This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft File: oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json) Hash identifier: t1H+F2oDMsmDAL6P1T00WcwWftCpbGCxe2s/kTWDc8c= Subject key identifier: C5:E2:66:99:33:8E:59:43:50:23:B2:2C:EE:DE:70:AC:66:51:0E:95 Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85 Certificate issuer: /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85 Certificate serial: 019BF6511CC0E8F7D377AAA9111AD7AFE096 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft Manifest number: 0FC6 Signing time: Sun 25 Jan 2026 18:01:09 +0000 Manifest this update: Sun 25 Jan 2026 18:01:09 +0000 Manifest next update: Mon 26 Jan 2026 18:01:09 +0000 Files and hashes: 1: DWNbWLKsKUbayknrkxZPm_ru1rE.roa (hash: 0OEC7qPtd3MHFAia/7IsrfByY6Mlpa/bnminYQcTx14=) 2: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: FwE1Ad21qnePZO/heEFc735XNOyM0ghLIbfXZ6vqQs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:1c:c0:e8:f7:d3:77:aa:a9:11:1a:d7:af:e0:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85 Validity Not Before: Jan 25 18:01:09 2026 GMT Not After : Jan 26 18:01:09 2026 GMT Subject: CN=c5e26699338e59435023b22ceede70ac66510e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a5:d2:bf:6b:89:4b:cc:8d:60:62:0b:9c:ae: ed:5f:62:32:2b:21:fc:d1:67:57:6a:8c:cc:13:53: b3:93:85:eb:b4:2b:17:1a:e2:c8:16:d6:26:f0:7f: 8a:70:5a:be:82:8a:44:5c:7b:13:37:8f:c5:4a:e9: ad:04:28:9c:9e:77:03:23:27:1e:f2:f6:17:10:b6: b1:d6:ce:a0:cd:a5:99:cf:87:be:d2:bf:ba:ad:a1: 10:32:3a:55:65:35:d2:6a:c4:6d:70:b5:b4:43:4a: ee:c1:81:4b:21:1c:98:e3:1d:6b:f4:07:4f:3a:65: 11:20:c7:c2:b0:66:c1:7c:b1:62:6f:d4:c2:6d:fd: 0e:b2:37:62:47:31:86:1e:3d:bc:f4:a4:38:81:5b: a6:42:d3:34:09:cf:dd:ef:56:34:ac:97:e5:16:bf: b9:93:f7:d4:0a:34:44:34:3c:ce:0b:b1:0d:db:b0: ad:dc:84:23:4e:28:60:ab:e6:07:a8:ec:b8:5a:12: 65:28:4f:9c:92:20:87:01:00:28:b4:b4:5f:41:22: 2a:1a:e2:b0:3d:c9:94:54:16:5d:34:51:a3:cc:b6: 5c:c6:f5:73:9e:b5:b1:63:ce:2c:1d:c7:53:1f:e9: 46:30:a9:07:3e:a3:b3:1e:fd:b4:19:b9:99:62:03: 87:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E2:66:99:33:8E:59:43:50:23:B2:2C:EE:DE:70:AC:66:51:0E:95 X509v3 Authority Key Identifier: keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:1f:73:c0:09:19:73:cf:67:3d:42:6d:7a:0c:0f:3e:3a:80: 1b:e0:e3:13:af:37:a1:17:34:b4:04:da:bb:28:0b:15:60:bb: 95:98:c1:fe:79:12:41:79:cb:56:32:ac:21:d8:31:95:68:88: d5:ae:75:2f:8b:b3:15:61:9d:90:6a:05:90:71:df:29:1d:59: 7b:ff:1c:fd:ce:78:92:98:6c:12:6a:ab:c4:5e:ba:c0:e3:66: 8d:1e:e2:a1:a0:55:2d:24:5b:49:33:19:a5:3f:9c:0d:0d:fa: 0b:69:bc:d3:5d:3a:de:cb:2b:7f:d4:c9:78:81:f8:bd:ff:49: ef:26:5b:5c:f1:14:ef:d8:1d:6a:d0:c8:fb:2c:21:ad:6a:a7: ac:2e:06:a9:8d:ef:62:23:ad:29:a5:c1:65:84:30:11:62:fc: 5a:32:6f:d2:29:b6:cb:14:d9:59:ef:8c:65:54:fa:c3:8f:31: db:6a:96:f4:db:62:8d:1b:a7:f1:f1:0b:48:96:21:86:d7:38: 6c:95:91:bd:a8:15:04:93:e4:46:73:e8:eb:fc:d6:4e:84:f2: 0e:96:5c:52:49:6f:5a:74:2e:03:10:7b:e3:92:34:ff:3e:58: b3:1e:eb:63:10:b3:af:d5:57:f2:74:45:82:67:ef:d7:1d:c2: ce:ec:25:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2URzA6PfTd6qpERrXr+CWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYWUzNTY5Njg5ZmY1NDJhOTExZDcwOThiODI0NjZlNmVh OWZjODUwHhcNMjYwMTI1MTgwMTA5WhcNMjYwMTI2MTgwMTA5WjAzMTEwLwYDVQQD EyhjNWUyNjY5OTMzOGU1OTQzNTAyM2IyMmNlZWRlNzBhYzY2NTEwZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaXSv2uJS8yNYGILnK7tX2IyKyH8 0WdXaozME1Ozk4XrtCsXGuLIFtYm8H+KcFq+gopEXHsTN4/FSumtBCicnncDIyce 8vYXELax1s6gzaWZz4e+0r+6raEQMjpVZTXSasRtcLW0Q0ruwYFLIRyY4x1r9AdP OmURIMfCsGbBfLFib9TCbf0OsjdiRzGGHj289KQ4gVumQtM0Cc/d71Y0rJflFr+5 k/fUCjRENDzOC7EN27Ct3IQjTihgq+YHqOy4WhJlKE+ckiCHAQAotLRfQSIqGuKw PcmUVBZdNFGjzLZcxvVznrWxY84sHcdTH+lGMKkHPqOzHv20GbmZYgOHVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXiZpkzjllDUCOyLO7ecKxmUQ6VMB8GA1UdIwQY MBaAFKKuNWlon/VCqRHXCYuCRm5uqfyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85ODg2N2MtODU2ZS00NmM5LTg5MjUt NmVhNWQ4Yjc1NDExLzEvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85ODg2N2MtODU2ZS00NmM5LTg5MjUtNmVhNWQ4Yjc1NDEx LzEvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMR9zwAkZ c89nPUJtegwPPjqAG+DjE683oRc0tATauygLFWC7lZjB/nkSQXnLVjKsIdgxlWiI 1a51L4uzFWGdkGoFkHHfKR1Ze/8c/c54kphsEmqrxF66wONmjR7ioaBVLSRbSTMZ pT+cDQ36C2m801063ssrf9TJeIH4vf9J7yZbXPEU79gdatDI+ywhrWqnrC4GqY3v YiOtKaXBZYQwEWL8WjJv0im2yxTZWe+MZVT6w48x22qW9NtijRun8fELSJYhhtc4 bJWRvagVBJPkRnPo6/zWToTyDpZcUklvWnQuAxB745I0/z5Ysx7rYxCzr9VX8nRF gmfv1x3CzuwlfQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:54:27 2026 by rpki-client