This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft File: O4_iRlhDAxt3i7jYt701oJT8z0g.mft (raw, json) Hash identifier: rNiGSkA2yldnixxINP+CMqql9k7/D/TwszC1DMI89M4= Subject key identifier: 64:B8:8F:AC:32:8A:AE:47:EC:B7:12:68:41:36:D9:95:CA:8D:AA:A9 Authority key identifier: 3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48 Certificate issuer: /CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48 Certificate serial: 019BF4D0964818FFDF2413AEB177F1691FC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft Manifest number: 124F Signing time: Sun 25 Jan 2026 11:01:09 +0000 Manifest this update: Sun 25 Jan 2026 11:01:09 +0000 Manifest next update: Mon 26 Jan 2026 11:01:09 +0000 Files and hashes: 1: 6J5zq7acHeCorGt2Kz1SRI8TBxw.roa (hash: QUb/O/uGMs7lP+6gaahFi67OYlrRZUT6YWqd/feI1TU=) 2: O4_iRlhDAxt3i7jYt701oJT8z0g.crl (hash: AoWVEMrFCF7X21qhW0ge1UmT+hqn+MhQzfNpmNcx4PI=) 3: SAEHlpuu2VHfT1gYOBIDmp8YrI0.roa (hash: f+Ly+ugjS2e2LTdlARUIcZJrF9Q/kNyEBJzeeNxkntA=) 4: l8nJcuD4rGZxCdIYInml3vohntk.roa (hash: eU3RnT3IPn87hTAFydZwwQYkYydG1vHyM8wmqGF1vjs=) 5: n7VSYaUgna6BrvfvQJiTcoRPzQk.roa (hash: M0u1q9q0trXFDUH6vNkVVYgYyDRJLjrO4qxwE6RvEOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:96:48:18:ff:df:24:13:ae:b1:77:f1:69:1f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48 Validity Not Before: Jan 25 11:01:09 2026 GMT Not After : Jan 26 11:01:09 2026 GMT Subject: CN=64b88fac328aae47ecb712684136d995ca8daaa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3c:19:bd:14:dd:e7:5a:c5:0b:33:96:d9:78: 4e:61:cc:dd:1e:51:13:3c:41:ad:4d:36:59:33:bb: 5b:a2:5d:03:cb:cf:f0:cb:ad:90:ab:9b:83:fa:30: 67:d7:49:03:25:ee:39:88:20:b8:f9:87:8a:2b:69: 96:6a:5e:30:d3:21:62:40:ec:a8:eb:fe:24:36:71: d8:70:b6:68:b2:ae:f7:66:5d:45:74:fb:8c:81:f3: 9d:89:22:32:36:33:45:89:6c:5d:0d:58:c0:8a:bf: ad:d2:4d:83:97:94:66:e2:77:64:f1:56:14:42:f9: dd:ea:7d:dc:96:84:eb:14:06:6d:df:2a:0d:b9:08: 47:c8:e1:e0:a1:7c:f4:68:a3:06:79:6c:f0:04:5b: e4:63:3c:f1:61:be:bf:60:a4:92:87:d3:68:ec:23: f9:50:0e:dc:8e:ae:af:87:ce:15:89:78:c0:3e:11: cf:cb:a3:28:dd:73:61:2c:b4:4a:c3:85:e4:6a:8d: e3:e2:22:83:c3:94:07:fb:ce:d5:90:b6:5d:da:57: a2:a2:3d:c6:08:e1:38:be:63:2e:1a:6a:80:08:b2: be:2c:b7:be:32:dd:55:1b:87:f8:b8:61:1a:b4:0e: a2:f5:a9:5e:be:2b:53:b4:da:aa:5f:db:1e:2c:aa: 4d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B8:8F:AC:32:8A:AE:47:EC:B7:12:68:41:36:D9:95:CA:8D:AA:A9 X509v3 Authority Key Identifier: keyid:3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a5:bc:fe:6a:89:70:20:ba:3f:9e:47:c2:fb:61:5d:53:95: 70:da:7f:74:12:83:06:47:d6:9e:51:1c:31:91:12:54:d9:6e: e2:de:f3:20:94:65:6d:cd:d8:39:9b:68:1e:3f:c5:ab:4c:cb: 6e:85:d3:74:c1:24:11:e7:0c:38:97:19:df:0f:86:44:f8:47: 04:d4:78:df:70:85:a6:bf:b8:79:6e:01:16:b9:6f:5e:32:66: a7:ee:ce:30:0b:2e:db:1e:47:24:79:f9:39:5f:f7:d3:14:be: 63:95:4e:58:e4:42:62:c3:9b:39:5a:85:d8:3c:33:e6:84:96: a6:54:d1:0e:2b:41:af:62:27:9c:a7:5c:a4:aa:45:4d:c9:80: 3b:ad:95:7e:04:8f:1d:50:03:3b:e4:d2:5e:82:be:9f:23:e4: 71:f5:49:d9:3c:ae:e3:cd:58:c8:bd:dc:04:d9:a8:08:f7:d6: 6c:20:58:39:63:5f:72:91:4f:d3:c3:93:ee:bf:22:d8:50:2d: 6f:e5:35:78:8a:b5:7a:62:68:15:61:dd:e9:5b:19:91:be:a9: 07:69:0c:7a:12:7f:ed:b0:94:1e:68:a1:4f:c9:46:bc:5b:27: 78:d6:8e:60:1c:73:97:ff:5b:57:fb:c1:c4:45:96:a8:b1:14: 1f:4f:a8:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00JZIGP/fJBOusXfxaR/FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOGZlMjQ2NTg0MzAzMWI3NzhiYjhkOGI3YmQzNWEwOTRm Y2NmNDgwHhcNMjYwMTI1MTEwMTA5WhcNMjYwMTI2MTEwMTA5WjAzMTEwLwYDVQQD Eyg2NGI4OGZhYzMyOGFhZTQ3ZWNiNzEyNjg0MTM2ZDk5NWNhOGRhYWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzwZvRTd51rFCzOW2XhOYczdHlET PEGtTTZZM7tbol0Dy8/wy62Qq5uD+jBn10kDJe45iCC4+YeKK2mWal4w0yFiQOyo 6/4kNnHYcLZosq73Zl1FdPuMgfOdiSIyNjNFiWxdDVjAir+t0k2Dl5Rm4ndk8VYU Qvnd6n3cloTrFAZt3yoNuQhHyOHgoXz0aKMGeWzwBFvkYzzxYb6/YKSSh9No7CP5 UA7cjq6vh84ViXjAPhHPy6Mo3XNhLLRKw4Xkao3j4iKDw5QH+87VkLZd2leioj3G COE4vmMuGmqACLK+LLe+Mt1VG4f4uGEatA6i9alevitTtNqqX9seLKpNxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGS4j6wyiq5H7LcSaEE22ZXKjaqpMB8GA1UdIwQY MBaAFDuP4kZYQwMbd4u42Le9NaCU/M9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzRfaVJsaERBeHQzaTdqWXQ3MDFvSlQ4ejBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZjIwY2YtNGMzOS00NzA3LTg1N2Mt N2MzNTAwNmUwN2ExLzEvTzRfaVJsaERBeHQzaTdqWXQ3MDFvSlQ4ejBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9lZjIwY2YtNGMzOS00NzA3LTg1N2MtN2MzNTAwNmUwN2Ex LzEvTzRfaVJsaERBeHQzaTdqWXQ3MDFvSlQ4ejBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmqW8/mqJ cCC6P55HwvthXVOVcNp/dBKDBkfWnlEcMZESVNlu4t7zIJRlbc3YOZtoHj/Fq0zL boXTdMEkEecMOJcZ3w+GRPhHBNR433CFpr+4eW4BFrlvXjJmp+7OMAsu2x5HJHn5 OV/30xS+Y5VOWORCYsObOVqF2Dwz5oSWplTRDitBr2InnKdcpKpFTcmAO62VfgSP HVADO+TSXoK+nyPkcfVJ2Tyu481YyL3cBNmoCPfWbCBYOWNfcpFP08OT7r8i2FAt b+U1eIq1emJoFWHd6VsZkb6pB2kMehJ/7bCUHmihT8lGvFsneNaOYBxzl/9bV/vB xEWWqLEUH0+oAw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:46:50 2026 by rpki-client