This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft File: OTipB3cqWf31n2L5rZC-UCFxlG4.mft (raw, json) Hash identifier: 9btLJmSGLEtGFN8HjP/T0Cmsxx4do/320EcPVjmLDEc= Subject key identifier: 70:E8:CC:AA:E8:3E:98:0B:D9:8E:70:FD:C7:DA:90:EB:FB:13:D3:E9 Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E Certificate issuer: /CN=3938a907772a59fdf59f62f9ad90be502171946e Certificate serial: 019BF7634024556CC95D93D3E9F64B8D1205 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft Manifest number: 0B40 Signing time: Sun 25 Jan 2026 23:00:35 +0000 Manifest this update: Sun 25 Jan 2026 23:00:35 +0000 Manifest next update: Mon 26 Jan 2026 23:00:35 +0000 Files and hashes: 1: OTipB3cqWf31n2L5rZC-UCFxlG4.crl (hash: dXhppoMxJVFs6+rZaMFSfZ44IfRlfYiew16jTN/h9ck=) 2: W02fhpsgnAConQXGiEg0hq7nCh4.roa (hash: tNI40lTOaeDENHJQqWq3yNuLBeyi0rMHvNCsn/g7nQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:40:24:55:6c:c9:5d:93:d3:e9:f6:4b:8d:12:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e Validity Not Before: Jan 25 23:00:35 2026 GMT Not After : Jan 26 23:00:35 2026 GMT Subject: CN=70e8ccaae83e980bd98e70fdc7da90ebfb13d3e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:16:54:02:4a:72:90:5d:37:90:17:4e:bd:5d: d1:a3:50:59:49:1c:26:68:bd:68:84:ec:31:32:5f: 82:72:95:2c:15:71:c0:fa:5b:ea:29:09:aa:1d:4f: 39:e2:b8:10:2d:56:00:e2:bc:75:ff:35:9c:25:df: eb:51:dd:c3:75:27:c4:a4:57:63:82:34:ca:13:da: 29:f8:5a:96:70:d0:1e:7f:5c:19:50:9e:39:97:db: 82:7b:82:ae:aa:a5:5e:1c:3d:01:74:80:e6:b0:64: 7d:7c:91:68:b2:99:ac:ab:ff:b4:43:60:b9:43:e6: 52:83:d8:39:e0:1f:65:7f:46:c8:22:35:50:46:93: dc:1b:0c:7f:22:06:b3:c3:78:f2:2a:05:36:e1:30: 15:5f:84:17:6f:7c:05:a6:10:f6:57:1c:93:fb:75: c2:af:86:3c:3d:f4:0a:ad:6e:46:b9:b6:92:33:e0: 76:d3:a0:1e:e9:05:ad:f5:c0:b7:fe:71:f0:5e:1d: f2:3a:ec:e9:d2:f7:cb:83:49:88:28:13:87:29:8e: 90:48:29:28:ac:35:83:cf:6b:f6:d0:ef:23:0c:eb: 34:10:fe:31:47:9a:98:a3:08:53:0f:ad:61:dc:e5: d9:2f:01:14:17:76:be:3a:82:2e:46:4e:ae:19:e6: 46:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E8:CC:AA:E8:3E:98:0B:D9:8E:70:FD:C7:DA:90:EB:FB:13:D3:E9 X509v3 Authority Key Identifier: keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ab:00:f5:dc:fc:c3:14:8e:2d:36:0f:95:85:bf:e8:06:a7: 64:46:cb:64:c4:ef:f6:b9:20:77:05:19:69:eb:02:7a:a9:d6: de:07:e1:cf:4e:cc:36:1b:2e:ff:1c:b1:4b:1a:4b:35:7e:b3: 41:18:38:31:76:2e:6b:69:a8:fd:d3:63:c8:63:68:84:ce:14: 6c:bb:a5:0a:63:f8:f5:fe:92:5f:99:62:4c:df:e9:01:af:a3: 67:36:0e:1c:a1:73:08:9a:86:5a:54:13:54:7d:13:3d:35:65: f9:77:3f:00:7e:f7:4d:d5:73:c4:88:34:9f:11:1a:ea:4f:f9: 92:d4:17:bf:5b:11:d6:da:f3:0e:e0:7c:3b:35:29:43:3c:fc: 8a:ae:27:0c:4a:4e:a6:3a:67:19:67:60:36:ba:d6:c0:dc:23: 9f:9e:25:c7:66:d5:28:04:56:4d:9d:d7:6b:d0:ba:ec:b3:e4: d6:64:45:45:31:82:12:ba:62:0f:1e:b1:b2:95:cf:1a:09:b7: 14:23:2c:8f:f1:30:ef:a2:ed:43:05:4d:18:60:53:ed:8d:14: e5:ea:38:34:44:c1:a5:93:c8:8d:8b:f8:ef:0f:ed:57:05:14: 3d:13:4d:b4:0d:9f:8a:43:7c:2a:28:5d:c8:6e:d7:94:2f:83: 6a:74:9b:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y0AkVWzJXZPT6fZLjRIFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MzhhOTA3NzcyYTU5ZmRmNTlmNjJmOWFkOTBiZTUwMjE3 MTk0NmUwHhcNMjYwMTI1MjMwMDM1WhcNMjYwMTI2MjMwMDM1WjAzMTEwLwYDVQQD Eyg3MGU4Y2NhYWU4M2U5ODBiZDk4ZTcwZmRjN2RhOTBlYmZiMTNkM2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRZUAkpykF03kBdOvV3Ro1BZSRwm aL1ohOwxMl+CcpUsFXHA+lvqKQmqHU854rgQLVYA4rx1/zWcJd/rUd3DdSfEpFdj gjTKE9op+FqWcNAef1wZUJ45l9uCe4KuqqVeHD0BdIDmsGR9fJFospmsq/+0Q2C5 Q+ZSg9g54B9lf0bIIjVQRpPcGwx/Igazw3jyKgU24TAVX4QXb3wFphD2VxyT+3XC r4Y8PfQKrW5GubaSM+B206Ae6QWt9cC3/nHwXh3yOuzp0vfLg0mIKBOHKY6QSCko rDWDz2v20O8jDOs0EP4xR5qYowhTD61h3OXZLwEUF3a+OoIuRk6uGeZGhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDozKroPpgL2Y5w/cfakOv7E9PpMB8GA1UdIwQY MBaAFDk4qQd3Kln99Z9i+a2QvlAhcZRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi84MThlMTAtNDA5Yi00NTFhLTgyYjct ZTVjMWM2MmNmZTM3LzEvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi84MThlMTAtNDA5Yi00NTFhLTgyYjctZTVjMWM2MmNmZTM3 LzEvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANKsA9dz8 wxSOLTYPlYW/6AanZEbLZMTv9rkgdwUZaesCeqnW3gfhz07MNhsu/xyxSxpLNX6z QRg4MXYua2mo/dNjyGNohM4UbLulCmP49f6SX5liTN/pAa+jZzYOHKFzCJqGWlQT VH0TPTVl+Xc/AH73TdVzxIg0nxEa6k/5ktQXv1sR1trzDuB8OzUpQzz8iq4nDEpO pjpnGWdgNrrWwNwjn54lx2bVKARWTZ3Xa9C67LPk1mRFRTGCErpiDx6xspXPGgm3 FCMsj/Ew76LtQwVNGGBT7Y0U5eo4NETBpZPIjYv47w/tVwUUPRNNtA2fikN8Kihd yG7XlC+DanSbXA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:11 2026 by rpki-client