This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft File: OXBHadCH2f6PeQplVctPvvzSTTg.mft (raw, json) Hash identifier: KWqTSNAauZxR26saIkNTEJfUqjWNqk8VCYVnxL7GapE= Subject key identifier: BA:A2:DC:52:24:E8:E8:D0:AD:74:61:FA:B7:8E:7F:BA:67:50:46:66 Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38 Certificate issuer: /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38 Certificate serial: 019BF763D7B130F1F6F2B06B7B8A992BCB22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft Manifest number: 049E Signing time: Sun 25 Jan 2026 23:01:14 +0000 Manifest this update: Sun 25 Jan 2026 23:01:14 +0000 Manifest next update: Mon 26 Jan 2026 23:01:14 +0000 Files and hashes: 1: AgJDjffcx13iFGg7O-6BTWa5Mi8.roa (hash: F0nKF0WSY8oAZJYmoA/vzmlCpRXcrLqKk16YPUwPz6o=) 2: OXBHadCH2f6PeQplVctPvvzSTTg.crl (hash: Nc/ZuUa8o1r376sv3ALpQXJCKWHvbEm37U9x3EcH1CY=) 3: _oWKFee77v9hsdPrrddU5tQ-R0A.roa (hash: RjU3IT8W3Ea39zUeKnm2sOei/TN9Q78ucxQb3LukHT4=) 4: xiMdBnBAVbzMONM7bWyZSTHXags.roa (hash: R9sPzPBlp0RJe+m5WxmViRNBW2hNOa0kbVaZ9zt/4VA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:d7:b1:30:f1:f6:f2:b0:6b:7b:8a:99:2b:cb:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38 Validity Not Before: Jan 25 23:01:14 2026 GMT Not After : Jan 26 23:01:14 2026 GMT Subject: CN=baa2dc5224e8e8d0ad7461fab78e7fba67504666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:58:f3:6e:07:9c:9c:cc:02:02:28:76:5e: b5:26:7b:8a:39:15:cf:9d:7f:a8:ef:9b:c3:25:5f: 66:53:82:fd:2f:44:b0:aa:30:a0:a1:43:2e:e1:62: 3e:ce:a5:f6:cf:25:13:79:f5:fa:b0:7a:b9:5c:e0: 15:0a:49:8e:f2:63:e3:57:7a:02:1a:94:f5:37:bb: 07:aa:f2:c1:76:9b:51:17:b2:0a:05:ec:1e:02:87: 8e:88:5b:aa:f9:10:92:c6:98:b9:f7:d9:7c:00:02: 24:77:e7:ae:07:e5:28:e3:a9:b0:e5:c5:7e:12:fc: 8f:00:c8:0a:f6:f8:ff:ed:86:ba:a6:02:42:b6:a0: d0:1c:9f:96:fe:45:24:94:68:c2:fa:9c:7c:bd:30: bc:34:66:38:0c:56:db:21:e1:5b:24:54:a8:da:e6: 6c:54:5c:c1:ce:83:6c:cc:a2:bd:9d:ec:b8:33:29: a4:ac:02:20:61:4d:40:cd:33:f3:be:d9:14:1b:e7: 79:7e:d1:15:36:c5:6e:0f:e7:6d:5d:53:fa:ca:7d: 7e:5a:32:43:5c:41:7f:ce:2c:68:8a:68:62:7f:04: 42:98:61:bf:de:e9:fc:98:9a:9a:7b:6b:15:e1:ca: 05:20:d5:d5:d6:1b:50:7b:ae:2a:78:52:ce:54:7c: b3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A2:DC:52:24:E8:E8:D0:AD:74:61:FA:B7:8E:7F:BA:67:50:46:66 X509v3 Authority Key Identifier: keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ae:cb:d4:1c:0f:f8:ee:c8:4a:ec:ec:7a:97:f3:4e:68:3e: d9:74:e3:c6:dc:9c:f5:90:36:67:a2:31:20:3d:a5:87:06:ec: 1e:19:85:86:0d:69:33:90:d3:fb:21:4d:9b:24:ac:8d:51:87: 90:d6:34:d9:f3:1e:5d:41:bd:79:9d:f1:b4:81:83:ce:67:07: 54:04:90:c9:7b:05:e7:b4:3f:05:36:2d:bd:f1:04:81:8b:f6: 34:e6:fc:ec:ba:fe:24:44:f6:74:bd:26:46:77:8c:19:f1:5e: 8d:9b:f4:17:26:72:84:9f:e3:d5:72:4a:94:68:18:dd:38:fd: 2d:98:02:90:06:5d:f5:9b:da:61:23:34:e8:1a:dc:e1:74:cc: 7b:be:ba:b4:7d:3d:ce:33:f7:01:30:6d:36:c0:78:45:d2:11: 3a:2a:93:34:b8:fd:75:4c:78:5e:fd:b5:88:b1:c9:d5:21:fe: e1:35:98:9b:0f:be:fc:d5:f4:ca:36:7d:c3:5d:81:03:59:9c: ec:03:e7:8c:ef:c1:6b:8a:c3:40:8f:eb:f4:84:33:ab:e5:61: 05:fb:86:23:20:9c:e3:29:aa:f0:6f:09:ec:02:20:c2:21:77: 94:35:45:83:16:a2:3f:a4:52:1f:81:c7:a5:be:a3:77:53:01: cf:b4:42:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y9exMPH28rBre4qZK8siMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NzA0NzY5ZDA4N2Q5ZmU4Zjc5MGE2NTU1Y2I0ZmJlZmNk MjRkMzgwHhcNMjYwMTI1MjMwMTE0WhcNMjYwMTI2MjMwMTE0WjAzMTEwLwYDVQQD EyhiYWEyZGM1MjI0ZThlOGQwYWQ3NDYxZmFiNzhlN2ZiYTY3NTA0NjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr1Y824HnJzMAgIodl61JnuKORXP nX+o75vDJV9mU4L9L0SwqjCgoUMu4WI+zqX2zyUTefX6sHq5XOAVCkmO8mPjV3oC GpT1N7sHqvLBdptRF7IKBeweAoeOiFuq+RCSxpi599l8AAIkd+euB+Uo46mw5cV+ EvyPAMgK9vj/7Ya6pgJCtqDQHJ+W/kUklGjC+px8vTC8NGY4DFbbIeFbJFSo2uZs VFzBzoNszKK9ney4MymkrAIgYU1AzTPzvtkUG+d5ftEVNsVuD+dtXVP6yn1+WjJD XEF/zixoimhifwRCmGG/3un8mJqae2sV4coFINXV1htQe64qeFLOVHyzMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqi3FIk6OjQrXRh+reOf7pnUEZmMB8GA1UdIwQY MBaAFDlwR2nQh9n+j3kKZVXLT7780k04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8zZWFlYjQtZmI5OS00OTkzLTgxMjIt ZTQ1MzUwNDE0ZGRmLzEvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8zZWFlYjQtZmI5OS00OTkzLTgxMjItZTQ1MzUwNDE0ZGRm LzEvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAna7L1BwP +O7ISuzsepfzTmg+2XTjxtyc9ZA2Z6IxID2lhwbsHhmFhg1pM5DT+yFNmySsjVGH kNY02fMeXUG9eZ3xtIGDzmcHVASQyXsF57Q/BTYtvfEEgYv2NOb87Lr+JET2dL0m RneMGfFejZv0FyZyhJ/j1XJKlGgY3Tj9LZgCkAZd9ZvaYSM06Brc4XTMe766tH09 zjP3ATBtNsB4RdIROiqTNLj9dUx4Xv21iLHJ1SH+4TWYmw++/NX0yjZ9w12BA1mc 7APnjO/Ba4rDQI/r9IQzq+VhBfuGIyCc4ymq8G8J7AIgwiF3lDVFgxaiP6RSH4HH pb6jd1MBz7RCdQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:09:02 2026 by rpki-client