This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft File: OZPVTmOQgKRsP-PViqh-MF22mtE.mft (raw, json) Hash identifier: 71wjh9kqEISgzYanI00Xp8y4EVIR6RmCRs4VoCeqR2E= Subject key identifier: 89:D6:19:03:63:CB:3B:FC:53:81:C9:56:CC:26:02:BD:09:0C:E2:93 Authority key identifier: 39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1 Certificate issuer: /CN=3993d54e639080a46c3fe3d58aa87e305db69ad1 Certificate serial: 019BF763B7BF7A1CA0C632697C7F6135F70B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft Manifest number: 14AB Signing time: Sun 25 Jan 2026 23:01:06 +0000 Manifest this update: Sun 25 Jan 2026 23:01:06 +0000 Manifest next update: Mon 26 Jan 2026 23:01:06 +0000 Files and hashes: 1: 4wCH1xXH2AmEqNEibg1P7FM72SE.roa (hash: 1jaXMinq6qu7nzoECfPCDfNYeYpFgouOjB2jk7Nl0Sw=) 2: OZPVTmOQgKRsP-PViqh-MF22mtE.crl (hash: daUEV3BEPbpi/9P1vyuaa9eHu5zssHnr/cXwv9tFORw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:b7:bf:7a:1c:a0:c6:32:69:7c:7f:61:35:f7:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3993d54e639080a46c3fe3d58aa87e305db69ad1 Validity Not Before: Jan 25 23:01:06 2026 GMT Not After : Jan 26 23:01:06 2026 GMT Subject: CN=89d6190363cb3bfc5381c956cc2602bd090ce293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:78:9e:99:2c:c7:db:45:1d:35:3f:10:da:94: d2:c8:19:81:0e:0a:79:84:dd:06:a4:08:b7:98:b5: 2d:7c:99:92:d3:f7:e0:d3:09:c2:89:73:75:a1:4e: 76:d3:60:c4:91:24:b7:a2:1b:9f:0a:ce:52:48:dd: 3c:62:2b:52:b2:f6:45:b0:53:46:8c:31:36:b3:43: 4e:8d:e7:df:31:95:23:e7:d1:db:3d:0d:3d:1a:25: 4d:6e:b4:79:6c:14:3d:30:c2:5b:6f:cc:fe:f9:ff: 09:af:6a:b0:9f:af:1b:cd:2c:37:03:f6:dd:54:02: 4c:29:52:92:48:a9:ea:8e:6a:0a:26:cc:6e:82:14: ab:e2:eb:ad:04:0f:09:bd:43:a1:f3:34:d5:90:3f: c1:f1:84:a4:c3:f9:b9:c9:6c:5e:5c:c7:b5:4d:b0: de:81:90:66:c4:3e:47:6a:94:21:cf:9c:39:1f:51: 2b:39:cd:94:5f:18:b0:96:1b:ab:00:3b:3f:ff:52: 1d:26:0a:9b:f9:d5:d1:44:0d:3b:01:64:30:0d:5e: 05:e8:72:cb:01:1a:fd:e6:4c:62:21:b9:60:25:06: fc:c4:c8:62:1d:77:98:9c:61:9b:2e:bb:47:7c:c7: 99:6b:a6:0f:9d:ed:15:c5:5c:78:82:85:ab:59:af: 8b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D6:19:03:63:CB:3B:FC:53:81:C9:56:CC:26:02:BD:09:0C:E2:93 X509v3 Authority Key Identifier: keyid:39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:69:29:70:ff:3d:69:4c:33:bd:14:e6:03:19:7e:3f:4a:13: f1:9b:4a:6f:6c:8a:37:0d:89:8b:74:aa:25:66:ab:60:e8:6b: 1a:24:ef:3c:e8:3c:f9:d4:e9:0e:ea:8e:fb:d6:c7:d0:ef:3d: 8d:d2:7a:af:e7:28:d7:9e:f4:74:f6:94:bd:c8:52:c8:cb:ec: 99:77:d3:cd:f7:05:26:c3:30:ce:ab:fd:62:ee:50:80:6d:2e: 78:e9:f9:20:67:cf:e1:77:ea:06:80:03:a8:cc:09:d3:0e:30: 19:e1:45:c2:10:3c:d0:6e:e7:3b:2c:ad:aa:60:9f:f1:f7:c2: a5:73:90:bd:56:19:1f:f8:20:e8:5a:95:29:a8:0b:32:40:00: 61:a4:b6:18:0f:32:13:72:f8:95:61:61:fd:95:b8:ff:bb:05: 3b:c2:6f:e3:e3:73:b1:05:b9:8a:4f:a5:35:8b:5e:79:cb:20: e6:3a:20:bd:d0:43:92:86:3c:5a:9e:e0:2a:8e:a6:52:6a:ee: 30:aa:55:f5:9e:8a:7d:9b:c7:83:0e:cf:df:33:3c:3d:c1:13: a2:28:fd:f1:8f:00:5c:73:fe:89:19:e1:46:ce:87:48:8a:bb: b3:c5:96:6f:7c:7b:d4:be:0c:18:c5:ba:cb:0e:9e:63:18:42: 24:b8:12:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y7e/ehygxjJpfH9hNfcLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5OTNkNTRlNjM5MDgwYTQ2YzNmZTNkNThhYTg3ZTMwNWRi NjlhZDEwHhcNMjYwMTI1MjMwMTA2WhcNMjYwMTI2MjMwMTA2WjAzMTEwLwYDVQQD Eyg4OWQ2MTkwMzYzY2IzYmZjNTM4MWM5NTZjYzI2MDJiZDA5MGNlMjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuniemSzH20UdNT8Q2pTSyBmBDgp5 hN0GpAi3mLUtfJmS0/fg0wnCiXN1oU5202DEkSS3ohufCs5SSN08YitSsvZFsFNG jDE2s0NOjeffMZUj59HbPQ09GiVNbrR5bBQ9MMJbb8z++f8Jr2qwn68bzSw3A/bd VAJMKVKSSKnqjmoKJsxughSr4uutBA8JvUOh8zTVkD/B8YSkw/m5yWxeXMe1TbDe gZBmxD5HapQhz5w5H1ErOc2UXxiwlhurADs//1IdJgqb+dXRRA07AWQwDV4F6HLL ARr95kxiIblgJQb8xMhiHXeYnGGbLrtHfMeZa6YPne0VxVx4goWrWa+LwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInWGQNjyzv8U4HJVswmAr0JDOKTMB8GA1UdIwQY MBaAFDmT1U5jkICkbD/j1YqofjBdtprRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1pQVlRtT1FnS1JzUC1QVmlxaC1NRjIybXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84MDk1OWQtZjVjNC00YWM5LWFkMTMt ZDQ4ZmJjMWEyNDNiLzEvT1pQVlRtT1FnS1JzUC1QVmlxaC1NRjIybXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS84MDk1OWQtZjVjNC00YWM5LWFkMTMtZDQ4ZmJjMWEyNDNi LzEvT1pQVlRtT1FnS1JzUC1QVmlxaC1NRjIybXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWkpcP89 aUwzvRTmAxl+P0oT8ZtKb2yKNw2Ji3SqJWarYOhrGiTvPOg8+dTpDuqO+9bH0O89 jdJ6r+co1570dPaUvchSyMvsmXfTzfcFJsMwzqv9Yu5QgG0ueOn5IGfP4XfqBoAD qMwJ0w4wGeFFwhA80G7nOyytqmCf8ffCpXOQvVYZH/gg6FqVKagLMkAAYaS2GA8y E3L4lWFh/ZW4/7sFO8Jv4+NzsQW5ik+lNYteecsg5jogvdBDkoY8Wp7gKo6mUmru MKpV9Z6KfZvHgw7P3zM8PcEToij98Y8AXHP+iRnhRs6HSIq7s8WWb3x71L4MGMW6 yw6eYxhCJLgSDQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:40:33 2026 by rpki-client