This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft File: o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft (raw, json) Hash identifier: qKWlxiXseL6KXk2uHYsYtKeizaHVxv0vN9jj97Wbm34= Subject key identifier: 93:04:33:7D:46:D4:97:2F:B4:39:AC:CF:5D:4F:08:4D:4A:31:2E:7E Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4 Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4 Certificate serial: 019BF5AC36B5FDCAEF02401505CCDB03F160 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft Manifest number: 171A Signing time: Sun 25 Jan 2026 15:01:02 +0000 Manifest this update: Sun 25 Jan 2026 15:01:02 +0000 Manifest next update: Mon 26 Jan 2026 15:01:02 +0000 Files and hashes: 1: 2zvlLx0eZAbOYhxgIyqrlDoVC1g.roa (hash: KQYOWqTXbXwvtekOLsVc2rxud/hR8A87QDGRubzzTXw=) 2: 4Ry_mlzBaUQ6UP1sVtEjuUsTD1M.roa (hash: Cbb+P8Z0r4y6AjDJgLqHTENuD/Go8wmcnnMVwTktU/4=) 3: D757pdeWdoida8GHOUdKTXVzQLA.roa (hash: 9oAemx2TPMquAep4lORrFPAoBV6BakfDEYxe+lt7IJE=) 4: o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl (hash: ffDZyJKHql2DF8Kbn01m0T9jFQp9XDgDIHdzKAuVaxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:36:b5:fd:ca:ef:02:40:15:05:cc:db:03:f1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4 Validity Not Before: Jan 25 15:01:02 2026 GMT Not After : Jan 26 15:01:02 2026 GMT Subject: CN=9304337d46d4972fb439accf5d4f084d4a312e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:71:09:97:0b:2d:04:a8:9f:b7:c8:2c:fd:77: 06:c0:88:00:22:90:d2:64:20:b6:13:b5:64:9b:f0: cf:53:c2:71:5c:8a:11:b7:8e:0d:32:e5:58:e9:04: 45:74:50:cd:f1:5a:58:42:2c:e4:98:64:dd:9a:ab: 81:6b:aa:d1:d6:f0:29:66:e0:17:00:bd:1e:31:26: 88:fd:85:ce:33:16:da:2f:27:98:e7:8f:bf:3a:df: a9:8b:50:86:a7:9f:ce:90:fc:26:54:80:b6:38:5e: 31:b9:f8:70:59:b8:a5:06:47:a5:66:10:e3:44:50: a9:7b:7d:45:0b:82:d6:61:ed:c8:90:df:0d:04:15: be:cf:ee:ba:63:14:69:f6:66:95:ab:24:3d:8b:f3: 6c:c6:06:da:dd:6d:65:74:f7:ab:fc:0d:70:15:74: c2:26:bb:f8:dc:61:b5:6b:71:ac:d5:b5:cd:2b:6e: 57:9b:c9:07:2c:7d:da:6a:40:9b:96:94:de:98:12: 53:f9:31:40:4d:27:0e:b1:13:1a:7b:bf:60:f9:9b: 7b:ce:ba:5f:b8:ef:42:fd:4c:a9:7b:a9:cc:f3:d7: 32:e2:e2:bd:f3:83:06:02:06:91:37:40:28:db:b3: 5e:e5:17:3f:d5:48:28:5b:ae:bb:83:03:e3:a1:59: 95:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:04:33:7D:46:D4:97:2F:B4:39:AC:CF:5D:4F:08:4D:4A:31:2E:7E X509v3 Authority Key Identifier: keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:e5:06:d3:84:4f:e6:df:ff:b0:a2:af:b6:ac:8d:0c:42:2e: e0:a2:76:f5:03:1c:85:eb:bf:d5:14:bb:5b:2c:93:ba:ca:f0: f5:a3:eb:8e:4c:f5:fe:c2:d4:bd:3d:a7:04:b0:0d:40:4e:cb: 59:f1:3d:ee:16:54:f4:b7:1a:2d:e7:39:d3:cc:a5:27:bd:61: 76:da:4f:1a:f2:6f:94:a6:9c:70:2b:97:ae:d7:0b:d9:ce:57: 26:9e:be:b2:5f:4e:f2:7a:0d:2c:37:e6:b9:56:8f:0e:87:bd: 83:16:a7:3c:d9:86:d8:6f:e6:d2:4a:01:29:07:f2:0c:86:b9: 09:f9:2d:5a:16:cb:00:9e:53:f5:b4:8f:0e:ac:da:64:ab:02: 06:78:b7:04:fe:bd:2f:38:cd:3c:f6:c2:26:04:fc:ed:50:58: b5:9a:fe:82:46:41:e4:4a:13:df:1f:5b:80:42:d3:3d:2e:d0: fc:a5:27:7a:c6:60:06:d4:fb:54:eb:0c:0e:ea:78:a4:c5:b6: 5a:4d:8f:ea:89:c1:6b:4d:77:f7:53:9d:20:72:92:7c:79:90: d2:d4:05:8e:47:2b:75:07:6b:72:91:8a:70:1b:6d:e3:96:0c: 79:5b:d9:6b:02:28:41:7b:03:a3:d9:0c:76:4c:f2:f3:67:ca: 2e:b0:46:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rDa1/crvAkAVBczbA/FgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzODllNzAzNWIwOGUxODFhMzQxZjM3ZWRhNzM0M2QyM2Yx Y2FmYTQwHhcNMjYwMTI1MTUwMTAyWhcNMjYwMTI2MTUwMTAyWjAzMTEwLwYDVQQD Eyg5MzA0MzM3ZDQ2ZDQ5NzJmYjQzOWFjY2Y1ZDRmMDg0ZDRhMzEyZTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXEJlwstBKift8gs/XcGwIgAIpDS ZCC2E7Vkm/DPU8JxXIoRt44NMuVY6QRFdFDN8VpYQizkmGTdmquBa6rR1vApZuAX AL0eMSaI/YXOMxbaLyeY54+/Ot+pi1CGp5/OkPwmVIC2OF4xufhwWbilBkelZhDj RFCpe31FC4LWYe3IkN8NBBW+z+66YxRp9maVqyQ9i/Nsxgba3W1ldPer/A1wFXTC Jrv43GG1a3Gs1bXNK25Xm8kHLH3aakCblpTemBJT+TFATScOsRMae79g+Zt7zrpf uO9C/Uype6nM89cy4uK984MGAgaRN0Ao27Ne5Rc/1UgoW667gwPjoVmVUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMEM31G1JcvtDmsz11PCE1KMS5+MB8GA1UdIwQY MBaAFKOJ5wNbCOGBo0HzftpzQ9I/HK+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWIt MGU3MjQxNmI0ZGM3LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWItMGU3MjQxNmI0ZGM3 LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+UG04RP 5t//sKKvtqyNDEIu4KJ29QMcheu/1RS7WyyTusrw9aPrjkz1/sLUvT2nBLANQE7L WfE97hZU9LcaLec508ylJ71hdtpPGvJvlKaccCuXrtcL2c5XJp6+sl9O8noNLDfm uVaPDoe9gxanPNmG2G/m0koBKQfyDIa5CfktWhbLAJ5T9bSPDqzaZKsCBni3BP69 LzjNPPbCJgT87VBYtZr+gkZB5EoT3x9bgELTPS7Q/KUnesZgBtT7VOsMDup4pMW2 Wk2P6onBa01391OdIHKSfHmQ0tQFjkcrdQdrcpGKcBtt45YMeVvZawIoQXsDo9kM dkzy82fKLrBGpg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:07 2026 by rpki-client