This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft File: OBbhmySn6M_xifq6wohSzYdIo4A.mft (raw, json) Hash identifier: HWkQ2+NlaYjlIum/k1y0tsOnvxYX0MtOnJlCL1EvsEU= Subject key identifier: 19:08:52:85:42:D6:69:01:EF:F1:8A:82:34:FC:68:56:C8:B4:0E:31 Authority key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80 Certificate issuer: /CN=3816e19b24a7e8cff189fabac28852cd8748a380 Certificate serial: 019BF3868C9AD2A4F647AD889E868B9D7487 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 05:00:39 +0000 Manifest this update: Sun 25 Jan 2026 05:00:39 +0000 Manifest next update: Mon 26 Jan 2026 05:00:39 +0000 Files and hashes: 1: 10zU5k5ICxgrM5-Ip5yncI3GNGs.roa (hash: LEG/jSgiyt7BovVPDQkdWrVInvTbnRp5DG6v8hbqY1s=) 2: OBbhmySn6M_xifq6wohSzYdIo4A.crl (hash: OqmafuCLvPFBzU9u3X8GQrFiH/zd+SBozVgQGQ5gAH0=) 3: QmWmoP1KHfrR9eTOqZ6x9ezRXSY.roa (hash: xqu4qFo0DMMx0+rjC1DPBvqtwUrbm4PocY0IAf7sGdo=) 4: pm2S8QCe4l9WpfwvU_iLSL0zIlI.roa (hash: siFYWGu9y7ejpY470okiO/aX4nO9BjP28kUxghwfExg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:86:8c:9a:d2:a4:f6:47:ad:88:9e:86:8b:9d:74:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3816e19b24a7e8cff189fabac28852cd8748a380 Validity Not Before: Jan 25 05:00:39 2026 GMT Not After : Jan 26 05:00:39 2026 GMT Subject: CN=1908528542d66901eff18a8234fc6856c8b40e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:89:d7:ba:6d:ad:cf:ad:c6:95:70:93:58:ed: 51:0f:ae:e0:16:4f:b4:1f:91:6d:e3:b8:4c:2b:74: ea:b5:3f:ea:05:8c:0b:dd:8b:0d:5e:90:62:aa:d6: 43:70:37:ae:96:f3:26:e0:15:df:a0:af:ce:70:0d: d1:f6:cb:3a:a7:9c:86:e4:48:dc:ab:c7:8f:82:1e: a6:82:1b:11:5d:1a:3e:fe:05:c9:f2:d1:82:5a:7b: af:e5:2f:a4:f2:3c:98:fd:39:e3:1e:d1:b1:a7:7f: e4:6c:e8:e5:27:a0:bf:de:ff:88:8e:65:77:1f:51: df:f1:f2:20:61:b1:ca:da:28:86:a5:4b:be:ce:85: 01:75:8c:0d:bf:63:f5:18:c5:df:7f:eb:8d:da:40: fb:0f:b8:30:ba:5b:4e:8c:bd:88:ae:73:5c:6a:b1: c7:c4:45:60:57:7a:a1:54:dc:d3:77:44:af:76:9b: a4:3a:02:ca:00:25:d1:c0:e1:97:c8:b4:4a:6e:63: 6a:6a:c7:2e:18:a4:9a:5b:03:dc:5e:b0:ef:4c:5a: 41:c8:86:6d:cc:bb:e2:97:5c:06:2f:ca:d3:4a:35: 81:3f:cd:64:35:9b:e0:8a:a0:39:55:55:f8:b9:9f: f3:b9:3d:e4:67:ff:77:6c:f8:d4:5c:65:d4:6b:0e: 3d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:08:52:85:42:D6:69:01:EF:F1:8A:82:34:FC:68:56:C8:B4:0E:31 X509v3 Authority Key Identifier: keyid:38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:39:61:ef:24:eb:f9:ab:c1:6d:a3:32:88:bb:9c:ee:ab:c7: 40:fa:6b:61:b0:1b:ad:b3:4d:4d:d5:9a:ac:eb:8a:53:35:fc: e9:69:d9:56:73:27:13:51:56:17:cc:67:c6:9d:9a:f0:b6:e0: 6a:7a:38:4b:43:73:65:60:4d:30:c6:ff:a0:97:89:4b:20:1c: be:5a:af:b2:d4:0b:19:9e:ef:67:36:6f:d3:7c:35:ce:a0:da: 4c:91:8e:be:4d:9e:93:3f:68:59:00:54:ed:d9:4a:88:e1:de: b0:73:a1:e8:12:a9:d5:ab:3a:66:ef:ba:d5:2a:be:ba:ff:5e: ae:65:9f:ad:8c:75:3f:c0:87:fb:c0:0e:0f:09:3e:e5:27:52: a3:76:35:f3:03:1b:9c:25:0d:77:31:83:13:0b:06:24:b8:74: e3:85:d9:24:34:87:9a:ab:3e:e7:1f:ba:e0:e3:ab:3a:68:0b: de:d7:86:2e:5d:fc:d6:61:49:99:81:a9:ad:17:af:38:35:db: 04:3a:17:c3:bc:c1:f1:8d:df:d9:36:ac:8b:a1:4f:78:c1:17: da:1f:5f:04:0e:ce:61:fc:03:80:7a:7a:32:86:2f:b9:af:c7: 44:c1:51:08:3a:45:66:a0:a1:0f:ce:6a:3a:35:aa:49:42:6d: e0:a0:36:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhoya0qT2R62InoaLnXSHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MTZlMTliMjRhN2U4Y2ZmMTg5ZmFiYWMyODg1MmNkODc0 OGEzODAwHhcNMjYwMTI1MDUwMDM5WhcNMjYwMTI2MDUwMDM5WjAzMTEwLwYDVQQD EygxOTA4NTI4NTQyZDY2OTAxZWZmMThhODIzNGZjNjg1NmM4YjQwZTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YnXum2tz63GlXCTWO1RD67gFk+0 H5Ft47hMK3TqtT/qBYwL3YsNXpBiqtZDcDeulvMm4BXfoK/OcA3R9ss6p5yG5Ejc q8ePgh6mghsRXRo+/gXJ8tGCWnuv5S+k8jyY/TnjHtGxp3/kbOjlJ6C/3v+IjmV3 H1Hf8fIgYbHK2iiGpUu+zoUBdYwNv2P1GMXff+uN2kD7D7gwultOjL2IrnNcarHH xEVgV3qhVNzTd0SvdpukOgLKACXRwOGXyLRKbmNqascuGKSaWwPcXrDvTFpByIZt zLvil1wGL8rTSjWBP81kNZvgiqA5VVX4uZ/zuT3kZ/93bPjUXGXUaw49vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkIUoVC1mkB7/GKgjT8aFbItA4xMB8GA1UdIwQY MBaAFDgW4Zskp+jP8Yn6usKIUs2HSKOAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0JiaG15U242TV94aWZxNndvaFN6WWRJbzRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kNjEyNzUtZTAwYS00YmZiLWJlOGEt MTZiMzZkMDgwMWU5LzEvT0JiaG15U242TV94aWZxNndvaFN6WWRJbzRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9kNjEyNzUtZTAwYS00YmZiLWJlOGEtMTZiMzZkMDgwMWU5 LzEvT0JiaG15U242TV94aWZxNndvaFN6WWRJbzRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTlh7yTr +avBbaMyiLuc7qvHQPprYbAbrbNNTdWarOuKUzX86WnZVnMnE1FWF8xnxp2a8Lbg ano4S0NzZWBNMMb/oJeJSyAcvlqvstQLGZ7vZzZv03w1zqDaTJGOvk2ekz9oWQBU 7dlKiOHesHOh6BKp1as6Zu+61Sq+uv9ermWfrYx1P8CH+8AODwk+5SdSo3Y18wMb nCUNdzGDEwsGJLh044XZJDSHmqs+5x+64OOrOmgL3teGLl381mFJmYGprRevODXb BDoXw7zB8Y3f2Tasi6FPeMEX2h9fBA7OYfwDgHp6MoYvua/HRMFRCDpFZqChD85q OjWqSUJt4KA2KA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:50:38 2026 by rpki-client