This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft File: oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft (raw, json) Hash identifier: A77WK2ChOWrDfQZOMkz93beJS0vWdBRdNfJGmujVCN4= Subject key identifier: FB:E5:A0:6A:E4:6A:3F:70:99:C3:6D:06:82:A8:2B:42:3E:4A:E6:1A Authority key identifier: A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B Certificate issuer: /CN=a15237c39a325aa309b69e66fe09237da1ad0d2b Certificate serial: 019BF65112274F70F69353C57EC5EFC3A781 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft Manifest number: 0BFD Signing time: Sun 25 Jan 2026 18:01:06 +0000 Manifest this update: Sun 25 Jan 2026 18:01:06 +0000 Manifest next update: Mon 26 Jan 2026 18:01:06 +0000 Files and hashes: 1: PAykTqlzIVXa7fwF08Y8fVg3BH8.roa (hash: 2cvx8SwCrzZMQ5UhCJ5LCDN4lqE89NDEgchpM8X0P6c=) 2: SWToFRt_6tmEm6Z8-etXYlP5mtY.roa (hash: 8bPzOcUuusLs1dcrovR1xhzN3lKnr3gbUufI9urpO/s=) 3: oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl (hash: J7dsYlkaENdwkzd+l3PqklgL/KUSM66Jzij+c7/OoUY=) 4: rimbVwyo-KT5fQiH-V76SF8eEgM.roa (hash: gWMp6ftXBLmd7FBwaSyLz8QgWLAsVeMGYPnZBH6twvM=) 5: ufROvs79R76pKz3Vd4MoqsPH7FE.roa (hash: ceBVv5+PSaDyQdnhFVj50M1kNdgLsXZLAIeGcsQzNgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:12:27:4f:70:f6:93:53:c5:7e:c5:ef:c3:a7:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15237c39a325aa309b69e66fe09237da1ad0d2b Validity Not Before: Jan 25 18:01:06 2026 GMT Not After : Jan 26 18:01:06 2026 GMT Subject: CN=fbe5a06ae46a3f7099c36d0682a82b423e4ae61a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f6:73:33:84:cb:10:0d:30:5c:ae:56:b2:b0: 8c:b9:60:e8:64:e7:c8:67:53:28:e5:8c:7e:02:1b: 90:b3:15:bf:43:f1:f5:b3:87:9b:8b:a9:c6:d4:89: b9:90:e4:88:d2:f1:81:24:6d:ae:99:c7:8b:81:38: 4a:4f:e2:23:5f:03:64:2c:33:89:00:e5:bd:38:49: ea:65:4d:c7:82:29:9d:89:74:c4:fb:27:81:46:7f: 6f:21:60:67:02:63:20:4d:b6:84:7e:85:08:33:69: 61:d7:94:65:b2:ce:b7:64:4c:40:b9:e9:7d:82:f9: 82:0f:93:0b:57:89:67:1a:f4:3c:1a:7e:4b:52:d0: 0d:28:83:b0:65:41:51:d7:c9:ff:35:5c:86:75:fb: e9:b2:af:dc:e2:07:8d:bc:f5:25:1a:ec:be:8e:cb: 62:61:d3:5f:6f:a3:2a:77:e0:e2:19:a8:d1:3a:9e: 1e:6e:16:9e:8d:e0:81:99:ee:1e:9b:d6:23:b0:10: 5d:6f:ca:bf:71:de:5a:b6:b6:c7:d9:d9:8d:8b:2a: cb:f3:d2:5b:ae:a8:a1:37:22:95:64:65:6b:ed:a5: 10:19:66:64:b6:e1:26:ae:3c:f2:fd:bc:f9:72:eb: 26:be:bf:15:d7:40:c6:81:ee:2b:9b:b4:1f:32:d5: ac:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E5:A0:6A:E4:6A:3F:70:99:C3:6D:06:82:A8:2B:42:3E:4A:E6:1A X509v3 Authority Key Identifier: keyid:A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:46:00:23:8a:56:df:dd:03:bc:28:30:78:f8:de:f6:dc:b1: 49:1d:04:3b:f9:38:b5:3c:1c:1c:91:d9:87:79:9f:d1:df:21: 21:e1:4c:0c:42:af:3b:c8:81:55:79:e6:38:42:13:5e:76:96: cd:17:28:b3:8f:a0:00:3b:e1:9d:fe:6a:08:cd:20:1b:aa:9b: db:d1:52:b8:2e:34:b9:08:73:b1:fa:a4:8b:cc:97:41:b8:da: 5f:54:97:ec:fb:66:bf:df:2b:d8:9b:bc:59:28:43:bc:9c:33: 41:46:55:5c:98:b2:19:04:4e:89:7b:73:35:c0:2a:1b:81:73: fa:78:c5:24:bb:51:eb:22:c6:0b:84:f6:9b:61:02:d0:d9:64: 8a:59:ca:c1:05:f2:85:08:3d:e6:52:33:4d:54:f9:81:5c:ec: 6f:8c:8d:10:65:54:c5:d9:a3:c0:2c:45:43:2a:94:9f:ec:ec: 74:dd:85:97:32:00:c3:12:05:fa:cb:0a:b5:9a:82:2a:9a:45: c1:49:e0:36:fc:4b:8d:69:16:70:dd:88:d4:e1:a2:ea:f6:6f: 3e:ec:48:4a:f9:a3:cb:9a:da:c3:2e:32:12:57:fd:6f:31:b4: 50:05:3b:dd:78:1d:1c:4c:ba:ee:66:f8:0b:8c:9c:d6:03:91: 74:9c:02:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2URInT3D2k1PFfsXvw6eBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNTIzN2MzOWEzMjVhYTMwOWI2OWU2NmZlMDkyMzdkYTFh ZDBkMmIwHhcNMjYwMTI1MTgwMTA2WhcNMjYwMTI2MTgwMTA2WjAzMTEwLwYDVQQD EyhmYmU1YTA2YWU0NmEzZjcwOTljMzZkMDY4MmE4MmI0MjNlNGFlNjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/ZzM4TLEA0wXK5WsrCMuWDoZOfI Z1Mo5Yx+AhuQsxW/Q/H1s4ebi6nG1Im5kOSI0vGBJG2umceLgThKT+IjXwNkLDOJ AOW9OEnqZU3HgimdiXTE+yeBRn9vIWBnAmMgTbaEfoUIM2lh15Rlss63ZExAuel9 gvmCD5MLV4lnGvQ8Gn5LUtANKIOwZUFR18n/NVyGdfvpsq/c4geNvPUlGuy+jsti YdNfb6Mqd+DiGajROp4ebhaejeCBme4em9YjsBBdb8q/cd5atrbH2dmNiyrL89Jb rqihNyKVZGVr7aUQGWZktuEmrjzy/bz5cusmvr8V10DGge4rm7QfMtWsiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvloGrkaj9wmcNtBoKoK0I+SuYaMB8GA1UdIwQY MBaAFKFSN8OaMlqjCbaeZv4JI32hrQ0rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9mMzMyMjktY2EyZC00MTA4LTg5MmQt NGM5MTBhZTM3MzVkLzEvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9mMzMyMjktY2EyZC00MTA4LTg5MmQtNGM5MTBhZTM3MzVk LzEvb1ZJM3c1b3lXcU1KdHA1bV9na2pmYUd0RFNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkYAI4pW 390DvCgwePje9tyxSR0EO/k4tTwcHJHZh3mf0d8hIeFMDEKvO8iBVXnmOEITXnaW zRcos4+gADvhnf5qCM0gG6qb29FSuC40uQhzsfqki8yXQbjaX1SX7Ptmv98r2Ju8 WShDvJwzQUZVXJiyGQROiXtzNcAqG4Fz+njFJLtR6yLGC4T2m2EC0NlkilnKwQXy hQg95lIzTVT5gVzsb4yNEGVUxdmjwCxFQyqUn+zsdN2FlzIAwxIF+ssKtZqCKppF wUngNvxLjWkWcN2I1OGi6vZvPuxISvmjy5rawy4yElf9bzG0UAU73XgdHEy67mb4 C4yc1gORdJwCaQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:12:10 2026 by rpki-client