This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft File: O_xkMfUzO23dMeg7aWgtjo7gb8E.mft (raw, json) Hash identifier: 0+XQcFTjYaVHZGyZdDC+si4o2MPF++342d8Dc/iBXkw= Subject key identifier: 13:FE:47:25:6D:AF:79:A9:0C:DD:DC:01:87:84:BC:7F:76:6B:3E:7B Authority key identifier: 3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1 Certificate issuer: /CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1 Certificate serial: 019BF9F6FECF3443ACD6AAAE1BC4B878C0B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 11:01:12 +0000 Manifest this update: Mon 26 Jan 2026 11:01:12 +0000 Manifest next update: Tue 27 Jan 2026 11:01:12 +0000 Files and hashes: 1: EMaCwLjxvEjldttSlMrOnwekZ_Y.roa (hash: aBqqe+U1PaVNW6VJZrxz+RRQt4gTnenHJ/Ty1nZ3HHo=) 2: O_xkMfUzO23dMeg7aWgtjo7gb8E.crl (hash: Hxo8uNWh3k0AImNAbQ0ec7E9jqkdTMTWiljH/xU45bY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:fe:cf:34:43:ac:d6:aa:ae:1b:c4:b8:78:c0:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1 Validity Not Before: Jan 26 11:01:12 2026 GMT Not After : Jan 27 11:01:12 2026 GMT Subject: CN=13fe47256daf79a90cdddc018784bc7f766b3e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b8:df:ab:a2:9f:84:84:64:bc:e8:77:81:fb: 76:18:da:e0:e1:5b:db:11:7b:e1:98:52:3b:2e:85: 27:42:53:16:c6:95:f1:7e:fa:80:d7:da:3c:50:3a: 2b:80:12:9b:4e:bf:3a:8b:91:d4:2e:0b:97:23:37: 6f:b7:1a:5e:4a:0a:a4:e4:71:55:84:92:40:35:89: ff:49:cb:4a:cb:da:20:19:98:1c:8a:86:16:83:43: cd:92:1f:82:bf:99:c3:df:0f:d6:72:23:fc:75:c3: d7:a5:3e:b6:76:3e:cf:64:05:4d:40:c0:ee:ec:aa: 3f:b0:69:de:ed:68:70:81:66:e7:5a:db:79:b4:42: 76:c4:0d:20:a3:c5:fa:bd:df:ff:ea:77:be:d5:69: 8a:2f:a3:5f:35:87:54:13:ed:f3:80:7a:a0:d2:cd: 45:33:68:dc:8c:ff:54:c3:3a:e4:ab:5d:36:d6:86: de:09:c9:57:e4:a6:48:c0:0c:1c:41:d1:84:cf:0a: ef:41:5d:79:18:da:37:db:63:f7:19:76:6f:80:2e: 34:42:f9:4c:bd:46:87:65:c9:d2:4d:1c:bf:be:ac: 8a:9c:e0:63:1f:1e:81:91:78:8b:8a:7a:46:3e:39: e7:ee:39:96:e3:e6:5a:42:7e:6c:cd:22:d4:82:ad: 62:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FE:47:25:6D:AF:79:A9:0C:DD:DC:01:87:84:BC:7F:76:6B:3E:7B X509v3 Authority Key Identifier: keyid:3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d6:7a:58:fe:4f:5c:2e:b6:81:76:e6:66:2e:35:d5:6c:07: 31:c8:49:bc:8e:8b:39:d0:25:59:ea:94:24:3b:36:5f:51:60: e6:f0:0e:75:2e:97:19:06:97:4d:60:e8:c2:25:01:0a:71:fc: 99:7a:49:99:a4:61:42:bd:2e:a2:60:a5:f1:e2:03:39:3a:7e: e6:9d:3f:e9:a1:09:ef:8f:34:cd:a5:27:e2:3e:88:3d:bf:77: 60:4a:39:6b:7d:80:eb:63:c1:4a:3f:2a:44:ab:4d:e7:36:a7: 42:72:3e:6f:bb:f2:76:3b:ba:1d:6a:ac:78:b3:fb:71:05:f5: d0:e7:eb:95:c7:d7:a7:fc:53:28:08:d5:cb:7a:ac:ad:42:3f: 7e:55:72:a7:22:c0:27:6e:c2:b2:10:1b:df:88:0d:72:2d:33: ae:4b:b5:11:8f:05:31:9a:a6:79:59:45:c9:40:5d:2c:6f:5c: 8d:77:77:95:ba:80:8c:7d:ba:30:82:00:35:2d:27:b0:63:ab: a5:93:86:27:fe:a9:55:5e:87:8a:dd:0c:94:57:48:15:2d:86: ff:33:c5:65:5a:9e:8c:94:a5:09:06:a7:b1:75:2d:db:f7:0a: 86:c6:98:7f:c7:c9:22:e1:21:a5:57:69:d0:99:7a:9c:30:ad: 37:56:3a:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59v7PNEOs1qquG8S4eMC2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmM2NDMxZjUzMzNiNmRkZDMxZTgzYjY5NjgyZDhlOGVl MDZmYzEwHhcNMjYwMTI2MTEwMTEyWhcNMjYwMTI3MTEwMTEyWjAzMTEwLwYDVQQD EygxM2ZlNDcyNTZkYWY3OWE5MGNkZGRjMDE4Nzg0YmM3Zjc2NmIzZTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bjfq6KfhIRkvOh3gft2GNrg4Vvb EXvhmFI7LoUnQlMWxpXxfvqA19o8UDorgBKbTr86i5HULguXIzdvtxpeSgqk5HFV hJJANYn/SctKy9ogGZgcioYWg0PNkh+Cv5nD3w/WciP8dcPXpT62dj7PZAVNQMDu 7Ko/sGne7WhwgWbnWtt5tEJ2xA0go8X6vd//6ne+1WmKL6NfNYdUE+3zgHqg0s1F M2jcjP9Uwzrkq1021obeCclX5KZIwAwcQdGEzwrvQV15GNo322P3GXZvgC40QvlM vUaHZcnSTRy/vqyKnOBjHx6BkXiLinpGPjnn7jmW4+ZaQn5szSLUgq1iMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBP+RyVtr3mpDN3cAYeEvH92az57MB8GA1UdIwQY MBaAFDv8ZDH1Mztt3THoO2loLY6O4G/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mNWE4YjEtNmUyMi00OTYxLWIzOGIt ZmUwMWVlYzQwZWMxLzEvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mNWE4YjEtNmUyMi00OTYxLWIzOGItZmUwMWVlYzQwZWMx LzEvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtZ6WP5P XC62gXbmZi411WwHMchJvI6LOdAlWeqUJDs2X1Fg5vAOdS6XGQaXTWDowiUBCnH8 mXpJmaRhQr0uomCl8eIDOTp+5p0/6aEJ7480zaUn4j6IPb93YEo5a32A62PBSj8q RKtN5zanQnI+b7vydju6HWqseLP7cQX10OfrlcfXp/xTKAjVy3qsrUI/flVypyLA J27CshAb34gNci0zrku1EY8FMZqmeVlFyUBdLG9cjXd3lbqAjH26MIIANS0nsGOr pZOGJ/6pVV6Hit0MlFdIFS2G/zPFZVqejJSlCQansXUt2/cKhsaYf8fJIuEhpVdp 0Jl6nDCtN1Y6PA== -----END CERTIFICATE-----Generated at Mon Jan 26 14:26:02 2026 by rpki-client