This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft File: OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft (raw, json) Hash identifier: aDF29NB+99I8fLOEkToDD4RcxISqnPaGFPg3lO8cuX4= Subject key identifier: 12:B7:D3:93:58:0A:CF:FE:4E:FC:A4:24:FA:BA:BE:9C:AD:FB:E8:58 Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40 Certificate issuer: /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040 Certificate serial: 019BF574DB4BB13F9A09686227CA51DF6FED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft Manifest number: 085C Signing time: Sun 25 Jan 2026 14:00:34 +0000 Manifest this update: Sun 25 Jan 2026 14:00:34 +0000 Manifest next update: Mon 26 Jan 2026 14:00:34 +0000 Files and hashes: 1: HsES3beeVskG3iQcc6xV4E3VNgU.roa (hash: 9DQDSN5ehI0ToqCW5TSIeQDcZ9d/UApN36lln/HMjAg=) 2: OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl (hash: /XhchocsxRfFsxISwsoVR4CfRln7yCHY9jmQAdeH548=) 3: vaYIteS5igEIIJAvOFUUxlbL9iw.roa (hash: FZNQU0LvtoOoER0joQEpoEINbntZYjJgCFYakf2fGAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:db:4b:b1:3f:9a:09:68:62:27:ca:51:df:6f:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040 Validity Not Before: Jan 25 14:00:34 2026 GMT Not After : Jan 26 14:00:34 2026 GMT Subject: CN=12b7d393580acffe4efca424fababe9cadfbe858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:10:8d:d0:97:10:f9:9b:c1:5c:e5:60:b7:51: 36:33:3e:20:d4:66:78:01:6d:4f:6e:11:bd:b7:b6: e0:80:de:c6:81:98:4c:c5:2a:d8:a5:b6:50:dd:5f: 52:16:89:2b:6d:10:50:db:ac:18:78:b9:06:d3:e1: 45:4d:2d:ad:18:13:f7:ee:17:ea:cf:1f:52:1b:39: fa:8a:a1:06:ff:29:8b:b1:71:b6:ac:cd:23:b2:fb: 4c:42:04:db:8a:4c:8c:9d:31:ab:f0:4f:92:c5:45: 0a:05:5c:90:d5:f2:5d:ff:32:58:e7:7e:2b:0e:b1: 95:70:41:48:d3:1c:98:69:44:80:3e:1e:d1:aa:59: 93:23:18:9e:21:75:50:8b:fd:ca:1e:7f:a1:ca:de: d1:43:48:02:af:55:4b:33:2d:76:31:eb:60:73:17: 78:6d:1a:77:30:17:3b:0b:d8:6b:36:22:14:bb:99: 44:ad:46:62:42:5f:20:e5:8b:7e:08:39:82:56:d7: f3:89:42:81:e9:72:96:67:89:b8:5f:dc:77:88:a0: f1:56:0b:43:67:f2:8c:c7:a5:81:55:e8:fa:30:38: f2:f4:0b:cc:75:3e:c8:68:01:8e:09:90:ab:6e:5c: 07:77:81:ac:a8:3b:48:7e:36:bd:0e:c4:a8:eb:32: c6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B7:D3:93:58:0A:CF:FE:4E:FC:A4:24:FA:BA:BE:9C:AD:FB:E8:58 X509v3 Authority Key Identifier: keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a2:ba:22:62:3d:7d:bf:30:fb:78:20:17:4e:a8:ad:51:53: 66:0e:d1:65:33:68:8c:15:e0:f6:dd:af:ed:76:80:53:b9:4f: 0d:02:b6:10:ea:99:63:ae:68:dd:96:6d:9e:0a:7f:8a:03:2b: 10:b7:30:a4:78:35:9c:9f:88:ad:ba:5a:f3:d4:f2:3e:09:b2: 0a:cd:23:91:ed:ad:71:d2:e1:e3:4c:e0:3f:7a:f5:a0:4d:5c: 8c:72:af:32:f9:12:b4:f9:9e:20:95:2e:f5:74:a5:7c:a1:3a: 64:cb:b2:18:9e:6f:fb:2c:bb:41:2f:ec:b4:61:4b:21:d7:6f: d9:fa:1b:a2:21:8c:1c:62:49:a5:9d:45:3a:8d:d9:32:4b:2b: b1:21:a5:5a:b4:40:5a:e2:c5:1a:8a:d4:c6:14:ea:e8:26:d6: e4:c9:86:d1:d7:5f:e5:1d:b9:4e:6a:d9:cf:67:b7:e6:35:9f: 6e:d3:79:a6:36:d7:c0:2e:c7:57:db:98:df:bd:a3:79:82:da: 6a:7e:2d:6e:0d:8e:92:8e:ab:14:61:6b:40:1a:84:f6:6f:dd: 32:47:ce:44:4a:47:40:5f:37:30:90:11:9d:6a:0b:ab:bf:a8: ba:31:e9:52:b5:1b:d7:fa:b4:18:55:72:8f:a2:4a:ea:47:fe: 8f:0b:80:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dNtLsT+aCWhiJ8pR32/tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMGJmMThkNmJiZGIzM2RhODJmZTYxYTI4NjI0YmE3MmUy MzUwNDAwHhcNMjYwMTI1MTQwMDM0WhcNMjYwMTI2MTQwMDM0WjAzMTEwLwYDVQQD EygxMmI3ZDM5MzU4MGFjZmZlNGVmY2E0MjRmYWJhYmU5Y2FkZmJlODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhCN0JcQ+ZvBXOVgt1E2Mz4g1GZ4 AW1PbhG9t7bggN7GgZhMxSrYpbZQ3V9SFokrbRBQ26wYeLkG0+FFTS2tGBP37hfq zx9SGzn6iqEG/ymLsXG2rM0jsvtMQgTbikyMnTGr8E+SxUUKBVyQ1fJd/zJY534r DrGVcEFI0xyYaUSAPh7RqlmTIxieIXVQi/3KHn+hyt7RQ0gCr1VLMy12Metgcxd4 bRp3MBc7C9hrNiIUu5lErUZiQl8g5Yt+CDmCVtfziUKB6XKWZ4m4X9x3iKDxVgtD Z/KMx6WBVej6MDjy9AvMdT7IaAGOCZCrblwHd4GsqDtIfja9DsSo6zLGjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBK305NYCs/+TvykJPq6vpyt++hYMB8GA1UdIwQY MBaAFDsL8Y1rvbM9qC/mGihiS6cuI1BAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81ZGRlZTktYzFjNC00YjU3LWI2Yjgt ZDQ5OTE2YjVmMmI0LzEvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS81ZGRlZTktYzFjNC00YjU3LWI2YjgtZDQ5OTE2YjVmMmI0 LzEvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6K6ImI9 fb8w+3ggF06orVFTZg7RZTNojBXg9t2v7XaAU7lPDQK2EOqZY65o3ZZtngp/igMr ELcwpHg1nJ+Irbpa89TyPgmyCs0jke2tcdLh40zgP3r1oE1cjHKvMvkStPmeIJUu 9XSlfKE6ZMuyGJ5v+yy7QS/stGFLIddv2foboiGMHGJJpZ1FOo3ZMksrsSGlWrRA WuLFGorUxhTq6CbW5MmG0ddf5R25TmrZz2e35jWfbtN5pjbXwC7HV9uY372jeYLa an4tbg2Oko6rFGFrQBqE9m/dMkfOREpHQF83MJARnWoLq7+oujHpUrUb1/q0GFVy j6JK6kf+jwuAnA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:23:26 2026 by rpki-client