This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft File: O3vGRy6lJXXOlb3KeCbppR-qzkk.mft (raw, json) Hash identifier: dzKd4X7gMgJ6uj5Sb1V9te5sN/zYIOSHFjIHlMuZVi4= Subject key identifier: B9:EB:9C:16:4B:A8:42:D8:2C:80:54:91:AF:C8:66:E8:45:FB:75:60 Authority key identifier: 3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49 Certificate issuer: /CN=3b7bc6472ea52575ce95bdca7826e9a51faace49 Certificate serial: 019BF5AC43F99A2AF53BAD9D66EB450B3F33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft Manifest number: 02D9 Signing time: Sun 25 Jan 2026 15:01:06 +0000 Manifest this update: Sun 25 Jan 2026 15:01:06 +0000 Manifest next update: Mon 26 Jan 2026 15:01:06 +0000 Files and hashes: 1: O3vGRy6lJXXOlb3KeCbppR-qzkk.crl (hash: SPwQMqpqq/mAFy+C1jeTAnFyUzMkF43LrpMDqsZH41A=) 2: xZvTVsgAgTHbHn_16cZuYXn4mck.roa (hash: +oE3yDmB7hi9Ypi3E2o3IvseUAbSMG6NeT9277jObu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:43:f9:9a:2a:f5:3b:ad:9d:66:eb:45:0b:3f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b7bc6472ea52575ce95bdca7826e9a51faace49 Validity Not Before: Jan 25 15:01:06 2026 GMT Not After : Jan 26 15:01:06 2026 GMT Subject: CN=b9eb9c164ba842d82c805491afc866e845fb7560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:66:2b:85:b8:a5:b2:c7:14:36:97:d8:d6:7f: 47:cd:67:73:21:86:ce:86:4b:52:b8:3d:eb:0e:d3: 6b:7f:4f:0f:d7:5b:28:1f:3a:78:05:ba:9d:d9:ca: 05:63:eb:a6:dd:2f:07:78:05:7c:36:f1:48:aa:e0: ad:f4:7b:21:10:3a:77:e3:c7:1d:8d:4c:36:33:d9: d9:09:ed:11:5c:37:f0:da:18:be:39:cd:48:7b:6e: 88:6a:c3:45:3c:2f:33:eb:12:ff:55:56:5a:6a:0c: 44:06:2b:4c:29:22:ca:0e:ed:56:84:1a:6d:72:83: 91:64:73:43:68:c3:42:f1:34:10:e3:c4:ba:59:4f: e9:be:41:df:68:04:d8:73:6e:bf:b2:1f:9b:5f:1f: ba:69:3d:c9:4d:e2:54:b9:0a:7f:ff:04:8c:64:b5: a4:a4:67:00:89:93:a1:cc:98:c6:23:0c:65:c9:08: 6a:6d:f6:5f:ad:76:63:63:70:bb:ad:26:55:b3:44: 4f:f8:3a:b7:ce:b5:5d:6a:47:57:16:56:a9:94:03: 5f:58:7b:fa:b7:e7:b0:34:9f:16:32:58:a5:c3:79: e9:c2:b8:b6:27:31:db:9b:7c:2c:cc:3a:1e:b1:a4: f8:5f:c6:13:a0:76:75:a3:61:27:4b:52:54:8d:66: 74:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EB:9C:16:4B:A8:42:D8:2C:80:54:91:AF:C8:66:E8:45:FB:75:60 X509v3 Authority Key Identifier: keyid:3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:3e:19:9e:6d:8e:27:c2:4a:08:88:96:85:9b:10:ff:a0:da: 1c:5e:b1:e9:18:b0:62:ca:0a:e0:4b:bf:e2:60:74:bd:b4:ce: 8d:0b:36:39:62:01:81:e8:37:1a:05:e8:41:39:8c:3a:31:0c: f3:8e:a3:6a:8b:b0:4b:36:3c:bf:73:8f:fc:c7:45:86:04:91: 0f:59:42:55:84:20:09:a8:79:24:54:e0:ac:95:df:82:b1:19: c0:84:36:00:77:fc:78:57:57:0e:d3:3f:c8:7b:60:ca:9e:93: 14:c2:61:f3:cc:21:2c:4d:19:27:73:4c:19:e3:4b:f7:28:56: d6:e2:cd:15:2f:82:6b:8a:c4:5c:22:80:bc:58:3f:5d:3b:47: 3b:4a:cb:b4:50:c6:29:7d:ee:e6:bd:b6:18:9b:f7:00:91:27: b7:e8:c9:14:7a:26:93:41:8c:d7:e3:ad:ef:c6:20:aa:f6:d2: 00:d8:4e:ac:8d:27:e6:55:13:46:ec:2e:aa:5d:75:72:8b:86: 95:83:97:39:e2:7f:0f:b9:4b:22:c6:24:05:db:82:a6:76:a9: de:8b:eb:f0:01:db:b9:9f:b5:81:b6:c3:82:3e:48:7e:a5:5d: b0:01:84:1e:82:94:fc:2d:77:ac:e7:ff:be:78:1f:3e:0b:52: 11:3e:ca:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rEP5mir1O62dZutFCz8zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiN2JjNjQ3MmVhNTI1NzVjZTk1YmRjYTc4MjZlOWE1MWZh YWNlNDkwHhcNMjYwMTI1MTUwMTA2WhcNMjYwMTI2MTUwMTA2WjAzMTEwLwYDVQQD EyhiOWViOWMxNjRiYTg0MmQ4MmM4MDU0OTFhZmM4NjZlODQ1ZmI3NTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGYrhbilsscUNpfY1n9HzWdzIYbO hktSuD3rDtNrf08P11soHzp4Bbqd2coFY+um3S8HeAV8NvFIquCt9HshEDp348cd jUw2M9nZCe0RXDfw2hi+Oc1Ie26IasNFPC8z6xL/VVZaagxEBitMKSLKDu1WhBpt coORZHNDaMNC8TQQ48S6WU/pvkHfaATYc26/sh+bXx+6aT3JTeJUuQp//wSMZLWk pGcAiZOhzJjGIwxlyQhqbfZfrXZjY3C7rSZVs0RP+Dq3zrVdakdXFlaplANfWHv6 t+ewNJ8WMlilw3npwri2JzHbm3wszDoesaT4X8YToHZ1o2EnS1JUjWZ0MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnrnBZLqELYLIBUka/IZuhF+3VgMB8GA1UdIwQY MBaAFDt7xkcupSV1zpW9yngm6aUfqs5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzN2R1J5NmxKWFhPbGIzS2VDYnBwUi1xemtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80OTNkMjktNDdhOS00OWViLTgwODAt OTIyNmIzYWM0ZTlkLzEvTzN2R1J5NmxKWFhPbGIzS2VDYnBwUi1xemtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS80OTNkMjktNDdhOS00OWViLTgwODAtOTIyNmIzYWM0ZTlk LzEvTzN2R1J5NmxKWFhPbGIzS2VDYnBwUi1xemtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVj4Znm2O J8JKCIiWhZsQ/6DaHF6x6RiwYsoK4Eu/4mB0vbTOjQs2OWIBgeg3GgXoQTmMOjEM 846jaouwSzY8v3OP/MdFhgSRD1lCVYQgCah5JFTgrJXfgrEZwIQ2AHf8eFdXDtM/ yHtgyp6TFMJh88whLE0ZJ3NMGeNL9yhW1uLNFS+Ca4rEXCKAvFg/XTtHO0rLtFDG KX3u5r22GJv3AJEnt+jJFHomk0GM1+Ot78YgqvbSANhOrI0n5lUTRuwuql11couG lYOXOeJ/D7lLIsYkBduCpnap3ovr8AHbuZ+1gbbDgj5IfqVdsAGEHoKU/C13rOf/ vngfPgtSET7KMg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:05 2026 by rpki-client