This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft File: oet7cZVO3_yjWEyF-gj7EiQv7NU.mft (raw, json) Hash identifier: oCc+IaHc6kzZogYHcJi9CGZuzsNXOU45byTVGECrW9M= Subject key identifier: 58:91:FF:42:E4:0D:7D:16:C4:C3:40:A4:D0:11:4A:11:19:09:86:2C Authority key identifier: A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5 Certificate issuer: /CN=a1eb7b71954edffca3584c85fa08fb12242fecd5 Certificate serial: 019BF763B68D7E1B05260051E7546E8F5A23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft Manifest number: BA Signing time: Sun 25 Jan 2026 23:01:05 +0000 Manifest this update: Sun 25 Jan 2026 23:01:05 +0000 Manifest next update: Mon 26 Jan 2026 23:01:05 +0000 Files and hashes: 1: lE1Kxf9PJiSztZNrzwwBPAVYUcU.roa (hash: jNZxU5D1EKLny/wqaNa70XGzWgiNnFCUNtLqg86RKFE=) 2: oet7cZVO3_yjWEyF-gj7EiQv7NU.crl (hash: Fo5wzCWCtBfjnvhjCrROp2C+Wp9Gh0DIR7gKfbxUOKs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:b6:8d:7e:1b:05:26:00:51:e7:54:6e:8f:5a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1eb7b71954edffca3584c85fa08fb12242fecd5 Validity Not Before: Jan 25 23:01:05 2026 GMT Not After : Jan 26 23:01:05 2026 GMT Subject: CN=5891ff42e40d7d16c4c340a4d0114a111909862c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1b:fe:90:b2:e1:9e:96:f6:7b:5f:4a:32:69: 2d:91:99:38:93:44:12:c9:32:29:a6:c3:33:94:ed: 20:f7:19:f4:67:3f:08:c5:43:a0:0e:c9:0c:ba:02: ad:7f:5f:12:17:d7:12:64:f7:58:3d:bd:7e:25:44: 89:7a:1e:9e:70:e6:8e:92:3a:9e:1b:5d:39:70:ea: 2d:b5:7a:b1:f7:97:28:42:b8:45:af:4f:98:24:dd: 38:23:b5:2c:ed:4f:34:4b:d2:4f:ed:2f:5e:b6:51: 0a:f1:0e:86:1c:fa:a5:56:f0:de:65:be:f3:26:3b: 65:e8:f3:b0:8f:db:f1:b1:87:da:59:6c:9c:d6:80: 07:92:f7:9e:cf:2b:1e:e7:c2:bd:12:92:0b:22:e0: fe:dc:b3:e3:26:a4:f6:56:8e:74:63:04:f5:2d:98: d5:ca:32:87:63:5a:d1:9e:6b:fc:19:cf:76:8c:c6: 71:a4:de:30:d1:76:84:f7:fa:8e:6d:76:43:72:9f: dd:80:13:78:af:f2:da:b3:da:06:ac:60:89:29:b4: 47:f4:6d:28:56:60:a6:64:4b:e3:e2:83:40:89:cb: c8:34:e1:e3:19:c8:e1:97:52:92:a6:fe:45:e3:2c: 66:a2:d3:2d:5a:fc:eb:68:c7:0f:b5:97:62:ae:94: 00:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:91:FF:42:E4:0D:7D:16:C4:C3:40:A4:D0:11:4A:11:19:09:86:2C X509v3 Authority Key Identifier: keyid:A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:63:a5:31:3f:99:7b:dd:78:c2:76:98:5c:c7:af:68:51:a1: 48:a7:21:46:64:2d:9b:eb:c1:b5:f9:3d:57:c3:0d:c0:1b:22: a0:56:f1:e7:78:72:8d:14:53:cb:85:f1:2e:83:d4:90:0c:6e: b8:4e:3c:53:a8:d1:09:fa:5f:a3:e3:52:f8:1c:4f:aa:19:87: a0:a0:36:32:25:7a:f7:3a:73:9b:65:73:1b:8f:bf:9b:7f:1d: 8f:48:97:bc:7d:74:31:7a:df:69:e3:f0:52:6b:ed:40:28:38: 61:27:1d:06:68:e6:cd:72:c6:72:a9:f3:31:e5:0c:60:5f:90: e7:44:06:65:55:18:2f:56:ff:22:d4:2a:c0:0b:6d:ce:0a:cb: 94:67:e9:1c:14:65:64:19:19:ef:66:7d:51:ee:a1:dd:e6:a0: 7b:83:c2:c7:ac:78:34:ac:03:ff:d3:84:34:c4:c0:b0:3d:c4: aa:6a:e3:49:ed:f0:eb:e0:a5:40:56:c0:e8:34:e7:47:bc:b3: 16:3f:ec:f9:0e:9e:35:36:d6:3d:c8:3f:83:9c:ee:b7:8d:58: ac:85:a4:dd:7e:b9:39:87:89:f9:fe:28:1f:32:73:f3:87:f8: 6a:2a:6f:09:1f:7d:bc:0c:7c:1e:10:06:41:30:6e:de:20:d5: 28:c2:dd:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y7aNfhsFJgBR51Ruj1ojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZWI3YjcxOTU0ZWRmZmNhMzU4NGM4NWZhMDhmYjEyMjQy ZmVjZDUwHhcNMjYwMTI1MjMwMTA1WhcNMjYwMTI2MjMwMTA1WjAzMTEwLwYDVQQD Eyg1ODkxZmY0MmU0MGQ3ZDE2YzRjMzQwYTRkMDExNGExMTE5MDk4NjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshv+kLLhnpb2e19KMmktkZk4k0QS yTIppsMzlO0g9xn0Zz8IxUOgDskMugKtf18SF9cSZPdYPb1+JUSJeh6ecOaOkjqe G105cOottXqx95coQrhFr0+YJN04I7Us7U80S9JP7S9etlEK8Q6GHPqlVvDeZb7z Jjtl6POwj9vxsYfaWWyc1oAHkveezyse58K9EpILIuD+3LPjJqT2Vo50YwT1LZjV yjKHY1rRnmv8Gc92jMZxpN4w0XaE9/qObXZDcp/dgBN4r/Las9oGrGCJKbRH9G0o VmCmZEvj4oNAicvINOHjGcjhl1KSpv5F4yxmotMtWvzraMcPtZdirpQAiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiR/0LkDX0WxMNApNARShEZCYYsMB8GA1UdIwQY MBaAFKHre3GVTt/8o1hMhfoI+xIkL+zVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2V0N2NaVk8zX3lqV0V5Ri1najdFaVF2N05VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iNmM1MDUtZWY0Ny00ODA5LWI1ZmMt MGVkMTdhNjk4MDBmLzEvb2V0N2NaVk8zX3lqV0V5Ri1najdFaVF2N05VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9iNmM1MDUtZWY0Ny00ODA5LWI1ZmMtMGVkMTdhNjk4MDBm LzEvb2V0N2NaVk8zX3lqV0V5Ri1najdFaVF2N05VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimOlMT+Z e914wnaYXMevaFGhSKchRmQtm+vBtfk9V8MNwBsioFbx53hyjRRTy4XxLoPUkAxu uE48U6jRCfpfo+NS+BxPqhmHoKA2MiV69zpzm2VzG4+/m38dj0iXvH10MXrfaePw UmvtQCg4YScdBmjmzXLGcqnzMeUMYF+Q50QGZVUYL1b/ItQqwAttzgrLlGfpHBRl ZBkZ72Z9Ue6h3eage4PCx6x4NKwD/9OENMTAsD3EqmrjSe3w6+ClQFbA6DTnR7yz Fj/s+Q6eNTbWPcg/g5zut41YrIWk3X65OYeJ+f4oHzJz84f4aipvCR99vAx8HhAG QTBu3iDVKMLdyw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:13 2026 by rpki-client