This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft File: opAORlWrNJpGMrFAcZ3JcjBDFyU.mft (raw, json) Hash identifier: vrm+XjbkGyhYXFz089CZES6o1a8mq8NdQajsGp/T3vM= Subject key identifier: DC:50:58:75:A1:75:EC:00:9C:7F:D2:4F:CD:17:68:24:13:0E:AD:F5 Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725 Certificate serial: 019BF687DA8863D3BC376B873CC28A50E70C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft Manifest number: 17F9 Signing time: Sun 25 Jan 2026 19:00:56 +0000 Manifest this update: Sun 25 Jan 2026 19:00:56 +0000 Manifest next update: Mon 26 Jan 2026 19:00:56 +0000 Files and hashes: 1: 8lwCwcymXqFgEOtxrWnuN2fOBmw.roa (hash: Jg+6JAMR6IcdOaTYCV0uy+mQ2MzLqARJuwGdPjOf4I8=) 2: FRNi3sk0ZONfKtQJpcFEsCtLeHc.roa (hash: 7YUc6wfgN+sYhdx1cpmGPpDGVuugRkWqHt6/wHp1CDk=) 3: HkwuJu9io020PbxRWDFjsBLDBY0.roa (hash: 54qGpDCHJR33ZIOHfgUlFjHcaUi+BAqkWs7Zaq0wwz8=) 4: I1nMPwSGaA-hpoKveutW4hkwALc.roa (hash: e7v4gqh15QeSe47GzgmyuNxUkvj9l4QpG0PMy8DKuDw=) 5: L-To8dTceN5xxbEJ2QWl3_lVx0Y.roa (hash: VwojFWUhMCERU0Ki7bA5wqTbNgVL6QvW7R1KnsktuYI=) 6: RUdkYB7gYtQia_NavoRTMoG3pvE.roa (hash: T6PW2Xl5c1A8FrzU6sJtHxxL5BTjblBQGY54ZziHyw0=) 7: fEEgzDnCmqAD4vjbIkD3BAw5qng.roa (hash: LAwc9NmRWReMkJ3++8V0FO5eucMNOMyjszmv7hw2iTQ=) 8: liAMkYoGzigKmBP3e-wZ16YQ-w0.roa (hash: POChVINeS2pgKhwWy3EYE34ZmD617PQFuA4KwDOZCYI=) 9: opAORlWrNJpGMrFAcZ3JcjBDFyU.crl (hash: 1yi8hdRXlf6UKGL5FPIxxXaM0r0r8MdNRph/RnS066o=) 10: tDIPyCeJ6lwABqJN9BvBHe0hGng.roa (hash: Ct8rOWY/RQns6Y0hISopyHYEG2NvtwUoOdKLUr3Niy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:da:88:63:d3:bc:37:6b:87:3c:c2:8a:50:e7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2900e4655ab349a4632b140719dc97230431725 Validity Not Before: Jan 25 19:00:56 2026 GMT Not After : Jan 26 19:00:56 2026 GMT Subject: CN=dc505875a175ec009c7fd24fcd176824130eadf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b1:de:ab:c9:f1:cb:0b:04:e2:05:83:fc:21: 46:fb:cb:75:54:9b:f6:ba:c4:a0:c9:67:8d:05:08: bf:c3:12:b9:ff:79:2b:05:6c:b2:85:91:66:b3:7b: 33:ac:a1:b2:a0:dc:ee:ea:6d:be:2e:2c:f7:7c:0b: b8:b5:6e:86:43:26:3f:4f:ec:86:7e:5a:db:31:c6: 83:95:e5:69:04:0b:b5:a9:ed:b3:e7:b3:06:f3:85: 88:42:86:49:a8:79:db:13:35:1a:03:1a:75:db:73: 57:77:7b:f2:b2:73:bc:bf:a2:4c:45:2b:09:c2:44: e5:66:d4:ce:c9:0a:47:d5:44:7f:fb:e1:dc:0f:6e: 2a:d1:ed:dd:55:cc:bd:cb:5e:6f:0a:45:78:0c:32: 3b:4b:bc:f9:2d:e1:e4:7b:40:00:35:c6:77:2e:1e: c9:3e:49:ed:01:db:6e:42:dd:5e:f4:6e:62:d2:a6: 55:b2:e5:b1:78:ba:38:8f:90:3d:c9:c2:9b:8e:95: f6:ac:5b:62:7e:ca:06:3f:d3:4d:9f:55:37:79:95: 67:a9:f2:f0:39:b2:24:ae:a2:07:3e:f5:ff:54:c4: ce:cd:13:ca:41:72:66:fe:33:a3:28:50:39:0f:69: e2:66:e8:1d:1a:21:74:77:4c:5a:c9:39:cb:21:83: 28:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:50:58:75:A1:75:EC:00:9C:7F:D2:4F:CD:17:68:24:13:0E:AD:F5 X509v3 Authority Key Identifier: keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ef:27:e9:57:3a:99:bb:cf:88:51:2b:6e:b2:1a:a5:b2:ed: 94:34:02:a7:ba:62:de:15:c6:ae:e0:38:bd:b7:ab:85:a7:e4: b2:dd:e0:38:09:c4:21:0e:9c:47:10:05:a9:6e:5e:a2:e5:7f: 5a:9b:11:52:69:fb:f8:71:0c:d4:f5:99:c3:06:8d:00:a5:02: 94:60:86:cb:f1:97:8f:27:eb:d2:be:43:7d:2a:9e:45:05:11: e7:3e:da:87:ce:2b:14:a5:50:a4:e5:31:54:c3:23:67:c3:9f: e3:eb:96:d8:62:98:bb:f1:47:50:6b:8a:d8:06:10:0b:09:f6: ab:55:3f:f4:9c:da:95:82:b6:fc:eb:52:a2:a6:c1:35:5e:1a: 1b:18:57:d0:f0:de:aa:aa:11:0a:55:8d:31:4b:56:7f:98:a0: 1c:6d:a0:6e:3e:45:a7:dd:9a:bf:21:ee:3e:7b:0b:14:b5:7b: 7f:a9:1b:84:22:9c:8c:13:e1:a2:ef:24:ee:c7:e3:c0:58:5c: a5:62:8d:6f:98:79:05:54:25:0c:f8:03:d4:e4:11:5c:e0:4e: 82:58:77:92:5c:bd:b1:c8:47:de:f7:e1:74:a5:b6:aa:c6:32: 43:66:f7:3e:d4:37:f2:94:4c:bc:b3:4b:01:e1:1e:ca:7b:5d: 02:1a:3e:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h9qIY9O8N2uHPMKKUOcMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0 MzE3MjUwHhcNMjYwMTI1MTkwMDU2WhcNMjYwMTI2MTkwMDU2WjAzMTEwLwYDVQQD EyhkYzUwNTg3NWExNzVlYzAwOWM3ZmQyNGZjZDE3NjgyNDEzMGVhZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbHeq8nxywsE4gWD/CFG+8t1VJv2 usSgyWeNBQi/wxK5/3krBWyyhZFms3szrKGyoNzu6m2+Liz3fAu4tW6GQyY/T+yG flrbMcaDleVpBAu1qe2z57MG84WIQoZJqHnbEzUaAxp123NXd3vysnO8v6JMRSsJ wkTlZtTOyQpH1UR/++HcD24q0e3dVcy9y15vCkV4DDI7S7z5LeHke0AANcZ3Lh7J PkntAdtuQt1e9G5i0qZVsuWxeLo4j5A9ycKbjpX2rFtifsoGP9NNn1U3eZVnqfLw ObIkrqIHPvX/VMTOzRPKQXJm/jOjKFA5D2niZugdGiF0d0xayTnLIYMo3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxQWHWhdewAnH/ST80XaCQTDq31MB8GA1UdIwQY MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt ZjRjNWZjM2NhMmM0LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0 LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAju8n6Vc6 mbvPiFErbrIapbLtlDQCp7pi3hXGruA4vberhafkst3gOAnEIQ6cRxAFqW5eouV/ WpsRUmn7+HEM1PWZwwaNAKUClGCGy/GXjyfr0r5DfSqeRQUR5z7ah84rFKVQpOUx VMMjZ8Of4+uW2GKYu/FHUGuK2AYQCwn2q1U/9JzalYK2/OtSoqbBNV4aGxhX0PDe qqoRClWNMUtWf5igHG2gbj5Fp92avyHuPnsLFLV7f6kbhCKcjBPhou8k7sfjwFhc pWKNb5h5BVQlDPgD1OQRXOBOglh3kly9schH3vfhdKW2qsYyQ2b3PtQ38pRMvLNL AeEeyntdAho+Gg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:15:17 2026 by rpki-client