This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft File: OspQhYoYVv-gLpE1bxQjbnw4uFo.mft (raw, json) Hash identifier: Re/SoJSKjsITcg1BfcWN3vcknaIIdm7kGE2qqLEkI9s= Subject key identifier: DA:F1:49:F0:B2:A5:D5:BC:38:76:9D:85:A3:55:BC:04:22:C5:74:9F Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A Certificate issuer: /CN=3aca50858a1856ffa02e91356f14236e7c38b85a Certificate serial: 019BF5E387FF0F6F5CC81A79D207A8E6D0CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft Manifest number: 17F2 Signing time: Sun 25 Jan 2026 16:01:27 +0000 Manifest this update: Sun 25 Jan 2026 16:01:27 +0000 Manifest next update: Mon 26 Jan 2026 16:01:27 +0000 Files and hashes: 1: 1-Kbt04jrxWC8fOlk1tBjawSZ5wg.roa (hash: 0SuBxS+MypW7tQqS+Vd164UE3Mog6uZxtvRyTqxyy2g=) 2: 8GBhK3bVlRQOFAtixnhblw9dtz0.roa (hash: Elx4FHBwVZYgkm1JIeK2z2bzVgpOiK+svowb8d+03qs=) 3: M3vHCHT8MYq7bsVbbMiGgchbam8.roa (hash: Vt7ldpmQRkv3Kb6ff/P1S+oxu1usav3SKm+fK1JHXSY=) 4: OspQhYoYVv-gLpE1bxQjbnw4uFo.crl (hash: QLi46lMafj5M3KauNUZceYUAywyizNKOyGvOxfNvQN0=) 5: UWAb0Mm5ky6mNvfi8l5lub5PcCw.roa (hash: rcYFsRpcKR+N5ImKsmiN6lJZFUsiQQePgWTGn6uyHLE=) 6: gN7oLamPRPMjPSwPSMvoNLq_dFQ.asa (hash: qLlK7kYrvgqNdvLdGkjuKmzCcNXL51g9eu+D1a6NcGY=) 7: uZTTho6XgSigY6M7r_D1NX2DLSQ.roa (hash: ivw0GUSdmhcgSVLXWkL84Xd3MeIdECHj+xV2zfbtO/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:87:ff:0f:6f:5c:c8:1a:79:d2:07:a8:e6:d0:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a Validity Not Before: Jan 25 16:01:27 2026 GMT Not After : Jan 26 16:01:27 2026 GMT Subject: CN=daf149f0b2a5d5bc38769d85a355bc0422c5749f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d7:ed:4c:db:c6:ea:07:47:b2:d1:dc:90:8e: b5:40:67:92:57:f0:34:6d:58:ea:4b:fc:e9:65:eb: ea:0a:c0:16:25:5d:03:dc:3a:a0:f7:d1:15:ca:39: f5:e5:d4:0e:18:5b:f4:19:a3:8e:88:9e:7a:ca:95: 12:df:cf:9c:48:3d:d7:34:90:9e:a5:95:0e:ee:6d: f2:aa:55:0f:c0:4f:8b:e5:b5:08:1c:31:47:5d:bf: 7c:9d:e1:f2:c2:9f:01:e8:95:61:5e:94:cf:67:82: f2:0c:4d:fe:f9:6a:56:02:47:d3:71:53:f7:54:78: de:81:93:2e:2b:6b:d4:a7:ed:39:d9:2c:fc:e9:92: 64:25:0f:38:28:1a:ed:2c:9b:5f:40:3a:71:f6:03: 15:2d:72:8f:3a:7d:ff:76:0b:20:d6:f1:cb:76:ad: c4:9a:54:65:57:f3:a6:50:89:c9:ee:33:a9:81:18: cd:21:4b:88:3e:ec:bb:77:ac:08:35:5b:9f:94:8d: 3e:a5:ea:7a:72:c0:86:f8:d8:15:44:ce:0c:cf:98: ee:3d:1b:8f:84:ef:19:2c:42:48:2e:f4:56:4e:52: a9:44:54:76:39:83:34:a6:61:18:fc:81:79:c1:10: 4d:ca:05:8f:8b:f8:3b:1e:97:ef:5c:ec:b8:79:b9: b5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F1:49:F0:B2:A5:D5:BC:38:76:9D:85:A3:55:BC:04:22:C5:74:9F X509v3 Authority Key Identifier: keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:a7:74:3d:71:a4:57:46:32:e0:14:10:f0:c2:78:e1:df:cb: 27:3c:8e:4d:71:e9:85:02:68:85:d0:af:8b:e5:ff:cc:89:ba: a9:cd:65:03:72:4f:89:f5:f7:11:cd:ea:f1:f4:b7:08:4a:42: 07:48:db:d0:d8:10:34:7f:9f:61:df:b2:f8:fc:da:e2:3d:e9: d1:3c:5a:c3:a9:ca:28:e0:3b:33:49:2b:3d:2c:ec:33:60:58: 7d:5a:ba:5b:37:e7:44:24:94:f8:cf:37:fa:fa:54:80:af:9c: f7:69:4a:a1:12:dd:d9:a2:a3:2c:bd:63:40:05:75:d7:e1:7f: 6f:77:5f:e8:f7:17:f5:29:c1:84:49:81:fe:3f:f1:84:98:28: 74:26:19:f6:df:6a:82:05:97:01:14:36:32:07:a1:1b:d4:dd: 01:f1:7b:5f:a6:11:bc:c8:23:a5:11:bd:6b:9a:28:62:51:5e: b4:56:47:b3:80:b0:12:88:a4:49:c6:f4:fd:05:42:8a:59:0f: 07:fd:ad:d3:bc:c4:9e:81:8d:18:61:9e:1f:e4:e2:ce:16:89: 5c:fa:c5:b5:16:e4:b9:ba:b7:4d:7e:69:d7:8f:9d:d1:30:6e: 1a:22:eb:b4:45:8e:04:6b:3d:b1:79:06:77:aa:85:ca:c5:51: 76:db:7a:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv144f/D29cyBp50geo5tDMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhY2E1MDg1OGExODU2ZmZhMDJlOTEzNTZmMTQyMzZlN2Mz OGI4NWEwHhcNMjYwMTI1MTYwMTI3WhcNMjYwMTI2MTYwMTI3WjAzMTEwLwYDVQQD EyhkYWYxNDlmMGIyYTVkNWJjMzg3NjlkODVhMzU1YmMwNDIyYzU3NDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtftTNvG6gdHstHckI61QGeSV/A0 bVjqS/zpZevqCsAWJV0D3Dqg99EVyjn15dQOGFv0GaOOiJ56ypUS38+cSD3XNJCe pZUO7m3yqlUPwE+L5bUIHDFHXb98neHywp8B6JVhXpTPZ4LyDE3++WpWAkfTcVP3 VHjegZMuK2vUp+052Sz86ZJkJQ84KBrtLJtfQDpx9gMVLXKPOn3/dgsg1vHLdq3E mlRlV/OmUInJ7jOpgRjNIUuIPuy7d6wINVuflI0+pep6csCG+NgVRM4Mz5juPRuP hO8ZLEJILvRWTlKpRFR2OYM0pmEY/IF5wRBNygWPi/g7HpfvXOy4ebm14wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrxSfCypdW8OHadhaNVvAQixXSfMB8GA1UdIwQY MBaAFDrKUIWKGFb/oC6RNW8UI258OLhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEt MzMxZDdmYzc3YmQ0LzEvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEtMzMxZDdmYzc3YmQ0 LzEvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIad0PXGk V0Yy4BQQ8MJ44d/LJzyOTXHphQJohdCvi+X/zIm6qc1lA3JPifX3Ec3q8fS3CEpC B0jb0NgQNH+fYd+y+Pza4j3p0Txaw6nKKOA7M0krPSzsM2BYfVq6WzfnRCSU+M83 +vpUgK+c92lKoRLd2aKjLL1jQAV11+F/b3df6PcX9SnBhEmB/j/xhJgodCYZ9t9q ggWXARQ2MgehG9TdAfF7X6YRvMgjpRG9a5ooYlFetFZHs4CwEoikScb0/QVCilkP B/2t07zEnoGNGGGeH+TizhaJXPrFtRbkubq3TX5p14+d0TBuGiLrtEWOBGs9sXkG d6qFysVRdtt6aA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:44 2026 by rpki-client