This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft File: 1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft (raw, json) Hash identifier: 201H7ELULii/XCyPsTTevDxNtR0uz3HXHo/mKs8SFZQ= Subject key identifier: A8:7A:3C:75:F1:2C:B2:34:DA:22:68:7C:4B:06:2C:03:20:62:89:87 Authority key identifier: FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4 Certificate issuer: /CN=fbf380b6675b9ccd5f812e069fff175478fb38a4 Certificate serial: 019BF8AD358EF7B5D81D79496D7189A72FBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft Manifest number: 12F6 Signing time: Mon 26 Jan 2026 05:00:59 +0000 Manifest this update: Mon 26 Jan 2026 05:00:59 +0000 Manifest next update: Tue 27 Jan 2026 05:00:59 +0000 Files and hashes: 1: 1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl (hash: Odz1s58h9oqvZn2H0UNrFAyOwR+Mwu149nOXdKRYTrs=) 2: __aKgcBqV6i_mXN76rfxria8AHQ.roa (hash: zwh2UkhbJc0t+pZ8vBFFopuCCkIr7SkveCVxpby2P9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:35:8e:f7:b5:d8:1d:79:49:6d:71:89:a7:2f:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbf380b6675b9ccd5f812e069fff175478fb38a4 Validity Not Before: Jan 26 05:00:59 2026 GMT Not After : Jan 27 05:00:59 2026 GMT Subject: CN=a87a3c75f12cb234da22687c4b062c0320628987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:50:53:7d:58:ac:3e:17:03:77:49:86:37:ca: fb:98:3c:9f:8b:72:db:92:5c:37:3d:a5:b3:6a:d7: af:68:47:d8:4b:9f:28:70:9f:92:66:2c:ef:7b:4b: 5a:89:b2:10:02:66:12:99:7a:ff:f5:f4:af:42:03: f2:6b:03:6c:00:6d:67:f7:31:24:18:b1:ff:52:2d: ab:d4:50:15:d2:eb:09:fa:54:d7:62:e0:6b:cc:66: 38:85:9c:81:73:8e:fc:14:f5:50:8b:3e:d3:cf:bb: 48:f8:a5:f3:43:c6:46:47:97:38:bf:5f:11:75:9b: cc:22:21:d3:a9:39:10:8b:5a:89:9f:7b:06:93:6f: a9:b7:31:a0:e8:4b:6a:82:e4:f2:ed:40:a7:31:8b: 2f:50:ef:57:78:71:47:ae:8e:ad:29:61:c4:b6:81: 8c:72:5b:50:81:87:a3:82:e5:db:21:3d:3c:aa:35: 70:4a:01:d6:69:b7:4f:7e:84:8b:d4:45:04:6b:57: b6:7c:8a:20:c0:59:33:af:74:99:db:dc:f0:2b:a7: 74:11:2c:40:3c:cf:bb:21:67:1a:7a:eb:24:7b:94: cf:78:7f:cc:fd:5c:f5:9a:7e:e4:e2:56:2a:c2:a1: 00:1c:71:0b:44:44:b5:1a:08:5a:84:1a:7d:5c:33: d0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7A:3C:75:F1:2C:B2:34:DA:22:68:7C:4B:06:2C:03:20:62:89:87 X509v3 Authority Key Identifier: keyid:FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e0:53:ce:ff:40:56:62:28:4f:bd:19:27:76:04:8c:75:d8: 39:1b:ab:9a:d0:49:5f:4f:cc:a4:92:05:31:4c:ac:a5:9b:c7: 6b:73:87:9f:38:7f:71:9f:23:7a:61:6e:1a:b3:db:3e:f9:9c: d9:7e:58:2a:3f:b1:a2:7b:7b:02:24:28:77:8d:25:a6:f5:5c: fb:e6:70:13:e1:00:e1:4f:2d:e4:48:14:83:3c:44:24:22:18: 02:c9:26:e8:74:16:17:17:a2:0f:37:e6:6d:a6:97:38:e8:3e: 46:5e:92:03:1f:5c:47:ae:3c:bc:5f:13:07:75:0c:59:94:28: 17:ba:52:f8:e7:db:54:ef:0a:10:03:72:15:76:a9:7c:ec:6a: 2d:eb:18:52:22:b2:1c:96:ba:f4:12:11:b1:76:c8:d0:85:a7: 58:38:44:35:e0:9b:51:7d:d6:bc:4b:6e:5c:aa:f3:05:57:a8: a6:a5:4f:a6:93:7f:30:b9:be:9a:b1:dd:6a:84:20:28:24:53: 4e:ff:36:65:c3:10:18:11:e2:e7:46:55:91:0e:dd:ed:25:eb: bb:0f:7c:0d:24:c5:9d:8d:d3:6c:fb:de:82:95:34:a2:13:72: 95:43:58:ac:a5:f5:19:b2:64:9e:bd:f2:de:5e:3b:d5:60:f0: 68:54:59:c0 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv4rTWO97XYHXlJbXGJpy+6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZjM4MGI2Njc1YjljY2Q1ZjgxMmUwNjlmZmYxNzU0Nzhm YjM4YTQwHhcNMjYwMTI2MDUwMDU5WhcNMjYwMTI3MDUwMDU5WjAzMTEwLwYDVQQD EyhhODdhM2M3NWYxMmNiMjM0ZGEyMjY4N2M0YjA2MmMwMzIwNjI4OTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFBTfVisPhcDd0mGN8r7mDyfi3Lb klw3PaWzatevaEfYS58ocJ+SZizve0taibIQAmYSmXr/9fSvQgPyawNsAG1n9zEk GLH/Ui2r1FAV0usJ+lTXYuBrzGY4hZyBc478FPVQiz7Tz7tI+KXzQ8ZGR5c4v18R dZvMIiHTqTkQi1qJn3sGk2+ptzGg6EtqguTy7UCnMYsvUO9XeHFHro6tKWHEtoGM cltQgYejguXbIT08qjVwSgHWabdPfoSL1EUEa1e2fIogwFkzr3SZ29zwK6d0ESxA PM+7IWcaeuske5TPeH/M/Vz1mn7k4lYqwqEAHHELRES1GghahBp9XDPQoQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKh6PHXxLLI02iJofEsGLAMgYomHMB8GA1UdIwQY MBaAFPvzgLZnW5zNX4EuBp//F1R4+zikMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1fT0F0bWRibk0xZmdTNEduXzhYVkhqN09LUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvZDEwODEzLWZlNjEtNDAzMy1hNDMz LTVlZTliNjIyNDZkYi8xLzEtX09BdG1kYm5NMWZnUzRHbl84WFZIajdPS1EubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzZjL2QxMDgxMy1mZTYxLTQwMzMtYTQzMy01ZWU5YjYyMjQ2 ZGIvMS8xLV9PQXRtZGJuTTFmZ1M0R25fOFhWSGo3T0tRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALOBT zv9AVmIoT70ZJ3YEjHXYORurmtBJX0/MpJIFMUyspZvHa3OHnzh/cZ8jemFuGrPb Pvmc2X5YKj+xont7AiQod40lpvVc++ZwE+EA4U8t5EgUgzxEJCIYAskm6HQWFxei DzfmbaaXOOg+Rl6SAx9cR648vF8TB3UMWZQoF7pS+OfbVO8KEANyFXapfOxqLesY UiKyHJa69BIRsXbI0IWnWDhENeCbUX3WvEtuXKrzBVeopqVPppN/MLm+mrHdaoQg KCRTTv82ZcMQGBHi50ZVkQ7d7SXruw98DSTFnY3TbPvegpU0ohNylUNYrKX1GbJk nr3y3l471WDwaFRZwA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:59 2026 by rpki-client