This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft File: ORl1rVfOt2WtlIvl60w4LcdIRMA.mft (raw, json) Hash identifier: iNuKlxjZT3D+jSJuoC3bADIN8aF7nk3SmFHTnFr+NQA= Subject key identifier: AF:26:7B:B5:19:BB:47:21:C3:5B:4C:5B:F9:C9:7C:1B:F5:90:9B:EA Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0 Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0 Certificate serial: 019BF83F65ECBE4EDC39C5EE8BC220FAC8E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 03:01:02 +0000 Manifest this update: Mon 26 Jan 2026 03:01:02 +0000 Manifest next update: Tue 27 Jan 2026 03:01:02 +0000 Files and hashes: 1: ORl1rVfOt2WtlIvl60w4LcdIRMA.crl (hash: CYVxZwxN5WzqjRazlARnp8/EIoycKjikuG1tgekXdQ8=) 2: l_5sj0n83h1j-KNddGTmHYrghYs.roa (hash: lWD+ja9YbtyG1MA96ufKgRHVHut4712gK2auViaR/PE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:65:ec:be:4e:dc:39:c5:ee:8b:c2:20:fa:c8:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0 Validity Not Before: Jan 26 03:01:02 2026 GMT Not After : Jan 27 03:01:02 2026 GMT Subject: CN=af267bb519bb4721c35b4c5bf9c97c1bf5909bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4d:65:0c:e6:c3:42:83:88:06:94:17:af:3e: a2:79:1a:84:b6:33:d6:37:be:17:bb:0e:38:9c:fc: 07:e0:3b:8a:a6:e5:ef:13:2b:2b:55:12:b8:b9:37: 4e:bb:7a:3b:25:4b:c4:d4:b6:d2:97:0c:da:02:ba: 71:07:e2:3e:bf:24:3c:9b:91:ef:29:6d:be:83:ce: ba:0a:59:fb:c4:b6:3f:17:8f:a6:c9:9a:f8:3a:f8: c8:78:93:a6:96:61:7f:9e:5e:4d:fc:6f:44:15:e8: 39:46:88:fe:9c:52:33:fb:5f:b8:74:b9:bc:93:6d: 3e:d0:78:54:f9:af:cb:ca:67:af:cb:6a:d5:e0:a3: 4f:4d:6c:15:45:20:cb:a4:41:50:6b:35:f0:ff:67: 82:0a:eb:70:31:d5:4c:74:f9:22:23:51:c1:55:70: 47:73:ab:0e:a1:2c:ac:71:f4:ec:89:4b:7f:38:a0: 80:40:b5:49:74:3d:44:2c:42:6d:a6:e5:50:d1:07: 03:a3:be:a4:47:df:23:1c:56:06:8c:1d:42:8a:29: 85:a4:49:45:82:3e:30:5c:cc:19:f4:f3:59:39:32: 27:4c:e2:30:e1:50:83:d9:60:24:c6:74:48:d1:03: 15:87:f6:f9:eb:df:b6:2f:46:0d:49:c9:06:5f:4f: c9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:26:7B:B5:19:BB:47:21:C3:5B:4C:5B:F9:C9:7C:1B:F5:90:9B:EA X509v3 Authority Key Identifier: keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:8b:65:20:5b:75:7c:0b:96:45:f1:ff:46:52:63:14:bd:99: 18:c6:7f:1f:bf:cf:ad:56:59:95:44:2c:af:d7:7b:23:58:0f: f2:00:d4:1a:9c:f1:f1:cb:0b:dd:e0:7c:f8:77:56:b6:86:b0: f8:75:a8:da:0d:7d:44:2f:f8:4f:fb:fe:35:4d:31:16:66:6e: 06:1c:84:cf:45:4b:4e:88:90:ee:e2:2a:da:a6:f7:a9:4d:fc: 27:cc:25:a7:cf:55:2f:d5:37:64:7d:2c:63:dd:b8:46:13:d7: 44:48:05:84:59:3e:e5:22:07:91:31:ca:13:34:f1:26:0f:b2: 05:62:0a:b3:73:c9:3c:a5:32:65:5f:52:cb:20:ac:1d:d1:b7: 76:29:e1:61:ab:29:0d:5e:96:87:aa:dd:37:94:de:19:ca:d6: 6f:23:12:49:5e:8a:8c:b5:84:91:3b:35:6b:ff:02:de:d8:1a: aa:c4:51:4d:3c:51:89:bb:ec:1f:0e:d4:5b:71:cb:5d:af:78: 75:bc:48:46:f8:1c:74:63:85:7f:f7:1c:59:4d:bf:93:ca:1d: 5e:64:5c:d0:5d:91:9b:4d:6b:1c:c4:28:1f:60:c4:03:c8:f4: 48:c3:c1:c2:c1:ea:e0:4d:4b:68:52:e5:c6:e4:0b:5b:8a:1a: 8e:d9:de:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P2Xsvk7cOcXui8Ig+sjjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTk3NWFkNTdjZWI3NjVhZDk0OGJlNWViNGMzODJkYzc0 ODQ0YzAwHhcNMjYwMTI2MDMwMTAyWhcNMjYwMTI3MDMwMTAyWjAzMTEwLwYDVQQD EyhhZjI2N2JiNTE5YmI0NzIxYzM1YjRjNWJmOWM5N2MxYmY1OTA5YmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo01lDObDQoOIBpQXrz6ieRqEtjPW N74Xuw44nPwH4DuKpuXvEysrVRK4uTdOu3o7JUvE1LbSlwzaArpxB+I+vyQ8m5Hv KW2+g866Cln7xLY/F4+myZr4OvjIeJOmlmF/nl5N/G9EFeg5Roj+nFIz+1+4dLm8 k20+0HhU+a/Lymevy2rV4KNPTWwVRSDLpEFQazXw/2eCCutwMdVMdPkiI1HBVXBH c6sOoSyscfTsiUt/OKCAQLVJdD1ELEJtpuVQ0QcDo76kR98jHFYGjB1CiimFpElF gj4wXMwZ9PNZOTInTOIw4VCD2WAkxnRI0QMVh/b569+2L0YNSckGX0/JaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8me7UZu0chw1tMW/nJfBv1kJvqMB8GA1UdIwQY MBaAFDkZda1XzrdlrZSL5etMOC3HSETAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JsMXJWZk90Mld0bEl2bDYwdzRMY2RJUk1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82YjUwNjQtOGQ1ZS00Yzk0LWI1YmQt MDUwMjA0NTMyMjg2LzEvT1JsMXJWZk90Mld0bEl2bDYwdzRMY2RJUk1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy82YjUwNjQtOGQ1ZS00Yzk0LWI1YmQtMDUwMjA0NTMyMjg2 LzEvT1JsMXJWZk90Mld0bEl2bDYwdzRMY2RJUk1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4tlIFt1 fAuWRfH/RlJjFL2ZGMZ/H7/PrVZZlUQsr9d7I1gP8gDUGpzx8csL3eB8+HdWtoaw +HWo2g19RC/4T/v+NU0xFmZuBhyEz0VLToiQ7uIq2qb3qU38J8wlp89VL9U3ZH0s Y924RhPXREgFhFk+5SIHkTHKEzTxJg+yBWIKs3PJPKUyZV9SyyCsHdG3dinhYasp DV6Wh6rdN5TeGcrWbyMSSV6KjLWEkTs1a/8C3tgaqsRRTTxRibvsHw7UW3HLXa94 dbxIRvgcdGOFf/ccWU2/k8odXmRc0F2Rm01rHMQoH2DEA8j0SMPBwsHq4E1LaFLl xuQLW4oajtnehw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:12:40 2026 by rpki-client