This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft File: obgXVrYRDyp1SVx0yCDg5zTuimw.mft (raw, json) Hash identifier: cRMhDfKzuXCcMbC3kRMkx0F2y/ykRcZTCANrA/wqJec= Subject key identifier: 44:FB:39:80:A0:1B:2B:CD:B0:CD:2B:30:48:DD:CF:D8:3C:BA:DE:87 Authority key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C Certificate issuer: /CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c Certificate serial: 019BF6BE9230432958DD21DECE0515E9D97D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft Manifest number: 0CC9 Signing time: Sun 25 Jan 2026 20:00:42 +0000 Manifest this update: Sun 25 Jan 2026 20:00:42 +0000 Manifest next update: Mon 26 Jan 2026 20:00:42 +0000 Files and hashes: 1: Lp8SvbEirw77bD6bjqTRJH9RHag.roa (hash: E4a/u2pu0/SKcHKL3Q1hBcB3nQ4uQ6kbjvNNFt2G5aE=) 2: obgXVrYRDyp1SVx0yCDg5zTuimw.crl (hash: +q7yURBSqGso6kadWShhnlDomhaZf8xg6VMbXZJoQ5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:92:30:43:29:58:dd:21:de:ce:05:15:e9:d9:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c Validity Not Before: Jan 25 20:00:42 2026 GMT Not After : Jan 26 20:00:42 2026 GMT Subject: CN=44fb3980a01b2bcdb0cd2b3048ddcfd83cbade87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1c:62:55:8c:c6:95:27:34:0b:ae:72:15:68: ed:b0:3a:15:a3:ed:92:93:30:28:19:db:82:de:03: 7e:d0:1a:d9:c5:f0:fb:a4:21:46:64:d5:c5:dc:3b: 40:78:e7:5a:13:c6:39:e3:8b:82:4b:5e:8b:fd:41: 7d:c4:11:3a:95:02:a5:0a:d1:4a:3d:d5:f1:25:e6: 90:bb:a8:fb:62:b5:a7:9f:81:ef:87:99:f8:07:2f: 34:6d:56:a5:15:a2:c0:2e:e5:33:40:0e:5a:d9:9b: 59:44:b7:40:af:b5:51:c1:cd:de:44:eb:6d:70:d3: 88:f1:4d:ba:1f:47:20:ff:73:f4:e2:7b:f5:d0:04: 43:d2:47:fb:c5:be:ee:b3:f4:5a:e6:35:18:e8:4e: 3d:ac:a1:af:bf:89:c0:28:b7:3d:aa:e0:12:68:ed: d9:86:1e:f4:77:01:68:1c:55:a0:ca:45:39:ff:6e: 38:11:56:bc:5b:c9:e0:25:68:d9:15:51:e0:cd:97: 7b:08:df:b4:b7:a9:84:52:02:90:73:62:05:1c:76: 84:ab:88:e2:24:89:52:4c:e9:2e:1f:19:6e:9a:08: 2a:80:76:d6:6c:e3:d5:25:fe:94:e0:e3:a8:d0:f5: 22:1c:3e:65:05:ea:d1:4a:f9:ff:08:2a:77:b2:ec: 38:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FB:39:80:A0:1B:2B:CD:B0:CD:2B:30:48:DD:CF:D8:3C:BA:DE:87 X509v3 Authority Key Identifier: keyid:A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:4a:72:14:f9:d2:0c:ba:9b:79:b7:c9:e7:f2:2d:b1:e2:fe: 75:8f:63:94:87:f8:d8:97:8a:99:59:6f:93:69:e3:cb:80:1b: c0:a5:fe:99:3e:3d:3e:4b:80:78:51:74:74:2d:38:e1:de:fc: ea:05:79:c4:8b:1c:e7:54:75:a2:86:7c:fe:39:4d:9d:35:1b: 42:4a:63:d9:47:23:f9:a7:f9:3b:60:b4:bb:59:b8:22:eb:7e: 2a:7b:63:e7:98:76:43:9f:41:0c:82:2f:20:fe:e9:a6:e7:3b: 24:10:ec:75:24:b5:9b:cb:f0:e7:b2:3e:5d:e9:61:d5:30:d0: 54:1c:a1:b6:92:e9:47:d5:73:39:a5:80:5d:18:49:72:9b:0b: 92:bf:bb:66:f5:44:70:d8:32:6f:51:c9:c8:c9:03:03:c3:98: 92:6a:d8:6c:e8:b2:38:66:06:72:a2:ef:36:32:09:0f:18:09: 24:5d:33:db:43:6a:7f:92:11:fb:a7:ef:9b:07:d4:68:01:85: c2:30:21:85:3b:e6:ce:fa:de:04:6e:e2:73:43:14:4c:e4:6f: 24:51:f1:90:39:59:a2:92:4d:1f:0d:69:15:39:b4:0e:b4:9c: 56:6c:0d:19:60:b1:c2:2c:35:c0:6f:07:f3:f2:ae:7c:f6:2e: 33:4c:1a:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vpIwQylY3SHezgUV6dl9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExYjgxNzU2YjYxMTBmMmE3NTQ5NWM3NGM4MjBlMGU3MzRl ZThhNmMwHhcNMjYwMTI1MjAwMDQyWhcNMjYwMTI2MjAwMDQyWjAzMTEwLwYDVQQD Eyg0NGZiMzk4MGEwMWIyYmNkYjBjZDJiMzA0OGRkY2ZkODNjYmFkZTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhxiVYzGlSc0C65yFWjtsDoVo+2S kzAoGduC3gN+0BrZxfD7pCFGZNXF3DtAeOdaE8Y544uCS16L/UF9xBE6lQKlCtFK PdXxJeaQu6j7YrWnn4Hvh5n4By80bValFaLALuUzQA5a2ZtZRLdAr7VRwc3eROtt cNOI8U26H0cg/3P04nv10ARD0kf7xb7us/Ra5jUY6E49rKGvv4nAKLc9quASaO3Z hh70dwFoHFWgykU5/244EVa8W8ngJWjZFVHgzZd7CN+0t6mEUgKQc2IFHHaEq4ji JIlSTOkuHxlumggqgHbWbOPVJf6U4OOo0PUiHD5lBerRSvn/CCp3suw4bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFET7OYCgGyvNsM0rMEjdz9g8ut6HMB8GA1UdIwQY MBaAFKG4F1a2EQ8qdUlcdMgg4Oc07opsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2JnWFZyWVJEeXAxU1Z4MHlDRGc1elR1aW13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wODE3Y2ItNmRkMi00Zjc1LThiYjUt YWJjY2EyYjQ0ZTlmLzEvb2JnWFZyWVJEeXAxU1Z4MHlDRGc1elR1aW13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wODE3Y2ItNmRkMi00Zjc1LThiYjUtYWJjY2EyYjQ0ZTlm LzEvb2JnWFZyWVJEeXAxU1Z4MHlDRGc1elR1aW13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcEpyFPnS DLqbebfJ5/ItseL+dY9jlIf42JeKmVlvk2njy4AbwKX+mT49PkuAeFF0dC044d78 6gV5xIsc51R1ooZ8/jlNnTUbQkpj2Ucj+af5O2C0u1m4Iut+Kntj55h2Q59BDIIv IP7ppuc7JBDsdSS1m8vw57I+Xelh1TDQVByhtpLpR9VzOaWAXRhJcpsLkr+7ZvVE cNgyb1HJyMkDA8OYkmrYbOiyOGYGcqLvNjIJDxgJJF0z20Nqf5IR+6fvmwfUaAGF wjAhhTvmzvreBG7ic0MUTORvJFHxkDlZopJNHw1pFTm0DrScVmwNGWCxwiw1wG8H 8/KufPYuM0waZg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:51 2026 by rpki-client