This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft File: OEypWHqC_DdH9GngCUXZ1VhaNbI.mft (raw, json) Hash identifier: /iYpUNrZCtelf0ypscA6brtM6OQZKD790jF0HWE2h/8= Subject key identifier: 54:4A:96:B0:B7:73:EC:78:9A:26:C2:52:0F:5E:E0:B3:49:D2:A1:58 Authority key identifier: 38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2 Certificate issuer: /CN=384ca9587a82fc3747f469e00945d9d5585a35b2 Certificate serial: 019BFCF811F82F41C8773B1C8E300A2172B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft Manifest number: 0429 Signing time: Tue 27 Jan 2026 01:01:14 +0000 Manifest this update: Tue 27 Jan 2026 01:01:14 +0000 Manifest next update: Wed 28 Jan 2026 01:01:14 +0000 Files and hashes: 1: OEypWHqC_DdH9GngCUXZ1VhaNbI.crl (hash: neyhtRgy14X3sk8nu7fNmx9SfwV1igJyZ21lsk4kIz4=) 2: m5e2ZDv7_-1udsvxigJbqqXmd_E.roa (hash: yOpoP5KeMEFEDYD+ejQW8hpR1s0gtVHvkYr8rcVTFC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:11:f8:2f:41:c8:77:3b:1c:8e:30:0a:21:72:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=384ca9587a82fc3747f469e00945d9d5585a35b2 Validity Not Before: Jan 27 01:01:14 2026 GMT Not After : Jan 28 01:01:14 2026 GMT Subject: CN=544a96b0b773ec789a26c2520f5ee0b349d2a158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0f:f7:9e:da:8f:d9:e0:44:98:9b:89:f8:7f: 4c:92:de:77:6c:41:bc:91:ec:3f:d4:b5:e4:eb:5e: 28:8d:d7:6d:5c:f1:9e:02:d4:a7:4b:8e:92:a5:c7: f5:96:ca:d7:03:56:27:29:80:db:a3:46:5c:ba:88: 08:1e:52:c8:a5:96:1d:8d:e3:0d:cb:ff:94:ae:49: e5:a9:44:da:a3:6d:42:d4:3d:97:d1:04:5e:86:8e: 09:aa:53:39:d8:7c:62:73:04:a2:b4:8a:7a:9e:88: cd:ac:52:ed:72:c0:64:9f:9f:58:7a:e1:be:cf:e1: 27:b7:2c:f8:a8:7e:22:c4:56:b3:1f:de:7a:4e:3c: 52:21:32:16:23:01:e5:e5:a6:96:0c:0d:c7:f9:93: 7e:bc:b3:25:4e:4f:03:39:08:5e:87:87:15:ae:e9: 9e:6b:56:09:7b:65:d6:df:fb:10:40:00:e5:82:04: 0d:30:f4:59:d4:88:b6:cc:db:a2:cd:55:9b:bd:f3: 9a:d1:0c:97:6a:a2:78:df:17:40:09:d5:af:4c:55: 53:75:d0:39:a3:96:51:93:96:a6:1d:d4:1f:b4:79: c2:02:bb:15:73:95:24:74:81:6b:59:31:b2:e4:d1: e5:fc:62:8e:57:ca:d5:f2:3a:b4:57:fd:1f:91:99: 64:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4A:96:B0:B7:73:EC:78:9A:26:C2:52:0F:5E:E0:B3:49:D2:A1:58 X509v3 Authority Key Identifier: keyid:38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:3c:31:fb:7e:8e:7f:d7:3e:9a:ab:e2:a4:41:de:55:6f:c0: b3:21:45:3a:bf:64:23:43:82:5b:78:43:3f:6c:91:25:a3:6c: db:f7:62:b9:c4:b4:ec:63:99:23:84:cb:4e:38:cb:56:00:d8: 0c:59:ff:a0:5a:ab:a7:fb:31:16:ee:ca:e1:ea:06:d7:8e:00: 1e:8e:42:66:3d:63:9b:cc:78:98:1c:d8:73:c4:2b:de:7b:2f: 13:ef:28:e9:9a:0d:7a:54:83:78:c8:81:73:4f:8c:e9:57:fe: b2:97:a0:03:ea:0b:a9:b6:96:e7:a4:10:7f:d0:d3:66:7c:23: 05:8e:03:e2:78:f4:11:ef:f8:80:88:7d:e7:88:30:2d:75:dc: de:89:6b:0a:86:c4:85:ea:a6:21:83:80:35:4a:aa:5d:a3:8b: fb:69:92:ae:6c:e4:c5:20:d4:1d:3c:83:d3:95:90:92:e2:98: 5e:77:d0:49:d0:81:72:b8:9c:7f:61:7e:e5:52:05:0f:7a:cf: 2b:08:d3:3e:33:d1:b8:fd:a7:b3:ae:a2:20:c3:25:b5:f7:3f: e8:e9:d4:8a:5c:5a:89:8c:66:29:08:59:17:c6:ce:0c:90:f3: 38:a9:7f:db:a2:bf:bd:29:a6:6b:9c:66:d6:8a:09:c6:46:e7: ec:8f:e7:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+BH4L0HIdzscjjAKIXK1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4NGNhOTU4N2E4MmZjMzc0N2Y0NjllMDA5NDVkOWQ1NTg1 YTM1YjIwHhcNMjYwMTI3MDEwMTE0WhcNMjYwMTI4MDEwMTE0WjAzMTEwLwYDVQQD Eyg1NDRhOTZiMGI3NzNlYzc4OWEyNmMyNTIwZjVlZTBiMzQ5ZDJhMTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg/3ntqP2eBEmJuJ+H9Mkt53bEG8 kew/1LXk614ojddtXPGeAtSnS46Spcf1lsrXA1YnKYDbo0ZcuogIHlLIpZYdjeMN y/+UrknlqUTao21C1D2X0QReho4JqlM52HxicwSitIp6nojNrFLtcsBkn59YeuG+ z+Entyz4qH4ixFazH956TjxSITIWIwHl5aaWDA3H+ZN+vLMlTk8DOQheh4cVrume a1YJe2XW3/sQQADlggQNMPRZ1Ii2zNuizVWbvfOa0QyXaqJ43xdACdWvTFVTddA5 o5ZRk5amHdQftHnCArsVc5UkdIFrWTGy5NHl/GKOV8rV8jq0V/0fkZlkQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRKlrC3c+x4mibCUg9e4LNJ0qFYMB8GA1UdIwQY MBaAFDhMqVh6gvw3R/Rp4AlF2dVYWjWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9hMTk2NTQtYWRlYy00Mzk3LThlYjAt MTdhZDJmMDFjMDA5LzEvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9hMTk2NTQtYWRlYy00Mzk3LThlYjAtMTdhZDJmMDFjMDA5 LzEvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzwx+36O f9c+mqvipEHeVW/AsyFFOr9kI0OCW3hDP2yRJaNs2/diucS07GOZI4TLTjjLVgDY DFn/oFqrp/sxFu7K4eoG144AHo5CZj1jm8x4mBzYc8Qr3nsvE+8o6ZoNelSDeMiB c0+M6Vf+spegA+oLqbaW56QQf9DTZnwjBY4D4nj0Ee/4gIh954gwLXXc3olrCobE heqmIYOANUqqXaOL+2mSrmzkxSDUHTyD05WQkuKYXnfQSdCBcricf2F+5VIFD3rP KwjTPjPRuP2ns66iIMMltfc/6OnUilxaiYxmKQhZF8bODJDzOKl/26K/vSmma5xm 1ooJxkbn7I/niw== -----END CERTIFICATE-----Generated at Tue Jan 27 08:51:34 2026 by rpki-client