This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft File: Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft (raw, json) Hash identifier: v2Z+poAQXYcD4iM3MecSPKY4Adk+ZS6BDg3lH2sv1m4= Subject key identifier: 28:DF:C6:70:3F:05:7B:64:76:34:89:F3:6A:7E:9F:DC:D9:6C:3E:68 Authority key identifier: 3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43 Certificate issuer: /CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843 Certificate serial: 019BF5AC735F77BDD08760266EFC3F7541CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft Manifest number: 1220 Signing time: Sun 25 Jan 2026 15:01:18 +0000 Manifest this update: Sun 25 Jan 2026 15:01:18 +0000 Manifest next update: Mon 26 Jan 2026 15:01:18 +0000 Files and hashes: 1: EMQb1ehNu3j_7dRl1hEcmy2I1X0.roa (hash: r9MF1Sny4W9NzIge6lOagoY0iltbVPrI73iobB24DGE=) 2: Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl (hash: 5ocLGtg6VJt/sBO6oUh3z/dyQ21GhO3HT1kD1uBjvC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:73:5f:77:bd:d0:87:60:26:6e:fc:3f:75:41:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843 Validity Not Before: Jan 25 15:01:18 2026 GMT Not After : Jan 26 15:01:18 2026 GMT Subject: CN=28dfc6703f057b64763489f36a7e9fdcd96c3e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4e:88:5a:2d:de:28:4e:dd:f0:20:0d:45:9d: e8:5c:5f:9a:b8:5a:39:b1:1e:20:c4:1a:3a:e5:1f: 14:2f:4d:5c:f5:e2:93:e3:e7:25:04:3b:27:39:9c: 21:ec:ba:81:7f:f4:0c:6b:fd:ab:78:76:3d:51:b6: d2:89:1e:56:df:84:2e:7c:42:28:5e:ff:01:eb:32: 93:54:c8:5f:e8:d9:52:29:5f:ca:c5:5c:c9:a0:23: 89:a6:36:45:ca:3b:b0:b7:fd:34:6e:d4:c0:29:aa: 0f:47:12:32:d2:16:2c:ad:8b:e2:9b:b9:74:0e:ec: 56:8e:73:35:ef:fc:83:10:b5:dd:32:1d:3f:42:2f: 5b:e8:35:34:e0:eb:40:75:ce:bb:be:d7:b5:d7:1b: 87:ce:d0:25:ca:71:b9:08:14:80:50:1e:45:f9:4e: c9:eb:f4:87:57:3e:dc:59:37:32:c6:31:6b:21:cb: 3e:56:77:a1:e0:57:34:92:43:db:09:b8:33:9a:f3: 38:57:4c:56:d8:3c:8e:29:87:85:05:4f:08:e2:a2: 54:40:48:13:67:d5:8c:a8:6d:56:e5:c7:64:24:cb: 9c:7b:dc:2c:26:28:94:3a:fa:53:72:8f:e5:ac:2f: a2:22:5d:f4:5e:2c:20:5f:2b:46:03:76:18:c8:5d: c1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DF:C6:70:3F:05:7B:64:76:34:89:F3:6A:7E:9F:DC:D9:6C:3E:68 X509v3 Authority Key Identifier: keyid:3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:bc:d0:78:b2:c7:4d:64:e2:e9:41:f7:e1:59:44:74:af:80: 15:64:64:3a:1b:ff:d2:9c:e0:b4:05:5d:30:f9:41:7d:67:7c: ec:1f:7a:86:f5:97:7e:51:24:b4:ba:0f:3f:49:61:f4:11:30: f9:8c:ab:85:ed:31:ea:52:45:23:1d:7c:89:77:f7:86:03:9c: 6e:cd:02:cd:e0:51:04:72:1b:e7:10:87:26:1a:c3:61:45:40: 64:73:d6:a6:95:66:5c:ee:35:e6:dd:df:dd:cf:e0:1e:d0:af: 92:82:c0:56:e0:83:bd:7c:fb:7d:92:4a:ad:4a:f4:7f:b2:01: 40:c3:e1:1e:fc:e3:09:94:7a:20:58:3d:87:10:0f:4b:60:8b: ae:fa:c1:c6:78:1a:78:65:de:e8:b8:04:9e:68:10:14:67:8d: 21:e4:d7:42:bf:4a:6f:4f:de:15:0e:a1:53:e3:fa:71:55:aa: b9:10:b3:02:ef:f6:8d:20:f6:36:aa:c4:02:16:03:15:2e:e7: 95:db:d9:f4:bc:4f:aa:27:b6:df:52:21:61:44:41:c5:c2:4a: f2:b6:df:c8:87:95:bf:a6:90:fb:1d:56:96:71:7d:16:73:e2: 0c:f1:59:d9:d4:d8:29:37:1c:31:13:ea:81:17:5e:00:64:ff: 98:3a:06:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rHNfd73Qh2Ambvw/dUHPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhY2Q5MGNiNjM3ZDNkMmM3M2Q5OWRlYTlhNGZlODEzZTY0 ODU4NDMwHhcNMjYwMTI1MTUwMTE4WhcNMjYwMTI2MTUwMTE4WjAzMTEwLwYDVQQD EygyOGRmYzY3MDNmMDU3YjY0NzYzNDg5ZjM2YTdlOWZkY2Q5NmMzZTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk6IWi3eKE7d8CANRZ3oXF+auFo5 sR4gxBo65R8UL01c9eKT4+clBDsnOZwh7LqBf/QMa/2reHY9UbbSiR5W34QufEIo Xv8B6zKTVMhf6NlSKV/KxVzJoCOJpjZFyjuwt/00btTAKaoPRxIy0hYsrYvim7l0 DuxWjnM17/yDELXdMh0/Qi9b6DU04OtAdc67vte11xuHztAlynG5CBSAUB5F+U7J 6/SHVz7cWTcyxjFrIcs+Vneh4Fc0kkPbCbgzmvM4V0xW2DyOKYeFBU8I4qJUQEgT Z9WMqG1W5cdkJMuce9wsJiiUOvpTco/lrC+iIl30XiwgXytGA3YYyF3BVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjfxnA/BXtkdjSJ82p+n9zZbD5oMB8GA1UdIwQY MBaAFDrNkMtjfT0sc9md6ppP6BPmSFhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3MyUXkyTjlQU3h6MlozcW1rX29FLVpJV0VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wOThjZjQtMDdjMC00YWI3LTljYzct YmU4Yzc4YzA2ZmM3LzEvT3MyUXkyTjlQU3h6MlozcW1rX29FLVpJV0VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8wOThjZjQtMDdjMC00YWI3LTljYzctYmU4Yzc4YzA2ZmM3 LzEvT3MyUXkyTjlQU3h6MlozcW1rX29FLVpJV0VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbzQeLLH TWTi6UH34VlEdK+AFWRkOhv/0pzgtAVdMPlBfWd87B96hvWXflEktLoPP0lh9BEw +Yyrhe0x6lJFIx18iXf3hgOcbs0CzeBRBHIb5xCHJhrDYUVAZHPWppVmXO415t3f 3c/gHtCvkoLAVuCDvXz7fZJKrUr0f7IBQMPhHvzjCZR6IFg9hxAPS2CLrvrBxnga eGXe6LgEnmgQFGeNIeTXQr9Kb0/eFQ6hU+P6cVWquRCzAu/2jSD2NqrEAhYDFS7n ldvZ9LxPqie231IhYURBxcJK8rbfyIeVv6aQ+x1WlnF9FnPiDPFZ2dTYKTccMRPq gRdeAGT/mDoGnw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:01 2026 by rpki-client