This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json) Hash identifier: 4lRsl++V5A+HQC8Z7xpnzTOyvrYR9ucqc+v+n/FgrEQ= Subject key identifier: 19:30:12:E2:55:23:BC:70:02:84:12:0A:C3:A6:49:E7:84:5B:DC:4C Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a Certificate serial: 019BF2742D331B2DB02E434C1496972867A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft Manifest number: 0D73 Signing time: Sun 25 Jan 2026 00:00:58 +0000 Manifest this update: Sun 25 Jan 2026 00:00:58 +0000 Manifest next update: Mon 26 Jan 2026 00:00:58 +0000 Files and hashes: 1: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: EkWwBm+X8SWkDOLddzk4rvsX5deogZwaU4qSEcgeouA=) 2: P1PmM2uLEOvejeMWTOPNfCrKCWw.roa (hash: BqT8twhQ0uEEmxqajzmTZrRL98ojMwqzfMIoqWLSqng=) 3: rETz40juPgcEcnRiiNd5Zkfp5E0.roa (hash: TAUP0+pgTh+woa/aSZUMYoWxSKIqt0xYGbzn00Yc33o=) 4: w06p4tVpLn4DwN6XGtMqgCddlOM.roa (hash: IiQyVkCQy+BLpiot2sDu8JSztFN48kfYVh6pjQPJG4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:74:2d:33:1b:2d:b0:2e:43:4c:14:96:97:28:67:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a Validity Not Before: Jan 25 00:00:58 2026 GMT Not After : Jan 26 00:00:58 2026 GMT Subject: CN=193012e25523bc700284120ac3a649e7845bdc4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e1:32:f4:33:69:7e:4d:84:a1:43:e4:d1:86: fc:1f:35:86:2c:95:06:e9:cc:f0:97:5e:e1:cc:ba: 9c:83:5f:cb:ab:5e:a5:4b:e1:7c:aa:30:cf:c4:1a: 42:e4:a3:2f:bf:7c:3b:9a:cd:4a:be:7f:2e:8c:95: a6:bd:9c:72:b6:55:cd:2b:8f:42:3c:2a:c4:19:d6: f2:66:0f:fe:d4:2e:c0:1f:52:ad:4d:9d:4a:83:35: 34:04:20:b0:1e:84:14:0e:24:d5:ea:4a:23:ff:0e: 2a:27:e3:d6:a9:e1:95:e2:f8:2e:f6:d7:2a:f0:7b: cd:bb:16:72:6b:ea:3d:09:8c:62:f6:58:01:c3:45: 46:cb:c2:8e:80:b9:4c:6b:d4:03:5f:fc:94:18:bc: cc:35:63:9d:85:a9:76:56:17:8b:bc:19:b2:73:c1: bf:f6:57:aa:b5:17:39:b2:e1:b5:78:21:69:b2:b0: 30:36:a5:0f:47:fa:71:b0:60:66:7f:5f:75:77:bc: 13:4c:ce:68:de:90:b2:eb:df:4b:fd:59:62:ef:51: d6:13:9d:47:ce:bb:f6:8e:81:04:08:d2:a7:cb:b8: ad:ae:6c:df:8e:3a:ea:d3:0d:2d:4d:10:b2:6e:51: ad:d6:c8:8e:1e:4f:95:95:cd:29:c3:6f:73:86:1a: ad:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:30:12:E2:55:23:BC:70:02:84:12:0A:C3:A6:49:E7:84:5B:DC:4C X509v3 Authority Key Identifier: keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:dc:9b:37:f7:6d:95:1e:9f:0b:1a:ff:e5:3e:c1:c7:80:44: 12:36:18:75:13:df:fb:b0:c8:74:87:34:32:ad:e1:79:1d:18: 14:9c:ef:54:7a:6e:3f:5f:55:52:a2:dc:fe:7f:98:6a:78:d8: 6b:c5:0c:95:fa:6f:41:17:4f:a8:e1:f6:86:54:a2:b2:ae:ef: 10:18:b2:a5:cb:c8:c9:98:df:4d:56:18:eb:64:30:f9:84:d0: 3a:b2:fa:80:39:44:3c:37:4d:4e:b2:5e:2c:c5:6b:52:60:92: b4:da:6f:9e:05:5c:7b:ed:1b:79:ff:6e:2d:e4:8f:ee:09:3f: e3:40:bf:7c:d4:8d:18:50:02:ba:7d:8d:0b:d6:df:e5:e8:7e: fa:8c:25:14:8d:3d:9e:e5:92:82:f1:56:6a:b5:f3:69:41:a8: b2:38:44:eb:66:01:d0:8e:0f:ad:93:3f:38:76:4f:f0:78:64: 5d:ed:f6:23:31:47:cf:71:ea:eb:de:f1:d7:df:d7:8c:09:66: 9e:58:dc:8f:54:ea:77:17:38:cb:78:8e:c4:4e:99:54:2a:46: 40:17:cd:d7:d9:d4:34:82:93:6c:81:96:1b:99:10:00:3b:1a: 85:01:70:e0:11:52:0f:d2:35:95:a6:17:f3:e7:c5:9c:49:96: 55:57:48:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvydC0zGy2wLkNMFJaXKGejMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOWEyNTFlNWQxZDNiYWJlNGM1NzljOTFlYjNlMGFjMzdm N2JmMmEwHhcNMjYwMTI1MDAwMDU4WhcNMjYwMTI2MDAwMDU4WjAzMTEwLwYDVQQD EygxOTMwMTJlMjU1MjNiYzcwMDI4NDEyMGFjM2E2NDllNzg0NWJkYzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueEy9DNpfk2EoUPk0Yb8HzWGLJUG 6czwl17hzLqcg1/Lq16lS+F8qjDPxBpC5KMvv3w7ms1Kvn8ujJWmvZxytlXNK49C PCrEGdbyZg/+1C7AH1KtTZ1KgzU0BCCwHoQUDiTV6koj/w4qJ+PWqeGV4vgu9tcq 8HvNuxZya+o9CYxi9lgBw0VGy8KOgLlMa9QDX/yUGLzMNWOdhal2VheLvBmyc8G/ 9leqtRc5suG1eCFpsrAwNqUPR/pxsGBmf191d7wTTM5o3pCy699L/Vli71HWE51H zrv2joEECNKny7itrmzfjjrq0w0tTRCyblGt1siOHk+Vlc0pw29zhhqtpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkwEuJVI7xwAoQSCsOmSeeEW9xMMB8GA1UdIwQY MBaAFDuaJR5dHTur5MV5yR6z4Kw3978qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wZGRmZjMtOWU3MC00ZDYzLWI1YTAt YzY2MzJjYzAxNGIwLzEvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8wZGRmZjMtOWU3MC00ZDYzLWI1YTAtYzY2MzJjYzAxNGIw LzEvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftybN/dt lR6fCxr/5T7Bx4BEEjYYdRPf+7DIdIc0Mq3heR0YFJzvVHpuP19VUqLc/n+YanjY a8UMlfpvQRdPqOH2hlSisq7vEBiypcvIyZjfTVYY62Qw+YTQOrL6gDlEPDdNTrJe LMVrUmCStNpvngVce+0bef9uLeSP7gk/40C/fNSNGFACun2NC9bf5eh++owlFI09 nuWSgvFWarXzaUGosjhE62YB0I4PrZM/OHZP8HhkXe32IzFHz3Hq697x19/XjAlm nljcj1Tqdxc4y3iOxE6ZVCpGQBfN19nUNIKTbIGWG5kQADsahQFw4BFSD9I1laYX 8+fFnEmWVVdIyw== -----END CERTIFICATE-----Generated at Sun Jan 25 06:12:00 2026 by rpki-client