This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft File: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft (raw, json) Hash identifier: fssFoIhZ9CyZeXGI+NIYR14ut1X8jUzPHO8xvDlH8iI= Subject key identifier: B2:C0:88:F2:A7:CC:60:F2:BA:54:5E:4E:B9:1F:BA:CA:15:77:F9:35 Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38 Certificate issuer: /CN=a088b0547f09fe9224050d70a523da5bedbe0738 Certificate serial: 019BF34FBEA556B0844FA3D410383C75D0B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft Manifest number: 0BC5 Signing time: Sun 25 Jan 2026 04:00:48 +0000 Manifest this update: Sun 25 Jan 2026 04:00:48 +0000 Manifest next update: Mon 26 Jan 2026 04:00:48 +0000 Files and hashes: 1: 04FbY6kBRpqiGP3AkiBuCWu5Bes.roa (hash: HoNtS+1Oc+MT8EGjXP3z2c8KS6IAUrdzH1rtxmawMCg=) 2: cbaJKNAhgJAhFE_4zoZbKJm5V5s.roa (hash: Rcxed2Cw/y7WBNPlRsNkcmXlhqGDs0w++1hNx6Mbo5U=) 3: oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl (hash: d7p2rzAumTUlt93m1p1jeoig1sudFXZH2niWPwpU8I8=) 4: uUoKvpcOk1MN1N-RCShYaCzs_Ms.roa (hash: kQd1YigGHb1xiD3rBDQj/Z4qQiqNkv9K2U3Hpfudh9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:be:a5:56:b0:84:4f:a3:d4:10:38:3c:75:d0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738 Validity Not Before: Jan 25 04:00:48 2026 GMT Not After : Jan 26 04:00:48 2026 GMT Subject: CN=b2c088f2a7cc60f2ba545e4eb91fbaca1577f935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:05:80:d3:53:c8:26:60:50:51:57:4c:a9:90: 7b:02:0b:63:51:1d:f1:6a:6c:cd:3e:07:b8:77:73: de:6f:0f:79:23:57:f4:a9:cb:0f:58:ce:4f:75:92: bf:d5:ce:40:b3:9e:e8:21:92:d9:af:2c:5b:d8:e7: 0a:38:0f:1c:84:1d:df:ef:be:82:03:fe:f3:4a:4e: 4a:0b:0e:30:dd:27:d8:73:3d:49:d0:22:da:ab:f9: 7b:f9:a8:8d:0b:17:e4:c0:69:d6:2c:47:c9:43:75: 49:ac:86:0a:34:b5:f7:43:1b:83:00:23:f8:c4:f5: 4d:31:9a:ac:a8:d2:27:5a:f8:6a:fe:a5:b8:79:ab: de:c2:9f:10:5a:b5:16:a8:ed:63:b8:84:2e:3e:9f: b9:fb:ff:dd:18:66:6c:64:ad:17:06:b3:37:c0:6b: c8:5e:7f:bc:e0:78:82:5b:28:15:64:d1:c8:b3:fc: 6b:c6:0e:f0:ab:14:65:c8:41:56:cc:78:48:1e:60: 60:0e:ea:a6:d5:df:49:a5:fa:ce:b2:f0:1c:1b:6e: e0:dd:43:d2:ba:5d:3e:93:26:e1:cd:a2:96:96:dd: 65:9b:33:80:1f:4f:77:f8:57:54:80:d1:f5:be:a3: c9:65:12:50:4c:2f:38:b0:0d:11:32:b3:77:0a:86: d4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C0:88:F2:A7:CC:60:F2:BA:54:5E:4E:B9:1F:BA:CA:15:77:F9:35 X509v3 Authority Key Identifier: keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:67:ee:7f:b6:93:26:1a:7a:6b:6c:3a:65:0f:c7:bc:17:4f: e9:f3:af:67:4f:92:ae:7e:eb:dd:b6:37:1e:0e:20:1d:cd:fc: 02:3d:9a:81:6e:e1:a5:aa:2d:6e:0c:6f:7b:c2:da:56:5b:a9: a9:02:15:99:f2:e4:c2:0f:26:55:71:2d:62:77:fb:5e:35:f8: da:63:bc:cd:e4:f6:84:3f:a4:e0:06:41:7b:53:e8:fe:4b:a0: c0:2f:60:52:68:8b:54:80:de:0e:d7:7f:55:8b:a7:d3:19:cd: 5f:8e:77:10:22:40:39:aa:e2:79:10:d9:c0:d8:16:cd:3c:40: 36:ae:77:aa:79:5c:18:fd:01:b7:68:8f:68:1e:e1:f9:5a:a8: 38:c3:c3:ec:ec:c5:ab:47:2d:33:c6:ac:b3:e1:15:75:7a:54: fb:85:81:6d:4f:29:a2:c7:c0:2c:50:63:1d:fc:ea:c3:92:ce: f8:b4:15:fc:54:a4:70:76:ae:ca:eb:f3:90:bf:52:f4:1d:dd: f5:e9:cf:3f:b1:37:1b:44:62:3c:7f:5c:f3:7c:2d:9e:d0:9f: 39:32:45:2a:d5:c1:0b:94:07:a7:93:44:c5:9e:37:85:8d:4c: a6:e4:e9:47:3c:72:38:eb:47:89:cb:0e:eb:9a:42:09:46:72: e5:7c:38:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT76lVrCET6PUEDg8ddCwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwODhiMDU0N2YwOWZlOTIyNDA1MGQ3MGE1MjNkYTViZWRi ZTA3MzgwHhcNMjYwMTI1MDQwMDQ4WhcNMjYwMTI2MDQwMDQ4WjAzMTEwLwYDVQQD EyhiMmMwODhmMmE3Y2M2MGYyYmE1NDVlNGViOTFmYmFjYTE1NzdmOTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwWA01PIJmBQUVdMqZB7AgtjUR3x amzNPge4d3Pebw95I1f0qcsPWM5PdZK/1c5As57oIZLZryxb2OcKOA8chB3f776C A/7zSk5KCw4w3SfYcz1J0CLaq/l7+aiNCxfkwGnWLEfJQ3VJrIYKNLX3QxuDACP4 xPVNMZqsqNInWvhq/qW4eavewp8QWrUWqO1juIQuPp+5+//dGGZsZK0XBrM3wGvI Xn+84HiCWygVZNHIs/xrxg7wqxRlyEFWzHhIHmBgDuqm1d9JpfrOsvAcG27g3UPS ul0+kybhzaKWlt1lmzOAH093+FdUgNH1vqPJZRJQTC84sA0RMrN3CobU1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLAiPKnzGDyulReTrkfusoVd/k1MB8GA1UdIwQY MBaAFKCIsFR/Cf6SJAUNcKUj2lvtvgc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMt ZGY4MmZhODk3MzI2LzEvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMtZGY4MmZhODk3MzI2 LzEvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGfuf7aT Jhp6a2w6ZQ/HvBdP6fOvZ0+Srn7r3bY3Hg4gHc38Aj2agW7hpaotbgxve8LaVlup qQIVmfLkwg8mVXEtYnf7XjX42mO8zeT2hD+k4AZBe1Po/kugwC9gUmiLVIDeDtd/ VYun0xnNX453ECJAOarieRDZwNgWzTxANq53qnlcGP0Bt2iPaB7h+VqoOMPD7OzF q0ctM8ass+EVdXpU+4WBbU8posfALFBjHfzqw5LO+LQV/FSkcHauyuvzkL9S9B3d 9enPP7E3G0RiPH9c83wtntCfOTJFKtXBC5QHp5NExZ43hY1MpuTpRzxyOOtHicsO 65pCCUZy5Xw4mQ== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:40 2026 by rpki-client