This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft File: O-LwFktmp2eVhgtOo1hvrVY7rEc.mft (raw, json) Hash identifier: SJ8X1YCb97xqe+QXsfcEWF2JUss24QrHr1UrWP+cQdA= Subject key identifier: 14:22:6A:7D:3F:74:76:52:3E:31:FE:01:56:2C:53:EA:F4:FA:3D:10 Authority key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47 Certificate issuer: /CN=3be2f0164b66a76795860b4ea3586fad563bac47 Certificate serial: 019BF53E769736F94096BFCDAE6CD3EE43D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft Manifest number: 17F1 Signing time: Sun 25 Jan 2026 13:01:10 +0000 Manifest this update: Sun 25 Jan 2026 13:01:10 +0000 Manifest next update: Mon 26 Jan 2026 13:01:10 +0000 Files and hashes: 1: O-LwFktmp2eVhgtOo1hvrVY7rEc.crl (hash: gj8u3P7QgQG2wWiextZsaxc4PhaaPYmfuuJASWbOUh8=) 2: htGqvDuZ1yl5QjiQWAwubWCZy2A.roa (hash: jbw+jRpmU5f9XaNZCWs1NsoQYNjn1y1IEBJ02/pIxJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:76:97:36:f9:40:96:bf:cd:ae:6c:d3:ee:43:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3be2f0164b66a76795860b4ea3586fad563bac47 Validity Not Before: Jan 25 13:01:10 2026 GMT Not After : Jan 26 13:01:10 2026 GMT Subject: CN=14226a7d3f7476523e31fe01562c53eaf4fa3d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a5:59:ba:76:dc:33:7e:2c:04:e9:bb:a2:63: a1:1b:c7:25:23:91:64:b3:e5:38:17:53:05:f3:aa: 3d:a7:d4:d5:84:31:89:df:92:52:10:66:5b:80:ea: 01:c9:be:e0:1f:91:2a:da:94:a5:ce:02:88:27:80: 68:71:f8:1f:83:10:e6:13:bc:5b:74:2a:cc:c0:76: 1c:9f:89:a7:ec:e1:f2:c4:00:84:1b:e3:c2:b1:56: c7:38:93:81:7b:86:73:7d:9e:b5:93:4d:44:1c:6b: 40:95:75:1a:58:08:c4:85:7b:43:32:3f:20:4e:c6: 23:16:96:3e:61:94:5a:cb:9f:7d:40:c0:18:74:70: 20:c0:55:73:a3:52:28:d3:10:2b:2b:e4:88:e0:df: 5a:06:cf:e0:86:37:c6:2b:ab:74:a7:19:2f:0b:30: e8:36:26:47:95:09:22:8f:f8:52:78:d0:1f:0c:f5: af:67:80:1a:7e:b2:f8:9b:7f:9a:1f:a0:5e:ba:d7: 31:85:71:6f:21:37:9a:25:6b:60:fa:0f:a9:a6:46: 5b:d1:69:b8:07:63:01:b8:7c:5e:72:e2:64:62:f1: 92:98:03:0f:8b:22:9b:69:e5:41:d4:f0:a7:a2:bb: fc:38:11:94:47:d3:de:5d:b1:6e:80:b9:f1:df:79: 93:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:22:6A:7D:3F:74:76:52:3E:31:FE:01:56:2C:53:EA:F4:FA:3D:10 X509v3 Authority Key Identifier: keyid:3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:0d:45:e7:43:d4:39:f8:2b:e4:e1:12:24:ad:25:27:d5:11: 37:a9:46:07:28:06:7e:c6:31:a8:91:84:7a:58:69:e3:a5:39: 79:ca:56:19:04:fd:c6:c3:6e:dc:9e:9d:30:9f:d7:bc:75:30: 0b:1b:e4:78:cd:5b:13:e6:48:a4:80:5b:e4:68:c3:1b:eb:96: 63:73:b9:5b:33:d7:24:4d:ad:bd:5d:91:53:b2:dd:99:ee:79: fc:d2:14:ee:ad:5c:15:0e:b0:87:6b:2d:f1:d6:98:27:5d:78: 06:ab:78:3f:a2:56:6f:5b:14:b4:eb:e5:26:3a:15:84:71:c0: fb:01:06:6f:d6:e3:f6:5e:a2:65:5d:1d:b8:10:3d:33:d0:55: fc:3e:dd:5b:ff:52:ec:f9:be:24:a7:59:ea:1b:89:b4:68:99: 37:32:6c:43:cc:51:91:6c:08:f7:a7:b0:dd:52:7c:cd:94:ab: dc:bc:2f:4a:90:38:a6:f4:0c:11:1a:9c:ad:7c:5b:78:6d:57: 3b:3b:a1:78:3f:a7:00:39:69:6e:f1:e8:51:bb:fa:ea:78:bd: b3:2d:7c:d5:a1:d6:57:b7:bc:8e:3d:5d:b1:4e:bb:6b:73:90: 2f:ba:6d:ba:df:52:94:12:4a:64:61:1e:57:61:fb:ea:8c:ef: 12:85:b6:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PnaXNvlAlr/NrmzT7kPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZTJmMDE2NGI2NmE3Njc5NTg2MGI0ZWEzNTg2ZmFkNTYz YmFjNDcwHhcNMjYwMTI1MTMwMTEwWhcNMjYwMTI2MTMwMTEwWjAzMTEwLwYDVQQD EygxNDIyNmE3ZDNmNzQ3NjUyM2UzMWZlMDE1NjJjNTNlYWY0ZmEzZDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqVZunbcM34sBOm7omOhG8clI5Fk s+U4F1MF86o9p9TVhDGJ35JSEGZbgOoByb7gH5Eq2pSlzgKIJ4BocfgfgxDmE7xb dCrMwHYcn4mn7OHyxACEG+PCsVbHOJOBe4ZzfZ61k01EHGtAlXUaWAjEhXtDMj8g TsYjFpY+YZRay599QMAYdHAgwFVzo1Io0xArK+SI4N9aBs/ghjfGK6t0pxkvCzDo NiZHlQkij/hSeNAfDPWvZ4AafrL4m3+aH6BeutcxhXFvITeaJWtg+g+ppkZb0Wm4 B2MBuHxecuJkYvGSmAMPiyKbaeVB1PCnorv8OBGUR9PeXbFugLnx33mTvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQian0/dHZSPjH+AVYsU+r0+j0QMB8GA1UdIwQY MBaAFDvi8BZLZqdnlYYLTqNYb61WO6xHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTy1Md0ZrdG1wMmVWaGd0T28xaHZyVlk3ckVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNzJiNjctNzZlYy00YWZhLWIzNzYt ZjlhZDM4MDUxMjIwLzEvTy1Md0ZrdG1wMmVWaGd0T28xaHZyVlk3ckVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNzJiNjctNzZlYy00YWZhLWIzNzYtZjlhZDM4MDUxMjIw LzEvTy1Md0ZrdG1wMmVWaGd0T28xaHZyVlk3ckVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPw1F50PU Ofgr5OESJK0lJ9URN6lGBygGfsYxqJGEelhp46U5ecpWGQT9xsNu3J6dMJ/XvHUw CxvkeM1bE+ZIpIBb5GjDG+uWY3O5WzPXJE2tvV2RU7Ldme55/NIU7q1cFQ6wh2st 8daYJ114Bqt4P6JWb1sUtOvlJjoVhHHA+wEGb9bj9l6iZV0duBA9M9BV/D7dW/9S 7Pm+JKdZ6huJtGiZNzJsQ8xRkWwI96ew3VJ8zZSr3LwvSpA4pvQMERqcrXxbeG1X OzuheD+nADlpbvHoUbv66ni9sy181aHWV7e8jj1dsU67a3OQL7ptut9SlBJKZGEe V2H76ozvEoW2kQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:25:11 2026 by rpki-client