This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft File: o05gF-H-A5MnjChZ9DBDsx7myJo.mft (raw, json) Hash identifier: c++WrmWYxM/wGlIsprJeQsAfyLjoh5ds8Wo1PJLxbOg= Subject key identifier: CD:A5:94:49:0A:A9:E8:F1:D3:A6:F4:C9:25:BC:30:59:91:67:BA:16 Authority key identifier: A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A Certificate issuer: /CN=a34e6017e1fe0393278c2859f43043b31ee6c89a Certificate serial: 019BF80825A6A4970EE2CA58FAED57AC35D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft Manifest number: 04AE Signing time: Mon 26 Jan 2026 02:00:41 +0000 Manifest this update: Mon 26 Jan 2026 02:00:41 +0000 Manifest next update: Tue 27 Jan 2026 02:00:41 +0000 Files and hashes: 1: o05gF-H-A5MnjChZ9DBDsx7myJo.crl (hash: tK4s/NStRBGOtiR7llUrG4GD3G2HFnO+xr4YN1e4Ht4=) 2: qkKMvBvdUjtoHS7LZo_ml5EWjhU.roa (hash: OdU1OVMFb9qYyAUFIV2T8Avxl/qa1QKVRGQ2UMicsP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.crl rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:25:a6:a4:97:0e:e2:ca:58:fa:ed:57:ac:35:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a34e6017e1fe0393278c2859f43043b31ee6c89a Validity Not Before: Jan 26 02:00:41 2026 GMT Not After : Jan 27 02:00:41 2026 GMT Subject: CN=cda594490aa9e8f1d3a6f4c925bc30599167ba16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6a:30:81:58:11:32:4f:a5:5d:6c:e2:bd:c4: 4c:ef:88:e1:d0:97:1c:04:e7:59:02:53:13:3b:01: 7a:fb:b2:30:1a:bf:40:5b:06:41:f5:d1:0a:7a:00: 6d:a8:43:ed:06:33:88:f3:31:4b:44:f7:72:ab:29: 51:3a:01:49:83:40:93:2b:8a:86:ab:0d:33:d2:f8: 80:e1:cf:d4:62:83:c9:7e:7c:f3:cb:9d:89:20:dc: 46:b3:bc:6e:35:10:de:3b:43:52:5d:e2:a6:27:6e: 80:5a:44:80:30:21:5b:6e:92:e6:18:bc:f7:71:aa: 57:14:88:9e:62:f0:ba:62:15:a7:92:e0:c6:a9:77: d9:70:38:37:49:f1:ad:8b:e5:fc:b2:73:e5:09:10: 61:9c:41:cf:04:ec:cb:f0:70:fc:d0:01:f1:82:44: f2:20:d9:9d:84:58:5d:d5:ff:9d:d1:ee:55:fd:b3: c9:51:2e:92:d4:ca:ae:0f:2f:1c:ac:54:0b:d3:3d: 8e:c4:c1:57:f2:c5:e3:56:fd:a8:22:66:b4:ad:2b: ea:7e:07:c2:f2:b1:b1:20:8a:3e:b2:c6:92:34:8f: 5e:77:ca:a8:8c:81:10:a0:33:54:26:c0:bd:6c:bd: 44:c8:0e:37:e3:9b:c2:23:57:a2:81:c9:b7:7c:f2: a4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A5:94:49:0A:A9:E8:F1:D3:A6:F4:C9:25:BC:30:59:91:67:BA:16 X509v3 Authority Key Identifier: keyid:A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:08:19:91:28:70:24:fa:da:60:76:10:e2:46:18:3c:2b:b0: 88:b8:c0:b2:e1:4a:4a:c3:7b:61:e5:8b:ee:6d:a5:4e:72:b9: e4:cf:24:90:db:4c:88:69:5d:51:e0:46:7b:48:ef:72:3e:ac: c9:bf:64:fa:70:31:a2:1c:8a:35:39:5f:ce:dc:b9:f9:60:24: ff:3a:4a:68:e8:fe:e1:b4:32:e2:ac:bc:7d:9c:e3:d5:d3:00: 53:75:07:1a:05:35:bb:2c:38:e8:af:1b:78:81:4b:cf:a6:87: cd:27:e3:2f:57:21:f4:07:bd:f6:0f:58:ad:e9:8b:f5:0b:46: f1:8e:cc:00:46:38:7d:52:13:e0:76:7c:a4:78:0e:62:9a:71: cf:83:10:a7:62:73:7e:d0:29:ee:16:d2:39:9f:55:2d:65:0a: 5e:40:95:83:bc:ca:b2:16:cb:39:77:36:68:7a:38:04:65:5a: 3e:79:db:cb:18:20:be:1f:b0:4f:b1:a4:e4:67:a9:17:1c:8a: 49:64:d5:a1:f0:47:8f:a9:7a:bc:34:a5:15:1d:29:6b:77:4a: 35:4e:2d:fa:71:2f:04:d8:3b:49:a5:a4:78:d4:78:8a:56:ca: 72:6a:e5:42:76:59:c0:b2:78:79:cf:4f:6d:bb:2c:93:8a:1d: 6f:80:fe:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CCWmpJcO4spY+u1XrDXUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNGU2MDE3ZTFmZTAzOTMyNzhjMjg1OWY0MzA0M2IzMWVl NmM4OWEwHhcNMjYwMTI2MDIwMDQxWhcNMjYwMTI3MDIwMDQxWjAzMTEwLwYDVQQD EyhjZGE1OTQ0OTBhYTllOGYxZDNhNmY0YzkyNWJjMzA1OTkxNjdiYTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmowgVgRMk+lXWzivcRM74jh0Jcc BOdZAlMTOwF6+7IwGr9AWwZB9dEKegBtqEPtBjOI8zFLRPdyqylROgFJg0CTK4qG qw0z0viA4c/UYoPJfnzzy52JINxGs7xuNRDeO0NSXeKmJ26AWkSAMCFbbpLmGLz3 capXFIieYvC6YhWnkuDGqXfZcDg3SfGti+X8snPlCRBhnEHPBOzL8HD80AHxgkTy INmdhFhd1f+d0e5V/bPJUS6S1MquDy8crFQL0z2OxMFX8sXjVv2oIma0rSvqfgfC 8rGxIIo+ssaSNI9ed8qojIEQoDNUJsC9bL1EyA4345vCI1eigcm3fPKkzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2llEkKqejx06b0ySW8MFmRZ7oWMB8GA1UdIwQY MBaAFKNOYBfh/gOTJ4woWfQwQ7Me5siaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzA1Z0YtSC1BNU1uakNoWjlEQkRzeDdteUpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC82ZDYyNWMtN2U2MC00NTIzLTk0OTEt ZDExMjI5OWZmNjk1LzEvbzA1Z0YtSC1BNU1uakNoWjlEQkRzeDdteUpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC82ZDYyNWMtN2U2MC00NTIzLTk0OTEtZDExMjI5OWZmNjk1 LzEvbzA1Z0YtSC1BNU1uakNoWjlEQkRzeDdteUpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQgZkShw JPraYHYQ4kYYPCuwiLjAsuFKSsN7YeWL7m2lTnK55M8kkNtMiGldUeBGe0jvcj6s yb9k+nAxohyKNTlfzty5+WAk/zpKaOj+4bQy4qy8fZzj1dMAU3UHGgU1uyw46K8b eIFLz6aHzSfjL1ch9Ae99g9YremL9QtG8Y7MAEY4fVIT4HZ8pHgOYppxz4MQp2Jz ftAp7hbSOZ9VLWUKXkCVg7zKshbLOXc2aHo4BGVaPnnbyxggvh+wT7Gk5GepFxyK SWTVofBHj6l6vDSlFR0pa3dKNU4t+nEvBNg7SaWkeNR4ilbKcmrlQnZZwLJ4ec9P bbssk4odb4D+4w== -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:32 2026 by rpki-client