This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft File: 0QOvGXZFpJQcbNsIZprwCLeRAr4.mft (raw, json) Hash identifier: gDl/7XBnAeXWrvQ+EoO+8kXjZO3B5Y1ZdsKTxfgikh4= Subject key identifier: 93:A4:BA:C2:86:77:39:93:CF:9E:0E:C3:CE:A8:E3:B4:78:CD:11:EB Authority key identifier: D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE Certificate issuer: /CN=d103af197645a4941c6cdb08669af008b79102be Certificate serial: 019BF8AD7A66D405CA7DF3EA9458D91F6687 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft Manifest number: 115B Signing time: Mon 26 Jan 2026 05:01:17 +0000 Manifest this update: Mon 26 Jan 2026 05:01:17 +0000 Manifest next update: Tue 27 Jan 2026 05:01:17 +0000 Files and hashes: 1: 0QOvGXZFpJQcbNsIZprwCLeRAr4.crl (hash: KdVuH87HPXy2uW2yg+hjo03xLktqHIlisov4cufzuiU=) 2: IKgcyvSIA45izSMf7tUqa3g6d94.roa (hash: bRbSeQALCJ6vQauwQMiodJiLk0I/cBj0aUju5c7LVIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:7a:66:d4:05:ca:7d:f3:ea:94:58:d9:1f:66:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d103af197645a4941c6cdb08669af008b79102be Validity Not Before: Jan 26 05:01:17 2026 GMT Not After : Jan 27 05:01:17 2026 GMT Subject: CN=93a4bac286773993cf9e0ec3cea8e3b478cd11eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3d:dd:d4:26:ec:15:01:87:2b:e7:fe:d5:79: a6:03:c2:f0:fc:e4:1e:a4:84:6c:7a:f2:a3:3b:40: 9d:c2:54:48:f9:58:df:0c:c2:9a:41:41:58:6e:d0: 33:fd:9e:ca:64:4a:63:d4:93:77:5d:23:41:36:82: ba:26:63:46:c7:74:8b:8e:be:00:7a:6c:ca:24:fc: 23:f2:02:fb:f5:e0:ed:17:67:0d:44:1e:de:0c:2f: f1:d6:22:85:02:dc:a4:87:3f:83:5d:42:ac:59:ea: 22:e5:b8:57:5f:74:54:b6:f5:be:c7:f7:eb:53:9d: 72:bc:ee:bf:af:cb:af:be:78:34:2f:df:10:15:61: 30:04:89:cb:b0:bf:90:6d:6e:e0:bd:b7:1d:5f:1d: a1:ea:13:9e:ab:cd:c1:ee:07:2a:29:31:5d:66:35: cb:0a:06:00:64:3d:d8:59:e1:5a:10:a2:e3:38:13: d8:9a:2f:da:16:1b:72:29:08:e6:44:73:9a:3b:67: 97:dc:71:71:a5:8c:51:39:62:a8:17:25:84:08:13: 96:df:bc:cf:21:24:01:90:cf:f0:79:21:b0:15:39: a3:e0:87:a4:a3:a0:e2:36:db:a2:be:b0:47:e8:8e: fe:4a:45:5a:0e:be:bd:9f:ee:5f:38:5f:57:3d:07: 91:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A4:BA:C2:86:77:39:93:CF:9E:0E:C3:CE:A8:E3:B4:78:CD:11:EB X509v3 Authority Key Identifier: keyid:D1:03:AF:19:76:45:A4:94:1C:6C:DB:08:66:9A:F0:08:B7:91:02:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QOvGXZFpJQcbNsIZprwCLeRAr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ec23cc-da5a-4d2b-95d9-7db3ec6fa302/1/0QOvGXZFpJQcbNsIZprwCLeRAr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:72:98:29:2b:00:4e:6b:ad:b2:eb:94:22:9a:ec:a2:3c:b1: 31:7f:68:55:43:4a:57:31:23:d7:6f:e6:5a:ce:1f:7b:ca:82: d3:7f:cd:a5:40:8c:d9:7d:d0:6e:8f:95:eb:62:9f:23:2d:d4: a8:09:5f:1f:c1:45:97:1a:d7:f9:60:9d:e0:c8:48:a1:9c:4d: ff:ed:ca:a4:a3:9e:ce:1f:00:1a:7d:8f:05:10:ef:b3:d3:ff: 60:63:96:64:ac:34:f1:e9:0e:df:9d:bd:30:2f:7a:5b:ae:24: 8e:26:9e:de:15:27:02:2b:13:1d:8e:50:97:d8:be:f8:5d:57: 6b:ac:ce:89:17:b8:28:b9:0a:01:98:1d:cc:ec:bf:43:f0:f2: a2:56:e9:94:99:6d:b3:09:b3:9c:e6:f4:bd:61:7c:f1:ad:7b: 02:e2:e1:46:ca:6c:6c:68:6f:70:90:e2:93:7f:97:74:2e:0f: cf:8d:90:f0:a1:3a:9b:12:59:e6:65:62:97:64:5d:10:e4:d6: 24:d8:ee:c6:8b:70:f7:c1:3d:e2:f6:54:39:f3:c2:99:ca:ce: 43:0b:82:24:49:46:5f:51:45:34:b4:ec:e1:e5:e3:10:f3:cb: df:30:c1:a2:23:4e:7e:ec:eb:f9:e0:fe:b0:25:4b:65:b5:42: 56:9c:da:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rXpm1AXKffPqlFjZH2aHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMDNhZjE5NzY0NWE0OTQxYzZjZGIwODY2OWFmMDA4Yjc5 MTAyYmUwHhcNMjYwMTI2MDUwMTE3WhcNMjYwMTI3MDUwMTE3WjAzMTEwLwYDVQQD Eyg5M2E0YmFjMjg2NzczOTkzY2Y5ZTBlYzNjZWE4ZTNiNDc4Y2QxMWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5T3d1CbsFQGHK+f+1XmmA8Lw/OQe pIRsevKjO0CdwlRI+VjfDMKaQUFYbtAz/Z7KZEpj1JN3XSNBNoK6JmNGx3SLjr4A emzKJPwj8gL79eDtF2cNRB7eDC/x1iKFAtykhz+DXUKsWeoi5bhXX3RUtvW+x/fr U51yvO6/r8uvvng0L98QFWEwBInLsL+QbW7gvbcdXx2h6hOeq83B7gcqKTFdZjXL CgYAZD3YWeFaEKLjOBPYmi/aFhtyKQjmRHOaO2eX3HFxpYxROWKoFyWECBOW37zP ISQBkM/weSGwFTmj4Ieko6DiNtuivrBH6I7+SkVaDr69n+5fOF9XPQeRFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOkusKGdzmTz54Ow86o47R4zRHrMB8GA1UdIwQY MBaAFNEDrxl2RaSUHGzbCGaa8Ai3kQK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFFPdkdYWkZwSlFjYk5zSVpwcndDTGVSQXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lYzIzY2MtZGE1YS00ZDJiLTk1ZDkt N2RiM2VjNmZhMzAyLzEvMFFPdkdYWkZwSlFjYk5zSVpwcndDTGVSQXI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lYzIzY2MtZGE1YS00ZDJiLTk1ZDktN2RiM2VjNmZhMzAy LzEvMFFPdkdYWkZwSlFjYk5zSVpwcndDTGVSQXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnKYKSsA TmutsuuUIprsojyxMX9oVUNKVzEj12/mWs4fe8qC03/NpUCM2X3Qbo+V62KfIy3U qAlfH8FFlxrX+WCd4MhIoZxN/+3KpKOezh8AGn2PBRDvs9P/YGOWZKw08ekO3529 MC96W64kjiae3hUnAisTHY5Ql9i++F1Xa6zOiRe4KLkKAZgdzOy/Q/DyolbplJlt swmznOb0vWF88a17AuLhRspsbGhvcJDik3+XdC4Pz42Q8KE6mxJZ5mVil2RdEOTW JNjuxotw98E94vZUOfPCmcrOQwuCJElGX1FFNLTs4eXjEPPL3zDBoiNOfuzr+eD+ sCVLZbVCVpza7g== -----END CERTIFICATE-----Generated at Mon Jan 26 12:24:42 2026 by rpki-client