This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft File: oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json) Hash identifier: eCIxMd37XBonBBqP47sOYYG9/LwteTRwYVU6NGZXJTM= Subject key identifier: CF:83:E8:DB:EB:96:D6:7F:01:B1:32:91:D4:53:50:25:2C:5E:41:3A Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85 Certificate issuer: /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85 Certificate serial: 019BF462B0543D93CA9EBC2B8B507C64EDD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft Manifest number: 0FC5 Signing time: Sun 25 Jan 2026 09:01:06 +0000 Manifest this update: Sun 25 Jan 2026 09:01:06 +0000 Manifest next update: Mon 26 Jan 2026 09:01:06 +0000 Files and hashes: 1: DWNbWLKsKUbayknrkxZPm_ru1rE.roa (hash: 0OEC7qPtd3MHFAia/7IsrfByY6Mlpa/bnminYQcTx14=) 2: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: A33gfawOeedrS27CojXVoQxW70tyArbzzodYq/FBReQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:b0:54:3d:93:ca:9e:bc:2b:8b:50:7c:64:ed:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85 Validity Not Before: Jan 25 09:01:06 2026 GMT Not After : Jan 26 09:01:06 2026 GMT Subject: CN=cf83e8dbeb96d67f01b13291d45350252c5e413a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f8:fa:a7:d7:ad:25:47:54:87:23:3c:cf:1e: 6e:3d:85:e5:a7:9c:ff:a4:36:b7:84:1a:3b:67:70: 02:6d:66:9a:45:28:2b:74:6d:51:27:ef:29:96:44: 64:a9:c9:8a:40:81:1d:bc:ef:a4:0e:49:ca:f6:b3: 54:0b:53:18:9b:c3:83:5f:f1:03:3c:b2:88:12:37: db:7e:3c:db:55:09:7a:18:41:f8:0e:fa:c4:84:98: 6a:9b:81:5d:92:a0:f2:04:41:4b:d2:18:c2:40:4c: 9d:67:d3:f3:02:4c:98:71:93:fa:e8:44:f7:e7:df: aa:f2:7c:b5:da:a8:93:9f:a0:62:db:2d:ea:e4:7a: 29:08:21:90:5e:4c:d4:b5:ad:ba:c6:a4:e8:16:35: 7e:8d:3a:c7:42:ac:84:1d:46:7f:9a:f7:dd:71:db: 49:2d:ae:0d:8b:f9:f3:3f:0d:c6:f2:75:db:43:0d: 91:b9:72:4b:20:05:c8:d3:9f:4a:9d:f2:41:1c:57: af:15:96:4a:69:08:b9:22:40:41:f7:5c:0c:8a:58: c2:3a:0f:24:a1:de:ad:3b:bd:c2:c8:db:2b:2a:10: 2c:90:4d:58:c3:5f:73:e8:ec:5b:33:60:d1:21:5c: a5:77:66:b7:ba:f1:7e:39:d7:41:bb:af:06:55:12: 65:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:83:E8:DB:EB:96:D6:7F:01:B1:32:91:D4:53:50:25:2C:5E:41:3A X509v3 Authority Key Identifier: keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:33:11:0c:c1:23:ad:fb:7e:23:ef:cb:c9:03:ea:96:9d:0c: 0b:63:84:ba:22:c8:42:37:2e:60:ae:9c:3a:a8:fe:c6:63:69: 66:81:aa:1a:30:92:6d:da:8f:75:e8:83:5e:52:eb:c0:de:9f: 26:15:1e:95:65:ec:c2:bd:32:fa:f0:3f:d0:c8:40:eb:6c:5f: b1:5f:8d:6f:9d:7f:14:23:55:62:fe:2b:60:f8:52:a8:6f:85: ac:2c:17:5b:ce:85:35:a5:c2:4e:02:69:e2:79:9f:0c:61:f0: 28:8b:a2:59:04:ef:02:cc:ed:05:ae:8c:83:9e:b3:26:7c:ed: 3e:f3:9f:05:4d:cc:b7:82:b7:0c:3e:13:31:7c:a2:be:cd:9e: 6f:a7:5c:c5:68:a7:45:6a:84:17:60:25:26:16:d5:02:1a:c3: 9b:a8:ec:50:f8:4b:a4:8b:45:6e:5e:93:98:87:1d:80:dd:74: ea:aa:0f:f5:01:fb:25:ee:61:ad:84:9b:69:6c:82:61:32:66: 36:55:8e:0f:10:7d:6e:70:d2:14:13:2b:c9:c9:f2:30:2c:6a: 65:4d:6b:fe:a0:09:91:32:33:fd:c7:6a:df:8f:44:a3:a1:bd: 72:ad:00:c4:3c:77:25:6d:7d:d8:a0:2b:a2:04:b8:5a:63:f5: d1:a3:cc:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YrBUPZPKnrwri1B8ZO3UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyYWUzNTY5Njg5ZmY1NDJhOTExZDcwOThiODI0NjZlNmVh OWZjODUwHhcNMjYwMTI1MDkwMTA2WhcNMjYwMTI2MDkwMTA2WjAzMTEwLwYDVQQD EyhjZjgzZThkYmViOTZkNjdmMDFiMTMyOTFkNDUzNTAyNTJjNWU0MTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvj6p9etJUdUhyM8zx5uPYXlp5z/ pDa3hBo7Z3ACbWaaRSgrdG1RJ+8plkRkqcmKQIEdvO+kDknK9rNUC1MYm8ODX/ED PLKIEjfbfjzbVQl6GEH4DvrEhJhqm4FdkqDyBEFL0hjCQEydZ9PzAkyYcZP66ET3 59+q8ny12qiTn6Bi2y3q5HopCCGQXkzUta26xqToFjV+jTrHQqyEHUZ/mvfdcdtJ La4Ni/nzPw3G8nXbQw2RuXJLIAXI059KnfJBHFevFZZKaQi5IkBB91wMiljCOg8k od6tO73CyNsrKhAskE1Yw19z6OxbM2DRIVyld2a3uvF+OddBu68GVRJl6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+D6NvrltZ/AbEykdRTUCUsXkE6MB8GA1UdIwQY MBaAFKKuNWlon/VCqRHXCYuCRm5uqfyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85ODg2N2MtODU2ZS00NmM5LTg5MjUt NmVhNWQ4Yjc1NDExLzEvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85ODg2N2MtODU2ZS00NmM5LTg5MjUtNmVhNWQ4Yjc1NDEx LzEvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDMRDMEj rft+I+/LyQPqlp0MC2OEuiLIQjcuYK6cOqj+xmNpZoGqGjCSbdqPdeiDXlLrwN6f JhUelWXswr0y+vA/0MhA62xfsV+Nb51/FCNVYv4rYPhSqG+FrCwXW86FNaXCTgJp 4nmfDGHwKIuiWQTvAsztBa6Mg56zJnztPvOfBU3Mt4K3DD4TMXyivs2eb6dcxWin RWqEF2AlJhbVAhrDm6jsUPhLpItFbl6TmIcdgN106qoP9QH7Je5hrYSbaWyCYTJm NlWODxB9bnDSFBMrycnyMCxqZU1r/qAJkTIz/cdq349Eo6G9cq0AxDx3JW192KAr ogS4WmP10aPMuw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:18:28 2026 by rpki-client