This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft File: ogiOBtVTz_KT0nf012w6cQvYsvc.mft (raw, json) Hash identifier: 5Rowlh8EXWBfHvTpUpm7b9c/luZYL16QFVJ032mB1ro= Subject key identifier: 17:0B:D9:1E:61:9C:C3:F2:F8:78:E4:7C:F0:0F:09:DF:7F:E4:F0:0B Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Certificate serial: 019BF3F582A0F971931FF75AD5A87251A848 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft Manifest number: 1845 Signing time: Sun 25 Jan 2026 07:01:51 +0000 Manifest this update: Sun 25 Jan 2026 07:01:51 +0000 Manifest next update: Mon 26 Jan 2026 07:01:51 +0000 Files and hashes: 1: 0bKooLeEaBVaHZZ5sm_Mxin6SHU.roa (hash: fTg7hso6ct0mZc4J1RnwZCnteGZJ3YXa8o1ssxIWikE=) 2: 1-vug3_0cS2KnjcAhQSypOoydMo8.roa (hash: ntlCe/KFbWyYYl+a4s0hHUhM/RAN8BqZRHN8Sfsrn8Y=) 3: 66dOPLt0_WTatbD8jTDqviLCby0.roa (hash: 5X3443GxzYaJM9zk480V7FRqeV1QrGs7L4mBsvUHY7g=) 4: 8Bes5SFWTxypNyxAzOT-k1J7LoA.roa (hash: uavY+yoPxdR0sSqyFwhUtOuQEXIcW0+aaueSIaFf9Ts=) 5: TQJC17LRiHCpRzm6vZH98Kx2YGE.roa (hash: CC6/FdzY8rWN99NywJxlTj8KoAeOw5QMq59YsrbSols=) 6: ZXcMeeipBn7sUUJEU91rzEI17zk.roa (hash: 5bsppIb2wCZVXZGFfEu5mwku1Y7/zmbNHcXjdaosbrc=) 7: fJuTGRvozfm4_e0aUam0wS-AlPw.roa (hash: Z1Mjes1iDe2mLSTG+5DMRvvdh4aNMNzB1Vnh815bgHo=) 8: ogiOBtVTz_KT0nf012w6cQvYsvc.crl (hash: b1NC3VpFjvThtYd2zKil8/2yMnUvevGMeVGGSaQ5vEk=) 9: t8cpqd_P40xVdePL3JQ6TR8XHvI.roa (hash: gpuUfrk0N39e4juiYvB//CsK0sasbeFQSArvH3WS6fw=) 10: tWaaQl6DbtQP8JlymCiz4JsmtTc.roa (hash: CGoPt79QJGnvAkPfN7vV0Ad71vJ218WZxi4WmsIzFpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f5:82:a0:f9:71:93:1f:f7:5a:d5:a8:72:51:a8:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7 Validity Not Before: Jan 25 07:01:51 2026 GMT Not After : Jan 26 07:01:51 2026 GMT Subject: CN=170bd91e619cc3f2f878e47cf00f09df7fe4f00b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a5:5f:f0:46:b3:be:a8:3a:98:77:b0:db:c2: 11:a1:a9:e3:f1:ce:59:6b:69:68:82:0d:48:31:a8: dc:c6:14:86:95:06:8e:85:78:f6:ff:ea:26:1c:e1: b8:2e:2d:27:88:e3:08:5a:2f:cd:b7:63:dc:5a:f5: 08:c2:65:f5:c2:26:84:21:74:92:c6:0c:43:06:9e: 0e:87:2c:18:98:b9:a9:f5:bf:8c:f7:4a:38:46:db: 08:f9:e8:9d:b4:b4:73:ae:44:98:d6:02:54:d7:09: 8e:5d:d8:44:aa:80:15:99:d9:85:55:f0:31:50:51: 97:bc:bc:27:6a:49:ae:04:e0:e7:18:00:73:de:78: 81:c6:38:96:45:7c:7e:8a:90:d1:16:a5:cc:91:9e: 68:54:88:50:a1:ab:41:e4:c1:87:37:5c:73:5d:b2: 47:e8:ae:5a:2c:c4:82:ed:4d:60:5a:17:86:03:b5: af:e5:8d:ec:8c:c2:cb:eb:55:32:f8:e4:60:c2:0d: e3:d7:4b:94:94:62:2f:8d:d2:92:04:67:5e:d1:ef: 91:73:dd:b9:87:56:12:f1:42:ec:6c:2b:00:05:1d: 53:e3:35:03:5f:24:be:cb:2f:2d:9a:0c:4b:41:e6: 2f:6a:09:f0:98:c2:72:d4:9a:d1:f1:cd:55:8e:fd: 1f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0B:D9:1E:61:9C:C3:F2:F8:78:E4:7C:F0:0F:09:DF:7F:E4:F0:0B X509v3 Authority Key Identifier: keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ef:fb:08:63:be:37:9e:0b:81:14:01:0f:68:74:84:d4:7b: 81:ba:df:bd:a3:15:25:59:75:05:e9:ad:3c:5a:a7:f7:5f:57: 73:28:bd:06:4b:29:9c:57:18:62:d2:02:bf:c8:a3:d3:91:e8: a4:35:ca:6d:0a:ea:8c:cd:07:2d:4e:b3:9a:98:a6:2f:51:e0: 62:b1:e5:ae:9b:e9:55:2e:94:5e:6c:33:49:4c:3a:96:20:3b: fa:96:f3:e2:a3:de:41:70:8f:2a:c5:1a:27:82:a8:d3:b9:04: c0:2f:9b:e8:05:0a:c0:fb:5c:38:c4:92:7c:90:4e:f5:f5:4c: 74:d5:ab:1c:7c:50:dc:33:c7:29:e8:a4:96:6f:6d:94:cc:8c: f1:60:ef:e6:99:78:61:da:4e:54:fc:1c:8e:5c:cf:57:2c:fc: a7:92:67:9e:b0:29:bb:58:ab:3d:71:06:dc:9a:05:ee:f8:8f: be:d3:b1:7d:e7:94:c2:4b:46:fa:b1:b7:9d:ff:ae:86:1e:4e: a8:de:de:6e:fb:78:76:65:79:2b:2b:62:b1:e8:9d:c7:e1:94: 5f:59:af:3d:ff:ac:06:5a:e3:11:2f:c8:26:47:4c:51:8e:99: de:d5:8b:f1:b6:06:f5:4f:95:d2:9c:2b:fa:46:66:cb:7d:8c: eb:58:40:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9YKg+XGTH/da1ahyUahIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk OGIyZjcwHhcNMjYwMTI1MDcwMTUxWhcNMjYwMTI2MDcwMTUxWjAzMTEwLwYDVQQD EygxNzBiZDkxZTYxOWNjM2YyZjg3OGU0N2NmMDBmMDlkZjdmZTRmMDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6Vf8Eazvqg6mHew28IRoanj8c5Z a2logg1IMajcxhSGlQaOhXj2/+omHOG4Li0niOMIWi/Nt2PcWvUIwmX1wiaEIXSS xgxDBp4OhywYmLmp9b+M90o4RtsI+eidtLRzrkSY1gJU1wmOXdhEqoAVmdmFVfAx UFGXvLwnakmuBODnGABz3niBxjiWRXx+ipDRFqXMkZ5oVIhQoatB5MGHN1xzXbJH 6K5aLMSC7U1gWheGA7Wv5Y3sjMLL61Uy+ORgwg3j10uUlGIvjdKSBGde0e+Rc925 h1YS8ULsbCsABR1T4zUDXyS+yy8tmgxLQeYvagnwmMJy1JrR8c1Vjv0fzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcL2R5hnMPy+HjkfPAPCd9/5PALMB8GA1UdIwQY MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct YmJlYTI5MThlMTAyLzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALu/7CGO+ N54LgRQBD2h0hNR7gbrfvaMVJVl1BemtPFqn919Xcyi9BkspnFcYYtICv8ij05Ho pDXKbQrqjM0HLU6zmpimL1HgYrHlrpvpVS6UXmwzSUw6liA7+pbz4qPeQXCPKsUa J4Ko07kEwC+b6AUKwPtcOMSSfJBO9fVMdNWrHHxQ3DPHKeiklm9tlMyM8WDv5pl4 YdpOVPwcjlzPVyz8p5JnnrApu1irPXEG3JoF7viPvtOxfeeUwktG+rG3nf+uhh5O qN7ebvt4dmV5Kytiseidx+GUX1mvPf+sBlrjES/IJkdMUY6Z3tWL8bYG9U+V0pwr +kZmy32M61hAug== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:19 2026 by rpki-client