This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json) Hash identifier: NCRTQSkTSeNyb71Tbg8GFHFbuuB6UUESLJCW/EqDlYI= Subject key identifier: F5:0A:91:BD:9C:09:DC:F6:BA:5D:5B:1E:58:4A:CF:F6:7C:48:21:2D Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42 Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42 Certificate serial: 019BF619B7EEDB06E6D084B492015AE4F888 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft Manifest number: 17F8 Signing time: Sun 25 Jan 2026 17:00:39 +0000 Manifest this update: Sun 25 Jan 2026 17:00:39 +0000 Manifest next update: Mon 26 Jan 2026 17:00:39 +0000 Files and hashes: 1: 3rcL1tlw3pK63ayAo53imjyL-no.roa (hash: SVu1M1//nBXFLsHAcTb2G4Z6NIGEa6PRIz6sU6yKha8=) 2: 4ZGNJqUJGxDQ-JDLSgjyKGfqQW8.roa (hash: HdNBs/3VfDOQkzfrG5FPF/W8U9fZWOacY1hI7bXdJa8=) 3: 6gcDsJpxsKX0PxtnBH4T97xLx9M.roa (hash: hIekIZFh7o66l7NKTjbYJTeEDYrlWcQFjp4xOD1i0cs=) 4: GY64ez_3TBoznc2OZ4hfs_27g8w.roa (hash: OnIF1nSE9v8USNjNkyH2G0yJPwu6eDGsA41slMuGwcQ=) 5: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: gaxc1HmfYAK5FSCyfvx1vyOybRZXv7HFlSs9tgAf/dA=) 6: YyvKpuBg6ODuv0IGKi0aBayrqys.roa (hash: s2/s2mh8k6JI7zlQNcMbr3tmc2KdmmWlgFrRw1C4ynI=) 7: vXfLmPKQvq8Xsk8o-7vsGcFAvdA.roa (hash: JskXRzeILl7MbBJ3/C+4HYyn6osGgL+SJwbO/w3txgs=) 8: zIwXYCF_qQZomhHz-X85FuBZGIA.roa (hash: RZTxg5aQOBFbSjJwS0t1zHG9UjIHCREaOssi1fvfsZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:b7:ee:db:06:e6:d0:84:b4:92:01:5a:e4:f8:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42 Validity Not Before: Jan 25 17:00:39 2026 GMT Not After : Jan 26 17:00:39 2026 GMT Subject: CN=f50a91bd9c09dcf6ba5d5b1e584acff67c48212d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7f:93:0e:94:54:8e:c2:7c:cd:64:94:76:3a: 50:2d:a8:9a:ec:65:02:88:49:cd:25:cd:f9:1f:59: 99:c9:e1:86:de:92:c6:b0:2d:21:34:5e:88:6e:9c: 59:96:f5:ab:f9:f6:00:e3:28:5a:21:29:01:eb:e6: 00:84:bb:81:ff:ee:da:90:47:0a:c9:4a:d2:64:c2: 9b:1d:9d:32:46:79:d3:b9:bb:65:f3:2b:e7:1c:00: 13:aa:4b:e5:8e:01:f8:4b:54:28:f3:1c:7b:07:3a: b9:63:7d:d9:db:10:6b:77:8a:9f:1d:28:79:f5:7e: 03:3f:ad:8c:71:54:55:7e:ac:38:01:19:3d:a4:3c: 70:cc:88:a0:2c:7e:eb:3f:6e:be:1a:9a:1d:dc:ca: 5c:6c:38:ed:53:42:1e:f4:77:bc:7f:fd:65:07:5d: 70:e8:bd:70:45:e0:10:b3:ae:cb:aa:c4:5d:9d:4e: 94:2f:c0:5d:d0:09:d9:b4:2d:a4:e9:42:32:79:39: 7e:52:2e:01:8e:0e:02:5c:ff:ef:7f:fb:7f:50:e6: 90:9a:5e:3f:3c:32:11:db:2c:94:09:b6:30:87:a1: 04:39:35:63:3d:fa:92:cb:6c:4b:43:bb:92:55:20: f4:2d:9c:43:1d:76:d1:6d:a8:a5:1a:d9:fd:93:9c: 36:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0A:91:BD:9C:09:DC:F6:BA:5D:5B:1E:58:4A:CF:F6:7C:48:21:2D X509v3 Authority Key Identifier: keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d9:3d:00:ab:9f:af:37:14:68:a3:fd:f7:09:44:e3:da:80: 5d:23:58:71:ff:0c:0b:25:76:66:ba:25:89:61:22:53:7c:55: a3:72:fe:56:b9:c2:d5:2e:8f:a2:20:13:74:fa:05:4a:d4:62: 77:12:6b:86:bd:7c:45:3b:eb:66:63:58:ce:8c:ea:ac:f3:dd: d5:6f:ac:af:1c:4d:ff:e4:74:ac:99:7b:fb:d7:95:8b:96:af: 1b:a2:c0:69:c3:c2:87:0c:b0:3e:31:ed:6d:9c:6c:65:fe:44: 7e:14:ce:80:1c:3b:e7:39:98:d6:d6:3a:1c:fe:12:73:61:66: 2a:64:4e:be:03:ad:e3:9b:c6:83:21:e5:f3:cc:07:4c:72:68: 79:ca:95:bc:b0:96:36:a0:77:a4:94:4d:3e:d6:85:bf:95:69: e5:01:59:34:64:27:5f:f8:21:f5:61:f4:4b:3f:e1:92:aa:ea: 13:78:64:ba:71:9c:a5:62:f1:c2:fa:b6:cf:bf:cd:36:20:c6: a3:ca:2a:21:0c:f4:7b:33:60:05:d9:e0:d8:38:34:37:9e:43: 71:a5:9f:6f:55:95:77:cb:48:79:f5:4b:97:62:83:7a:6b:cb: a9:dc:a9:aa:aa:41:2d:51:7f:5e:04:f3:a2:74:40:bb:b8:d0: 3e:b5:59:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Gbfu2wbm0IS0kgFa5PiIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiYTViMWMwOWFhMzFmNjcxM2M2MWIzMmU1NTgxMDllNDc5 NjZkNDIwHhcNMjYwMTI1MTcwMDM5WhcNMjYwMTI2MTcwMDM5WjAzMTEwLwYDVQQD EyhmNTBhOTFiZDljMDlkY2Y2YmE1ZDViMWU1ODRhY2ZmNjdjNDgyMTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn+TDpRUjsJ8zWSUdjpQLaia7GUC iEnNJc35H1mZyeGG3pLGsC0hNF6IbpxZlvWr+fYA4yhaISkB6+YAhLuB/+7akEcK yUrSZMKbHZ0yRnnTubtl8yvnHAATqkvljgH4S1Qo8xx7Bzq5Y33Z2xBrd4qfHSh5 9X4DP62McVRVfqw4ARk9pDxwzIigLH7rP26+Gpod3MpcbDjtU0Ie9He8f/1lB11w 6L1wReAQs67LqsRdnU6UL8Bd0AnZtC2k6UIyeTl+Ui4Bjg4CXP/vf/t/UOaQml4/ PDIR2yyUCbYwh6EEOTVjPfqSy2xLQ7uSVSD0LZxDHXbRbailGtn9k5w2QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUKkb2cCdz2ul1bHlhKz/Z8SCEtMB8GA1UdIwQY MBaAFDulscCaox9nE8YbMuVYEJ5Hlm1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQt NDY2ZTljYWI3ODY0LzEvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQtNDY2ZTljYWI3ODY0 LzEvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXtk9AKuf rzcUaKP99wlE49qAXSNYcf8MCyV2ZroliWEiU3xVo3L+VrnC1S6PoiATdPoFStRi dxJrhr18RTvrZmNYzozqrPPd1W+srxxN/+R0rJl7+9eVi5avG6LAacPChwywPjHt bZxsZf5EfhTOgBw75zmY1tY6HP4Sc2FmKmROvgOt45vGgyHl88wHTHJoecqVvLCW NqB3pJRNPtaFv5Vp5QFZNGQnX/gh9WH0Sz/hkqrqE3hkunGcpWLxwvq2z7/NNiDG o8oqIQz0ezNgBdng2Dg0N55DcaWfb1WVd8tIefVLl2KDemvLqdypqqpBLVF/XgTz onRAu7jQPrVZzw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:19:19 2026 by rpki-client