This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft File: o2mLAQU5EWB-2yp2CQpqztlaPtU.mft (raw, json) Hash identifier: yC1Yxj81FMFIjnFPgT9NxJfZPek05iiEfmyJIjEOCoY= Subject key identifier: 4E:60:7A:E7:D0:DE:03:C4:E0:6A:7B:88:AB:BA:63:E8:7D:20:C4:39 Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5 Certificate issuer: /CN=a3698b01053911607edb2a76090a6aced95a3ed5 Certificate serial: 019BF72CAAB826F337F29294ED596F7C3554 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 22:00:58 +0000 Manifest this update: Sun 25 Jan 2026 22:00:58 +0000 Manifest next update: Mon 26 Jan 2026 22:00:58 +0000 Files and hashes: 1: KalgMqPxE7vA7DP0hA4DsBQ8daM.roa (hash: D97KocjmOXeCpIu9eUlLkx7HYIqygCIPtcR0T7mqTEA=) 2: f8cxDtGsT2Ikp6eF_zj9ggqQBiQ.roa (hash: CbPEI2G5Y9W39zpXifforX4BNfoULMQ57Hb8GhyiU7s=) 3: gYIWsUvi3Tex-jz_h6e6eiEViZ0.roa (hash: Gb2ivhnS90IYgEWVgAR/fXTt/Lo6la3jpAyCRBH7e/o=) 4: o2mLAQU5EWB-2yp2CQpqztlaPtU.crl (hash: B4KeGUvOH66S+e769/cjKBeUiHfTxPl2eeovT78oekQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:aa:b8:26:f3:37:f2:92:94:ed:59:6f:7c:35:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5 Validity Not Before: Jan 25 22:00:58 2026 GMT Not After : Jan 26 22:00:58 2026 GMT Subject: CN=4e607ae7d0de03c4e06a7b88abba63e87d20c439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d2:32:e2:b8:2e:0b:a9:b2:d6:e0:35:22:f9: 2f:ba:f2:f6:cb:d5:32:43:e0:d4:3e:9f:d9:30:29: d1:23:e8:b8:64:8b:e8:21:ea:d6:2b:ea:52:9b:b8: a9:1f:aa:0e:85:2d:87:a8:17:2b:e5:68:b8:2c:02: 04:64:a8:ff:99:23:1e:17:fc:11:67:43:7c:bc:d3: 88:d0:49:28:5c:a8:26:e9:0c:68:ea:e0:48:1b:a9: c4:de:db:eb:52:d3:a7:58:e8:de:db:14:17:a0:85: 8b:b8:67:e4:a5:2b:da:f1:d3:2d:0e:e6:ba:71:fd: ad:87:f5:64:76:43:45:f3:39:b4:ec:86:04:83:6b: 8a:9e:2a:55:90:a4:25:08:f6:52:1b:ac:bf:6a:1b: f8:2b:db:fd:ee:c6:b6:ff:01:f9:f8:c8:21:cd:23: 75:f2:25:b0:11:51:40:ac:a9:d1:49:01:93:81:27: c9:3b:36:ad:33:5f:cf:cb:7b:91:2d:b5:2f:10:dd: cf:2d:aa:57:93:dc:23:09:36:5e:b3:5c:39:06:66: 92:31:84:08:dd:77:66:04:32:03:af:ab:2a:90:bd: fb:fc:a5:6d:4d:3e:3c:09:95:88:43:0f:9d:4b:51: cf:d1:d2:d7:cf:4f:4a:f7:21:ef:fa:e2:09:64:16: 58:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:60:7A:E7:D0:DE:03:C4:E0:6A:7B:88:AB:BA:63:E8:7D:20:C4:39 X509v3 Authority Key Identifier: keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:bb:79:b4:18:9e:84:c4:a7:38:04:91:0f:5a:f0:97:62:01: 6a:df:6c:ff:c8:92:77:34:b6:98:11:07:3d:7c:22:1c:c6:3b: e6:27:c7:5d:19:c2:1f:f8:ce:9a:6a:27:a6:fd:1c:ca:ff:04: 70:a6:8b:6f:e0:86:94:e0:48:2e:f0:46:59:07:19:29:92:13: e7:dc:f0:de:89:96:27:54:d1:30:c9:74:09:10:6d:6b:96:15: cd:01:fa:6e:69:a5:2d:4f:97:25:32:3b:d7:55:9e:67:0a:43: 14:d3:b1:65:5a:d8:05:fd:f0:bd:60:ad:3f:cd:01:bc:54:42: e6:a5:d1:0d:f8:d7:b5:44:3d:b4:7b:65:75:69:ea:94:60:d8: db:cd:12:5c:2a:94:41:b7:16:af:14:d1:68:8f:f4:8a:f8:5a: be:81:63:7b:2e:ec:96:05:77:01:e0:b5:04:5f:17:bb:c6:45: 04:a6:70:51:86:d5:b9:ae:57:80:3a:c6:69:df:15:37:04:23: 96:a5:7c:fc:8e:42:f0:89:38:43:df:91:47:d8:ab:77:0a:cb: 34:a4:2f:73:fc:d4:a7:28:86:5d:b9:d6:d6:4a:50:7b:a9:14: 2b:7c:2e:8e:e5:60:ea:ac:ca:a0:17:1d:cb:8e:0d:12:b8:cc: c8:7d:ad:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LKq4JvM38pKU7VlvfDVUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjk4YjAxMDUzOTExNjA3ZWRiMmE3NjA5MGE2YWNlZDk1 YTNlZDUwHhcNMjYwMTI1MjIwMDU4WhcNMjYwMTI2MjIwMDU4WjAzMTEwLwYDVQQD Eyg0ZTYwN2FlN2QwZGUwM2M0ZTA2YTdiODhhYmJhNjNlODdkMjBjNDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9Iy4rguC6my1uA1IvkvuvL2y9Uy Q+DUPp/ZMCnRI+i4ZIvoIerWK+pSm7ipH6oOhS2HqBcr5Wi4LAIEZKj/mSMeF/wR Z0N8vNOI0EkoXKgm6Qxo6uBIG6nE3tvrUtOnWOje2xQXoIWLuGfkpSva8dMtDua6 cf2th/VkdkNF8zm07IYEg2uKnipVkKQlCPZSG6y/ahv4K9v97sa2/wH5+MghzSN1 8iWwEVFArKnRSQGTgSfJOzatM1/Py3uRLbUvEN3PLapXk9wjCTZes1w5BmaSMYQI 3XdmBDIDr6sqkL37/KVtTT48CZWIQw+dS1HP0dLXz09K9yHv+uIJZBZY4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5geufQ3gPE4Gp7iKu6Y+h9IMQ5MB8GA1UdIwQY MBaAFKNpiwEFORFgftsqdgkKas7ZWj7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJtTEFRVTVFV0ItMnlwMkNRcHF6dGxhUHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS84MWQ2OGEtNTM2Yy00NDQyLWI4NTIt YmJkMzExMTg2OTUwLzEvbzJtTEFRVTVFV0ItMnlwMkNRcHF6dGxhUHRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS84MWQ2OGEtNTM2Yy00NDQyLWI4NTItYmJkMzExMTg2OTUw LzEvbzJtTEFRVTVFV0ItMnlwMkNRcHF6dGxhUHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrt5tBie hMSnOASRD1rwl2IBat9s/8iSdzS2mBEHPXwiHMY75ifHXRnCH/jOmmonpv0cyv8E cKaLb+CGlOBILvBGWQcZKZIT59zw3omWJ1TRMMl0CRBta5YVzQH6bmmlLU+XJTI7 11WeZwpDFNOxZVrYBf3wvWCtP80BvFRC5qXRDfjXtUQ9tHtldWnqlGDY280SXCqU QbcWrxTRaI/0ivhavoFjey7slgV3AeC1BF8Xu8ZFBKZwUYbVua5XgDrGad8VNwQj lqV8/I5C8Ik4Q9+RR9irdwrLNKQvc/zUpyiGXbnW1kpQe6kUK3wujuVg6qzKoBcd y44NErjMyH2tvQ== -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:52 2026 by rpki-client