This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json) Hash identifier: 5WKtyDmmLqxdMpvTCmFaSOoKwxgxGlLeB1H1M6wl1ss= Subject key identifier: D2:51:10:01:22:4E:47:DF:9B:9D:26:31:85:1D:8D:2A:9F:88:6F:9B Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02 Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02 Certificate serial: 019BF53EB1B0267D2CA1F1B5C2D070D77EA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft Manifest number: 074B Signing time: Sun 25 Jan 2026 13:01:25 +0000 Manifest this update: Sun 25 Jan 2026 13:01:25 +0000 Manifest next update: Mon 26 Jan 2026 13:01:25 +0000 Files and hashes: 1: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: Q9aToYpXcaiMpMJI+ElgQjwIkzHuXBjSFAHPBHg2o40=) 2: TGFQ-v8iwwj26A1wGgSnz3RdIYI.roa (hash: qpNJM6IYQFJO0DDo4i0rSAgHt9c5GNaow4wODjswgv8=) 3: bB9tiwhbq6hYU3Uiwj1rg_6lHoQ.roa (hash: XwQfxbXuM3OGYVnPS+i0ZnmylsJru3PWg0dqFXCZLBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:b1:b0:26:7d:2c:a1:f1:b5:c2:d0:70:d7:7e:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02 Validity Not Before: Jan 25 13:01:25 2026 GMT Not After : Jan 26 13:01:25 2026 GMT Subject: CN=d2511001224e47df9b9d2631851d8d2a9f886f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:88:e6:ed:d5:b4:e3:fc:73:74:10:79:62:84: 87:d3:ea:aa:33:c9:e8:d4:53:43:75:83:89:de:f0: 06:48:33:bf:2c:63:a0:73:28:37:5f:b0:54:87:42: c3:48:e7:c2:76:4f:23:1b:23:f4:63:f1:1f:4d:ef: f3:89:55:5f:6a:32:3e:1e:a4:5c:33:6b:3e:72:fb: 6b:17:6d:2f:7e:fa:aa:fe:75:50:c1:fd:1a:62:51: 77:98:17:58:54:b5:0a:ca:5b:a3:12:a8:49:84:d5: ec:4e:54:35:a4:3a:8e:3c:9f:bb:55:9a:5d:a5:63: ec:14:f9:a3:3c:de:df:db:d9:d2:6b:dd:1f:cd:11: d0:a5:32:f3:46:5a:16:99:f3:09:07:0f:91:ec:77: 92:bd:6b:45:7c:bf:39:3d:94:ab:61:31:d2:26:2c: 2f:ee:57:9e:63:9b:a9:9f:bb:a5:0b:f4:4e:0d:de: d8:5c:35:9e:d3:75:3f:95:6f:5f:a6:4a:8c:1c:39: a0:2b:ba:76:46:65:e9:e2:2e:8d:1b:ef:99:69:3b: 2f:c6:d7:f3:1b:fb:c7:24:90:0d:42:22:89:3a:10: c4:c2:37:62:72:19:19:2a:7b:f6:75:d0:fe:a9:9f: 14:a1:61:50:84:83:e8:c2:a9:9c:df:d7:a1:31:3d: e2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:51:10:01:22:4E:47:DF:9B:9D:26:31:85:1D:8D:2A:9F:88:6F:9B X509v3 Authority Key Identifier: keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:18:a3:67:6e:b0:9e:7e:7b:f8:c3:47:14:d9:bc:d4:05:bf: a0:ad:5c:9e:0f:30:55:5a:01:b7:c1:8d:06:51:cc:77:c2:9b: d0:f5:ac:72:51:93:70:98:07:26:2b:c0:ff:ec:f5:15:52:2d: a1:0e:33:13:58:7f:f8:7c:7a:62:72:cc:6b:85:4d:ca:b4:90: d6:ae:8e:a1:73:7d:50:61:4a:a8:d8:ae:0e:d7:c7:d8:7b:8a: 5f:4d:66:d3:c5:41:d6:20:d2:de:5b:c2:07:3e:88:b2:42:7e: d2:58:c3:99:a2:e0:21:b6:cf:62:12:23:ee:8d:c5:b8:85:07: e1:50:3c:94:d5:3c:2f:26:5f:8c:4d:6f:b1:1b:ab:39:53:03: 6b:aa:30:4a:9d:a1:a3:da:37:76:5b:10:e5:72:37:25:95:a4: 33:c0:5b:74:67:3a:5a:ec:4f:18:42:f8:9f:09:ec:b3:18:52: 84:35:65:fa:e1:1e:cc:f2:46:d0:1a:f1:2d:bf:47:0d:e1:c3: d0:56:e5:5a:e4:0e:c4:4f:62:24:a8:59:09:e8:56:1f:c9:b7: 13:89:39:39:e7:85:a7:33:2f:35:11:96:08:fc:a0:2f:d7:b8: 86:95:af:a0:f2:fd:ae:fd:8f:16:fc:7c:dd:4d:0f:93:b3:98: d8:36:07:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PrGwJn0sofG1wtBw136hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiY2U1ZWM3MzYwOGUyNDg4NTI4M2U5MTBlYjg3YmYxZWY4 MjNhMDIwHhcNMjYwMTI1MTMwMTI1WhcNMjYwMTI2MTMwMTI1WjAzMTEwLwYDVQQD EyhkMjUxMTAwMTIyNGU0N2RmOWI5ZDI2MzE4NTFkOGQyYTlmODg2ZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYjm7dW04/xzdBB5YoSH0+qqM8no 1FNDdYOJ3vAGSDO/LGOgcyg3X7BUh0LDSOfCdk8jGyP0Y/EfTe/ziVVfajI+HqRc M2s+cvtrF20vfvqq/nVQwf0aYlF3mBdYVLUKylujEqhJhNXsTlQ1pDqOPJ+7VZpd pWPsFPmjPN7f29nSa90fzRHQpTLzRloWmfMJBw+R7HeSvWtFfL85PZSrYTHSJiwv 7leeY5upn7ulC/RODd7YXDWe03U/lW9fpkqMHDmgK7p2RmXp4i6NG++ZaTsvxtfz G/vHJJANQiKJOhDEwjdichkZKnv2ddD+qZ8UoWFQhIPowqmc39ehMT3i1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJREAEiTkffm50mMYUdjSqfiG+bMB8GA1UdIwQY MBaAFDvOXsc2COJIhSg+kQ64e/HvgjoCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZmY1MTQtMWUwZS00OTNlLTllZTUt NmU5OWI3OWRhNTIwLzEvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9mZmY1MTQtMWUwZS00OTNlLTllZTUtNmU5OWI3OWRhNTIw LzEvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhijZ26w nn57+MNHFNm81AW/oK1cng8wVVoBt8GNBlHMd8Kb0PWsclGTcJgHJivA/+z1FVIt oQ4zE1h/+Hx6YnLMa4VNyrSQ1q6OoXN9UGFKqNiuDtfH2HuKX01m08VB1iDS3lvC Bz6IskJ+0ljDmaLgIbbPYhIj7o3FuIUH4VA8lNU8LyZfjE1vsRurOVMDa6owSp2h o9o3dlsQ5XI3JZWkM8BbdGc6WuxPGEL4nwnssxhShDVl+uEezPJG0BrxLb9HDeHD 0FblWuQOxE9iJKhZCehWH8m3E4k5OeeFpzMvNRGWCPygL9e4hpWvoPL9rv2PFvx8 3U0Pk7OY2DYHGA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:35:12 2026 by rpki-client