This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft File: OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft (raw, json) Hash identifier: 9NUarqKInSbrNHm/H6EtQ1ICwuKWWr+bFynQ17fBT5M= Subject key identifier: 6C:67:2A:6B:9D:1E:CB:91:F1:BB:C4:37:D2:E5:96:88:F4:5F:5B:1E Authority key identifier: 3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F Certificate issuer: /CN=3a07318a1314233f5623c0f835fae18f9126412f Certificate serial: 019BF50769ADAE413E39532F5123E67CA4C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft Manifest number: 01B9 Signing time: Sun 25 Jan 2026 12:01:02 +0000 Manifest this update: Sun 25 Jan 2026 12:01:02 +0000 Manifest next update: Mon 26 Jan 2026 12:01:02 +0000 Files and hashes: 1: OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl (hash: AZ2crqEOplQkRNiKDnkZ5Xm4eh1vbHnYfysEaFOoopg=) 2: rcu1nZGmL_S7ccczhF-sESIVSFg.roa (hash: bYUYTaJymdrEh9zrcfZKEG7i+z1i30upCc49kr4zBNw=) 3: wGPQkCyZBLF64nqCVCJB0ISUzBg.roa (hash: EYYn9hWCHtPsq8G1cxHiPJEhzM/YA2ywjRpNXuGftg8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:69:ad:ae:41:3e:39:53:2f:51:23:e6:7c:a4:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a07318a1314233f5623c0f835fae18f9126412f Validity Not Before: Jan 25 12:01:02 2026 GMT Not After : Jan 26 12:01:02 2026 GMT Subject: CN=6c672a6b9d1ecb91f1bbc437d2e59688f45f5b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:92:6c:87:d5:a4:ef:2c:a4:f2:46:63:56:50: 9e:6b:cc:af:5a:85:02:b0:3a:4a:3b:32:5c:be:2a: ca:12:5f:5e:31:1c:f5:11:cd:31:42:8f:43:07:2d: e4:25:5d:57:e4:0e:56:9c:6f:d8:3b:cc:88:27:7f: c1:3b:7a:9c:23:b4:3c:c3:f6:83:61:4b:5e:3e:9f: 89:c2:c9:f8:22:af:41:98:34:a2:5f:0c:49:2f:a6: 41:a7:c1:19:64:93:8f:db:3f:a4:82:e3:0a:db:af: b7:11:12:8e:e4:a8:ea:81:7a:b0:69:f5:15:9f:6c: 13:69:1d:f5:fa:93:bc:f9:22:ed:50:41:05:23:94: 49:ec:7b:0e:4c:2e:0e:4c:70:37:d9:a0:d5:b9:75: 23:60:e5:e0:5e:b2:9e:f7:f3:47:7a:5c:b6:b7:69: 2c:83:8d:05:eb:cf:a2:c1:0a:56:e2:00:86:1b:e2: 9a:57:4d:f1:e6:c4:af:38:e1:47:f9:79:cf:1b:b6: 89:d3:04:be:3a:c3:7f:3e:d4:e3:9e:d9:f2:23:9b: 6d:15:29:23:b4:28:cf:86:49:9a:26:b2:86:fe:32: 52:9e:3a:03:1f:7f:ef:f7:ba:ec:ee:a8:c0:5b:41: 26:ea:58:aa:ae:b1:e0:fc:9c:2d:37:73:a0:26:68: 48:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:67:2A:6B:9D:1E:CB:91:F1:BB:C4:37:D2:E5:96:88:F4:5F:5B:1E X509v3 Authority Key Identifier: keyid:3A:07:31:8A:13:14:23:3F:56:23:C0:F8:35:FA:E1:8F:91:26:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgcxihMUIz9WI8D4Nfrhj5EmQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2b5374-d405-4ff1-8563-026a7b654f88/1/OgcxihMUIz9WI8D4Nfrhj5EmQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:87:25:04:3a:38:5c:f6:10:66:21:e8:3d:9f:6e:93:e8:62: 8e:8c:d9:b7:b5:c4:ca:9b:ad:b0:c5:e9:35:0e:7e:a0:23:e2: bc:b9:f4:0b:2e:63:ff:8e:6f:5e:87:3b:6a:4a:85:aa:87:0d: 40:27:7d:c6:0a:ca:09:5f:d6:3d:3f:44:2e:15:7b:6b:f1:4c: ed:24:46:0a:59:c6:7d:c7:42:08:b8:63:f0:2c:e9:9c:04:6c: 4d:b5:3a:32:0a:82:9a:25:97:e7:5d:e4:91:7b:56:4c:37:cb: 67:f9:f4:b2:fc:30:ed:ba:8d:3b:fe:72:03:8e:e4:c3:b8:e4: 61:57:6c:22:55:08:26:c8:39:71:e2:b8:ea:2b:85:e2:b3:19: 5e:6a:a4:6e:47:2f:9c:59:9b:eb:79:67:9c:bf:cc:24:9e:43: 5a:e6:29:f0:27:6b:bf:05:40:ad:d3:a3:ba:54:ae:73:82:ce: 2e:0b:68:66:25:5c:94:02:8d:6e:f9:9b:4c:38:6f:0d:cc:6b: 88:aa:20:10:c7:8b:45:22:09:65:91:d6:18:43:68:1c:ff:41: 8c:ef:3d:9d:0e:1a:60:21:d9:00:9f:41:b3:2c:c3:51:a6:73: aa:3e:3c:3c:e1:87:a9:bb:0f:40:6f:e7:94:5e:05:1b:25:fe: fa:64:53:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B2mtrkE+OVMvUSPmfKTFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDczMThhMTMxNDIzM2Y1NjIzYzBmODM1ZmFlMThmOTEy NjQxMmYwHhcNMjYwMTI1MTIwMTAyWhcNMjYwMTI2MTIwMTAyWjAzMTEwLwYDVQQD Eyg2YzY3MmE2YjlkMWVjYjkxZjFiYmM0MzdkMmU1OTY4OGY0NWY1YjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5Jsh9Wk7yyk8kZjVlCea8yvWoUC sDpKOzJcvirKEl9eMRz1Ec0xQo9DBy3kJV1X5A5WnG/YO8yIJ3/BO3qcI7Q8w/aD YUtePp+Jwsn4Iq9BmDSiXwxJL6ZBp8EZZJOP2z+kguMK26+3ERKO5KjqgXqwafUV n2wTaR31+pO8+SLtUEEFI5RJ7HsOTC4OTHA32aDVuXUjYOXgXrKe9/NHely2t2ks g40F68+iwQpW4gCGG+KaV03x5sSvOOFH+XnPG7aJ0wS+OsN/PtTjntnyI5ttFSkj tCjPhkmaJrKG/jJSnjoDH3/v97rs7qjAW0Em6liqrrHg/JwtN3OgJmhI5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxnKmudHsuR8bvEN9Llloj0X1seMB8GA1UdIwQY MBaAFDoHMYoTFCM/ViPA+DX64Y+RJkEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2djeGloTVVJejlXSThENE5mcmhqNUVtUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yYjUzNzQtZDQwNS00ZmYxLTg1NjMt MDI2YTdiNjU0Zjg4LzEvT2djeGloTVVJejlXSThENE5mcmhqNUVtUVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8yYjUzNzQtZDQwNS00ZmYxLTg1NjMtMDI2YTdiNjU0Zjg4 LzEvT2djeGloTVVJejlXSThENE5mcmhqNUVtUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArYclBDo4 XPYQZiHoPZ9uk+hijozZt7XEyputsMXpNQ5+oCPivLn0Cy5j/45vXoc7akqFqocN QCd9xgrKCV/WPT9ELhV7a/FM7SRGClnGfcdCCLhj8CzpnARsTbU6MgqCmiWX513k kXtWTDfLZ/n0svww7bqNO/5yA47kw7jkYVdsIlUIJsg5ceK46iuF4rMZXmqkbkcv nFmb63lnnL/MJJ5DWuYp8CdrvwVArdOjulSuc4LOLgtoZiVclAKNbvmbTDhvDcxr iKogEMeLRSIJZZHWGENoHP9BjO89nQ4aYCHZAJ9BsyzDUaZzqj48POGHqbsPQG/n lF4FGyX++mRT7A== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:33 2026 by rpki-client