This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft File: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft (raw, json) Hash identifier: 4lrfnRpjpo9d5If1CRgbZOa3quXKATtg5pYGxQIbBFQ= Subject key identifier: F5:19:CE:9B:2C:2A:B8:E3:A6:CD:4B:D2:6A:A0:86:D5:97:55:E3:39 Authority key identifier: A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44 Certificate issuer: /CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44 Certificate serial: 019BF53ECC5F7E1EF2C4CAF0B69AD129CC35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft Manifest number: 09BB Signing time: Sun 25 Jan 2026 13:01:31 +0000 Manifest this update: Sun 25 Jan 2026 13:01:31 +0000 Manifest next update: Mon 26 Jan 2026 13:01:31 +0000 Files and hashes: 1: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl (hash: IAKGkqQ79diu5ekz5pJdKEahBquLndJ4kGLK+JEl7xs=) 2: rTTUeShcOXNB_38gPBfANBYb9Rg.roa (hash: SNHTIMM1yFWrTxfEjv177J1xrcwVvQjJHLgNi04rw5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:cc:5f:7e:1e:f2:c4:ca:f0:b6:9a:d1:29:cc:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44 Validity Not Before: Jan 25 13:01:31 2026 GMT Not After : Jan 26 13:01:31 2026 GMT Subject: CN=f519ce9b2c2ab8e3a6cd4bd26aa086d59755e339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:af:99:7f:05:ef:f7:80:fd:24:e4:db:d3:56: 9a:4d:a6:d3:5f:0b:a8:cf:ee:a9:a7:9c:0b:71:31: 9f:ad:1a:7a:a8:0f:b2:ee:14:15:d1:41:27:cf:ec: 54:9d:fb:80:8b:40:5b:26:73:ab:48:80:a9:5f:da: fa:f3:67:d6:aa:bb:fd:4f:85:20:a5:9c:f2:5a:81: 78:ea:52:67:c8:a8:34:08:c8:d3:01:99:cf:1f:8b: a1:2b:6b:f3:38:f2:82:06:1c:c3:39:c0:19:cb:bd: 99:f8:a1:db:21:5e:68:38:97:1d:0a:87:4c:f9:ee: 08:e8:07:e6:8b:e0:77:63:59:88:3e:6e:db:58:b0: 20:a7:b8:9c:d9:2d:c3:b0:b4:ea:87:6b:84:28:59: 82:3e:17:1e:8c:0e:ea:83:6e:60:bd:be:12:ed:03: fa:14:f4:cb:6e:4e:23:dc:4a:45:fb:2a:d4:b8:27: d8:0b:16:f5:eb:90:0b:21:2f:18:23:1c:e2:ed:d3: 00:2a:20:d8:48:6e:63:ee:7c:5f:af:49:b1:98:0d: 09:d0:c4:15:d3:3c:8f:e1:3b:89:d8:a7:7e:e3:59: bf:3a:a4:cd:8e:0d:4d:2e:ea:39:63:1b:96:84:59: 4c:ab:6a:aa:3b:13:f8:34:b0:bc:87:14:ab:29:f0: ee:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:19:CE:9B:2C:2A:B8:E3:A6:CD:4B:D2:6A:A0:86:D5:97:55:E3:39 X509v3 Authority Key Identifier: keyid:A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:dc:3a:00:14:6a:94:2c:85:35:d5:f0:44:86:55:18:74:45: 7e:72:07:3b:9a:5f:7b:89:cc:12:f1:16:43:93:52:2f:b3:7d: 23:47:54:fb:46:de:69:cc:3a:12:54:ac:64:81:65:63:f5:11: 6e:67:29:7f:f4:e0:4d:e3:4d:ab:56:6d:bd:25:d5:e3:38:fc: 3c:47:d5:eb:29:c5:a6:36:78:e0:73:99:14:c0:6a:ad:d3:44: 61:73:17:c8:c7:eb:e7:b8:dd:cf:f2:f6:8d:e7:52:31:37:60: f6:73:21:fc:c3:48:f5:f0:c0:a5:02:df:12:b2:fa:3b:25:ea: 3e:36:5b:05:f1:3e:b0:91:ee:c6:c9:67:01:07:34:fc:98:e6: 8b:47:2d:dc:b0:48:7f:e6:0b:52:f7:6c:ab:24:ab:c3:61:b1: 48:65:2d:8c:a6:71:45:2f:a5:3f:19:30:1d:9d:30:30:33:3b: 26:4f:7b:03:b1:80:56:ab:ad:14:bb:53:57:c3:d4:38:77:da: c6:4b:65:ed:11:3a:84:46:a2:8a:74:26:ab:5d:bc:16:74:87: be:a6:93:8c:45:0b:36:82:5d:44:c8:ec:78:73:9f:3c:0f:28: 87:b8:56:6d:df:b0:bc:62:f4:af:51:98:7e:f0:26:8b:55:b7: 48:80:5a:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Psxffh7yxMrwtprRKcw1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyMmU2MWIxZGRjODFkYzRmMzM4YTY4OWZlYmQ4ZGZkZGI0 NGJmNDQwHhcNMjYwMTI1MTMwMTMxWhcNMjYwMTI2MTMwMTMxWjAzMTEwLwYDVQQD EyhmNTE5Y2U5YjJjMmFiOGUzYTZjZDRiZDI2YWEwODZkNTk3NTVlMzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa+ZfwXv94D9JOTb01aaTabTXwuo z+6pp5wLcTGfrRp6qA+y7hQV0UEnz+xUnfuAi0BbJnOrSICpX9r682fWqrv9T4Ug pZzyWoF46lJnyKg0CMjTAZnPH4uhK2vzOPKCBhzDOcAZy72Z+KHbIV5oOJcdCodM +e4I6Afmi+B3Y1mIPm7bWLAgp7ic2S3DsLTqh2uEKFmCPhcejA7qg25gvb4S7QP6 FPTLbk4j3EpF+yrUuCfYCxb165ALIS8YIxzi7dMAKiDYSG5j7nxfr0mxmA0J0MQV 0zyP4TuJ2Kd+41m/OqTNjg1NLuo5YxuWhFlMq2qqOxP4NLC8hxSrKfDu+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUZzpssKrjjps1L0mqghtWXVeM5MB8GA1UdIwQY MBaAFKIuYbHdyB3E8zimif69jf3bRL9EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2k1aHNkM0lIY1R6T0thSl9yMk5fZHRFdjBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9kOTNlZGQtYTgwNy00NWE1LTg3MTkt N2JhYmEyOTczNzQ2LzEvb2k1aHNkM0lIY1R6T0thSl9yMk5fZHRFdjBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9kOTNlZGQtYTgwNy00NWE1LTg3MTktN2JhYmEyOTczNzQ2 LzEvb2k1aHNkM0lIY1R6T0thSl9yMk5fZHRFdjBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh9w6ABRq lCyFNdXwRIZVGHRFfnIHO5pfe4nMEvEWQ5NSL7N9I0dU+0beacw6ElSsZIFlY/UR bmcpf/TgTeNNq1ZtvSXV4zj8PEfV6ynFpjZ44HOZFMBqrdNEYXMXyMfr57jdz/L2 jedSMTdg9nMh/MNI9fDApQLfErL6OyXqPjZbBfE+sJHuxslnAQc0/Jjmi0ct3LBI f+YLUvdsqySrw2GxSGUtjKZxRS+lPxkwHZ0wMDM7Jk97A7GAVqutFLtTV8PUOHfa xktl7RE6hEaiinQmq128FnSHvqaTjEULNoJdRMjseHOfPA8oh7hWbd+wvGL0r1GY fvAmi1W3SIBaCQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:15:05 2026 by rpki-client