This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft File: oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json) Hash identifier: /RXjb/T0+eWf8P6UgpGtszJ3E4O9JM6INT9bvPVNPZI= Subject key identifier: 40:81:64:8F:AA:7D:B1:BF:03:E6:61:31:33:66:83:E7:D8:6F:2F:A1 Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d Certificate serial: 019BF6F556E47F7B16A66F79AEE0CEDCA354 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 21:00:32 +0000 Manifest this update: Sun 25 Jan 2026 21:00:32 +0000 Manifest next update: Mon 26 Jan 2026 21:00:32 +0000 Files and hashes: 1: iwdbfX3VeEC-dJ7spuyrMGzAZEA.roa (hash: rGk72/1YdyFUc4NyU+VKerIA+XWmcskQTcATzTBlTBs=) 2: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: ADNQ8CwuQSWZeET7HBR7HaZk/RPsyoqeuYElpqRWvoc=) 3: sLLmkteo_FcFXMtUJhw6fFKVofY.roa (hash: a9XJ/mxkvDOm7bLMm8792DO+WjUzGL25z/Umu2rG3g8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:56:e4:7f:7b:16:a6:6f:79:ae:e0:ce:dc:a3:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d Validity Not Before: Jan 25 21:00:32 2026 GMT Not After : Jan 26 21:00:32 2026 GMT Subject: CN=4081648faa7db1bf03e66131336683e7d86f2fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4c:9c:06:e1:3c:37:de:6a:4d:6a:8a:6b:6d: 86:ad:29:b6:c5:c6:0b:13:bd:6a:ee:9d:57:5e:9a: e7:4f:82:86:67:17:9c:9f:b8:8c:40:ef:34:57:b7: a5:07:27:85:1a:f1:0d:9d:00:96:39:20:c1:e4:c0: 62:57:0d:75:59:67:3e:24:01:18:e7:e5:91:22:42: de:72:50:2b:63:cd:34:b2:33:b0:df:45:ce:d7:13: 42:cc:f6:3f:de:0d:15:79:57:3f:39:f2:af:c5:e6: 0a:a2:5a:4f:70:f5:d7:46:a1:16:45:69:40:6d:8a: 06:18:bb:a6:a2:f9:c0:b7:89:8b:af:38:da:98:1f: 41:c3:05:b5:e0:8a:39:fe:0c:76:79:d0:8c:84:a9: 21:a1:f8:1e:88:44:68:5e:29:0b:02:6d:4f:5c:03: c4:b3:86:a6:67:83:35:56:9a:97:ef:04:32:15:95: c0:d8:55:b8:98:25:96:9a:c4:45:db:04:78:17:d9: 66:04:82:1a:6a:cd:c1:43:54:58:af:44:fa:21:78: 58:15:51:e4:8c:dc:82:32:56:30:35:47:a8:ee:35: 5c:24:19:d1:16:db:bb:c2:4d:85:58:e4:64:db:a7: 17:45:58:39:02:e0:2e:be:15:63:af:a0:09:06:f3: 69:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:81:64:8F:AA:7D:B1:BF:03:E6:61:31:33:66:83:E7:D8:6F:2F:A1 X509v3 Authority Key Identifier: keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ae:69:0d:2f:ef:18:ee:bd:75:da:31:d2:72:18:84:70:e0: f9:71:8f:67:69:ce:53:79:5c:8b:31:1e:30:8c:7f:b6:bc:ec: 6c:1d:f3:6b:64:70:06:4b:bc:5d:7c:d5:bb:5f:4d:76:2b:f8: 45:8c:f5:cb:3e:fc:96:69:49:2b:97:6a:d5:28:40:4d:09:67: 59:cb:93:06:23:98:cc:cb:07:bd:f2:95:90:07:f3:5e:c0:dc: 27:7b:61:35:4e:69:b4:df:0a:db:23:61:0c:66:53:c5:31:71: 96:52:d9:9d:f5:9f:f8:22:70:48:aa:97:44:0a:bd:ee:8d:a3: ea:a3:4a:21:c8:d9:6b:dd:71:dc:f4:cd:5e:1d:63:33:b0:bd: 4b:43:1e:8d:5c:eb:45:d4:f6:3d:99:93:56:44:db:aa:bb:f0: 90:31:8f:2f:7b:d5:a3:18:63:f7:88:b5:70:96:e9:99:87:bf: ad:8d:bd:10:9e:3b:cb:bf:ed:ce:eb:8a:0e:a4:f2:c1:b1:3b: 00:32:50:5f:1b:5d:34:38:9a:e1:5e:d4:7f:50:60:28:f7:19: 9f:02:a0:d4:8c:69:13:ec:48:0b:c8:e5:58:b3:25:e4:f6:6b: a3:5c:a6:44:6c:f9:5f:b4:93:e9:dc:80:80:98:52:90:aa:a9: e1:96:c5:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29Vbkf3sWpm95ruDO3KNUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYmIxNzE4OTYzZGRkOTEyOGI3NmZkM2Q4MjEzYTE1NjVl Zjg1NmQwHhcNMjYwMTI1MjEwMDMyWhcNMjYwMTI2MjEwMDMyWjAzMTEwLwYDVQQD Eyg0MDgxNjQ4ZmFhN2RiMWJmMDNlNjYxMzEzMzY2ODNlN2Q4NmYyZmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EycBuE8N95qTWqKa22GrSm2xcYL E71q7p1XXprnT4KGZxecn7iMQO80V7elByeFGvENnQCWOSDB5MBiVw11WWc+JAEY 5+WRIkLeclArY800sjOw30XO1xNCzPY/3g0VeVc/OfKvxeYKolpPcPXXRqEWRWlA bYoGGLumovnAt4mLrzjamB9BwwW14Io5/gx2edCMhKkhofgeiERoXikLAm1PXAPE s4amZ4M1VpqX7wQyFZXA2FW4mCWWmsRF2wR4F9lmBIIaas3BQ1RYr0T6IXhYFVHk jNyCMlYwNUeo7jVcJBnRFtu7wk2FWORk26cXRVg5AuAuvhVjr6AJBvNpiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECBZI+qfbG/A+ZhMTNmg+fYby+hMB8GA1UdIwQY MBaAFKC7FxiWPd2RKLdv09ghOhVl74VtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0xzWEdKWTkzWkVvdDJfVDJDRTZGV1h2aFcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jNDIxMGUtOTBkZS00ZWNhLTgyMDYt NTUzN2Q4NWQyYmQwLzEvb0xzWEdKWTkzWkVvdDJfVDJDRTZGV1h2aFcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9jNDIxMGUtOTBkZS00ZWNhLTgyMDYtNTUzN2Q4NWQyYmQw LzEvb0xzWEdKWTkzWkVvdDJfVDJDRTZGV1h2aFcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdq5pDS/v GO69ddox0nIYhHDg+XGPZ2nOU3lcizEeMIx/trzsbB3za2RwBku8XXzVu19Ndiv4 RYz1yz78lmlJK5dq1ShATQlnWcuTBiOYzMsHvfKVkAfzXsDcJ3thNU5ptN8K2yNh DGZTxTFxllLZnfWf+CJwSKqXRAq97o2j6qNKIcjZa91x3PTNXh1jM7C9S0MejVzr RdT2PZmTVkTbqrvwkDGPL3vVoxhj94i1cJbpmYe/rY29EJ47y7/tzuuKDqTywbE7 ADJQXxtdNDia4V7Uf1BgKPcZnwKg1IxpE+xIC8jlWLMl5PZro1ymRGz5X7ST6dyA gJhSkKqp4ZbFmw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:36 2026 by rpki-client