This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft File: o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft (raw, json) Hash identifier: ZvuPdrb6yzQdr9A7jE6e0aXTPNAJ6Ljr63tKt0tFB7E= Subject key identifier: 3D:92:51:A0:67:19:52:C6:0A:F3:0B:97:14:BF:B2:C0:17:D9:65:99 Authority key identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38 Certificate issuer: /CN=a3a82ee9aa1106ed720d63c3844e666440e34438 Certificate serial: 019BF5AC05D83B587E37BE69BBFA1E047C6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft Manifest number: 0D1D Signing time: Sun 25 Jan 2026 15:00:50 +0000 Manifest this update: Sun 25 Jan 2026 15:00:50 +0000 Manifest next update: Mon 26 Jan 2026 15:00:50 +0000 Files and hashes: 1: LkRlWvjojGp88ImWjfx2Z3qaOy4.roa (hash: kB89kqUtMQKcyA7jSVcONA2ZKYzA7LpbjPMFFP5OhVw=) 2: o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl (hash: equQyK2jEBrRFiJSKiceYwLNla+wQPaTEJLD0Ox+GC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:05:d8:3b:58:7e:37:be:69:bb:fa:1e:04:7c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3a82ee9aa1106ed720d63c3844e666440e34438 Validity Not Before: Jan 25 15:00:50 2026 GMT Not After : Jan 26 15:00:50 2026 GMT Subject: CN=3d9251a0671952c60af30b9714bfb2c017d96599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b3:14:f5:b1:71:b6:32:4d:3e:83:bf:a7:58: 91:f0:bc:31:b9:f0:35:5c:b7:ad:f7:6e:9e:64:bd: 58:ae:ac:84:73:58:55:4e:d5:dc:f7:16:bc:d0:21: 67:7b:5e:e4:46:9a:a1:2f:a3:07:53:84:b3:92:86: 0e:95:b8:3c:16:f0:00:28:de:cb:3f:d7:5a:f6:2c: 16:ed:c7:c9:13:5e:df:02:73:ba:f8:a9:8a:e6:6c: e9:8d:9b:2b:01:df:88:9c:0e:62:c6:6f:19:0b:cc: e5:eb:38:0f:c6:65:da:78:36:52:c8:1d:10:f2:f9: f8:b3:0f:d4:f6:88:0d:1e:82:80:7d:a3:51:a2:35: eb:05:16:a8:1a:34:c5:84:25:81:94:41:21:90:70: 50:11:13:5f:08:eb:02:f2:43:03:36:e6:9c:eb:2a: 1e:1c:7c:81:22:b1:84:7c:ca:ad:f9:ed:96:ba:76: ab:c6:99:9a:7a:fd:db:dd:76:5d:c5:4b:02:2b:fa: c0:f8:d1:30:1e:b6:94:3f:29:e7:e6:35:29:d6:c3: 9b:47:00:bc:f5:95:31:c9:6c:c4:50:57:96:bc:8d: ac:df:a5:f0:2a:93:68:84:bc:ae:76:0e:9d:84:58: b3:53:61:d7:59:7d:06:50:da:e5:ef:53:ff:fb:89: ea:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:92:51:A0:67:19:52:C6:0A:F3:0B:97:14:BF:B2:C0:17:D9:65:99 X509v3 Authority Key Identifier: keyid:A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:c7:92:4a:3f:e0:61:59:32:22:cb:0b:8f:f4:b0:4e:6c:35: 7c:f0:9a:7a:85:ce:2d:24:72:43:04:8d:f3:b9:64:92:4f:ee: 41:70:8a:be:72:cc:5f:40:d9:88:e4:7b:e9:32:ad:45:6d:78: 17:03:b5:da:1e:04:11:19:1a:ad:97:6a:24:53:09:2e:b6:10: ec:a3:76:72:19:50:49:52:bd:1c:f8:27:4f:76:cb:b3:3f:f5: 27:de:37:42:42:50:81:c8:cd:b0:ef:c5:c7:e9:3d:03:76:d3: 6d:66:de:ed:c8:91:35:f9:1f:4a:b9:e5:23:6c:d9:0c:bb:65: 12:0d:fc:4d:82:e2:9e:05:2d:68:af:68:c9:43:69:6b:51:3a: d0:d7:de:fb:c2:93:6d:82:95:b2:50:bb:50:52:76:20:ee:9b: 69:e4:06:2f:ae:7d:62:ed:99:4c:01:89:f2:55:84:f3:b2:a4: 72:7f:20:0b:f1:9f:b4:ee:3f:99:2f:2a:5c:2b:c3:e2:bf:b4: 62:1c:fd:79:c8:a5:b4:15:bc:38:0c:1b:c4:8b:b2:67:dc:f1: 8b:28:6a:18:d8:3d:fb:d7:10:a8:2a:12:31:ba:67:b8:62:35: 98:da:d9:43:16:b0:92:df:5b:5d:c4:e8:f8:2a:61:dc:5c:d3: 09:5c:b0:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rAXYO1h+N75pu/oeBHxqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYTgyZWU5YWExMTA2ZWQ3MjBkNjNjMzg0NGU2NjY0NDBl MzQ0MzgwHhcNMjYwMTI1MTUwMDUwWhcNMjYwMTI2MTUwMDUwWjAzMTEwLwYDVQQD EygzZDkyNTFhMDY3MTk1MmM2MGFmMzBiOTcxNGJmYjJjMDE3ZDk2NTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7MU9bFxtjJNPoO/p1iR8LwxufA1 XLet926eZL1YrqyEc1hVTtXc9xa80CFne17kRpqhL6MHU4SzkoYOlbg8FvAAKN7L P9da9iwW7cfJE17fAnO6+KmK5mzpjZsrAd+InA5ixm8ZC8zl6zgPxmXaeDZSyB0Q 8vn4sw/U9ogNHoKAfaNRojXrBRaoGjTFhCWBlEEhkHBQERNfCOsC8kMDNuac6yoe HHyBIrGEfMqt+e2Wunarxpmaev3b3XZdxUsCK/rA+NEwHraUPynn5jUp1sObRwC8 9ZUxyWzEUFeWvI2s36XwKpNohLyudg6dhFizU2HXWX0GUNrl71P/+4nqgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2SUaBnGVLGCvMLlxS/ssAX2WWZMB8GA1UdIwQY MBaAFKOoLumqEQbtcg1jw4ROZmRA40Q4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzZndTZhb1JCdTF5RFdQRGhFNW1aRURqUkRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9jNzIwYjQtMWFjYi00NzAzLWJjMjQt NDY3ZTAwOWRhZWQwLzEvbzZndTZhb1JCdTF5RFdQRGhFNW1aRURqUkRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9jNzIwYjQtMWFjYi00NzAzLWJjMjQtNDY3ZTAwOWRhZWQw LzEvbzZndTZhb1JCdTF5RFdQRGhFNW1aRURqUkRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEceSSj/g YVkyIssLj/SwTmw1fPCaeoXOLSRyQwSN87lkkk/uQXCKvnLMX0DZiOR76TKtRW14 FwO12h4EERkarZdqJFMJLrYQ7KN2chlQSVK9HPgnT3bLsz/1J943QkJQgcjNsO/F x+k9A3bTbWbe7ciRNfkfSrnlI2zZDLtlEg38TYLingUtaK9oyUNpa1E60Nfe+8KT bYKVslC7UFJ2IO6baeQGL659Yu2ZTAGJ8lWE87Kkcn8gC/GftO4/mS8qXCvD4r+0 Yhz9eciltBW8OAwbxIuyZ9zxiyhqGNg9+9cQqCoSMbpnuGI1mNrZQxawkt9bXcTo +Cph3FzTCVywgQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:55 2026 by rpki-client