This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft File: Ow839Domg0Lq8P7FOWBjQJC1sbc.mft (raw, json) Hash identifier: WJ97Xyef+8rPqwEAQlcad6coleisok1bj31GG0dx/to= Subject key identifier: E8:40:83:D3:FE:CD:0D:5F:05:A2:55:86:63:54:D3:49:56:B5:DF:43 Authority key identifier: 3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7 Certificate issuer: /CN=3b0f37f43a268342eaf0fec53960634090b5b1b7 Certificate serial: 019BF42B8055CB90604E20E8263B9D5A2AC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft Manifest number: 04E6 Signing time: Sun 25 Jan 2026 08:00:50 +0000 Manifest this update: Sun 25 Jan 2026 08:00:50 +0000 Manifest next update: Mon 26 Jan 2026 08:00:50 +0000 Files and hashes: 1: Ow839Domg0Lq8P7FOWBjQJC1sbc.crl (hash: S2LOr8eNRY7tHKBxDnYIdDz0BjKsSpOVE6UbDE1okwA=) 2: UBu_wFI4vrOxyUU-ryyx1e_IGtc.roa (hash: /0bPFjp2T5vGbtfQS5RsYNIUYPkosMPYyAjiXqIPnOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:80:55:cb:90:60:4e:20:e8:26:3b:9d:5a:2a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b0f37f43a268342eaf0fec53960634090b5b1b7 Validity Not Before: Jan 25 08:00:50 2026 GMT Not After : Jan 26 08:00:50 2026 GMT Subject: CN=e84083d3fecd0d5f05a255866354d34956b5df43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a0:18:58:5b:d5:7a:2d:c6:6e:0a:50:f7:c9: e8:45:0a:e8:0c:ec:03:85:1d:e7:37:3b:23:6f:fa: 1e:7e:17:77:a8:a9:e2:9e:7e:35:c1:a0:57:62:ae: 50:a5:aa:31:63:f6:5d:75:91:06:77:35:e4:a9:af: d7:19:df:bb:2f:81:c3:85:53:7b:99:13:65:6a:45: 79:12:47:55:90:8c:d7:34:5e:7b:b9:a9:1d:29:de: 25:98:0c:ef:bf:b9:8e:ac:9d:27:e5:5c:2e:a6:15: 92:73:41:a3:71:0d:b5:b9:75:f5:bd:02:eb:86:4c: 34:6f:a1:22:3a:2d:b4:38:bc:75:7e:83:c1:82:fc: 6e:60:74:50:0d:5a:5a:f3:09:1a:ed:38:9c:18:2d: a7:8e:f6:23:8d:ff:e0:d5:49:f6:26:a4:80:6d:1c: 97:f9:c0:a3:cc:a8:1a:93:0b:de:78:b9:93:17:e4: 90:d2:36:bd:f7:60:17:40:05:32:1a:3a:15:7c:96: 4b:5c:32:01:8f:51:af:67:fb:57:b6:64:0c:30:b0: 84:ad:3b:19:d7:35:4f:cb:cc:72:d8:05:a2:95:85: 99:55:80:7c:1d:d5:00:8f:8a:39:a6:0f:f4:ed:38: 24:69:a4:c5:5f:fb:20:ad:5f:c8:5c:3a:78:9b:10: 07:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:40:83:D3:FE:CD:0D:5F:05:A2:55:86:63:54:D3:49:56:B5:DF:43 X509v3 Authority Key Identifier: keyid:3B:0F:37:F4:3A:26:83:42:EA:F0:FE:C5:39:60:63:40:90:B5:B1:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ow839Domg0Lq8P7FOWBjQJC1sbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/04f736-3713-40ba-8c08-9ae900df4f88/1/Ow839Domg0Lq8P7FOWBjQJC1sbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:78:5e:2b:d7:de:92:2a:39:8f:8a:80:5e:03:cd:f6:72:18: b7:f8:3f:65:46:27:f3:d0:e0:a8:db:31:9f:7f:32:24:93:75: 79:f7:c3:41:3b:69:ab:6c:d9:6a:65:93:f3:38:11:8b:ec:e1: 90:19:3d:15:25:31:e6:7d:f4:a3:e5:bd:ba:35:74:29:46:ca: f6:39:39:fd:ae:36:46:e2:c4:23:b9:44:2f:ee:07:a9:f8:23: 34:50:64:b4:65:c5:5a:e3:8d:16:7a:1a:d0:00:a4:20:03:37: 46:f5:05:46:9c:e8:32:f2:f0:91:fa:28:32:6b:a9:c3:da:4f: 58:af:a8:7f:10:97:00:6d:85:00:ad:8d:40:09:8d:47:a5:ec: 7f:96:8a:4a:c8:3c:b7:07:c7:74:69:9a:ee:e2:5b:17:63:01: 79:d4:e5:06:39:92:16:77:d7:32:a7:05:8f:85:79:c3:64:38: 97:c2:46:fd:16:b8:22:6d:6a:e6:af:8f:a6:5b:a8:b8:12:1e: 8a:1a:93:dc:e3:98:ea:13:b5:87:71:8d:d7:f0:48:45:7b:f8: 94:57:63:a2:2f:a5:69:cd:32:c6:82:78:99:5e:78:1e:35:a7: b0:15:c0:43:ab:97:bf:f8:03:82:65:49:cf:a6:14:12:57:0b: bb:2b:40:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K4BVy5BgTiDoJjudWirJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMGYzN2Y0M2EyNjgzNDJlYWYwZmVjNTM5NjA2MzQwOTBi NWIxYjcwHhcNMjYwMTI1MDgwMDUwWhcNMjYwMTI2MDgwMDUwWjAzMTEwLwYDVQQD EyhlODQwODNkM2ZlY2QwZDVmMDVhMjU1ODY2MzU0ZDM0OTU2YjVkZjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6AYWFvVei3GbgpQ98noRQroDOwD hR3nNzsjb/oefhd3qKninn41waBXYq5QpaoxY/ZddZEGdzXkqa/XGd+7L4HDhVN7 mRNlakV5EkdVkIzXNF57uakdKd4lmAzvv7mOrJ0n5VwuphWSc0GjcQ21uXX1vQLr hkw0b6EiOi20OLx1foPBgvxuYHRQDVpa8wka7TicGC2njvYjjf/g1Un2JqSAbRyX +cCjzKgakwveeLmTF+SQ0ja992AXQAUyGjoVfJZLXDIBj1GvZ/tXtmQMMLCErTsZ 1zVPy8xy2AWilYWZVYB8HdUAj4o5pg/07TgkaaTFX/sgrV/IXDp4mxAHtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhAg9P+zQ1fBaJVhmNU00lWtd9DMB8GA1UdIwQY MBaAFDsPN/Q6JoNC6vD+xTlgY0CQtbG3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wNGY3MzYtMzcxMy00MGJhLThjMDgt OWFlOTAwZGY0Zjg4LzEvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wNGY3MzYtMzcxMy00MGJhLThjMDgtOWFlOTAwZGY0Zjg4 LzEvT3c4MzlEb21nMExxOFA3Rk9XQmpRSkMxc2JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtnheK9fe kio5j4qAXgPN9nIYt/g/ZUYn89DgqNsxn38yJJN1effDQTtpq2zZamWT8zgRi+zh kBk9FSUx5n30o+W9ujV0KUbK9jk5/a42RuLEI7lEL+4HqfgjNFBktGXFWuONFnoa 0ACkIAM3RvUFRpzoMvLwkfooMmupw9pPWK+ofxCXAG2FAK2NQAmNR6Xsf5aKSsg8 twfHdGma7uJbF2MBedTlBjmSFnfXMqcFj4V5w2Q4l8JG/Ra4Im1q5q+PpluouBIe ihqT3OOY6hO1h3GN1/BIRXv4lFdjoi+lac0yxoJ4mV54HjWnsBXAQ6uXv/gDgmVJ z6YUElcLuytATA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:24:32 2026 by rpki-client