This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft File: oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json) Hash identifier: x3tArDweuG9XRh1rVsTVf/3ysJ5Zkb7l3NSY6uNuPLs= Subject key identifier: 97:61:3C:4A:D1:26:DD:62:2E:90:27:A1:5F:5F:A9:9F:65:A7:35:75 Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29 Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429 Certificate serial: 019BF8AD31C973DE6C76D2060BE382F9D0BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 05:00:58 +0000 Manifest this update: Mon 26 Jan 2026 05:00:58 +0000 Manifest next update: Tue 27 Jan 2026 05:00:58 +0000 Files and hashes: 1: 9qy5igh9qX4Uci7bRZZV_psOu7w.roa (hash: Tnhc5d5aGwpLgFhdFa9P4ZDIL3T2P5zMzH6turPE6uU=) 2: fOlQP3-PfpjSE6EMsORwi3KiU_0.roa (hash: 9xJNvssU8LW9KKQFyieBw8RskBII5JpvnR6eOew6NAc=) 3: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: rkBcr7rbqU+ZT4hv4cWWMXU1KiNIZQBIU1u4niglmnU=) 4: y_vM2bxFeu3R2ZRJCgBGtdVcJNE.roa (hash: 1lKjAhubbXr/HU27nWYgH1iiL0s0e2dhdfsbjU73q04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:31:c9:73:de:6c:76:d2:06:0b:e3:82:f9:d0:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a10c73530bb684fd569dfc432704675704183429 Validity Not Before: Jan 26 05:00:58 2026 GMT Not After : Jan 27 05:00:58 2026 GMT Subject: CN=97613c4ad126dd622e9027a15f5fa99f65a73575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7a:7b:9f:5f:be:e0:0a:6a:15:82:16:0c:27: be:d0:8f:2b:e2:d8:4d:ee:83:aa:aa:9f:e7:73:06: a3:fe:91:dd:c8:82:48:cd:6d:b3:f2:e6:4a:06:43: 55:f0:f5:4c:e9:35:1b:b0:b0:94:89:e2:5e:de:e4: 5d:c4:b5:53:88:83:68:4d:66:a6:30:e3:60:4d:b7: f4:b4:8a:af:9d:15:a2:13:d0:0f:f0:fb:18:15:87: 2a:25:22:70:c9:b6:02:2e:f8:a3:6b:d0:d3:bd:b3: 87:c0:b3:b9:92:c8:5c:1b:c0:1a:87:4a:73:24:52: 8a:36:6f:d1:e8:c6:67:14:7b:1a:d5:4e:97:a8:80: bb:36:3b:18:49:54:31:5a:17:40:96:7c:42:5b:7a: 21:1f:da:7e:44:c3:20:13:9f:c1:89:86:e7:f9:40: 31:32:8f:05:58:71:2a:33:7e:21:87:40:8b:8f:24: 36:ce:3b:70:36:e1:14:91:f8:ae:d4:12:86:58:33: 64:d2:f4:ee:9c:4c:5e:84:ec:18:5c:41:17:83:cf: 6c:49:f8:9a:27:00:f6:df:25:bf:ef:88:a2:7d:5b: 16:7f:7e:3a:51:53:b4:3e:39:59:a8:e3:3c:a1:83: f3:2a:79:a8:dd:0a:60:dd:99:47:7e:f1:34:65:6f: 13:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:61:3C:4A:D1:26:DD:62:2E:90:27:A1:5F:5F:A9:9F:65:A7:35:75 X509v3 Authority Key Identifier: keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:51:c3:01:18:c5:84:19:a8:f4:35:7b:52:e8:45:bd:25:41: 4d:66:d2:fd:68:91:42:88:d9:7c:2a:7b:a0:0e:99:d7:66:3e: 06:81:ee:cf:13:d9:99:c7:b7:44:21:10:13:28:44:a9:f7:84: bd:ce:6f:89:af:d1:06:a5:ea:27:96:df:7c:47:ad:a6:87:d0: 64:3c:7c:0d:58:55:c6:a6:cb:b7:01:38:47:4b:da:a6:cf:e8: 7a:e5:33:27:c6:bd:7d:0f:2e:df:05:32:d8:61:a6:bd:bb:4f: 59:d8:ba:af:98:f2:35:8d:52:41:69:eb:59:69:24:84:42:30: b3:e2:2e:9b:61:14:4b:0b:4d:03:79:e0:6c:18:e0:db:98:83: 79:1a:06:97:a3:d2:85:22:04:2d:6f:2e:7f:80:90:57:60:9a: e9:b3:d4:fb:1d:f9:49:41:74:44:49:47:9c:51:19:1b:03:f2: 22:13:ac:e7:d6:a7:00:cf:d4:34:1d:b6:8c:24:c8:c6:e3:d1: ed:30:af:4c:47:ef:59:90:43:d4:2e:6a:d4:69:95:56:03:c8: e1:41:3b:e6:60:2a:85:9c:d2:15:cb:64:55:96:aa:f7:07:96: c8:ab:8a:c3:5e:a8:34:09:8c:23:1c:e9:46:ab:dd:6e:bd:5d: 22:e9:14:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rTHJc95sdtIGC+OC+dC/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMGM3MzUzMGJiNjg0ZmQ1NjlkZmM0MzI3MDQ2NzU3MDQx ODM0MjkwHhcNMjYwMTI2MDUwMDU4WhcNMjYwMTI3MDUwMDU4WjAzMTEwLwYDVQQD Eyg5NzYxM2M0YWQxMjZkZDYyMmU5MDI3YTE1ZjVmYTk5ZjY1YTczNTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3p7n1++4ApqFYIWDCe+0I8r4thN 7oOqqp/ncwaj/pHdyIJIzW2z8uZKBkNV8PVM6TUbsLCUieJe3uRdxLVTiINoTWam MONgTbf0tIqvnRWiE9AP8PsYFYcqJSJwybYCLvija9DTvbOHwLO5kshcG8Aah0pz JFKKNm/R6MZnFHsa1U6XqIC7NjsYSVQxWhdAlnxCW3ohH9p+RMMgE5/BiYbn+UAx Mo8FWHEqM34hh0CLjyQ2zjtwNuEUkfiu1BKGWDNk0vTunExehOwYXEEXg89sSfia JwD23yW/74iifVsWf346UVO0PjlZqOM8oYPzKnmo3Qpg3ZlHfvE0ZW8T0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdhPErRJt1iLpAnoV9fqZ9lpzV1MB8GA1UdIwQY MBaAFKEMc1MLtoT9Vp38QycEZ1cEGDQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAt N2QwODI5MWE3NjYyLzEvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAtN2QwODI5MWE3NjYy LzEvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlHDARjF hBmo9DV7UuhFvSVBTWbS/WiRQojZfCp7oA6Z12Y+BoHuzxPZmce3RCEQEyhEqfeE vc5via/RBqXqJ5bffEetpofQZDx8DVhVxqbLtwE4R0vaps/oeuUzJ8a9fQ8u3wUy 2GGmvbtPWdi6r5jyNY1SQWnrWWkkhEIws+Ium2EUSwtNA3ngbBjg25iDeRoGl6PS hSIELW8uf4CQV2Ca6bPU+x35SUF0RElHnFEZGwPyIhOs59anAM/UNB22jCTIxuPR 7TCvTEfvWZBD1C5q1GmVVgPI4UE75mAqhZzSFctkVZaq9weWyKuKw16oNAmMIxzp Rqvdbr1dIukUFA== -----END CERTIFICATE-----Generated at Mon Jan 26 06:24:10 2026 by rpki-client