This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft File: ovrHXzkOiAUoM33Qvc3HeTS43zw.mft (raw, json) Hash identifier: Q/6YDvKL3qZFiwHOM46LzjjFB7vYsSmC8rtgoKWXf/8= Subject key identifier: 1F:A9:BF:ED:AA:B2:B8:B6:85:48:53:E9:3B:4D:52:04:83:FC:2A:50 Authority key identifier: A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C Certificate issuer: /CN=a2fac75f390e880528337dd0bdcdc77934b8df3c Certificate serial: 019BF3F50C13972EAEB2CEE5D2D51296FCD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 07:01:21 +0000 Manifest this update: Sun 25 Jan 2026 07:01:21 +0000 Manifest next update: Mon 26 Jan 2026 07:01:21 +0000 Files and hashes: 1: opVaKaCUN_xXCzgTvM_wFZzwduE.roa (hash: bSZ38fbqUhIudVwjunvgxXpYJzvqyZl9nmOIMsXOc5U=) 2: ovrHXzkOiAUoM33Qvc3HeTS43zw.crl (hash: nrdL9DYN/b810jgLLBWA9BLEwtxv1xTo1BuvmxaSUbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f5:0c:13:97:2e:ae:b2:ce:e5:d2:d5:12:96:fc:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2fac75f390e880528337dd0bdcdc77934b8df3c Validity Not Before: Jan 25 07:01:21 2026 GMT Not After : Jan 26 07:01:21 2026 GMT Subject: CN=1fa9bfedaab2b8b6854853e93b4d520483fc2a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7d:ae:16:74:07:7c:fe:a4:72:da:2b:dd:d8: 94:20:e2:63:d1:30:27:50:37:be:13:f1:7b:12:30: 21:93:74:e6:6b:44:2a:6c:4c:93:aa:8e:45:e4:d4: b8:03:f9:e1:08:e9:4f:9f:e0:96:1b:cd:bd:d1:3e: fd:6f:75:ed:ad:e6:03:c1:aa:20:b8:d5:4a:0a:9a: 44:7f:b2:50:dc:b1:d9:e4:a2:33:13:e8:76:1b:38: 25:f6:62:ba:4c:49:28:5d:2f:f9:e9:04:14:c1:05: c2:3e:ab:7d:f8:8b:78:3d:2b:90:d8:2c:1a:18:61: 2e:0f:21:3b:2c:c2:5a:2a:f6:61:8e:fa:42:d3:65: 49:79:91:3c:91:a4:6f:35:72:00:9f:ba:a1:92:0e: cd:91:2c:77:26:90:e0:54:a3:3f:5a:0f:80:3b:53: ab:ff:57:5c:03:cf:1e:c4:c2:92:fb:06:b9:8a:70: b0:22:9a:9d:7f:01:02:e2:2c:0f:67:de:03:3e:0c: 77:65:0c:3f:05:35:e4:bb:2c:11:b6:06:5c:36:58: 4b:be:62:f1:af:fd:5e:f4:eb:2f:32:86:f2:51:eb: 1c:e0:3f:a4:e2:6e:74:3f:59:3a:4f:ef:47:de:6f: 6a:07:10:e9:ed:9a:73:79:29:5a:5f:bb:e7:fc:da: d7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A9:BF:ED:AA:B2:B8:B6:85:48:53:E9:3B:4D:52:04:83:FC:2A:50 X509v3 Authority Key Identifier: keyid:A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:56:3c:6a:d5:87:87:8d:a5:ca:1e:e7:52:49:c2:db:0b:43: 3d:1e:92:45:88:78:70:04:db:2b:8c:4b:35:bf:2f:15:61:2e: d6:6b:18:15:d8:86:60:f2:6f:a0:4e:e4:95:a3:27:f7:86:a0: 2a:0a:15:e9:4f:54:01:b1:46:90:70:6e:23:ce:b9:40:fa:59: f6:d9:42:f3:a0:d9:7b:9f:9d:eb:3c:67:3a:a4:83:f7:c4:d4: de:fc:e6:02:6f:30:97:b8:80:af:5c:7b:07:13:8f:8c:6b:bd: 7e:de:ee:23:cc:46:27:b5:86:d8:33:c7:ef:9a:cd:e2:b9:e4: b7:75:3f:00:d0:83:b6:f9:40:f0:e1:84:9c:3d:b8:04:ad:5e: 78:58:0b:32:31:3a:dc:e7:b4:21:b7:9b:fb:20:a1:cb:13:db: 9f:ee:f7:bd:a0:54:26:fe:e4:79:bd:70:10:b3:d9:e4:32:38: 35:40:b5:09:04:69:0d:9a:97:1a:35:2d:72:24:de:05:08:ed: 33:fd:7a:05:da:f1:e2:f3:b9:ac:20:a8:fc:d5:cc:a1:e1:58: 06:18:5f:e7:65:7e:c7:7a:20:1a:6b:a7:39:62:61:76:40:94: 75:1a:d4:38:4f:20:d0:15:90:22:f3:3b:02:cf:d5:b5:cb:07: 1c:18:62:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9QwTly6uss7l0tUSlvzZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZmFjNzVmMzkwZTg4MDUyODMzN2RkMGJkY2RjNzc5MzRi OGRmM2MwHhcNMjYwMTI1MDcwMTIxWhcNMjYwMTI2MDcwMTIxWjAzMTEwLwYDVQQD EygxZmE5YmZlZGFhYjJiOGI2ODU0ODUzZTkzYjRkNTIwNDgzZmMyYTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH2uFnQHfP6kctor3diUIOJj0TAn UDe+E/F7EjAhk3Tma0QqbEyTqo5F5NS4A/nhCOlPn+CWG8290T79b3XtreYDwaog uNVKCppEf7JQ3LHZ5KIzE+h2Gzgl9mK6TEkoXS/56QQUwQXCPqt9+It4PSuQ2Cwa GGEuDyE7LMJaKvZhjvpC02VJeZE8kaRvNXIAn7qhkg7NkSx3JpDgVKM/Wg+AO1Or /1dcA88exMKS+wa5inCwIpqdfwEC4iwPZ94DPgx3ZQw/BTXkuywRtgZcNlhLvmLx r/1e9OsvMobyUesc4D+k4m50P1k6T+9H3m9qBxDp7ZpzeSlaX7vn/NrXGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+pv+2qsri2hUhT6TtNUgSD/CpQMB8GA1UdIwQY MBaAFKL6x185DogFKDN90L3Nx3k0uN88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3ZySFh6a09pQVVvTTMzUXZjM0hlVFM0M3p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC80ODMwOTMtMzZkYi00MDQzLWI2ZDYt NzYyMjU5YWI5NTAwLzEvb3ZySFh6a09pQVVvTTMzUXZjM0hlVFM0M3p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC80ODMwOTMtMzZkYi00MDQzLWI2ZDYtNzYyMjU5YWI5NTAw LzEvb3ZySFh6a09pQVVvTTMzUXZjM0hlVFM0M3p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1Y8atWH h42lyh7nUknC2wtDPR6SRYh4cATbK4xLNb8vFWEu1msYFdiGYPJvoE7klaMn94ag KgoV6U9UAbFGkHBuI865QPpZ9tlC86DZe5+d6zxnOqSD98TU3vzmAm8wl7iAr1x7 BxOPjGu9ft7uI8xGJ7WG2DPH75rN4rnkt3U/ANCDtvlA8OGEnD24BK1eeFgLMjE6 3Oe0Ibeb+yChyxPbn+73vaBUJv7keb1wELPZ5DI4NUC1CQRpDZqXGjUtciTeBQjt M/16Bdrx4vO5rCCo/NXMoeFYBhhf52V+x3ogGmunOWJhdkCUdRrUOE8g0BWQIvM7 As/VtcsHHBhizQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:54:09 2026 by rpki-client