This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft File: OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json) Hash identifier: mFC1FYp5mAD3PUN7YIxM653Y3upP+lXT093kL8TRobQ= Subject key identifier: 1C:17:DF:26:96:08:D1:DE:B9:C1:2C:B0:84:1F:C7:22:0F:24:6B:EA Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB Certificate issuer: /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab Certificate serial: 019BF83EEEB4593A78B3D0DA971528633E57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 03:00:32 +0000 Manifest this update: Mon 26 Jan 2026 03:00:32 +0000 Manifest next update: Tue 27 Jan 2026 03:00:32 +0000 Files and hashes: 1: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: FIMne8nRdv6cax/JtLApnt5n66h99qE/ViVvH7vJbHc=) 2: aZ2TcbNwaylOZgDoSe12Obbdwts.roa (hash: RGUNbjUgv7q6fxRKJH6x2SAZxrih2NcUX8E0Ivt0oLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3e:ee:b4:59:3a:78:b3:d0:da:97:15:28:63:3e:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab Validity Not Before: Jan 26 03:00:32 2026 GMT Not After : Jan 27 03:00:32 2026 GMT Subject: CN=1c17df269608d1deb9c12cb0841fc7220f246bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a3:26:b9:c3:6a:54:9f:d5:18:6d:91:e4:31: 0d:85:db:4d:33:15:b9:ed:d5:61:21:b0:a3:67:d5: 6e:c4:2f:4d:04:16:e0:c2:98:79:c6:4a:72:1e:7d: de:bf:02:08:ad:f0:73:42:ee:b9:20:3d:8e:60:f0: 45:9a:58:58:f1:bc:a1:ca:c1:da:df:31:e7:cb:17: e0:cd:55:b5:15:ae:2b:a3:22:2e:f1:8b:57:ee:01: d8:0a:f1:29:cd:38:38:6a:ec:29:7c:33:b8:90:12: 68:05:f3:82:db:2c:c8:75:06:e5:30:60:7f:6c:d9: 86:11:2f:a8:e2:a8:8d:94:00:ae:67:64:a3:b5:98: 00:b7:87:d2:19:46:d4:46:f8:82:68:d9:ee:05:c4: 4c:47:21:d0:2c:b6:0c:3d:37:52:7f:3a:77:c7:7b: 90:e3:88:23:97:40:71:3d:27:e8:10:fd:91:c7:c5: dc:59:e2:79:9e:40:84:10:50:4c:0b:31:67:7d:ac: 4f:f7:15:7e:8e:39:4e:8f:4c:09:72:92:a0:7a:0e: 7b:84:57:00:b9:23:e8:76:e8:c3:82:74:25:ce:cd: d3:4e:b9:1d:01:97:e2:16:67:79:0b:09:02:22:b3: ff:7d:b9:8b:07:aa:53:5e:6e:ec:55:49:c2:53:13: 7c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:17:DF:26:96:08:D1:DE:B9:C1:2C:B0:84:1F:C7:22:0F:24:6B:EA X509v3 Authority Key Identifier: keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e9:97:a6:a9:d7:a0:f1:42:c0:8e:00:24:ee:9b:c8:50:3b: 26:4e:b8:51:52:fc:4e:ea:ac:d2:4e:41:c0:84:f0:ac:fc:cd: 53:10:3a:50:be:3a:f9:5e:5b:29:3d:11:b0:c0:d8:b0:a1:a6: c7:ad:f1:e6:3d:02:22:2f:43:03:08:39:2c:30:dc:85:64:ad: 47:8f:97:99:7a:54:8d:72:f2:6b:d5:37:e8:31:62:d8:5b:e1: 20:f4:3e:ee:db:17:f4:01:00:13:64:2e:8b:0f:11:5f:13:3e: 64:1f:96:6d:4f:d9:ef:08:dd:c4:5b:1f:44:0f:2f:0d:b7:c1: b4:4b:93:75:49:a1:f1:32:c8:71:40:e7:fc:6a:f6:f4:46:49: b0:b6:bd:ff:c3:23:20:4e:d6:c7:5e:54:43:4c:61:3d:93:98: 35:77:89:18:3c:f4:11:f7:44:3a:ab:94:4b:cb:b0:a9:fe:06: 41:b5:86:a2:52:54:35:09:1c:20:d2:06:bc:91:a5:34:b7:e8: 20:20:dd:6f:f3:44:30:7a:35:45:d5:7f:89:9b:b3:10:0a:33: 60:83:c8:0e:0b:f5:f5:2b:5e:2a:4c:4d:2a:8a:d1:2f:b1:c7: 52:05:f1:f5:e9:fa:69:f2:70:c4:ec:8c:c1:ab:60:0b:00:86: 85:01:40:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4Pu60WTp4s9DalxUoYz5XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMGNkNDRlYmJlM2QwZDZhMDcyZTc1MTAzZjIzMTYwNjk5 NWY2YWIwHhcNMjYwMTI2MDMwMDMyWhcNMjYwMTI3MDMwMDMyWjAzMTEwLwYDVQQD EygxYzE3ZGYyNjk2MDhkMWRlYjljMTJjYjA4NDFmYzcyMjBmMjQ2YmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaMmucNqVJ/VGG2R5DENhdtNMxW5 7dVhIbCjZ9VuxC9NBBbgwph5xkpyHn3evwIIrfBzQu65ID2OYPBFmlhY8byhysHa 3zHnyxfgzVW1Fa4royIu8YtX7gHYCvEpzTg4auwpfDO4kBJoBfOC2yzIdQblMGB/ bNmGES+o4qiNlACuZ2SjtZgAt4fSGUbURviCaNnuBcRMRyHQLLYMPTdSfzp3x3uQ 44gjl0BxPSfoEP2Rx8XcWeJ5nkCEEFBMCzFnfaxP9xV+jjlOj0wJcpKgeg57hFcA uSPodujDgnQlzs3TTrkdAZfiFmd5CwkCIrP/fbmLB6pTXm7sVUnCUxN8hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwX3yaWCNHeucEssIQfxyIPJGvqMB8GA1UdIwQY MBaAFDsM1E6749DWoHLnUQPyMWBplfarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy85NzFmMDgtZTU3Yy00MDhhLWI3NzYt ZjdkYTNiODczMmJmLzEvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy85NzFmMDgtZTU3Yy00MDhhLWI3NzYtZjdkYTNiODczMmJm LzEvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfumXpqnX oPFCwI4AJO6byFA7Jk64UVL8Tuqs0k5BwITwrPzNUxA6UL46+V5bKT0RsMDYsKGm x63x5j0CIi9DAwg5LDDchWStR4+XmXpUjXLya9U36DFi2FvhIPQ+7tsX9AEAE2Qu iw8RXxM+ZB+WbU/Z7wjdxFsfRA8vDbfBtEuTdUmh8TLIcUDn/Gr29EZJsLa9/8Mj IE7Wx15UQ0xhPZOYNXeJGDz0EfdEOquUS8uwqf4GQbWGolJUNQkcINIGvJGlNLfo ICDdb/NEMHo1RdV/iZuzEAozYIPIDgv19SteKkxNKorRL7HHUgXx9en6afJwxOyM watgCwCGhQFAAA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:38:58 2026 by rpki-client