This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft File: o2n0t4zE2TX7Hzm73syKQTsPr50.mft (raw, json) Hash identifier: AJrxhCdLxYXOUZ8Kt24Oux+l+ODekxmnnNeBUBStoIU= Subject key identifier: B2:0B:F8:39:A4:16:A2:95:31:45:9D:60:36:11:D1:6A:B1:2F:6C:B5 Authority key identifier: A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D Certificate issuer: /CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d Certificate serial: 019BF6F5AC6F075743C406E14072812BB2E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft Manifest number: 0119 Signing time: Sun 25 Jan 2026 21:00:54 +0000 Manifest this update: Sun 25 Jan 2026 21:00:54 +0000 Manifest next update: Mon 26 Jan 2026 21:00:54 +0000 Files and hashes: 1: hRuDhXhX54qw1wEPjhcbUnyv6xs.roa (hash: TAW6RX8CSvyYletMRNoT2k5BjZvitleWVxLZc1Ntn/4=) 2: o2n0t4zE2TX7Hzm73syKQTsPr50.crl (hash: r7pZC6HQ/4zzWy2KWqzsaBL7Q6kLpj+e3wjHafVLC8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:ac:6f:07:57:43:c4:06:e1:40:72:81:2b:b2:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d Validity Not Before: Jan 25 21:00:54 2026 GMT Not After : Jan 26 21:00:54 2026 GMT Subject: CN=b20bf839a416a29531459d603611d16ab12f6cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:20:7f:c8:eb:fb:a8:e0:31:48:4a:69:8b:c0: e0:8a:98:86:28:db:e3:8b:5f:4c:e1:dc:09:d4:26: 4f:bf:8c:0e:18:27:3e:af:43:70:ea:6d:7e:82:46: 3b:48:8a:41:18:56:49:a6:22:4e:fa:6d:78:a1:0e: 42:ec:47:fb:d6:cf:1f:99:f2:8a:05:7d:a8:9e:69: ba:ed:e8:33:e1:d5:22:98:5b:18:2c:56:95:3b:ff: 07:e4:f1:a5:73:07:6c:66:4c:0b:b8:41:80:ed:49: 91:f8:88:db:b3:0e:6d:76:5d:07:30:14:97:aa:00: 8e:17:fe:37:16:34:7f:16:28:53:68:24:02:fb:39: 3f:55:94:cb:f0:69:05:6f:81:8d:1e:ec:83:5c:37: cb:7c:0b:2c:a3:00:2d:94:f5:da:67:21:c5:25:a6: 8a:ab:1d:63:da:69:0f:59:fb:43:5d:fd:81:e3:3e: d4:8a:fb:4c:06:da:23:5b:50:a2:4e:29:39:49:61: 2a:ee:36:03:5a:02:8a:c1:0c:46:c9:22:64:93:b6: 4a:ee:82:4c:ef:b5:fb:72:55:03:c5:c5:89:a6:a1: 85:13:d6:3b:6e:4b:71:ca:a0:af:c1:fc:02:ba:4d: d7:5b:95:4f:36:7c:fb:c8:e2:74:85:70:60:3a:eb: 86:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0B:F8:39:A4:16:A2:95:31:45:9D:60:36:11:D1:6A:B1:2F:6C:B5 X509v3 Authority Key Identifier: keyid:A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:02:ae:8e:96:b6:cf:87:db:d6:67:76:8b:17:44:88:6c:6a: 05:f7:54:ba:f1:6e:b7:95:cd:32:92:bc:40:b8:73:58:63:b1: 34:5e:cb:1c:4f:cf:fe:34:de:21:62:c1:f8:ab:b6:26:8e:97: ea:a9:a4:d9:a6:68:1b:2a:f0:5f:62:fc:ad:b4:7d:c2:a2:69: 63:65:e4:89:e5:14:9d:eb:7e:c6:40:69:32:c0:19:43:b5:ba: 4d:90:01:f4:8c:d4:f0:eb:56:0f:1e:cf:98:b1:1a:4e:5f:e6: 3d:dd:ab:16:d3:32:83:4d:e2:ba:b4:cc:a7:3c:db:c4:46:68: 51:bf:ef:a7:7a:21:e5:e5:03:31:31:04:1a:1d:a7:95:2b:5c: c6:92:5d:56:0c:f0:8c:b2:a8:92:20:b7:8d:54:7e:2e:1b:84: 80:e2:c9:81:1a:23:1f:90:78:15:27:de:ea:9a:e6:86:c2:e0: 91:03:d1:78:bc:30:2c:f4:7a:5f:10:31:ca:5e:6c:6f:93:bc: f4:ee:27:ab:14:06:eb:c3:96:0d:53:a9:e8:0a:98:88:25:dd: 90:a4:e3:36:15:62:9b:3a:6d:df:c5:a3:38:4f:30:5f:3c:ee: c9:04:a8:04:8d:2a:6f:1e:31:d4:b6:90:af:db:44:b3:c7:cc: ee:70:e2:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29axvB1dDxAbhQHKBK7LmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjlmNGI3OGNjNGQ5MzVmYjFmMzliYmRlY2M4YTQxM2Iw ZmFmOWQwHhcNMjYwMTI1MjEwMDU0WhcNMjYwMTI2MjEwMDU0WjAzMTEwLwYDVQQD EyhiMjBiZjgzOWE0MTZhMjk1MzE0NTlkNjAzNjExZDE2YWIxMmY2Y2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yB/yOv7qOAxSEppi8DgipiGKNvj i19M4dwJ1CZPv4wOGCc+r0Nw6m1+gkY7SIpBGFZJpiJO+m14oQ5C7Ef71s8fmfKK BX2onmm67egz4dUimFsYLFaVO/8H5PGlcwdsZkwLuEGA7UmR+Ijbsw5tdl0HMBSX qgCOF/43FjR/FihTaCQC+zk/VZTL8GkFb4GNHuyDXDfLfAssowAtlPXaZyHFJaaK qx1j2mkPWftDXf2B4z7UivtMBtojW1CiTik5SWEq7jYDWgKKwQxGySJkk7ZK7oJM 77X7clUDxcWJpqGFE9Y7bktxyqCvwfwCuk3XW5VPNnz7yOJ0hXBgOuuGKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIL+DmkFqKVMUWdYDYR0WqxL2y1MB8GA1UdIwQY MBaAFKNp9LeMxNk1+x85u97MikE7D6+dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJuMHQ0ekUyVFg3SHptNzNzeUtRVHNQcjUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kMDM5ODItZTc1My00ZTU2LWFiMzUt YjBhZGVjOTM0NjcxLzEvbzJuMHQ0ekUyVFg3SHptNzNzeUtRVHNQcjUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9kMDM5ODItZTc1My00ZTU2LWFiMzUtYjBhZGVjOTM0Njcx LzEvbzJuMHQ0ekUyVFg3SHptNzNzeUtRVHNQcjUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACAKujpa2 z4fb1md2ixdEiGxqBfdUuvFut5XNMpK8QLhzWGOxNF7LHE/P/jTeIWLB+Ku2Jo6X 6qmk2aZoGyrwX2L8rbR9wqJpY2XkieUUnet+xkBpMsAZQ7W6TZAB9IzU8OtWDx7P mLEaTl/mPd2rFtMyg03iurTMpzzbxEZoUb/vp3oh5eUDMTEEGh2nlStcxpJdVgzw jLKokiC3jVR+LhuEgOLJgRojH5B4FSfe6prmhsLgkQPReLwwLPR6XxAxyl5sb5O8 9O4nqxQG68OWDVOp6AqYiCXdkKTjNhVimzpt38WjOE8wXzzuyQSoBI0qbx4x1LaQ r9tEs8fM7nDiVQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:58 2026 by rpki-client