:02:17:03:AA:FA:E3:BC:F7:04:A0:4A:11:EE:62:CE:34:05:F9:3A X509v3 Authority Key Identifier: keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:a8:ed:89:a5:82:ad:5c:c8:65:f0:55:1d:a6:84:e6:3e:6d: bc:cf:06:c7:38:c9:09:73:a6:6d:9c:3a:2b:1c:b3:43:37:92: 7e:20:f8:54:77:e2:86:de:02:d2:f9:12:8d:dd:c1:94:5e:b8: a6:9a:38:a2:92:3d:3e:4e:98:fe:4f:ae:86:c2:d1:89:17:20: 09:2a:01:b1:60:d7:62:2c:ac:df:5a:73:8f:16:c2:19:43:ec: 82:42:8e:6a:e5:f4:b9:20:af:ce:b1:0a:42:ed:14:68:3a:45: ad:16:96:1a:c8:5d:16:c9:d6:0d:46:18:ae:f3:16:55:31:bc: 8d:b7:0d:64:e0:bd:09:40:2a:e5:c0:72:57:56:cf:48:5a:80: 7d:54:e9:40:f8:b2:14:ad:d7:b6:43:ee:a2:31:33:24:f8:4b: a2:fb:e7:ec:28:d2:07:5a:a0:8f:a8:c0:fd:7d:d2:32:0d:7a: e3:02:c9:cc:02:74:bd:c5:c8:8e:0d:98:42:61:51:7c:df:bf: 6a:6b:b8:91:5d:17:c6:f8:eb:21:c5:b9:20:2c:ce:3c:ab:bf: 9e:f5:84:02:b4:e5:33:24:05:f0:05:1a:fe:e1:02:6c:7a:37: 83:b2:9f:e3:1f:c5:34:af:e7:b0:bd:ca:bf:16:b2:24:92:74: 26:da:61:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzviIpMxlZzhnL4YdYoG5zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyODkzYTRiMjg0YWNiNWQ4YTQxNjQyODkwNDU0OTIxMDk1 MTE2ODgwHhcNMjYwMTI1MDYwMTIyWhcNMjYwMTI2MDYwMTIyWjAzMTEwLwYDVQQD Eyg1YTAyMTcwM2FhZmFlM2JjZjcwNGEwNGExMWVlNjJjZTM0MDVmOTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTIBqzYLrfIgW+m/e4QpVpO5N/fP dqGdbHtOhvWw1WV8eXhxJOOAXT+4vtQmxoVZlj4RtHwpDXzLWRmqZEioeeIVJWbr FlD0lOy+pd5QCMmNyOjMHXd2QWHxp8lLfRjlPZ6MhZQQXHSylpl+twNL/54NFiiH scJYgnccuM/XRZHZj+okcU1pajKYyPT2VeU0LIu30cCQptP3RZIHjiLeFXegnyYV jyH1dwNziwLF2FMCWdGKoz3G+FnYNUaR1ShhVSPmlSxUnuxW8EBLRNwkwN8WtHEh 2ReL7NRHN8C7y2JJycUIuLmuw0VvEyswHfbBvrqsXDECpgA2x67HCNzldwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFoCFwOq+uO89wSgShHuYs40Bfk6MB8GA1UdIwQY MBaAFKKJOksoSstdikFkKJBFSSEJURaIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb29rNlN5aEt5MTJLUVdRb2tFVkpJUWxSRm9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iNDg3YWItNWUzMS00MTE3LWFkYTgt YTVkM2NiOTE4MjA2LzEvb29rNlN5aEt5MTJLUVdRb2tFVkpJUWxSRm9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iNDg3YWItNWUzMS00MTE3LWFkYTgtYTVkM2NiOTE4MjA2 LzEvb29rNlN5aEt5MTJLUVdRb2tFVkpJUWxSRm9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6jtiaWC rVzIZfBVHaaE5j5tvM8GxzjJCXOmbZw6KxyzQzeSfiD4VHfiht4C0vkSjd3BlF64 ppo4opI9Pk6Y/k+uhsLRiRcgCSoBsWDXYiys31pzjxbCGUPsgkKOauX0uSCvzrEK Qu0UaDpFrRaWGshdFsnWDUYYrvMWVTG8jbcNZOC9CUAq5cByV1bPSFqAfVTpQPiy FK3XtkPuojEzJPhLovvn7CjSB1qgj6jA/X3SMg164wLJzAJ0vcXIjg2YQmFRfN+/ amu4kV0XxvjrIcW5ICzOPKu/nvWEArTlMyQF8AUa/uECbHo3g7Kf4x/FNK/nsL3K vxayJJJ0JtphOg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:23:05 2026 by rpki-client