This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft File: obBHf50JosdPTEWegLcpr-6zEtQ.mft (raw, json) Hash identifier: KJnp6dWwGKqoPn00WqjlhNmia+6QHsB7CVTXWzSqElc= Subject key identifier: A5:44:9D:09:35:1A:ED:BF:EA:DA:59:A0:D1:E9:F1:FB:9A:03:3E:13 Authority key identifier: A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4 Certificate issuer: /CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4 Certificate serial: 019BF83EFD3550C056D6BA69337640FEE501 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft Manifest number: 0D85 Signing time: Mon 26 Jan 2026 03:00:36 +0000 Manifest this update: Mon 26 Jan 2026 03:00:36 +0000 Manifest next update: Tue 27 Jan 2026 03:00:36 +0000 Files and hashes: 1: GcmnLhUrxsDtpi6IFcCeNgV9CNU.roa (hash: 30rGZU6mCf0D1WtNl4OSSePM1TRDWesSyIJi8OZOjqw=) 2: T9QosLBjVi3O4na1965Ec34JXvw.roa (hash: HSBCkcAnz7XfejtJRKHSAfoqFOLGJkEPluwkxCR0nhA=) 3: obBHf50JosdPTEWegLcpr-6zEtQ.crl (hash: EYPhwp22AC9FComx6l+lBm/K0/d8LgcihL7CK/vDs2g=) 4: z_9II5WYBoTBGZ5pgFe4r6CevAw.roa (hash: b3pynxd2lAP3NtJ8uzmF53kEH7MeotRATSOpsRAWQMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3e:fd:35:50:c0:56:d6:ba:69:33:76:40:fe:e5:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b0477f9d09a2c74f4c459e80b729afeeb312d4 Validity Not Before: Jan 26 03:00:36 2026 GMT Not After : Jan 27 03:00:36 2026 GMT Subject: CN=a5449d09351aedbfeada59a0d1e9f1fb9a033e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:74:b9:22:f7:60:fa:1a:a1:6c:bc:d7:2f:9d: 6b:d5:25:63:d3:7b:a2:ff:4d:35:ad:08:b0:1b:24: 6d:b9:ad:8f:45:9f:0e:20:42:57:6c:c6:f3:0a:7f: 7e:31:0f:ef:5b:22:d7:b3:e8:d3:04:ff:eb:8b:18: d9:ad:a8:56:6e:6d:f6:a6:0b:01:49:96:88:ca:38: d2:d3:f4:fa:2f:b6:c2:9f:9f:a4:08:86:6f:20:fc: b6:ce:73:c5:8c:5a:13:ad:d4:1a:c5:97:dc:fa:e6: 56:20:99:37:56:77:5e:9a:f9:ac:cf:43:6b:22:4d: c0:76:dd:d1:cb:0d:b1:4c:49:3a:ab:b7:e6:67:b4: c9:19:22:97:85:15:f5:80:87:d0:6c:d7:33:37:13: 37:38:1f:df:3e:21:63:78:ac:61:e8:c0:17:ba:ac: b7:4f:70:07:61:a0:cf:a6:10:b6:08:c9:d3:ad:c5: 8f:08:0f:e0:c5:04:4c:a2:0e:5b:ea:ae:44:19:3e: f8:eb:4c:09:34:01:8e:6b:92:09:37:84:ac:07:32: 8c:07:db:77:60:d6:d7:61:49:1e:66:e4:a7:b0:16: 07:e6:a6:69:f1:4b:61:64:15:58:c9:68:b4:bf:c0: cb:82:a9:b6:10:3b:26:f7:aa:92:c7:21:55:68:df: 3e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:44:9D:09:35:1A:ED:BF:EA:DA:59:A0:D1:E9:F1:FB:9A:03:3E:13 X509v3 Authority Key Identifier: keyid:A1:B0:47:7F:9D:09:A2:C7:4F:4C:45:9E:80:B7:29:AF:EE:B3:12:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obBHf50JosdPTEWegLcpr-6zEtQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2451b7-9091-4a27-ab91-348f9ffbd883/1/obBHf50JosdPTEWegLcpr-6zEtQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e3:c4:05:ac:8d:f8:bb:f1:dc:8c:61:2a:ae:ab:f8:2f:df: 9b:dd:5e:c6:ee:d8:47:04:dd:9f:a9:0c:7b:0d:09:43:89:e5: 86:40:70:0c:cb:49:76:8a:a7:b4:95:d3:dd:3c:fd:f6:08:cd: 68:31:14:08:53:12:c5:d1:fe:f2:93:c6:e7:83:4d:95:f9:6a: f7:4d:49:65:a2:12:0a:76:ef:40:a0:72:83:cd:0f:ce:fa:af: 04:bb:fc:65:8f:fe:85:aa:ca:a5:ca:33:42:c5:c4:e4:e2:05: 0b:f6:6b:bf:0c:f1:80:de:2f:3a:f9:ee:5b:c8:c2:a1:23:c1: 10:db:55:d4:f5:6a:fc:a0:dc:19:3e:61:d5:55:db:cb:a1:dc: cb:b7:c5:ce:9d:89:3c:f5:86:73:f2:81:8c:10:6a:55:32:c1: bf:de:38:5d:c1:41:01:7f:7f:b4:18:ee:62:4a:f9:5a:8a:29: 8c:49:14:e6:9e:cb:a3:a5:c0:85:f4:6f:39:fa:63:33:5c:11: aa:2b:3d:59:4e:32:32:4d:45:78:ff:a0:67:3c:6c:f8:d1:0c: b2:df:a9:4f:7a:e1:08:0c:6e:b1:e8:fc:b6:46:85:1e:49:7c: b0:77:69:f6:57:61:3b:96:75:ca:4b:58:2b:93:38:c9:98:cd: 07:8d:da:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4Pv01UMBW1rppM3ZA/uUBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYjA0NzdmOWQwOWEyYzc0ZjRjNDU5ZTgwYjcyOWFmZWVi MzEyZDQwHhcNMjYwMTI2MDMwMDM2WhcNMjYwMTI3MDMwMDM2WjAzMTEwLwYDVQQD EyhhNTQ0OWQwOTM1MWFlZGJmZWFkYTU5YTBkMWU5ZjFmYjlhMDMzZTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXS5Ivdg+hqhbLzXL51r1SVj03ui /001rQiwGyRtua2PRZ8OIEJXbMbzCn9+MQ/vWyLXs+jTBP/rixjZrahWbm32pgsB SZaIyjjS0/T6L7bCn5+kCIZvIPy2znPFjFoTrdQaxZfc+uZWIJk3Vndemvmsz0Nr Ik3Adt3Ryw2xTEk6q7fmZ7TJGSKXhRX1gIfQbNczNxM3OB/fPiFjeKxh6MAXuqy3 T3AHYaDPphC2CMnTrcWPCA/gxQRMog5b6q5EGT7460wJNAGOa5IJN4SsBzKMB9t3 YNbXYUkeZuSnsBYH5qZp8UthZBVYyWi0v8DLgqm2EDsm96qSxyFVaN8+3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVEnQk1Gu2/6tpZoNHp8fuaAz4TMB8GA1UdIwQY MBaAFKGwR3+dCaLHT0xFnoC3Ka/usxLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2JCSGY1MEpvc2RQVEVXZWdMY3ByLTZ6RXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNDUxYjctOTA5MS00YTI3LWFiOTEt MzQ4ZjlmZmJkODgzLzEvb2JCSGY1MEpvc2RQVEVXZWdMY3ByLTZ6RXRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8yNDUxYjctOTA5MS00YTI3LWFiOTEtMzQ4ZjlmZmJkODgz LzEvb2JCSGY1MEpvc2RQVEVXZWdMY3ByLTZ6RXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOPEBayN +Lvx3IxhKq6r+C/fm91exu7YRwTdn6kMew0JQ4nlhkBwDMtJdoqntJXT3Tz99gjN aDEUCFMSxdH+8pPG54NNlflq901JZaISCnbvQKByg80PzvqvBLv8ZY/+harKpcoz QsXE5OIFC/ZrvwzxgN4vOvnuW8jCoSPBENtV1PVq/KDcGT5h1VXby6Hcy7fFzp2J PPWGc/KBjBBqVTLBv944XcFBAX9/tBjuYkr5WoopjEkU5p7Lo6XAhfRvOfpjM1wR qis9WU4yMk1FeP+gZzxs+NEMst+pT3rhCAxusej8tkaFHkl8sHdp9ldhO5Z1yktY K5M4yZjNB43asA== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:49 2026 by rpki-client