This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft File: OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft (raw, json) Hash identifier: 3jcVWDvwBAXLDsyv+KeRg1bH6sJx3L7JvTA4mvHv3l8= Subject key identifier: 6F:5C:77:29:FF:A1:49:F1:D3:87:32:37:BF:5F:F9:5D:E4:46:1F:69 Authority key identifier: 39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37 Certificate issuer: /CN=393d2f0a96199a060856cf67e2105fda2cb93d37 Certificate serial: 019BF5E3FDE44D0DAD24DE942C5A6E327386 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft Manifest number: 17E6 Signing time: Sun 25 Jan 2026 16:01:58 +0000 Manifest this update: Sun 25 Jan 2026 16:01:58 +0000 Manifest next update: Mon 26 Jan 2026 16:01:58 +0000 Files and hashes: 1: OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl (hash: yxuXaS2ep4UDctv6tJX4Wcn02cjgdt8gwogR4j7ibP0=) 2: Zi6UZ54yt8b-glhmDWRt0mEfzds.roa (hash: 2Jey7cJUolhwOe+oTn2rSDf59z6NaXz8p8J5eSTppDU=) 3: hpTl067hwTIPEoUANyWpDMshVQE.roa (hash: Ut4M2y31jaLJIG/kBUnELOfappjNoVrYNXBuoXPxjK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:fd:e4:4d:0d:ad:24:de:94:2c:5a:6e:32:73:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=393d2f0a96199a060856cf67e2105fda2cb93d37 Validity Not Before: Jan 25 16:01:58 2026 GMT Not After : Jan 26 16:01:58 2026 GMT Subject: CN=6f5c7729ffa149f1d3873237bf5ff95de4461f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a3:d0:c7:f5:9b:5e:04:a9:4e:18:d0:34:36: ef:d3:a6:ea:c5:51:c1:c0:00:c0:1a:d0:00:c0:ee: a5:90:e6:8e:b1:63:fd:0e:37:5e:2c:bf:39:25:71: d3:87:20:6a:6a:52:cd:4d:cd:ce:81:d6:8c:0d:12: c3:c8:b1:29:3d:0a:2e:10:2a:46:29:37:e0:bb:9c: 73:9e:78:88:96:2a:2c:a1:01:ba:cc:e6:c3:8a:95: 35:da:af:85:a2:81:cf:8f:2d:a8:e2:ed:19:ed:12: 01:a3:97:63:fb:b8:f9:fe:13:bb:12:21:ea:70:03: 65:28:ef:79:d3:ba:61:1d:17:09:b8:ff:19:71:dc: fb:67:cf:32:ef:c0:2e:31:99:4c:00:e7:c2:e6:8e: ba:98:ad:d1:11:b7:c7:bb:f5:62:49:8a:32:d8:2b: 59:8e:53:b1:65:b5:df:b0:ce:4c:3a:e3:78:e9:8b: 40:a7:3f:ff:65:6d:9d:79:2a:79:6a:25:ff:72:25: 82:5d:d7:15:29:9d:d0:1b:2c:aa:9e:92:24:02:29: ac:f7:06:27:0d:c7:5c:37:1d:55:bf:6c:67:99:2f: e4:f4:b1:29:65:2c:d5:35:63:56:ef:22:56:fd:7b: 56:fb:45:b8:c2:f2:e8:9b:79:38:49:bb:f5:53:21: b2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5C:77:29:FF:A1:49:F1:D3:87:32:37:BF:5F:F9:5D:E4:46:1F:69 X509v3 Authority Key Identifier: keyid:39:3D:2F:0A:96:19:9A:06:08:56:CF:67:E2:10:5F:DA:2C:B9:3D:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OT0vCpYZmgYIVs9n4hBf2iy5PTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0365de-8008-4713-ab99-619fa80b8d74/1/OT0vCpYZmgYIVs9n4hBf2iy5PTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ae:77:73:d3:90:a4:80:d0:ab:87:ef:df:2f:13:fc:b1:9f: 06:57:19:4a:f8:a1:1b:87:98:be:bc:53:e8:8e:bd:2d:30:7b: 4d:b0:a8:7c:b1:6f:90:30:11:2a:2d:da:ae:0b:36:50:eb:46: 5f:6d:c6:a4:6e:9e:9b:ca:b2:d2:57:5b:db:e1:a9:19:49:5a: 89:d5:a8:8a:57:52:bf:d2:03:63:12:c6:22:05:87:5e:ea:8b: 93:5c:ad:c7:a5:ec:6d:07:11:88:8f:01:38:61:0e:50:b4:9b: 17:84:e6:39:06:fc:d5:7f:31:2e:25:2f:95:9c:41:a6:64:e0: 3a:e7:a8:17:33:91:d2:d9:d1:6d:e6:89:71:a4:7a:0a:47:3e: ab:54:02:c0:e3:f7:2e:ae:3e:7d:62:45:c0:1d:91:df:0e:34: d7:30:a7:66:3e:e8:e9:9d:54:8a:fd:c3:fc:9f:f1:64:80:c6: 2c:90:42:b9:63:60:8d:67:01:e1:dd:e7:29:87:38:a9:b7:4d: 28:8a:9e:87:c3:01:99:3a:4e:44:4d:dd:e2:87:6a:ea:6d:67: 4f:e2:16:cd:85:ce:81:e9:bc:fc:62:92:42:cd:31:e1:7f:fd: ca:b1:f7:45:fe:89:3f:97:73:60:f2:9c:a6:11:42:76:11:94: a8:88:48:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14/3kTQ2tJN6ULFpuMnOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5M2QyZjBhOTYxOTlhMDYwODU2Y2Y2N2UyMTA1ZmRhMmNi OTNkMzcwHhcNMjYwMTI1MTYwMTU4WhcNMjYwMTI2MTYwMTU4WjAzMTEwLwYDVQQD Eyg2ZjVjNzcyOWZmYTE0OWYxZDM4NzMyMzdiZjVmZjk1ZGU0NDYxZjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46PQx/WbXgSpThjQNDbv06bqxVHB wADAGtAAwO6lkOaOsWP9DjdeLL85JXHThyBqalLNTc3OgdaMDRLDyLEpPQouECpG KTfgu5xznniIliosoQG6zObDipU12q+FooHPjy2o4u0Z7RIBo5dj+7j5/hO7EiHq cANlKO9507phHRcJuP8Zcdz7Z88y78AuMZlMAOfC5o66mK3REbfHu/ViSYoy2CtZ jlOxZbXfsM5MOuN46YtApz//ZW2deSp5aiX/ciWCXdcVKZ3QGyyqnpIkAims9wYn DcdcNx1Vv2xnmS/k9LEpZSzVNWNW7yJW/XtW+0W4wvLom3k4Sbv1UyGybwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9cdyn/oUnx04cyN79f+V3kRh9pMB8GA1UdIwQY MBaAFDk9LwqWGZoGCFbPZ+IQX9osuT03MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1QwdkNwWVptZ1lJVnM5bjRoQmYyaXk1UFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wMzY1ZGUtODAwOC00NzEzLWFiOTkt NjE5ZmE4MGI4ZDc0LzEvT1QwdkNwWVptZ1lJVnM5bjRoQmYyaXk1UFRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wMzY1ZGUtODAwOC00NzEzLWFiOTktNjE5ZmE4MGI4ZDc0 LzEvT1QwdkNwWVptZ1lJVnM5bjRoQmYyaXk1UFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMK53c9OQ pIDQq4fv3y8T/LGfBlcZSvihG4eYvrxT6I69LTB7TbCofLFvkDARKi3args2UOtG X23GpG6em8qy0ldb2+GpGUlaidWoildSv9IDYxLGIgWHXuqLk1ytx6XsbQcRiI8B OGEOULSbF4TmOQb81X8xLiUvlZxBpmTgOueoFzOR0tnRbeaJcaR6Ckc+q1QCwOP3 Lq4+fWJFwB2R3w401zCnZj7o6Z1Uiv3D/J/xZIDGLJBCuWNgjWcB4d3nKYc4qbdN KIqeh8MBmTpORE3d4odq6m1nT+IWzYXOgem8/GKSQs0x4X/9yrH3Rf6JP5dzYPKc phFCdhGUqIhIQw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:56:59 2026 by rpki-client