This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft File: o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft (raw, json) Hash identifier: uZmhIr4nhw5FrekJCqsDnXap0aJ+LtfYFWMh5HzP2kM= Subject key identifier: 55:1E:65:7B:CD:3B:C2:1F:81:F2:3F:DD:5A:4C:4D:84:5F:B3:ED:39 Authority key identifier: A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61 Certificate issuer: /CN=a36619427c283fa3b2bb7b45cc35a51286398961 Certificate serial: 019BF83EFC737C1941192898611DEED7B325 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft Manifest number: 9D Signing time: Mon 26 Jan 2026 03:00:36 +0000 Manifest this update: Mon 26 Jan 2026 03:00:36 +0000 Manifest next update: Tue 27 Jan 2026 03:00:36 +0000 Files and hashes: 1: kFGche0sUMJjtQYWtRrXVgbIroM.roa (hash: 34UZsa7v3vzkYl287UK/ejNXOYJMH9D9QG1MuCDxpCg=) 2: o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl (hash: lNjup788cBCo6XcVmF+Yv4nZQ/bXsya/asjd8T1V1W4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3e:fc:73:7c:19:41:19:28:98:61:1d:ee:d7:b3:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36619427c283fa3b2bb7b45cc35a51286398961 Validity Not Before: Jan 26 03:00:36 2026 GMT Not After : Jan 27 03:00:36 2026 GMT Subject: CN=551e657bcd3bc21f81f23fdd5a4c4d845fb3ed39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4e:14:a5:a8:6c:ab:04:6d:30:2c:95:55:da: 9a:ac:4b:85:28:95:b7:80:c6:62:44:e7:05:ee:6a: e5:81:42:32:72:54:8c:66:7d:06:4c:80:21:49:8b: af:d7:02:73:34:1e:74:e4:5a:ec:48:1b:5e:e6:a4: 2d:2a:6a:bd:90:2f:bc:0b:d0:6a:40:43:54:5a:23: df:49:0c:44:25:39:5b:20:5a:dc:93:d8:d9:b9:af: 00:60:e4:21:57:ad:89:3f:2c:be:21:c6:85:e9:2f: 69:b8:f8:93:28:98:84:68:f8:32:e7:cf:85:dc:3a: 23:94:00:4b:80:d2:69:5d:95:ef:e7:24:f1:a9:dc: 12:b0:84:85:45:e1:00:d8:a3:32:73:df:63:d2:2f: a4:6f:5b:b8:a2:b1:8c:81:27:bc:8f:ab:d1:69:95: 28:12:51:f4:ce:be:23:8a:9d:0a:f2:ca:88:f2:4d: df:f7:b8:4f:d6:c9:c6:6c:f8:f1:07:14:03:55:4c: 35:6d:89:88:56:c6:a6:30:8b:0e:ca:a5:2f:48:98: 2e:8b:bc:00:75:fb:47:af:5b:68:b8:7f:60:0c:7b: 2b:36:a0:ed:7b:db:a0:64:3e:ea:9a:88:81:c3:ab: 5e:ec:b6:64:6f:45:5a:2e:88:0d:0f:80:af:e0:05: 2e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1E:65:7B:CD:3B:C2:1F:81:F2:3F:DD:5A:4C:4D:84:5F:B3:ED:39 X509v3 Authority Key Identifier: keyid:A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b7:09:f2:db:9d:28:1f:b5:b2:ff:fe:5f:d3:09:06:c9:6e: 8b:c2:ce:5e:fb:5b:c6:2c:c1:e8:b8:9a:06:6b:2d:0c:19:2a: e3:76:17:8a:10:d8:6b:f1:ea:83:cb:eb:86:00:24:3b:1e:ca: cb:b1:95:49:9f:9c:a0:25:25:35:84:b8:2e:97:19:01:96:8f: a1:c7:f1:12:bc:e9:61:55:65:c1:03:68:22:64:c2:bd:63:60: d6:b8:01:7b:b4:c3:b1:cf:13:a1:1b:5d:0e:84:5f:4d:b1:5f: c7:73:bd:69:50:ad:d8:fb:87:dd:ca:e9:6a:c7:c1:db:26:50: 62:ae:ea:91:27:31:2b:29:4b:2f:b3:db:71:2c:a5:9f:29:48: 4a:15:b6:5d:79:62:ef:a4:57:ef:51:23:4e:e1:36:82:0d:ee: 8b:23:9f:bc:c5:57:39:4a:c5:e1:36:e8:b7:f7:94:23:b5:65: 39:d5:d8:cb:c4:b6:2a:0a:41:a8:7c:5c:ee:89:2e:8f:52:e5: 61:63:ed:09:33:66:af:a2:0a:4d:1e:57:3d:1a:c8:8c:67:82: 3e:cc:78:7f:5a:3d:50:ea:fa:09:21:98:c5:91:47:49:42:98: 89:9b:11:4d:8a:27:bb:4c:1f:8a:6d:fb:ac:49:d3:e5:c7:a8: 23:43:f1:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4PvxzfBlBGSiYYR3u17MlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjYxOTQyN2MyODNmYTNiMmJiN2I0NWNjMzVhNTEyODYz OTg5NjEwHhcNMjYwMTI2MDMwMDM2WhcNMjYwMTI3MDMwMDM2WjAzMTEwLwYDVQQD Eyg1NTFlNjU3YmNkM2JjMjFmODFmMjNmZGQ1YTRjNGQ4NDVmYjNlZDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp04UpahsqwRtMCyVVdqarEuFKJW3 gMZiROcF7mrlgUIyclSMZn0GTIAhSYuv1wJzNB505FrsSBte5qQtKmq9kC+8C9Bq QENUWiPfSQxEJTlbIFrck9jZua8AYOQhV62JPyy+IcaF6S9puPiTKJiEaPgy58+F 3DojlABLgNJpXZXv5yTxqdwSsISFReEA2KMyc99j0i+kb1u4orGMgSe8j6vRaZUo ElH0zr4jip0K8sqI8k3f97hP1snGbPjxBxQDVUw1bYmIVsamMIsOyqUvSJgui7wA dftHr1touH9gDHsrNqDte9ugZD7qmoiBw6te7LZkb0VaLogND4Cv4AUunQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUeZXvNO8IfgfI/3VpMTYRfs+05MB8GA1UdIwQY MBaAFKNmGUJ8KD+jsrt7Rcw1pRKGOYlhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJZWlFud29QNk95dTN0RnpEV2xFb1k1aVdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wZmEyODAtMDJkZC00NTE3LTg5YTct M2I4MTc4ZGJiOTRjLzEvbzJZWlFud29QNk95dTN0RnpEV2xFb1k1aVdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8wZmEyODAtMDJkZC00NTE3LTg5YTctM2I4MTc4ZGJiOTRj LzEvbzJZWlFud29QNk95dTN0RnpEV2xFb1k1aVdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrcJ8tud KB+1sv/+X9MJBslui8LOXvtbxizB6LiaBmstDBkq43YXihDYa/Hqg8vrhgAkOx7K y7GVSZ+coCUlNYS4LpcZAZaPocfxErzpYVVlwQNoImTCvWNg1rgBe7TDsc8ToRtd DoRfTbFfx3O9aVCt2PuH3crpasfB2yZQYq7qkScxKylLL7PbcSylnylIShW2XXli 76RX71EjTuE2gg3uiyOfvMVXOUrF4Tbot/eUI7VlOdXYy8S2KgpBqHxc7okuj1Ll YWPtCTNmr6IKTR5XPRrIjGeCPsx4f1o9UOr6CSGYxZFHSUKYiZsRTYonu0wfim37 rEnT5ceoI0Pxdw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:39:02 2026 by rpki-client