This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft File: OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft (raw, json) Hash identifier: NXCu77OoiT/bJshncRBWigq2i0Aw40G5fmerKfagCdM= Subject key identifier: F6:F2:0A:C0:F1:04:73:F1:7A:CE:4F:6F:AD:D9:97:26:71:11:28:71 Authority key identifier: 3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10 Certificate issuer: /CN=3b39b2382f38512e59ed18ebfaa596c955212910 Certificate serial: 019BF8E47250A87B38EBCFDC0748149EAC5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 06:01:19 +0000 Manifest this update: Mon 26 Jan 2026 06:01:19 +0000 Manifest next update: Tue 27 Jan 2026 06:01:19 +0000 Files and hashes: 1: OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl (hash: mAzMoAwZcxV2WDRjYeDR1xet5BNdOkX4pbVXwNZf5Ls=) 2: qDVxC1p-9THPD2NKzi-__A2V64U.roa (hash: XWC7EoG04WzSDS0F+wfZ4gi8j52qEzh256TNEjxof88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e4:72:50:a8:7b:38:eb:cf:dc:07:48:14:9e:ac:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b39b2382f38512e59ed18ebfaa596c955212910 Validity Not Before: Jan 26 06:01:19 2026 GMT Not After : Jan 27 06:01:19 2026 GMT Subject: CN=f6f20ac0f10473f17ace4f6fadd9972671112871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:53:4e:f9:78:34:8a:ba:02:4a:0c:a3:4a:bf: b7:ac:0c:05:93:07:a7:87:a7:98:54:27:4a:6a:69: cb:a2:6a:9f:f2:32:fc:88:92:a8:f7:da:47:e5:04: 3f:6a:42:73:97:9a:55:67:56:67:e5:44:94:7e:89: 69:35:83:75:0f:27:41:94:3d:6b:73:e6:55:ff:3b: 58:c5:12:f9:fc:e0:43:18:d0:84:7d:23:81:fe:b0: 1c:bc:f8:d1:b1:bb:04:d6:f3:24:00:d3:ac:28:bd: 7c:ba:a3:62:0c:f2:7f:ba:69:a0:03:cf:ba:28:03: 10:be:cb:bc:64:6e:40:2b:2a:54:29:e7:f1:62:c6: 39:60:9a:eb:01:7d:07:22:15:04:44:f2:5d:21:eb: c3:0f:0c:17:e8:56:b3:2b:37:45:fa:5a:30:c4:ab: d8:fe:49:d0:68:56:c0:b1:ae:47:58:7e:70:e6:09: 07:52:85:f1:2c:88:9d:fe:a2:c7:3b:8f:ca:8e:a0: f7:83:fe:db:12:68:fb:20:70:01:9b:4c:e8:18:76: 0b:7f:98:bb:4d:e7:bf:18:09:a2:a5:93:75:4c:9f: d7:58:e0:5b:67:ac:e0:aa:d8:12:dc:a3:1d:a7:6a: 83:3f:be:7b:fc:c0:ee:c4:ea:5b:72:36:18:da:8b: bb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F2:0A:C0:F1:04:73:F1:7A:CE:4F:6F:AD:D9:97:26:71:11:28:71 X509v3 Authority Key Identifier: keyid:3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:08:f7:df:d0:4b:ab:0e:60:2e:90:cb:88:96:7f:5a:95:2b: 25:c3:32:2f:1b:cc:e1:42:33:10:6c:b0:b9:71:22:86:ca:19: 7e:01:73:cd:97:b7:2e:40:50:24:d2:68:cc:83:cc:9b:10:26: 62:9c:bc:64:e7:b3:57:c6:3e:3a:6b:34:c3:fd:b2:13:3f:e9: f1:12:55:2f:2d:44:f7:d0:65:66:70:44:89:31:98:28:48:e2: b6:80:eb:80:06:cd:44:46:ad:a6:91:e4:71:82:cc:11:f2:8b: 8a:a2:b6:15:46:12:98:07:a0:7d:45:48:55:a2:28:b2:f4:3e: ae:66:82:84:34:2f:06:65:2b:82:04:56:57:61:37:4f:5c:17: 0a:c1:8d:a5:ca:94:9b:7f:ce:1e:52:bb:bf:86:5b:00:4c:80: cb:91:c0:16:8d:42:db:09:2f:98:66:93:a9:57:b0:e9:d0:4f: ec:24:41:96:93:2f:4c:2d:0a:88:01:45:fc:ac:1b:39:47:91: 79:75:86:ce:e4:c9:09:98:95:75:ad:09:ed:c7:78:7d:fc:86: 42:21:44:1d:4e:e5:37:c9:73:20:fb:81:05:5f:2c:54:e2:10: ce:69:dd:49:45:73:02:b7:91:43:ba:51:d8:f1:82:f6:34:e7: bf:1f:21:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv45HJQqHs468/cB0gUnqxfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMzliMjM4MmYzODUxMmU1OWVkMThlYmZhYTU5NmM5NTUy MTI5MTAwHhcNMjYwMTI2MDYwMTE5WhcNMjYwMTI3MDYwMTE5WjAzMTEwLwYDVQQD EyhmNmYyMGFjMGYxMDQ3M2YxN2FjZTRmNmZhZGQ5OTcyNjcxMTEyODcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVNO+Xg0iroCSgyjSr+3rAwFkwen h6eYVCdKamnLomqf8jL8iJKo99pH5QQ/akJzl5pVZ1Zn5USUfolpNYN1DydBlD1r c+ZV/ztYxRL5/OBDGNCEfSOB/rAcvPjRsbsE1vMkANOsKL18uqNiDPJ/ummgA8+6 KAMQvsu8ZG5AKypUKefxYsY5YJrrAX0HIhUERPJdIevDDwwX6FazKzdF+lowxKvY /knQaFbAsa5HWH5w5gkHUoXxLIid/qLHO4/KjqD3g/7bEmj7IHABm0zoGHYLf5i7 Tee/GAmipZN1TJ/XWOBbZ6zgqtgS3KMdp2qDP757/MDuxOpbcjYY2ou7LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbyCsDxBHPxes5Pb63ZlyZxEShxMB8GA1UdIwQY MBaAFDs5sjgvOFEuWe0Y6/qllslVISkQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3pteU9DODRVUzVaN1Jqci1xV1d5VlVoS1JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmRhZDYtMGVjOC00M2FjLWJjMzMt OGI4ZDc2YjJkMjRlLzEvT3pteU9DODRVUzVaN1Jqci1xV1d5VlVoS1JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8zYmRhZDYtMGVjOC00M2FjLWJjMzMtOGI4ZDc2YjJkMjRl LzEvT3pteU9DODRVUzVaN1Jqci1xV1d5VlVoS1JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwj339BL qw5gLpDLiJZ/WpUrJcMyLxvM4UIzEGywuXEihsoZfgFzzZe3LkBQJNJozIPMmxAm Ypy8ZOezV8Y+Oms0w/2yEz/p8RJVLy1E99BlZnBEiTGYKEjitoDrgAbNREatppHk cYLMEfKLiqK2FUYSmAegfUVIVaIosvQ+rmaChDQvBmUrggRWV2E3T1wXCsGNpcqU m3/OHlK7v4ZbAEyAy5HAFo1C2wkvmGaTqVew6dBP7CRBlpMvTC0KiAFF/KwbOUeR eXWGzuTJCZiVda0J7cd4ffyGQiFEHU7lN8lzIPuBBV8sVOIQzmndSUVzAreRQ7pR 2PGC9jTnvx8hNg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:51 2026 by rpki-client