This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft File: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft (raw, json) Hash identifier: dCJBKXTS2DBIpK4uz9wpjJlow/IqlOp8q56k8Vyp+RM= Subject key identifier: F8:92:6B:4F:A2:AC:31:EB:B8:9A:8B:C4:05:9A:88:7D:D8:7D:ED:A9 Authority key identifier: BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB Certificate issuer: /CN=bf7a0258a521e99d213fb30e79667e584e37c7db Certificate serial: 019BF53E032B67091F6451626115F20E1800 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft Manifest number: 071E Signing time: Sun 25 Jan 2026 13:00:40 +0000 Manifest this update: Sun 25 Jan 2026 13:00:40 +0000 Manifest next update: Mon 26 Jan 2026 13:00:40 +0000 Files and hashes: 1: Z-WbSmra_G1kvyx-Bej3vkhtQis.roa (hash: gk+4vFFmmxKEtInMkLHpcbUkvzWIfqwHSMm2pJIJXSU=) 2: lCTE0e6511lXYUV4jzoQANe1D0c.roa (hash: duBHYLft9CmJTD9gy5FmFbBDQw9Rjhhhi+M/Mn6KU3Y=) 3: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl (hash: 3Wbr316f5vxU5qQbbBK2ARZ9+Ik6rowDJ9IP10AiPVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:03:2b:67:09:1f:64:51:62:61:15:f2:0e:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7a0258a521e99d213fb30e79667e584e37c7db Validity Not Before: Jan 25 13:00:40 2026 GMT Not After : Jan 26 13:00:40 2026 GMT Subject: CN=f8926b4fa2ac31ebb89a8bc4059a887dd87deda9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fd:23:04:16:75:49:13:26:ba:b1:ab:4d:d4: 10:5d:06:a2:5e:ee:ee:66:30:e6:69:ff:a1:6a:22: e8:16:da:11:cd:73:14:01:49:fe:7b:e1:07:38:54: b0:9d:50:be:0f:43:9f:84:05:97:fc:7c:f2:47:b0: da:a8:31:5f:1d:50:f4:7e:24:be:7b:88:0f:33:a9: a1:15:f8:43:60:0e:44:39:1d:d4:e9:45:b0:8c:32: 68:15:92:c4:e9:ba:d1:09:2e:ae:82:2c:1b:ef:e7: 1d:dd:d3:cc:55:5b:1e:b5:01:32:de:98:aa:06:3c: 45:f3:c2:e9:ea:42:47:44:a6:bc:a6:23:52:45:6a: 22:5a:5a:53:68:68:30:5e:49:3b:fb:6a:7c:4a:c4: 5d:71:88:8b:72:28:0d:d4:2c:41:58:da:10:a8:fa: e2:5c:66:ab:75:5b:8a:2e:04:ff:43:9d:dc:c4:66: 2b:50:7a:23:24:c3:f6:7e:bd:77:1c:cc:b9:2f:54: 2f:f1:3f:c2:e3:6e:7c:44:d5:fd:1d:88:23:07:4b: 5e:ab:f8:2c:ff:48:ca:ff:89:83:be:70:7d:44:59: 90:a9:45:6a:12:2a:e9:76:28:a9:bc:af:70:d9:cc: e4:08:7d:d2:50:b5:1e:e2:67:08:9a:ef:49:bb:33: e6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:92:6B:4F:A2:AC:31:EB:B8:9A:8B:C4:05:9A:88:7D:D8:7D:ED:A9 X509v3 Authority Key Identifier: keyid:BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:7e:f4:16:61:1b:67:b6:92:39:09:c5:5b:dc:9c:1f:ed:58: 87:97:91:25:d3:23:5c:b2:7e:d1:8b:3e:45:70:75:d9:1b:4f: b0:16:7b:a8:f4:5b:56:7d:df:1a:e6:34:e4:26:7d:b8:08:de: c2:49:f5:1c:1b:64:f4:6b:50:9b:11:75:e1:1a:a7:ac:d0:27: a2:e7:35:9f:1f:40:7b:29:ad:13:e8:6e:da:2a:4a:7a:61:e8: 19:95:1c:af:cb:b7:d2:9f:de:cc:62:13:77:91:8f:18:d0:6c: 0f:46:b9:b8:c7:ab:61:34:ac:ec:23:c6:31:67:f9:be:e7:e3: cf:30:c6:99:97:b2:48:20:47:92:49:cf:7d:d4:d7:fe:45:4b: e1:4f:da:6f:06:fc:51:1f:51:62:4f:e8:f8:ca:3f:e3:a9:e5: 17:19:f4:f3:87:89:9e:d7:b0:fe:2f:27:97:40:2a:b5:cb:1b: cf:b7:74:fe:fc:17:38:36:b5:98:db:b7:39:58:98:42:c7:6e: 4e:f1:ca:8d:74:35:0b:8f:bc:8d:ec:58:e2:25:38:23:f5:e4: 64:5b:23:7f:83:c3:0e:66:83:85:9b:7a:76:2c:23:59:8c:33: 5c:42:ad:79:e7:14:32:e7:fc:8d:12:e7:82:58:43:7b:30:e5: c9:36:71:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PgMrZwkfZFFiYRXyDhgAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmN2EwMjU4YTUyMWU5OWQyMTNmYjMwZTc5NjY3ZTU4NGUz N2M3ZGIwHhcNMjYwMTI1MTMwMDQwWhcNMjYwMTI2MTMwMDQwWjAzMTEwLwYDVQQD EyhmODkyNmI0ZmEyYWMzMWViYjg5YThiYzQwNTlhODg3ZGQ4N2RlZGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf0jBBZ1SRMmurGrTdQQXQaiXu7u ZjDmaf+haiLoFtoRzXMUAUn+e+EHOFSwnVC+D0OfhAWX/HzyR7DaqDFfHVD0fiS+ e4gPM6mhFfhDYA5EOR3U6UWwjDJoFZLE6brRCS6ugiwb7+cd3dPMVVsetQEy3piq BjxF88Lp6kJHRKa8piNSRWoiWlpTaGgwXkk7+2p8SsRdcYiLcigN1CxBWNoQqPri XGardVuKLgT/Q53cxGYrUHojJMP2fr13HMy5L1Qv8T/C4258RNX9HYgjB0teq/gs /0jK/4mDvnB9RFmQqUVqEirpdiipvK9w2czkCH3SULUe4mcImu9JuzPmHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiSa0+irDHruJqLxAWaiH3Yfe2pMB8GA1UdIwQY MBaAFL96AlilIemdIT+zDnlmflhON8fbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjNvQ1dLVWg2WjBoUDdNT2VXWi1XRTQzeDlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84N2Q0OGEtZmEyNy00YjkzLWI0ZTgt YjUzOWQ2Y2VhNmUxLzEvdjNvQ1dLVWg2WjBoUDdNT2VXWi1XRTQzeDlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC84N2Q0OGEtZmEyNy00YjkzLWI0ZTgtYjUzOWQ2Y2VhNmUx LzEvdjNvQ1dLVWg2WjBoUDdNT2VXWi1XRTQzeDlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdn70FmEb Z7aSOQnFW9ycH+1Yh5eRJdMjXLJ+0Ys+RXB12RtPsBZ7qPRbVn3fGuY05CZ9uAje wkn1HBtk9GtQmxF14RqnrNAnouc1nx9AeymtE+hu2ipKemHoGZUcr8u30p/ezGIT d5GPGNBsD0a5uMerYTSs7CPGMWf5vufjzzDGmZeySCBHkknPfdTX/kVL4U/abwb8 UR9RYk/o+Mo/46nlFxn084eJntew/i8nl0Aqtcsbz7d0/vwXODa1mNu3OViYQsdu TvHKjXQ1C4+8jexY4iU4I/XkZFsjf4PDDmaDhZt6diwjWYwzXEKteecUMuf8jRLn glhDezDlyTZxEg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:21:08 2026 by rpki-client