This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft File: Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft (raw, json) Hash identifier: w0F51dtLPsWBHvFTuVMLVFHY93ukVxD+rHEDdpSUris= Subject key identifier: C8:BD:4E:58:40:70:4A:7E:47:F5:14:50:B5:BB:DF:ED:98:89:76:68 Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD Certificate issuer: /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd Certificate serial: 019BF2E1FC2A0D8C47559A888F6ECAB34585 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft Manifest number: 12A5 Signing time: Sun 25 Jan 2026 02:00:55 +0000 Manifest this update: Sun 25 Jan 2026 02:00:55 +0000 Manifest next update: Mon 26 Jan 2026 02:00:55 +0000 Files and hashes: 1: E3hclPoCfULnUQVutKtdRHUpQ8s.roa (hash: /y2Ss9W2+m/1m/m+rDFotiDS44LnxJlrOW7rMJW05NM=) 2: JaqR-Q1XpvizwsvI-kPY47fRqMs.roa (hash: gzQ9Ftm7Gk050dXtwRWunltOfemqcE+EB8R+/Ghu8FE=) 3: Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl (hash: XcNZ8suGyZ/yo7fbK+Eske6MC727YN5O5JPmB1jeB/A=) 4: ZyJM5BuiXRdQwp8CTGPeW7hXFhQ.roa (hash: sJFYdvfIFI7XLe3RcotKCLHPJQZ5SZe+aPUoxKb9ID4=) 5: lyRXIvB-zm4H5fi5XUDSXwMzWYk.roa (hash: PP50Q9MOjUz3zniPrlR3x+kz4+woEcIafSr6taXbTAk=) 6: we-SEQd2_l9Zpg-2tN7F8p4zsWk.roa (hash: Fpbi2Su7cJXvhkx547lh3MjiKMeyoIaouwFW2rjVmE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e1:fc:2a:0d:8c:47:55:9a:88:8f:6e:ca:b3:45:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd Validity Not Before: Jan 25 02:00:55 2026 GMT Not After : Jan 26 02:00:55 2026 GMT Subject: CN=c8bd4e5840704a7e47f51450b5bbdfed98897668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e7:7d:98:2d:d7:9c:30:d5:0c:3d:7e:1a:52: 4d:b8:84:5c:38:1a:98:97:38:29:10:1f:8a:62:f0: bd:fb:8c:94:e7:3e:03:bd:cc:87:07:5f:83:21:ce: 92:a3:8c:9a:44:e1:48:d1:b9:18:bf:38:cc:1c:9c: 4a:d2:40:fc:81:cc:90:55:50:58:21:17:ae:6b:f2: c7:8c:58:8d:3b:0d:a2:5e:c1:60:0f:32:ec:22:ab: b4:e8:aa:53:12:8a:45:25:f8:a9:f5:46:ce:dc:72: f9:86:ec:fb:7a:fe:db:8f:9f:1f:b1:fd:5a:e4:e1: eb:15:d6:9b:03:56:1a:55:de:90:ce:ef:7e:d3:40: fc:91:34:16:da:bc:b8:ab:77:70:a6:e8:7b:3b:7b: 30:9d:b4:08:05:34:b0:22:a9:a9:ba:f8:5e:84:8f: 1e:48:a0:eb:e7:4d:34:1b:c4:2b:59:53:a7:03:8e: 7e:c3:18:f0:3b:96:1e:6e:e1:dc:32:f3:a7:40:88: 0a:e3:3b:43:be:11:45:2c:bf:9e:40:05:89:51:8d: bb:e1:3e:21:fa:12:2f:5c:5c:1e:48:7d:e4:b2:ad: 4f:dc:08:5c:47:00:7c:65:9e:3f:7f:8c:18:2a:7b: ff:7f:c9:fb:03:b1:30:cb:64:5d:5f:a1:b1:3d:ac: 83:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BD:4E:58:40:70:4A:7E:47:F5:14:50:B5:BB:DF:ED:98:89:76:68 X509v3 Authority Key Identifier: keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:59:60:41:e5:fc:e8:a0:7c:14:da:65:5d:8b:f3:47:32:c8: 81:0c:c9:79:38:e9:9e:01:0e:c8:b7:55:9c:85:17:f9:63:b3: 46:8b:3f:06:c0:f2:0f:ff:e5:4c:41:a2:92:b8:bb:c1:81:2d: 24:ee:51:4f:33:2e:9f:52:29:5f:b2:0b:35:8d:6f:61:25:ed: 2e:98:f6:32:30:08:97:4e:b3:07:3c:10:2e:62:e1:52:be:be: d4:44:5b:cd:bb:43:20:cb:0e:f4:cd:3a:12:45:6f:f6:63:2d: 6e:b4:cd:f7:8f:f7:f6:7a:da:40:94:26:4e:43:9a:79:25:7a: eb:90:73:39:e9:67:9c:18:4f:b2:54:e9:5d:3d:c5:6a:1d:69: 63:c5:07:a7:6b:2a:08:45:9e:95:98:3c:e4:f8:43:47:37:8c: fe:15:11:23:27:ce:99:2a:bf:2c:90:bf:e5:19:de:a7:63:7f: f4:ba:04:30:f4:32:bf:fe:2d:02:d8:e4:da:6d:4c:f9:64:1e: c9:f5:38:60:49:a9:8f:dc:ca:f5:f5:2a:69:63:da:f7:65:7d: 3f:de:10:c7:a0:5b:14:92:66:3e:a1:d6:82:19:68:9e:3a:6f: 2c:a9:af:7c:af:19:90:1d:a8:68:d6:35:11:c8:a0:1a:68:5a: 7c:d2:e8:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4fwqDYxHVZqIj27Ks0WFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNWVjMjhlODQxZjI5ZjM4MGE3Y2UyY2I1Y2Q1NjczNzAw ODIxZmQwHhcNMjYwMTI1MDIwMDU1WhcNMjYwMTI2MDIwMDU1WjAzMTEwLwYDVQQD EyhjOGJkNGU1ODQwNzA0YTdlNDdmNTE0NTBiNWJiZGZlZDk4ODk3NjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmed9mC3XnDDVDD1+GlJNuIRcOBqY lzgpEB+KYvC9+4yU5z4DvcyHB1+DIc6So4yaROFI0bkYvzjMHJxK0kD8gcyQVVBY IReua/LHjFiNOw2iXsFgDzLsIqu06KpTEopFJfip9UbO3HL5huz7ev7bj58fsf1a 5OHrFdabA1YaVd6Qzu9+00D8kTQW2ry4q3dwpuh7O3swnbQIBTSwIqmpuvhehI8e SKDr5000G8QrWVOnA45+wxjwO5YebuHcMvOnQIgK4ztDvhFFLL+eQAWJUY274T4h +hIvXFweSH3ksq1P3AhcRwB8ZZ4/f4wYKnv/f8n7A7Ewy2RdX6GxPayDdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMi9TlhAcEp+R/UUULW73+2YiXZoMB8GA1UdIwQY MBaAFDpewo6EHynzgKfOLLXNVnNwCCH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2w3Q2pvUWZLZk9BcDg0c3RjMVdjM0FJSWYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jMTIwMjAtYTFhMS00MDBlLTkxZjMt ODM1NTk5MjYwZmY2LzEvT2w3Q2pvUWZLZk9BcDg0c3RjMVdjM0FJSWYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9jMTIwMjAtYTFhMS00MDBlLTkxZjMtODM1NTk5MjYwZmY2 LzEvT2w3Q2pvUWZLZk9BcDg0c3RjMVdjM0FJSWYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfllgQeX8 6KB8FNplXYvzRzLIgQzJeTjpngEOyLdVnIUX+WOzRos/BsDyD//lTEGikri7wYEt JO5RTzMun1IpX7ILNY1vYSXtLpj2MjAIl06zBzwQLmLhUr6+1ERbzbtDIMsO9M06 EkVv9mMtbrTN94/39nraQJQmTkOaeSV665BzOelnnBhPslTpXT3Fah1pY8UHp2sq CEWelZg85PhDRzeM/hURIyfOmSq/LJC/5Rnep2N/9LoEMPQyv/4tAtjk2m1M+WQe yfU4YEmpj9zK9fUqaWPa92V9P94Qx6BbFJJmPqHWghlonjpvLKmvfK8ZkB2oaNY1 EcigGmhafNLogA== -----END CERTIFICATE-----Generated at Sun Jan 25 05:40:16 2026 by rpki-client