This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft File: otN_wx79NwO_LEw-iLw8HPtHmRk.mft (raw, json) Hash identifier: G5d07bzZIa1wye1w+UEW1ufSVzP3/9hmCLamhmnpz7U= Subject key identifier: F1:CB:AB:C0:62:DC:EF:3A:F1:5A:CF:10:F3:34:68:A4:1B:0E:38:DA Authority key identifier: A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19 Certificate issuer: /CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919 Certificate serial: 019BF91B7E9B7D6C41EF58E69B41CB519427 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 07:01:27 +0000 Manifest this update: Mon 26 Jan 2026 07:01:27 +0000 Manifest next update: Tue 27 Jan 2026 07:01:27 +0000 Files and hashes: 1: 4V6AO3iCByKz-8xLXlPGJ7JN6-U.roa (hash: 2uPt+ClUXX7tGFKQBXaXil7RPudWsmAnzyUlsk5i8AU=) 2: otN_wx79NwO_LEw-iLw8HPtHmRk.crl (hash: d9ATnb+hJtiY93rhOHeV4OVxDAdA2SzRW+MO/fpILnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:7e:9b:7d:6c:41:ef:58:e6:9b:41:cb:51:94:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d37fc31efd3703bf2c4c3e88bc3c1cfb479919 Validity Not Before: Jan 26 07:01:27 2026 GMT Not After : Jan 27 07:01:27 2026 GMT Subject: CN=f1cbabc062dcef3af15acf10f33468a41b0e38da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:62:88:60:39:e5:c2:a5:0c:f1:18:ba:e6:e6: f5:d0:36:b1:b0:ac:d8:a3:16:9c:1a:b5:b2:c0:91: 52:a7:ae:b2:61:20:cd:f1:a6:8d:74:e6:7a:98:73: 8a:58:fd:63:70:68:32:55:40:c8:ce:29:76:c4:98: 6e:1c:2f:66:43:8b:f4:f4:a3:cd:a4:0d:db:50:33: f6:75:8c:dd:ba:d1:28:92:96:40:13:58:c4:c6:4e: 23:2c:20:cc:c1:8e:7b:84:af:c6:09:48:18:24:95: e0:18:63:3f:8b:59:ae:22:29:52:49:49:f1:cc:44: 6f:cf:37:d0:ea:52:cf:0d:01:bb:4b:56:88:f0:01: 5d:40:e7:2c:a8:b4:b1:c4:ec:79:0e:7f:da:9c:03: 28:fd:c6:4e:97:4f:53:8b:d3:dc:2f:24:af:41:cf: 5c:7d:a6:57:75:95:97:d3:3d:9e:2e:ca:48:4c:1f: 7e:64:4e:8a:5f:67:d5:20:49:1e:82:7d:97:eb:bb: 42:ee:45:a3:2d:c0:08:9e:40:12:bf:67:c1:71:5b: 5b:40:ce:9d:ca:1b:1f:31:7d:05:5a:7a:55:3d:f6: 91:1e:ef:0d:8e:4d:0f:60:0b:15:09:c7:63:f0:0f: 0e:16:1b:ec:e4:cf:77:20:55:82:5d:26:60:00:e4: 15:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CB:AB:C0:62:DC:EF:3A:F1:5A:CF:10:F3:34:68:A4:1B:0E:38:DA X509v3 Authority Key Identifier: keyid:A2:D3:7F:C3:1E:FD:37:03:BF:2C:4C:3E:88:BC:3C:1C:FB:47:99:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otN_wx79NwO_LEw-iLw8HPtHmRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3632f5-89e7-4d22-8bc1-33399080270f/1/otN_wx79NwO_LEw-iLw8HPtHmRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:68:5a:0d:29:9d:41:11:da:f8:fb:3b:4f:b3:b6:5b:e4:63: f5:63:a8:49:ba:c8:b0:aa:cb:e0:d8:68:e8:db:d0:47:f0:5c: 1c:ee:09:63:61:c5:91:35:0d:54:59:a2:b7:cc:f0:32:21:4b: 58:a0:ec:22:12:29:9d:28:72:6b:c8:8a:32:f0:1b:58:25:e2: bd:10:7f:ad:01:6a:14:20:e2:0e:a7:04:91:10:0c:fc:ba:bd: bd:cb:9e:35:17:b8:35:de:f1:51:c8:fe:3f:4a:eb:12:ee:57: 5c:6d:c1:16:63:a0:77:d9:90:b0:06:b8:76:ac:64:ef:6a:36: 8b:ed:bb:8b:35:76:0a:5f:12:64:fc:7b:35:a2:22:25:43:49: 00:97:cc:de:69:3f:a1:b9:45:7a:4d:94:e1:d2:da:08:b3:8d: 63:d6:f9:f6:85:84:80:b3:01:d7:5c:85:81:3d:c6:44:18:47: 2e:fe:17:29:f8:90:72:21:8c:a6:02:0f:de:e7:71:31:90:69: e5:1a:de:99:ed:6c:74:b2:09:4b:aa:16:87:ed:81:5d:30:ca: 79:5b:98:f0:e1:64:db:f8:ee:32:83:a7:66:a8:c0:3e:6a:83: 4b:b1:c5:6d:b3:70:5d:b3:b4:6b:4d:84:aa:2b:7c:b5:65:33: 06:a0:ae:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G36bfWxB71jmm0HLUZQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZDM3ZmMzMWVmZDM3MDNiZjJjNGMzZTg4YmMzYzFjZmI0 Nzk5MTkwHhcNMjYwMTI2MDcwMTI3WhcNMjYwMTI3MDcwMTI3WjAzMTEwLwYDVQQD EyhmMWNiYWJjMDYyZGNlZjNhZjE1YWNmMTBmMzM0NjhhNDFiMGUzOGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmKIYDnlwqUM8Ri65ub10DaxsKzY oxacGrWywJFSp66yYSDN8aaNdOZ6mHOKWP1jcGgyVUDIzil2xJhuHC9mQ4v09KPN pA3bUDP2dYzdutEokpZAE1jExk4jLCDMwY57hK/GCUgYJJXgGGM/i1muIilSSUnx zERvzzfQ6lLPDQG7S1aI8AFdQOcsqLSxxOx5Dn/anAMo/cZOl09Ti9PcLySvQc9c faZXdZWX0z2eLspITB9+ZE6KX2fVIEkegn2X67tC7kWjLcAInkASv2fBcVtbQM6d yhsfMX0FWnpVPfaRHu8Njk0PYAsVCcdj8A8OFhvs5M93IFWCXSZgAOQVtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHLq8Bi3O868VrPEPM0aKQbDjjaMB8GA1UdIwQY MBaAFKLTf8Me/TcDvyxMPoi8PBz7R5kZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3ROX3d4NzlOd09fTEV3LWlMdzhIUHRIbVJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zNjMyZjUtODllNy00ZDIyLThiYzEt MzMzOTkwODAyNzBmLzEvb3ROX3d4NzlOd09fTEV3LWlMdzhIUHRIbVJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8zNjMyZjUtODllNy00ZDIyLThiYzEtMzMzOTkwODAyNzBm LzEvb3ROX3d4NzlOd09fTEV3LWlMdzhIUHRIbVJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGhaDSmd QRHa+Ps7T7O2W+Rj9WOoSbrIsKrL4Nho6NvQR/BcHO4JY2HFkTUNVFmit8zwMiFL WKDsIhIpnShya8iKMvAbWCXivRB/rQFqFCDiDqcEkRAM/Lq9vcueNRe4Nd7xUcj+ P0rrEu5XXG3BFmOgd9mQsAa4dqxk72o2i+27izV2Cl8SZPx7NaIiJUNJAJfM3mk/ oblFek2U4dLaCLONY9b59oWEgLMB11yFgT3GRBhHLv4XKfiQciGMpgIP3udxMZBp 5Rreme1sdLIJS6oWh+2BXTDKeVuY8OFk2/juMoOnZqjAPmqDS7HFbbNwXbO0a02E qit8tWUzBqCukw== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:50 2026 by rpki-client