This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft File: Ojz5kZosgUbJb1oUsVdFm3lLai4.mft (raw, json) Hash identifier: LJOEWV75znphm7YjGYZOeYjrZr6P7uv5iAEQ5U0t6Cc= Subject key identifier: 7E:98:66:0F:53:B7:C4:3A:6E:6E:70:8C:26:53:15:6F:EF:E8:55:67 Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E Certificate issuer: /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e Certificate serial: 019BF619CA7E3A0748B9F946467155041115 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 17:00:43 +0000 Manifest this update: Sun 25 Jan 2026 17:00:43 +0000 Manifest next update: Mon 26 Jan 2026 17:00:43 +0000 Files and hashes: 1: Ojz5kZosgUbJb1oUsVdFm3lLai4.crl (hash: UqnrfgQjltJCKfQoxPHzRv8HhosG8rHpwdX8mh5jrnI=) 2: nDu8hN-j-Vp_Vtv9oUPzxmmLDIk.roa (hash: WwxgQJEoxT9RlD+HkKWEjQjejeBr0IIFvMv1CfM5j4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:ca:7e:3a:07:48:b9:f9:46:46:71:55:04:11:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e Validity Not Before: Jan 25 17:00:43 2026 GMT Not After : Jan 26 17:00:43 2026 GMT Subject: CN=7e98660f53b7c43a6e6e708c2653156fefe85567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a5:18:14:aa:99:11:0b:78:c3:36:02:52:31: 87:ca:91:88:b2:6a:cf:3e:2c:03:c1:58:d9:c8:73: e2:b3:84:4d:77:06:c3:ab:f3:36:b6:0c:c1:28:df: 57:96:99:a5:78:f4:b7:60:3f:53:b8:18:b1:e1:ea: c5:a7:dc:a1:18:d3:2b:e6:75:9c:40:b3:34:8a:9b: 20:f9:3d:d2:fd:a0:80:66:95:41:ce:64:24:c1:8e: bc:a7:c7:7d:d6:ee:70:74:a7:31:90:64:f7:1c:c7: c3:40:ef:34:f3:9a:97:91:50:c8:a7:f1:2b:31:f4: 21:52:8d:77:5d:38:d0:79:94:f7:b3:5c:29:ce:83: c6:2c:48:4a:a2:35:2c:c3:97:51:8a:ff:57:d2:48: dc:91:f2:c1:22:f8:af:05:83:0e:1c:35:58:a1:51: 89:92:e4:90:c2:72:f9:e5:c4:ba:7a:ba:12:10:83: f4:0f:af:87:54:d8:52:0f:6a:f7:1c:4b:64:6b:7a: 80:9d:95:cc:d0:b5:b2:7f:49:cf:5d:6e:62:94:1f: fe:48:9f:6e:dc:42:c3:19:5f:72:cb:3e:9b:1f:9a: 2a:49:a4:49:b1:4f:67:2c:aa:33:5f:3a:6b:65:56: 05:ef:56:52:e6:c1:a9:e0:30:ab:07:f5:de:ac:d0: 2f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:98:66:0F:53:B7:C4:3A:6E:6E:70:8C:26:53:15:6F:EF:E8:55:67 X509v3 Authority Key Identifier: keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:45:48:1d:d2:37:8d:97:4a:ba:c4:e4:70:22:a5:46:61:23: e9:81:1a:bd:22:9d:93:54:5c:80:45:26:df:40:dc:b7:21:2d: 8a:ab:81:70:48:42:5b:72:f9:d6:98:bc:d3:6b:5e:f2:fa:ae: cf:9e:97:83:ee:53:c2:f0:10:4e:85:cd:8d:f9:ab:e5:d1:ab: 3c:cb:14:5d:53:ed:45:04:fb:4f:e7:d3:6a:df:15:1f:d2:77: 23:44:a2:af:ac:06:3b:86:17:77:1a:54:d8:9e:19:4a:56:91: bc:7c:88:c9:4d:e5:90:fd:3c:b1:8b:d3:2c:1a:de:8b:88:53: c6:90:b1:6b:05:22:39:2c:77:d4:94:db:e5:c5:59:2f:11:9b: d1:00:b8:7d:c8:9a:76:79:de:ea:8d:a7:a8:73:53:78:f5:e5: 71:d6:58:d9:84:23:09:dc:af:bc:d1:fe:45:ed:5e:39:d0:16: 95:22:f4:a3:4f:92:f5:73:37:82:c1:5a:0e:e9:2a:64:58:f1: b5:ac:0d:d0:a8:25:a7:a0:ad:1f:5f:04:47:8f:b5:36:7b:ac: 0a:11:25:56:ce:0d:7e:b0:af:58:20:33:2b:92:09:8b:18:81: a0:d7:a1:67:5e:a0:f9:ef:b7:65:79:0e:2c:61:5a:62:c4:3e: 9e:94:12:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Gcp+OgdIuflGRnFVBBEVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhM2NmOTkxOWEyYzgxNDZjOTZmNWExNGIxNTc0NTliNzk0 YjZhMmUwHhcNMjYwMTI1MTcwMDQzWhcNMjYwMTI2MTcwMDQzWjAzMTEwLwYDVQQD Eyg3ZTk4NjYwZjUzYjdjNDNhNmU2ZTcwOGMyNjUzMTU2ZmVmZTg1NTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6UYFKqZEQt4wzYCUjGHypGIsmrP PiwDwVjZyHPis4RNdwbDq/M2tgzBKN9XlpmlePS3YD9TuBix4erFp9yhGNMr5nWc QLM0ipsg+T3S/aCAZpVBzmQkwY68p8d91u5wdKcxkGT3HMfDQO8085qXkVDIp/Er MfQhUo13XTjQeZT3s1wpzoPGLEhKojUsw5dRiv9X0kjckfLBIvivBYMOHDVYoVGJ kuSQwnL55cS6eroSEIP0D6+HVNhSD2r3HEtka3qAnZXM0LWyf0nPXW5ilB/+SJ9u 3ELDGV9yyz6bH5oqSaRJsU9nLKozXzprZVYF71ZS5sGp4DCrB/XerNAv5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6YZg9Tt8Q6bm5wjCZTFW/v6FVnMB8GA1UdIwQY MBaAFDo8+ZGaLIFGyW9aFLFXRZt5S2ouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85ZWE0OWEtY2Y2Ny00NjZhLWFiNWMt NzBjYmY1MTQ5YTVhLzEvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS85ZWE0OWEtY2Y2Ny00NjZhLWFiNWMtNzBjYmY1MTQ5YTVh LzEvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkVIHdI3 jZdKusTkcCKlRmEj6YEavSKdk1RcgEUm30DctyEtiquBcEhCW3L51pi802te8vqu z56Xg+5TwvAQToXNjfmr5dGrPMsUXVPtRQT7T+fTat8VH9J3I0Sir6wGO4YXdxpU 2J4ZSlaRvHyIyU3lkP08sYvTLBrei4hTxpCxawUiOSx31JTb5cVZLxGb0QC4fcia dnne6o2nqHNTePXlcdZY2YQjCdyvvNH+Re1eOdAWlSL0o0+S9XM3gsFaDukqZFjx tawN0Kglp6CtH18ER4+1NnusChElVs4NfrCvWCAzK5IJixiBoNehZ16g+e+3ZXkO LGFaYsQ+npQS2g== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:57 2026 by rpki-client