This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft File: O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json) Hash identifier: 49csyRyS2kNwNVyvMQOnHEK8JVE5p568hM2eSj87+TE= Subject key identifier: 64:4B:8A:FA:F9:89:97:A2:D8:5E:8D:48:F1:35:B0:98:AB:AD:BA:56 Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44 Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44 Certificate serial: 019BF7D1AA093A8A5D9E7F8A211F250D1D93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft Manifest number: 17E8 Signing time: Mon 26 Jan 2026 01:01:11 +0000 Manifest this update: Mon 26 Jan 2026 01:01:11 +0000 Manifest next update: Tue 27 Jan 2026 01:01:11 +0000 Files and hashes: 1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: 6xf1m2GxgqUOX9o45YzmMO1fmGVXmtJpi1bSoFSaQiY=) 2: o-KeOtGqQYJCymvrV8r9HfOrq9k.roa (hash: UoDtbFFKcrDfR017cPTt032e6iAULTmVfReOTRfK9VA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:aa:09:3a:8a:5d:9e:7f:8a:21:1f:25:0d:1d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44 Validity Not Before: Jan 26 01:01:11 2026 GMT Not After : Jan 27 01:01:11 2026 GMT Subject: CN=644b8afaf98997a2d85e8d48f135b098abadba56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7d:91:9e:25:e5:44:93:39:04:81:d8:18:99: 5f:e9:b6:80:de:a4:47:e8:dc:cc:4f:42:b7:4c:01: 8b:f2:da:af:6b:29:b0:f8:93:37:77:7e:bf:5c:c6: d4:97:22:d2:82:b6:1d:24:09:e6:93:eb:a6:e8:6f: 6e:4a:47:05:e0:33:bf:a3:e3:18:f4:7a:29:8f:7d: c3:70:1d:db:04:ee:14:0f:c4:92:69:69:b5:8c:66: 26:5c:37:7b:9c:a8:56:e0:d1:bb:48:b0:95:de:27: e7:ca:e4:0e:03:6b:8f:4c:a4:6f:38:e7:f1:dc:b5: 62:09:7d:d1:df:b3:cf:4f:5a:6b:c6:70:7f:f4:1e: 9e:17:c0:52:8d:9a:78:2b:ce:26:a7:a4:99:02:ea: a8:26:38:55:ce:85:7d:33:64:65:7e:88:c0:54:0c: 69:74:d6:a2:f3:74:df:23:7f:0d:db:42:c0:87:b9: dc:6b:bd:ae:b5:72:9d:37:68:5d:34:f8:85:e0:4d: 6b:82:73:0c:6d:58:2f:ff:90:cf:82:cc:be:46:29: 54:2b:1e:98:57:2d:b5:cc:d9:c3:a1:7e:e3:b2:1c: e8:98:5a:53:67:01:3a:65:71:aa:df:d8:05:ea:48: f4:66:52:51:ba:1c:af:68:eb:14:e6:b4:c0:44:0d: 9a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4B:8A:FA:F9:89:97:A2:D8:5E:8D:48:F1:35:B0:98:AB:AD:BA:56 X509v3 Authority Key Identifier: keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:a4:aa:d0:98:6d:1c:82:6b:68:25:14:04:df:46:6a:3c:e6: a6:8c:55:be:cc:3a:96:eb:c8:ba:ee:1b:c0:12:be:9f:47:4d: 84:0f:d8:3c:2c:f4:f5:d8:4f:b3:96:03:e9:ea:ce:e4:de:5e: 9a:60:62:24:50:0e:36:17:d3:d2:d2:3d:46:53:a3:b4:af:0e: 66:53:60:ac:07:bd:e1:77:9d:5d:0a:61:58:88:de:65:6e:0d: 02:88:4c:5e:98:ae:ed:ae:64:1d:44:8e:8f:8a:7c:ba:30:6b: 78:f6:51:90:de:d7:04:c5:be:b7:f5:e0:da:42:1b:36:09:78: b1:f3:e8:cb:a4:21:eb:12:e0:82:92:5d:69:d9:2a:84:12:32: 04:9e:81:4b:f9:78:d3:74:fe:99:26:f0:29:98:99:c9:26:f6: c1:99:48:7e:e4:14:9e:58:76:c2:83:fc:ef:ed:11:44:ed:d7: 6a:56:0f:27:f8:ea:61:80:81:00:6d:9e:4e:1d:0d:a6:fb:6d: 45:24:fe:43:c1:85:9a:5f:4d:44:fe:f4:f8:c3:38:b7:60:28: 56:fa:62:44:24:6d:67:36:49:55:26:f0:e6:5a:19:a4:90:29: 12:2f:83:22:2d:f7:22:28:ef:ce:9e:25:20:0c:8c:7f:e2:2c: 57:b5:60:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30aoJOopdnn+KIR8lDR2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNjhlNTQ2MGRiYTU4NzFkYmU1MjMyMTQ4NDM5ZTIxNWIy OWJkNDQwHhcNMjYwMTI2MDEwMTExWhcNMjYwMTI3MDEwMTExWjAzMTEwLwYDVQQD Eyg2NDRiOGFmYWY5ODk5N2EyZDg1ZThkNDhmMTM1YjA5OGFiYWRiYTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn2RniXlRJM5BIHYGJlf6baA3qRH 6NzMT0K3TAGL8tqvaymw+JM3d36/XMbUlyLSgrYdJAnmk+um6G9uSkcF4DO/o+MY 9Hopj33DcB3bBO4UD8SSaWm1jGYmXDd7nKhW4NG7SLCV3ifnyuQOA2uPTKRvOOfx 3LViCX3R37PPT1prxnB/9B6eF8BSjZp4K84mp6SZAuqoJjhVzoV9M2RlfojAVAxp dNai83TfI38N20LAh7nca72utXKdN2hdNPiF4E1rgnMMbVgv/5DPgsy+RilUKx6Y Vy21zNnDoX7jshzomFpTZwE6ZXGq39gF6kj0ZlJRuhyvaOsU5rTARA2ajQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRLivr5iZei2F6NSPE1sJirrbpWMB8GA1UdIwQY MBaAFDto5UYNulhx2+UjIUhDniFbKb1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTAwODYtYzBjMy00NzkwLTk1YWIt MDU1MTEyNTYwZmM5LzEvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xMTAwODYtYzBjMy00NzkwLTk1YWItMDU1MTEyNTYwZmM5 LzEvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6Sq0Jht HIJraCUUBN9GajzmpoxVvsw6luvIuu4bwBK+n0dNhA/YPCz09dhPs5YD6erO5N5e mmBiJFAONhfT0tI9RlOjtK8OZlNgrAe94XedXQphWIjeZW4NAohMXpiu7a5kHUSO j4p8ujBrePZRkN7XBMW+t/Xg2kIbNgl4sfPoy6Qh6xLggpJdadkqhBIyBJ6BS/l4 03T+mSbwKZiZySb2wZlIfuQUnlh2woP87+0RRO3XalYPJ/jqYYCBAG2eTh0Npvtt RST+Q8GFml9NRP70+MM4t2AoVvpiRCRtZzZJVSbw5loZpJApEi+DIi33Iijvzp4l IAyMf+IsV7VgCw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:06:31 2026 by rpki-client